last executing test programs: 3m1.911623387s ago: executing program 0 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001001000000004000580080003000300000008000500", @ANYRES32=r3, @ANYBLOB="389ec2bc50bcb055b85a3f9803962bad2b034c0c60827aae23c2f9e76d7748d080a7ed3e274f5083d37d491c5346e6dec3dae6c808d4588c80dfe042f027948e1ea599083d2adc00476e5a6873076823e999fb24d763dfc0bc0e9e57e753b8e7e051"], 0x50}}, 0x0) 3m1.423241476s ago: executing program 0 (id=876): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000000100)=""/64, 0x40, 0x10100, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r1, 0x7, 0xa0, "8cc82c1816d81b5e45343c57c1f375bc169b09f3eb89ba6ef6b1ccb6af6fb58b083a8191f617d5bb51b04bb30b29eed68f5b37bec4412abaaf0a218a1e488082b8eaa48d18feebb3960b6a53a76aa62dab95031274d6ff"}) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x2203a157, 0x8, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x65, 0x0, 0xa8, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xef, 0x3, 0x1, [{@remote, 0x33}, {@private=0xa010100, 0x4}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x3, [{@local, 0xfffffff1}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x1}, {@local, 0x5}]}, @ssrr={0x89, 0xb, 0x23, [@multicast2, @multicast2]}, @ssrr={0x89, 0x13, 0x79, [@dev={0xac, 0x14, 0x14, 0x40}, @remote, @local, @multicast1]}, @end, @lsrr={0x83, 0xb, 0x3d, [@dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x30, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x4, 0x0, 0xafa5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r5, r6, r7, r8, r0, r9, r10, 0x1], &(0x7f0000000800)=[{0x0, 0x1, 0xa, 0xc}, {0x0, 0x2, 0x6, 0x2}, {0x4, 0x3, 0x0, 0x6}, {0x1, 0x5, 0x4, 0xa}, {0x5, 0x2, 0x8, 0x1}], 0x10, 0x10, @void, @value}, 0x94) (async) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000980)={@private1, r3}, 0x14) (async) r13 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r0, &(0x7f00000009c0)={0x2000}) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r12) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000001280)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000000a80)={0x79c, r14, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x79a, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}]}]}, @NL80211_ATTR_TID_CONFIG={0x390, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd3e9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xec3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}]}, {0x334, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x300, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xff40, 0x9, 0x72b, 0x34, 0x1, 0x1ff, 0x1b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4e7, 0x1c, 0x6, 0x9, 0xfff5, 0x8000, 0x400, 0xb22]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x3, 0x8}, {0x3, 0x6}, {0x1, 0x2}, {0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x64, 0x60, 0x1b, 0x18, 0xb, 0x1, 0x1b, 0xc, 0x6c, 0x6, 0x16, 0x24, 0x6c, 0x36, 0x6, 0x1b, 0x2, 0x6c, 0x5, 0x12, 0x2, 0x4, 0x9, 0x30, 0x60, 0x3, 0x1, 0x49, 0x30, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x9}, {0x5}, {0x7, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x5}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0xa}, {0x0, 0xa}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1}, {0x5, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {0x2, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x5, 0x5}, {0x5}, {0x3, 0x4}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf491, 0x8f12, 0x1, 0x4, 0x4, 0x1ff, 0xfffc, 0x4]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x4}, {0x6, 0x2}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf30e, 0x4, 0xbd2e, 0x0, 0x4, 0x9, 0x0, 0x7]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x6c, 0x2, 0x3, 0x6, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x4, 0x60, 0x1b, 0x1b, 0x1b, 0x4, 0x14, 0x5, 0x6c, 0x0, 0x6c, 0xb, 0x6c, 0x2]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x1b, 0x60, 0x4, 0x16, 0x36, 0x2, 0x6c, 0x2, 0x24, 0x3, 0x6e, 0x7c, 0x2, 0x12, 0x6, 0x12, 0x3, 0x7a8e73d8e0c34185, 0xc, 0x16, 0x6c, 0xc, 0x6, 0x60, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9b, 0x4, 0x3, 0x5, 0x1000, 0x6, 0x0, 0xa00]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x979a, 0x5, 0x200, 0x7, 0xd, 0x2]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x12}, {0x0, 0x6}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x5}, {0x2, 0x2}, {0x6}, {0x3, 0x8}, {0x0, 0x6}, {}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x2}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x3, 0x8, 0x9, 0x4, 0x101]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x2, 0x3, 0x1, 0x18, 0xc, 0x36, 0x5, 0xf1034932b7d5ba0c, 0x36, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1680, 0x6, 0x9d4, 0x1, 0x1ff, 0x1, 0x6, 0xfff8]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x3, 0x48, 0xb, 0x1, 0x18, 0x48, 0xc, 0x4, 0x4, 0x5, 0x5, 0x12]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x8}, {0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x5}, {0x2, 0x2}, {0x5}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0xa}, {0x1}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x2}, {}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x3}, {0x6, 0xa}, {0x5}, {0x4, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {}, {0x2, 0x3}, {0x1, 0x4}, {0x7}, {0x4, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x5}, {0x4, 0x9}, {0x7}, {0x3, 0x9}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1b7b, 0x200, 0xff, 0x8, 0x2, 0x1000, 0x200, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x2, 0x2, 0x3ff, 0xc, 0x8, 0x0, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0x5, 0x74, 0x5, 0xd71cbf5fda98d489, 0x5, 0x4, 0x2, 0x48, 0x18, 0x36, 0x72]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x420, 0x8, 0x6, 0x4, 0xc265, 0x2, 0x1644, 0xccd]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x30, 0x36, 0xc, 0x9, 0x48, 0x60, 0x16, 0x30, 0x9, 0x3, 0x4, 0x9, 0x5, 0x12, 0xeeee5faf0630603, 0x16, 0x1b]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x7, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x4, 0x6, 0x8, 0x1, 0x3, 0x3, 0xa7]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x1, 0x5]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x29, 0x5, 0x1, 0x8001, 0x0, 0x71d1, 0x7]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x1}, {0x1}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0x6}, {0x6, 0x7}, {0x7, 0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x2, 0xa}, {0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2cc, 0x11d, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x5, 0x922, 0x5, 0x2, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x1b, 0x0, 0x60, 0x12, 0x4, 0x2, 0x1b, 0x3, 0x24, 0x4, 0x12, 0x36, 0x1b, 0x16, 0x30, 0x4, 0xc, 0x60, 0x3, 0x30, 0x30, 0x1b, 0x0, 0x16, 0x0, 0x12, 0x4e]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x34b, 0xfc, 0x0, 0x7, 0x6, 0x9, 0x3a9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x3, 0x0, 0x2, 0x430, 0x101, 0x401, 0x8]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6316, 0xd, 0x4000, 0x7, 0xfffa, 0x8001, 0x9]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x6, 0x3, 0xaeb0, 0x6, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x2}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0xefa6, 0x9, 0x89, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x81, 0xc0, 0x7, 0x2, 0x4, 0x86]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x9, 0x8, 0x6, 0x1, 0xb4f8, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0xb, 0x2, 0x8, 0x26c, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5}, {}, {0x3}, {0x5, 0x6}, {0x6, 0x8}, {0x5, 0x8}, {0x7, 0xa}, {0x4, 0x8}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x6}, {0x1}, {0x3, 0x6}, {0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x4}, {0x0, 0x3}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x5, 0xc, 0x48, 0x12, 0x60, 0x48, 0x18, 0x48, 0x1, 0xb]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x5, 0xc, 0x1b, 0x3, 0x60, 0x30, 0x5, 0x36, 0x18, 0x36, 0x0, 0x12, 0x1, 0x48, 0x48, 0x1, 0x5, 0x36, 0x2, 0x18, 0x60, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x7ff, 0x9, 0x5, 0x6, 0x400, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x101, 0x895, 0x81, 0x7, 0x3ff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x5, 0x825, 0xd2d8, 0x6, 0x90, 0x52a, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x4, 0x7, 0x80, 0x40, 0x8d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfeff, 0x5, 0x3, 0x4, 0x8, 0x1, 0x1, 0x4d26]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1ff, 0x5, 0x3, 0xa, 0x3, 0x200, 0x6]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x79c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$int_in(r13, 0x5452, &(0x7f00000012c0)=0x7) (async) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000001300)={r0}) sendmsg$NL80211_CMD_STOP_NAN(r15, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r14, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000001440), &(0x7f0000001480)=0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x7) setsockopt$RDS_CONG_MONITOR(r12, 0x114, 0x6, &(0x7f00000014c0)=0x1, 0x4) (async) write$bt_hci(r12, &(0x7f0000001500)={0x1, @write_eir={{0xc52, 0xf1}, {0x5, "dc3a89e34cfeb1b1b62616d9cee8d7e3a9a5eb32f45e57017a40a8d693c6fa614a032691c062f26467f651fb04854bd0d61154ec907480b07d5b31bd9e7a624e5dfc18da989ec74d3cf4e0848f0be7253c89fd2b5ddbb56ba317b6adcdbe61ec03e48d05dbb97e76666f690f22f213705b180c91332ffc2d3bb6f2c5db2cc856038a71b218884997d70c0674c3ef947b06d8fe9146251cbcffe37f2d084e7f525c5d45ff115828c43a4968b628eec9d7ec976677e74af850c757113fc11e43c7a150c79c2ccecf040d939f95795a5c13ae6b6b86cfcbd138eea5076cb8a2d5859630ad54084e03eb2a7bd2ff4720f45c"}}}, 0xf5) 3m1.113078923s ago: executing program 0 (id=878): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020601020000000000000000000000000500010007000000c7499b79be375505e5dd0d4f7baf512ef43268cc458edb5f3738a08feb5320e5cde91744077aedd096500f8241ac2f6cd8ae3596c20842d45a5a2e9291eaff5658a0437d35aaeee922b5e1bb6deed53d5377d6c6da4c848b6f4a909a30563e7e796c8d1826f183f64dd8013bd13841255abdf9bbae8bdd65bbbd262b7916d4fa484c3be9dbdd2f2a03f2f4c96709702011bad939c7094568fc3f19cde15fcee336a9b7682d7735f4d9b879ca3c594f65c977280c6ca39095de300f35d85215e5c26edeee688174dcfd01404ccf1476f4a2be0497d7594416ef9e56bdedebe34c16b4ee779a4caf5c"], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) 2m59.690013973s ago: executing program 0 (id=881): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) pread64(r2, &(0x7f0000000300)=""/94, 0x5e, 0x4) r3 = socket(0x2, 0x80805, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x8001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400"/13], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m59.528872301s ago: executing program 0 (id=884): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x14}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x5}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x1}, {0x0, 0x8}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000380)=""/242, 0x66, 0xf2, 0x0, 0x3ebb, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x5}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x1}, {0x0, 0x8}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000380)=""/242, 0x66, 0xf2, 0x0, 0x3ebb, 0x0, @void, @value}, 0x28) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x40044890}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x2711, @host}, 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x2711, @host}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100)={[0x7]}, 0x8) (async) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100)={[0x7]}, 0x8) 2m58.590212784s ago: executing program 0 (id=889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r3, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = socket$netlink(0x10, 0x3, 0x13) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) write$cgroup_int(r5, &(0x7f00000000c0), 0x26) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f00000001c0)=0xfffffffe) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000100000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r7}, &(0x7f0000000300), &(0x7f0000001040)=r0}, 0x20) 2m43.55074321s ago: executing program 32 (id=889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r3, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = socket$netlink(0x10, 0x3, 0x13) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) write$cgroup_int(r5, &(0x7f00000000c0), 0x26) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f00000001c0)=0xfffffffe) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000100000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r7}, &(0x7f0000000300), &(0x7f0000001040)=r0}, 0x20) 1m15.500255612s ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6b, 0x0, 0xf}]}}}], 0x18}, 0x0) listen(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1m13.859456524s ago: executing program 2 (id=1250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m11.623127688s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002b000b00000000000000000007000000040003000c0001"], 0x24}}, 0xc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 59.131997746s ago: executing program 2 (id=1250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 58.14490688s ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6b, 0x0, 0xf}]}}}], 0x18}, 0x0) listen(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 55.67113104s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002b000b00000000000000000007000000040003000c0001"], 0x24}}, 0xc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 46.01169341s ago: executing program 2 (id=1250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 42.665959181s ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6b, 0x0, 0xf}]}}}], 0x18}, 0x0) listen(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 41.312859531s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002b000b00000000000000000007000000040003000c0001"], 0x24}}, 0xc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 32.313442581s ago: executing program 2 (id=1250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 30.058662459s ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6b, 0x0, 0xf}]}}}], 0x18}, 0x0) listen(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 27.945159615s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002b000b00000000000000000007000000040003000c0001"], 0x24}}, 0xc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 24.864957264s ago: executing program 5 (id=1635): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) write(r3, &(0x7f0000000680)="4eded3380304", 0x6) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0), 0xc) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000104000000000000000000001811000016abc2a38c00c5619956f2e9b0dd03000000fbcd9db352b7f0b631b04fe5eb88fbe0042e78323c14a74aec8bb26d7ee9549628efdfeaf35f4e0456126d4e4a04ea9fa4b4662b55085508ef58a86586abc30cc8a231752c2dac6538b16cf8a96e66e91070040c87e51b43678bf9b9743739333574b0efd17424ce98c5a1a4486765022564d9028265294685b9ded20fe90d9195e789280bbd47d960798a010853612979f23e82ee9898312f2600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000140)="d510c490f913674c5ae400", 0x0, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r11 = socket(0x3, 0x2, 0x1) bind$unix(r11, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_proto_private(r8, 0x89e1, &(0x7f0000003180)) socket$inet6_sctp(0xa, 0x801, 0x84) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 24.649233401s ago: executing program 5 (id=1637): socket$inet6(0xa, 0x3, 0x7) (async) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r4) (async) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4810) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 24.229427458s ago: executing program 5 (id=1640): r0 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r0, 0x111, 0x1, 0x0, &(0x7f0000000380)=0xffffffffffffff40) r1 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 24.108668535s ago: executing program 5 (id=1641): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x2, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb38f}}}, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r1, 0xffffffff}, &(0x7f0000000240)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21, @local}}}, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r2, 0xd}, 0x8) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x8, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x8, 0xc, 0x10, 0x2, 0x2}, 0x9c) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x240000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xdb06}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x24004010) r4 = socket(0x15, 0x4, 0x4) getpeername$netrom(r4, &(0x7f0000000700)={{0x3, @null}, [@rose, @null, @default, @rose, @default, @default, @default, @default]}, &(0x7f0000000780)=0x48) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000007c0)={r2, 0xfffffffc, 0x936b, 0x2, 0x1, 0x4200, 0x8, 0x2, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x8, 0x3, 0x6, 0x9, 0xfffffffd}}, &(0x7f0000000880)=0xb0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000940)={0x8, 0x820c, 0x7ff, 0x31da, r5}, &(0x7f0000000980)=0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000009c0)={"27ad28866fcdd8c54f4b02f40c4d1f62", 0x0, 0x0, {0x4, 0x100}, {0x4, 0xffff}, 0x0, [0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0x7ff, 0x9, 0x51, 0xfffffffffffffff9, 0x401, 0x9, 0x81, 0x485638a, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000ac0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000b00)={"fadf69263dd8d3f028cb18ef2fe1c13b", r7, r8, {0x3b3, 0x8}, {0x0, 0x9}, 0x7, [0xa, 0xfe2a, 0x8, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x90e7, 0x6, 0xfbb6, 0x6, 0x3, 0x738, 0xb, 0x401]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000040) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000dc0)=0x0) r11 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000002340)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002300)={&(0x7f0000000e00)=@allocspi={0x14f4, 0x16, 0x800, 0x70bd2a, 0x25dfdbff, {{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x3, 0x4e20, 0x7fff, 0x2, 0x20, 0x0, 0x2b, 0x0, r10}, {@in=@local, 0x4d6, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x8000, 0x1, 0x1, 0x6, 0x1, 0x16f, 0x9, 0x9}, {0x1, 0x2, 0x4, 0x10}, {0x8, 0xeda, 0xd}, 0x70bd2b, 0x0, 0x2, 0x1, 0x2}, 0x4, 0x2}, [@sec_ctx={0x4f, 0x8, {0x4b, 0x8, 0x1, 0x9, 0x43, "1041c1f3a596488e75b78c8be2d4d3bc423c53846c85d58663e3215588c4c9283d0c6846a386926eb03e20c92427315f59fb67a6206344be73acac768a0014be95673b"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x5, @in=@remote}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x40}}, @migrate={0x180, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in=@loopback, @in6=@empty, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, @in=@multicast1, 0x32, 0x3, 0x0, 0x3504, 0x8, 0xa}, {@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x32, 0x4, 0x0, 0x3503, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, @in=@remote, @in=@local, 0x32, 0x2, 0x0, 0x3504, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast2, 0x6d, 0x1, 0x0, 0x3504, 0xa, 0xa}]}, @algo_crypt={0x1048, 0x2, {{'xts(serpent)\x00'}, 0x8000, "5e80c4f4e2065a210a477580305892a88f78a67d1d72a7e9f14b303c395b211173c394966856e203b146f89c45ee2b1f2abd4268f85293a2c2e67c740b367c542a7b88fbe44b23cdcae786d94cbe19957d2c1c5a2f7cd880ce5214076c79d8101c61cd020dbf6780d43abfa526f18163368c87e8de188aaccd8515a62c8aa39b06f306832aaea13bddc316c3dcc8920b7c0404b72473fe29b9aa113074229778d01b0dd2fa797e5cd61e18a0e81727cc893363bbfa1049d9c4341e868b9aa91eb6eac310fd60f6fa3e66119320d295f975561088dc25927b2b9b2de2109a8399698ad9044b2d5d6f0e30dc8b283529308ddf663e8a258e789de9aaff42b37866096802e2209be69cb57c1f80c4821c3e3559e76b14454b1895b7f4ec0a316d513ef7b30fadc6a96bbc9c9f0c44d54ae8fb099139ba9138be6cba66aa048137e2b0405dd084ed0d67f93774a1f9a2011dd648e613956a1a9af6527aa2431d5437175c1696570b35b894da5540dcff8923ed2bd37c4b49acf4d437dd72262e051e3ffd7b6a54fefa19bc7548cf842f6ecb2c894d446dd7490cf788770f3a002152c25c13f417cb8d8652413d6c4c0330348fe44231f0782b7ed47bb9bfa20612e2dd2f8948be9f2a03e6c66b8ab69d0ba9bbb24e8545a449535205c1150e0b832b3ee600556f1b9389e2daefba842ccf84d3dd3842aaad7727cb851aa1ede8f34ca2b904d17d44f131058c33dd75dafacf8bed8a52aa5bba2b75ebc8f10ad15659cf9614ac216ef0f35bfe4d7871618ab6694e9d4a248e5f21babde20062b81fedfbb52730f1adca3e4616755559424d927c4cbd7224b2f24b67afd7cf8bd87f5f9d9a3cc91af08b24e26cd2abfad6c6e3b0beda3409fff52704c4168e9cfe10fce781c13bd22e4d5e3accd32360514d2fdc826573bce8a0bc0039ea540601839847b585319090a413f47d62c4ce54969e7edeb74271ef4b5cd96748a9e524144d955ce750f158f9ffb99320e0b02369496f64176761484cf788fb6c97145939119cc2357833e6e0271668c99ddea1160030429d24c96d444d33f30a63dc1ca59f9fe0b032bc28094d45e42603b915b57d800675ffe2c71eb6662312bf771ff8b1b94ffe87b2a055f892867ee9c49fcbcbafdf1ff1d1b3e91c8f89e15e13f5faf4414353e87781fe6e5197480a358ce8accc62f3b1567f256827f016b709d2a957fa7e2ede0e0a4ea7c887309b51a717b5b88506500e650821dcd658dddc682704db64ce87fbb26ab2c3a3d05a63e6e60c0678ba7ccd0becb919a177d8a49833fd6f3953ea61ca4f99f475dae3f6071e5ae02ec81b9baa2b9b666e1fa5e1238caefb95750e4ea7a8df362ea825a96f48017868d933999d4ccd369606460eb542a846ebce6c665b61086dd1cbf1c68325669ae906a24f7cf3d7b08d78049e00f4d85d4337b5ef56f4978f716056670d503483e212a0aae8a7dec9ffa3c80accf892ad094e339f0cca047dd1aec95d83c8b36308d4432bfcf3a7fe539c8df448cb09b1af358f0c653cccf67e43668ae279cdd27a85fd95efa8caf46c3936f329d98b66d13371f547b12af45bce8c9203a1354585d0d939c936c49291793a6da701e74ccc3227bfff596420294fc93e671f905378aff2165bd3256fa6a3331383d3e1c22da9ac29984933d08ef6d11af22ab04a2dac779c5316b749cc4466bc7666bcf41df7e30b27cf0d0739191a7ba8073c6cd5ca7e0e43ceaca34cbd4423ba6c2f823aa4ac61e7fc879a0ab967985ce51f2bac5e8b54061862415825d1f24a1b6d1b201b9733f490e75412524758349f73b71486a8a43bb3cdffd71b467b7c5ae5916b3203f9a3e86072e9df53ec731568f6c571b07beb045300ea69c222969465759980072a0c230a10c7f17b2e0a48fb4c4fd4fefd51b26fc000e220822f8119ad82ac42269f3dedae1a70f24ba8a75991dbd1153814fe184e071a46ab8ab55b84430d82798fc2c84a117a3dda3972b1c76bbd03daa91be8ed028762be395b60d3a661277415ca25bcb8b1d9c0fb30a044b5df002b4e007124e746ffa3c44a252e790bbb82ebfbde3e7967950dd42b1f42fb6e06491348abe35f16f682a2ace2a13b5cc63178f6925074a7212b09c672a83db671b74ea0152812e25effcc5954587e96bf56a4a00dd71c3c1cd811a4fc9ce43bb6415e90f75674b7346ae4e39a082d23d44f4d1be9fca7fdc4b5c37dd34e6a9ecca146711ef77830ee092e1c5c53c531d70cddf47124cbdb304648fd2f4f7c3bd0841ee3d39789cb8f7b22e3a63f8304c455f1e941e020574a2dd26305fbbf23572acd7d06ed52e27abe433b5463df0e702203187be9fcd077c9743d18635887397f6d37c01ce69e6e86a5432461fcfbca68167511673168124538062dda59a4f6161ddfbe91f5eea403998696727827d548dd79f4ccf273d80344f98fabff524584b8af8e6fb7b4d43d0fbb77ec74222d05a27769d53229555da133005a502e7321059d6538f3a8baa4ffeb88a052e9e009018171a31fe3fd512a7ca48205f533136c5be9d91c82f8923fce991993c746dd106b9830708f32dc7121506fd3ab31181ef9bf36b9ec207e22f3000df21600b39dcd0c28b1dfc84aee4d4708b15186de244036c94a9dce7a61b618506a136fc5140638e5ead123c41b959bbac52ca9ff08bfe819fb66d2c687b8f5712dc31cfb122ef0efcda6ceeed4ab3119d5908a5c2656186552bff30e5ed9b3b2e45fb245a27748870d61cd79cea08f7335faf81b1b8635124a51eb42c751b4b0879cca96530b8ed802e8394daaf31771438d5fe946f5c7fce7381f62b8a07dd3b882ccd44781f99fe9f58e0eafc082e3aa78fcd6208b656b5d95e88eb80207a6bb77a288ec2a5a1ee9cd68b6d59f2f3e7f52152f0a72a558e91e87c19b4fab1d8ec0781e0e4b9a6340b290cdbd5f10958799105a26bc4ff7476612d58954c28bcc99ddaa0eb04a33dddb172a44949b3dc464ce4e53b2f61e0b0fde94a443a6c59f71a72a7f311752066675df1f5e52fd8b2055ce550c5cad9d1e3c07a7b59ec8dd997bf61af2bb9017bf1c96435b065f0ff964626d31256820bbaffd0a30fef74bad9c6750987be44082053c0c8e282feeb5e4d028760fd1529dddf05d74df1378fa50ea045d665669947ebea6cc4c73d3dfc7981459f8e0bb7ca67d88ff56f780b4b06201c1dfc3cc5f0294a0d103d65bf101390c079de03e587b3351d4217ede74e1134c31f297d46fda2095e6dd614ab28dc067aabc500c8ed0023c6b12a765559bf3a8ff3f98ccc122ccbb2bfbaa6fd44531cd9cba511815ef9f88354b85b7b59eb3d28f9282219cc4b40989af12b940bbe24874e93ddb97801615cd35ee27a56ecfcfc55615020860081148c6abbbd2851485690b33d5fff9b5aeb978e6c4d2fe663aed3ccd3ccffbad29f72572740fb299f0da28757c373d3e894469f97610ac0230795ad648e9069e4a5238b049d18bc0a78662c6810ffd67f224de93435d7af9d7615bf9a37661f886f82fa43f21f958a9ed7762bc3c5a06769b3e7a37f0dadac60449c5878a6a7a28ba192b870a10d6b91a263282bf6e606d5383e8350d36a4b1548fab420bd14ad4e0475779d690fd9981433ce8c0b2a272499765fd1548e1cbf683be3846db7bf554dd5635c43ee1e86ffb26d1ec24db6c38ffb32d3ba98cb2c73ba447a7249f600b18f5feb48cbe3e38fbef17092b7db710306b895cc8a70ca292d30b444e55b6450bb4413cd47842751d403489c9fc58bc66546c34f1935f1fcd4ce565ccb715be4eff7fd52c242289e583344ea58402eb82f20c51b9c04a3a0d0550936182d325812e5e455e00b5279765e6277eabe2f118d822f1fb0bf2bfd9682cf7ef1cc545216ab4982bd005340ef918df7e08ae25c10d3eba17144a657d8e21d9d39e617cfb4e739b53470cec6c6a81378875ab27b264d92372616f34fe67b488fb7aee9683719d1ade5f1ac026e24820fb2fbfb3f3bf51c9c0955a00d7add1667e586ebfbd6a44c5ad5d3ac3d63f3adec4637b4c4c5d0be62740a3c833c786d380c5ac700e5aa52f75b59450a87afcc3da7573818af76adfc8d8f031cfd05ff22ac06394717b1d171c3052c9f29f61dc468ac1c9ed7109dc307c78810dea02565584275367d528b165be301a71e562d50555ec604405b51e88ffb4b40b0620f803ae0eb1fd3c32c83401343478e99dd1aa77500814a9d3cc142ec50b3c996e472f8ff4a89cd4aaa7058174fdf3ae6725ac9dd53d2be63cb2fe66bd41014ac9138da700d397351cf15408ee72daf9c65f175de2ca76715e209e83c066c2b55387d5d3c8e3d8fb3664e41ae7d1fa7f77b2efee9ecd2ac7cf1813b6c076bac958a9188227ef5833e14b226a82d26294ea2b6df4f3ad39f45b1e9f736184885ecaa559ed1d9478d3681bbde05acafab687f434ee1930584468dcd3260923fbea85ce0dae56bad903cdfadc6159346eb79011949c09faf96f9066f8e826d5872be63c573cdf9e1f233648bd18ec73a8ded62631c2bd26079411d13e18866cbfb98c86746560055642ba41ddc737b0a423104c75babf3e1c8799fa7040a4c707832eeb2661bd5bbd55e6a74557a3e34b71233743884b5afd08089b3b65a1414ad91434ddc15c233daabb69d721efa3c535996e988f9283c6a487d5b19f42fc782b8d28e2ea8364f8d4b6bc2153aa58cca9dcd133b8c4e0bcfaec3270d7d9c13a277766cfb433c037de5ffbe818eace6fd3a8d6b2c7a7e8fc97edf95f6dcf0060846dbdcace71eefbad90ae66ab5fceee0a95521a0414cff951f7da7c2c155931af3e836e23859ca2f65e473beee73005440a81fdcd624a7a2acd8e90376131e13f1e0e69035cc6653d343dc333abfd14c20aaaa0d2892bfc2a095d8861e11f3b2fb257ecde32cc81acc48686d2692ee6bc7c67fbe7e7ebfcc1228219cdf8068003153b0cd94f30b9399eb62bc2099666695f7576e82aabcdc7321623bed9b1cd4dc778bc6adcb33025ba6e5a6b801327acae1989c922a029f2c844688cd6fbaae52d9d1da74090c0f86cbbd7e6d4bae615fd389f32f3970dcca1cbeae75ee7f13af00c61286060b567a2f2b4e4d4cc6fa14d2403a5f25ea774905e61a659eb1938e7357db29b3f1e188842014edfaafa27e4851aac99e86059ce2e322712228342926b25e3e8eccb30b6dbf464fe0fd9a8612d710df0af64710e72fdfc65a2f95eed230325bcba7d5c76eff81209c4c5cb6b8b035db095bbc05cd3b124b8345bdf686397be6702ff6446c63de32bdbd5c323e645050e8b11e98898ad90f665196b8a8a1651a2c0eecabcfee4730167be1015aad816d448a049a0979e529791c24da6b7b1558749ce030ff02f10318290a474f93a7a91e34841f7f886e1d73fccb432227feace79e3e334a60ba03c7b1ebb32a357dce55c175af3dcfc7baddc3e140123995d8eb0edf373e6238ecaa95814723394ac825d69bd02dd5856261fa683d52ae65fc92f0963dd688051491f21b3a77fc40f3661e3a5ee39e2434a58d5874fc66f9d1192bc1715ef81dc7fdfcb5f14c523e9c4a4e7b86226b2ce253837500f31e2a5ce288dc36df68ae7cad475a134a0eaab0eb8516a55d55cc7126a483388355a744cab424b6fc27f11f3a63ef0318268ac8e6153f63fc3f3523c5d8a1346920acaa2b1817030c48695c0fca924ed8858789b1debbc584c3545a5e2a7dc1f7fad34dd3986d58764cb4a4fac53ccf7468a3b818374"}}, @etimer_thresh={0x8, 0xc, 0x7}, @sa={0xe4, 0x6, {{@in6=@local, @in=@local, 0x4e20, 0x7, 0x4e22, 0x9, 0x2, 0x180, 0xa0, 0x0, 0x0, r11}, {@in=@multicast1, 0x4d6, 0x3c}, @in=@broadcast, {0x6, 0x8, 0x2400, 0x101, 0xed, 0x7, 0x7, 0xa6}, {0x8, 0xa, 0x5, 0x4}, {0x4, 0x1, 0x6}, 0x70bd2a, 0x3507, 0x2, 0x2, 0xe, 0x4}}, @algo_comp={0xc1, 0x3, {{'lzs\x00'}, 0x3c8, "61ac515f3f0a6bae126822dc5eca98fae3a83989837faa8bbb308f05f13d80e8ba9f9e7b7ceb0531d5294065e7f858fc19a4750ec155292986d43180ac27c495f7034ac1756c65cd94dfcf5550efade9364eaf713697d461eb543bcd930dd75f860f39a7d67ed03c6b1ac8a93055a8f47a1bb23f20193601fd"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x28, r12, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x10, 0x53}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48004) 23.901185604s ago: executing program 5 (id=1644): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x13, 0xffffffffffffffff, 0xc275d000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x81b21000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x81b21000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r3 = accept$packet(r1, 0x0, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) (async) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendto$packet(r4, 0x0, 0x0, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @remote}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@delchain={0x68c, 0x65, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {0xb, 0x4}, {0x8, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x654, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xaf}, @TCA_ROUTE4_TO={0x8, 0x2, 0x80}, @TCA_ROUTE4_ACT={0x328, 0x6, [@m_connmark={0x184, 0x13, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x3, 0xfff}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x0, 0x3, 0x1600000}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xceb, 0xa90, 0x6, 0xd2ad, 0x6}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x2000000d, 0x60891cb5, 0x5}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x308f, 0x401, 0x8, 0xffff819a, 0x3}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xd891, 0x10000000, 0x6, 0x5}, 0xcc12}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x0, 0x0, 0x1}, 0x9}}]}, {0x8d, 0x6, "e53c1def7654b377e3220300d01eceed4d8232785bc3cfc76095ee174f63b6aab57a9d63a0bc446b6114b5b7eb909743236d916248761eb330af0ce3655fba603fa8686636f9e5b1dccea1d22c0030f9c33630cfc1f101f1db9cdbb4b8a84ab0c73cfcb5cc883e6fc1fcfe0dae973b4f07ee8ba40f690c27becdd9fe538da220dba00897c48471b8c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1a0, 0x1e, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfd3, 0x1, 0x0, 0xba, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fffffff, 0x6, 0x10000000, 0x7, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0xfffff001, 0x5, 0x8, 0x8}}, @TCA_DEF_DATA={0x11, 0x3, 'devices.deny\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0xffffffffffffffff, 0xfffffffa, 0x1d4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x47, 0x9, 0x7, 0x0, 0x2d6b6202}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x5, 0xb13, 0x7}}]}, {0xce, 0x6, "3c595e40ea16d73fcc0e79211a998e926092fd3fad5dd8e4b4095aae0ea42e377cce055954464194600d7fabc5b4c73f17dd7635f8cadf4af0774a33ca99419285c7d31767a4c1b1d9ec6aa891ff5c6b45f6e56ecc30b5ba6dca457de27b4d4f93ff7d4c90f0c85be81dd44109b3090b39d214f1a096d346faa34949999c1f2be0f1d8c8988ae1e830c4c0bb04c286481b6f5580f25a1f39ef3245439c955b92b2a504c3eb15518cd159f447738b0cb830f94fd36299128f8a95152dd252e1584469771cc4aaccdb721c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xca}, @TCA_ROUTE4_ACT={0x2f0, 0x6, [@m_simple={0x148, 0x7, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0xf4d, 0x2, 0x2}}, @TCA_DEF_DATA={0xf, 0x3, '::{%*$&%{)\x00'}]}, {0xf3, 0x6, "0e8374f65ea75d124c6d4b6c52c6ea91bdee0a79e7e0bdf647974a1acbf32720ba5458b607448d7a1cac71b11ff95186e7fed8359ae97b28c9053fa2973de44b0e68192da04391041cdbcada72319a48dd5caae09039ce878426b1719f403022a161e88973af3b5003a05aa6e4a9f6abae69d21a06776e64c56f6bff6b98db9b8460ad4a26695ef35fd1c0f2e15f03d71561745ceb1cde3d6c158d5487a92df4ffca377fe61b9d665d8e017d989518c6370e8017fe4f20c64f25f095b5937fcc6f4968c054b8dc25d2481e9308a004938314c3911d43975291a01ddc1dbce2cd91f4ab107f4cc4478fda69be757dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x9c, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x35}}, @TCA_CT_ZONE={0x6, 0x4, 0x512}, @TCA_CT_LABELS_MASK={0x14, 0x8, "38008860bbdbac0eec652a8df359535b"}]}, {0x4f, 0x6, "c7dc79973fceffd1b8141fe146b5f83a5c9aff68096e3015bc3d55adc9f14742e2795d68fd8ae036a2c77abffac9441795cc3b18f7de2aefdcb9635789ff4b51a8170541900023adfc30de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x108, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x4, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa20, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x5e, 0x4, 0xe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x923d, 0x10000, 0x4, 0x0, 0x2}}]}, {0x85, 0x6, "522a5e8b634701f88d394378a78580dc96a7e6730849f87b3e2b151fb0485ed56d9158e92734326692d0a1b7f9235887bf59ad5c62616aec7c9351eff06c094a5626d1d592f687e57ab642b40cf2fa64420b0bc416a40ef108fed561d43ad5cf6df232de0d25fdc34858366432620c366fdf1a5781507efd0bd03f0798854190fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x68c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket(0x840000000002, 0x3, 0xff) sendmsg$sock(r12, &(0x7f0000000380)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x40) sendto$inet6(r11, &(0x7f0000000000)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @loopback, 0x9}, 0x1c) 23.668052376s ago: executing program 5 (id=1646): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0x2}, {0xd, 0x9}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 17.299175329s ago: executing program 2 (id=1250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 16.17787904s ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6b, 0x0, 0xf}]}}}], 0x18}, 0x0) listen(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 13.845083054s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002b000b00000000000000000007000000040003000c0001"], 0x24}}, 0xc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.598924696s ago: executing program 33 (id=1646): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0x2}, {0xd, 0x9}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.071366824s ago: executing program 2 (id=1250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 2.643656951s ago: executing program 3 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, 0x0, 0x1, 0x30bd26, 0x0, {0x1e}, [{@nsim={{0xe}, {0x24, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 2.502895622s ago: executing program 3 (id=1694): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x502}, "ec1f234aadc04318", "0f131b9a48bead7011bb443fbbb1270b", "87b1c49f", "3d62c373c1a0c6f6"}, 0x28) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x24040850}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, &(0x7f00000001c0)=0x84) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x7ecf, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x220, 0x31, 0x100, 0x70bd2a, 0x25dfdbfe, {0x14}, [@typed={0x14, 0x59, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @generic="006ce9778c1575f8baf31f6ce01c01c6efd857d6a4b60993de46526d5238d792729f4bbf6219a912492deb47bb30618f293cc7df92a5be9a96c3d14c255993cbd8206e8071488823163bab7ca1c2", @generic="406655283bab88a8b4b3d569cb1ed3a2d95a875f4f39dd2f91dcb69ccf60ed60399de5940b459302c8e3dd3a17ceee0b1c0071f6a872b5be2db318d98ae8a74ce8f2c85ace6659ca7f01ecbb1216571a955e04826577038919c58253519262d82f947f048a9215e5384f1f9d05e731a4a4d07b2ff0acfb828397b860c1eadf830bc101320ab3d036ebfcc7239fbe74a48fb90f5b7bddc0643e7cbba727561860dad658cae725226758c6f1e5863155a2c0f67672d7dc4672a5c6673139206e66f8766da2f04b7a877fee007e0aeb9f2dd8ff46283b0234c4afd97a5d313919249f0bd72248b4e75e739c681905cbd1505bb60a21175e39f100181b1dbf7f52", @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0xa0, 0x43, 0x0, 0x1, [@nested={0x4, 0xfc}, @nested={0x4, 0x66}, @typed={0x8, 0x125, 0x0, 0x0, @u32=0x6}, @generic="9c3a18d6d3d833e768265fa2d4bc51128b041028051c54c907345ff9eb2104b0cde8a9363d7b047c34d35c7586e2a2dec00a7045a47fb686bdf53bb6b12da2c1646c6a11008c390b60375fb3ce77930c1d3dc9f4d0708ca4960d20ae5c74ad0f4a1f9545763b3bf8ce45553f554f0259a34f216fe597acb440a08485e3085e0017148e80bf0217c5", @nested={0x4, 0x17}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40004}, 0x20044011) 2.181030643s ago: executing program 3 (id=1695): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000010000000000000000004000000000000000000000ffff7f1688ef1e3a8af2730000000a00608000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 2.171236197s ago: executing program 3 (id=1696): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40011142, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000100)=0xc) bind$xdp(r1, &(0x7f0000000440)={0x2c, 0x9, r6, 0x3}, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000480)=@xdp={0x2c, 0x6, r6, 0x1c}, 0x80, 0x0}, 0xe07e872420df67ca) close(r2) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffcf8, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x114, 0x2e, 0x8, 0x0, 0x25dfdbfc, "", [@nested={0x1a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @nested={0x0, 0xda, 0x0, 0x1, [@generic="54b8676920c7230a953aa7834abb95b94623e59899fff450efb2bbaae32c962e52d0c9becad72ef1fbad58092e22e953932e8839b518a05b001135df3d15cbe2d3ebd0bcfd4c26", @typed={0x0, 0xa8, 0x0, 0x0, @u64=0x6}, @typed={0x0, 0xac, 0x0, 0x0, @uid=r7}]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4008881) 2.113764764s ago: executing program 3 (id=1697): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0xb, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000001840)=""/239, 0xef}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000001940)=""/81, 0x51}, {&(0x7f00000019c0)=""/238, 0xee}], 0xa}, 0x64}, {{&(0x7f0000001ac0)=@hci, 0x80, &(0x7f0000003fc0)=[{0x0}, {&(0x7f0000002e40)=""/124, 0x7c}, {0x0}], 0x3}, 0x81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=""/3, 0x3}, 0xfffffffb}, {{&(0x7f0000004180)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005480)=[{0x0}], 0x1}}], 0x4, 0x40000000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x8001, 0x7, 0x2, 0x0, 0x0, [{{r4}, 0x6}, {{r5}, 0x8}]}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0x11c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10b, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.025062838s ago: executing program 3 (id=1698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x6a}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xf) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc}, 0x18}}, 0x4090) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x39, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) 715.43484ms ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6b, 0x0, 0xf}]}}}], 0x18}, 0x0) listen(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 0s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002b000b00000000000000000007000000040003000c0001"], 0x24}}, 0xc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): [ 304.334399][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.379855][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.388922][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.472048][T12369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.475599][T12591] veth0_vlan: entered promiscuous mode [ 304.498220][T12369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.560299][T12591] veth1_vlan: entered promiscuous mode [ 304.758759][T12591] veth0_macvtap: entered promiscuous mode [ 304.776280][T12591] veth1_macvtap: entered promiscuous mode [ 304.793697][ T5844] Bluetooth: hci2: command tx timeout [ 304.817900][T12591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.832211][T12591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.904585][T12591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.936063][T12591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.969172][T12591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.999349][T12591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.999398][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1446'. [ 305.066726][T12868] .: renamed from bond0 (while UP) [ 305.207975][ T3460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.292194][ T3460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.333927][T12626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.381964][ T3460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.449458][ T3460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.474693][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.490880][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.540937][T12369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.551233][T12369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.579181][T12626] veth0_vlan: entered promiscuous mode [ 305.645995][T12626] veth1_vlan: entered promiscuous mode [ 305.717093][ T3460] bridge_slave_1: left allmulticast mode [ 305.726113][ T3460] bridge_slave_1: left promiscuous mode [ 305.731786][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.741568][ T3460] bridge_slave_0: left allmulticast mode [ 305.747795][ T3460] bridge_slave_0: left promiscuous mode [ 305.755301][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.106609][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.118714][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.129994][ T3460] bond0 (unregistering): Released all slaves [ 306.168465][T12626] veth0_macvtap: entered promiscuous mode [ 306.178866][T12626] veth1_macvtap: entered promiscuous mode [ 306.221092][T12626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.254752][T12626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.286322][T12626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.303596][T12626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.314864][T12626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.323782][T12626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.563566][ T3460] hsr_slave_0: left promiscuous mode [ 306.581960][ T3460] hsr_slave_1: left promiscuous mode [ 306.589774][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.604684][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.618497][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.628905][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.660630][ T3460] veth1_macvtap: left promiscuous mode [ 306.666355][ T3460] veth0_macvtap: left promiscuous mode [ 306.672025][ T3460] veth1_vlan: left promiscuous mode [ 306.678180][ T3460] veth0_vlan: left promiscuous mode [ 306.937485][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.953803][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.961625][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.977895][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.994930][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.339476][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.348366][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.362187][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.373872][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.384221][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.618193][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 307.661344][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 308.062661][T12365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.084050][T12365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.217879][T12365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.240982][T12365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.509145][T12906] netlink: 'syz.3.1453': attribute type 10 has an invalid length. [ 308.565705][T12907] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1453'. [ 308.644275][T12906] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 308.836253][T12907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.857403][T12907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.880670][T12907] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 308.899659][T12907] bond0 (unregistering): Released all slaves [ 309.088298][T12880] chnl_net:caif_netlink_parms(): no params data found [ 309.107944][T12891] chnl_net:caif_netlink_parms(): no params data found [ 309.114950][ T5844] Bluetooth: hci0: command tx timeout [ 309.164215][ T3460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.260461][ T3460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.345627][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.354748][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.361894][T12891] bridge_slave_0: entered allmulticast mode [ 309.371448][T12891] bridge_slave_0: entered promiscuous mode [ 309.380581][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.387803][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.395104][T12891] bridge_slave_1: entered allmulticast mode [ 309.402122][T12891] bridge_slave_1: entered promiscuous mode [ 309.422318][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.429538][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.437654][T12880] bridge_slave_0: entered allmulticast mode [ 309.445499][T12880] bridge_slave_0: entered promiscuous mode [ 309.466057][ T3460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.504637][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.511829][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.519469][ T5844] Bluetooth: hci3: command tx timeout [ 309.531303][T12880] bridge_slave_1: entered allmulticast mode [ 309.540388][T12880] bridge_slave_1: entered promiscuous mode [ 309.562617][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.597592][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.623021][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.647445][ T3460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.684536][T12891] team0: Port device team_slave_0 added [ 309.693634][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.705786][T12891] team0: Port device team_slave_1 added [ 309.768721][T12880] team0: Port device team_slave_0 added [ 309.783081][T12880] team0: Port device team_slave_1 added [ 309.791500][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.798771][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.824872][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.838101][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.847103][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.873506][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.941688][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.949004][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.975406][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.988086][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.997572][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.025622][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.077209][T12891] hsr_slave_0: entered promiscuous mode [ 310.084221][T12891] hsr_slave_1: entered promiscuous mode [ 310.090194][T12891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.099098][T12891] Cannot create hsr debugfs directory [ 310.190669][T12880] hsr_slave_0: entered promiscuous mode [ 310.198584][T12880] hsr_slave_1: entered promiscuous mode [ 310.205123][T12880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.212880][T12880] Cannot create hsr debugfs directory [ 310.255140][ T3460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.334997][ T3460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.409996][ T3460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.490553][ T3460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.593572][T12928] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1455'. [ 310.636154][T12928] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1455'. [ 310.814227][ T3460] bridge_slave_1: left allmulticast mode [ 310.822936][ T3460] bridge_slave_1: left promiscuous mode [ 310.828748][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.882174][ T3460] bridge_slave_0: left allmulticast mode [ 310.897540][ T3460] bridge_slave_0: left promiscuous mode [ 310.922872][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.946067][ T3460] bridge_slave_1: left allmulticast mode [ 310.951768][ T3460] bridge_slave_1: left promiscuous mode [ 310.963400][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.994789][ T3460] bridge_slave_0: left allmulticast mode [ 311.000483][ T3460] bridge_slave_0: left promiscuous mode [ 311.012734][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.045239][T12934] set match dimension is over the limit! [ 311.116442][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.129200][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.137078][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.145443][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.154826][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.192960][ T5844] Bluetooth: hci0: command tx timeout [ 311.597198][ T5844] Bluetooth: hci3: command tx timeout [ 311.632862][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.644126][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.663516][ T3460] bond0 (unregistering): Released all slaves [ 312.011806][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.027601][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.037644][ T3460] bond0 (unregistering): Released all slaves [ 313.192846][ T5844] Bluetooth: hci2: command tx timeout [ 313.272696][ T5844] Bluetooth: hci0: command tx timeout [ 313.674936][ T5844] Bluetooth: hci3: command tx timeout [ 313.877651][T12963] syzkaller1: entered promiscuous mode [ 313.883456][T12963] syzkaller1: entered allmulticast mode [ 314.022150][T12969] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 314.504228][ T3460] hsr_slave_0: left promiscuous mode [ 314.522649][ T3460] hsr_slave_1: left promiscuous mode [ 314.540665][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.551536][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.576261][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.591058][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.620035][ T3460] hsr_slave_0: left promiscuous mode [ 314.629296][ T3460] hsr_slave_1: left promiscuous mode [ 314.635690][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.643252][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.651045][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.658724][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.697281][ T3460] veth1_macvtap: left promiscuous mode [ 314.704116][ T3460] veth0_macvtap: left promiscuous mode [ 314.709730][ T3460] veth1_vlan: left promiscuous mode [ 314.715812][ T3460] veth0_vlan: left promiscuous mode [ 314.722028][ T3460] veth1_macvtap: left promiscuous mode [ 314.727626][ T3460] veth0_macvtap: left promiscuous mode [ 314.733745][ T3460] veth1_vlan: left promiscuous mode [ 314.739024][ T3460] veth0_vlan: left promiscuous mode [ 315.274155][ T5844] Bluetooth: hci2: command tx timeout [ 315.291338][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 315.319943][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 315.347483][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 315.354792][ T5844] Bluetooth: hci0: command tx timeout [ 315.753766][ T5844] Bluetooth: hci3: command tx timeout [ 316.052240][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 316.100261][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 316.479435][T12989] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 316.502837][T12935] chnl_net:caif_netlink_parms(): no params data found [ 316.599086][T12891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.627408][T12891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.636190][T12998] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1471'. [ 316.776907][T12891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.873032][T12891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.020694][T13028] openvswitch: netlink: Actions may not be safe on all matching packets [ 317.039864][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.059572][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.144445][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.163383][T12935] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.170677][T12935] bridge_slave_0: entered allmulticast mode [ 317.194410][T13038] netlink: 'syz.5.1478': attribute type 1 has an invalid length. [ 317.202183][T13038] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1478'. [ 317.214328][T12935] bridge_slave_0: entered promiscuous mode [ 317.361168][ T5844] Bluetooth: hci2: command tx timeout [ 317.370229][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.383465][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.390742][T12935] bridge_slave_1: entered allmulticast mode [ 317.398982][T12935] bridge_slave_1: entered promiscuous mode [ 317.533910][T12935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.571227][T12935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.633433][T13047] vxcan1: tx address claim with dlc 0 [ 317.651601][T13047] sctp: [Deprecated]: syz.5.1480 (pid 13047) Use of int in maxseg socket option. [ 317.651601][T13047] Use struct sctp_assoc_value instead [ 317.700783][T12935] team0: Port device team_slave_0 added [ 317.792357][T12935] team0: Port device team_slave_1 added [ 317.910216][T12935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.918037][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.948023][T12935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.960709][T12935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.967935][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.999686][T12935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.051778][T12880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.091037][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.101585][T12880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.138291][T12880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.218834][T12935] hsr_slave_0: entered promiscuous mode [ 318.229739][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 318.230581][T12935] hsr_slave_1: entered promiscuous mode [ 318.252237][T12935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.259879][T12935] Cannot create hsr debugfs directory [ 318.279544][T12880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.300139][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.410277][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1489'. [ 318.426282][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.433484][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.443787][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.450949][T12367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.758211][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'. [ 318.931908][T13103] netlink: zone id is out of range [ 318.954133][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.961624][T13103] netlink: zone id is out of range [ 318.978910][T13103] netlink: zone id is out of range [ 318.988749][T13103] netlink: zone id is out of range [ 318.995926][T13103] netlink: zone id is out of range [ 319.001193][T13103] netlink: zone id is out of range [ 319.037566][T13103] netlink: zone id is out of range [ 319.049934][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.060345][T13103] netlink: zone id is out of range [ 319.074010][T13103] netlink: zone id is out of range [ 319.079157][T13103] netlink: zone id is out of range [ 319.091448][T13103] netlink: zone id is out of range [ 319.111642][T13103] netlink: zone id is out of range [ 319.113884][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.123973][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.137642][T13103] netlink: set zone limit has 4 unknown bytes [ 319.213089][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.220263][T12366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.413296][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.433965][ T5844] Bluetooth: hci2: command tx timeout [ 319.475066][T12935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.520345][T12935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.541799][T12935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.570072][T12935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.578082][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 319.650378][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 319.716424][T12891] veth0_vlan: entered promiscuous mode [ 319.812216][T12891] veth1_vlan: entered promiscuous mode [ 319.924611][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1504'. [ 319.987501][T12891] veth0_macvtap: entered promiscuous mode [ 320.010812][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.035390][T12891] veth1_macvtap: entered promiscuous mode [ 320.054360][T12935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.110869][T12935] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.128255][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.167376][T12370] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.174607][T12370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.182814][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1506'. [ 320.199693][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.227621][T13145] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 320.242231][T12370] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.249468][T12370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.293773][T12891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.316334][T12891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.330204][T12891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.342197][T12891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.433462][T13156] netlink: 212404 bytes leftover after parsing attributes in process `syz.5.1508'. [ 320.708016][T12369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.739965][T12369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.797210][T13166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.826384][T12368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.863428][T12368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.906513][T12880] veth0_vlan: entered promiscuous mode [ 320.946736][T12880] veth1_vlan: entered promiscuous mode [ 320.974447][T13171] smc: net device erspan0 applied user defined pnetid SYZ0 [ 321.150193][T12880] veth0_macvtap: entered promiscuous mode [ 321.170230][T12935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.172142][T13179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.189132][T12880] veth1_macvtap: entered promiscuous mode [ 321.249862][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.370072][T12351] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.408587][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.511491][T12351] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.620230][T12351] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.639724][T12880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.655203][T12880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.670068][T12880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.679624][T12880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.705977][T12935] veth0_vlan: entered promiscuous mode [ 321.738873][T12351] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.790438][T12935] veth1_vlan: entered promiscuous mode [ 321.831958][T12369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.847095][T12369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.891827][T12369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.901576][T12935] veth0_macvtap: entered promiscuous mode [ 321.902620][T12369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.939541][T12935] veth1_macvtap: entered promiscuous mode [ 321.985832][T12935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.005547][T12935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.047527][T12935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.059414][T12935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.068249][T12935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.078892][T12935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.129314][T12351] bridge_slave_1: left allmulticast mode [ 322.135745][T12351] bridge_slave_1: left promiscuous mode [ 322.141423][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.150886][T12351] bridge_slave_0: left allmulticast mode [ 322.160639][T12351] bridge_slave_0: left promiscuous mode [ 322.166731][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.428640][T13197] __nla_validate_parse: 2 callbacks suppressed [ 322.428657][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1519'. [ 322.714754][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.728017][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.737188][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.754043][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.761982][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.903121][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.915938][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.926282][T12351] bond0 (unregistering): Released all slaves [ 323.156516][T12368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.164625][T12368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.280069][T12369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.296750][T12369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.320249][T12351] hsr_slave_0: left promiscuous mode [ 323.326567][T12351] hsr_slave_1: left promiscuous mode [ 323.332316][T12351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.343404][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.351216][T12351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.359284][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.379946][T12351] veth1_macvtap: left promiscuous mode [ 323.385683][T12351] veth0_macvtap: left promiscuous mode [ 323.391233][T12351] veth1_vlan: left promiscuous mode [ 323.396581][T12351] veth0_vlan: left promiscuous mode [ 323.804498][T12351] team0 (unregistering): Port device team_slave_1 removed [ 323.844857][T12351] team0 (unregistering): Port device team_slave_0 removed [ 324.314264][T13199] chnl_net:caif_netlink_parms(): no params data found [ 324.698218][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.722986][T13199] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.730261][T13199] bridge_slave_0: entered allmulticast mode [ 324.754029][T13219] openvswitch: netlink: Actions may not be safe on all matching packets [ 324.754253][T13199] bridge_slave_0: entered promiscuous mode [ 324.793625][ T5844] Bluetooth: hci0: command tx timeout [ 324.802238][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.812613][T13199] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.819849][T13199] bridge_slave_1: entered allmulticast mode [ 324.844755][T13199] bridge_slave_1: entered promiscuous mode [ 324.967562][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.986458][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.991181][T13199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.012982][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.023369][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.039873][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.045085][T13199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.184532][T13199] team0: Port device team_slave_0 added [ 325.195734][T13199] team0: Port device team_slave_1 added [ 325.268811][T13199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.279951][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.310007][T13199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.322420][T13199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.329431][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.357842][T13199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.408232][T12369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.497767][T13199] hsr_slave_0: entered promiscuous mode [ 325.505705][T13199] hsr_slave_1: entered promiscuous mode [ 325.512004][T13199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.520455][T13199] Cannot create hsr debugfs directory [ 325.590340][T12369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.656566][T12369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.755765][T12369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.959682][T13224] chnl_net:caif_netlink_parms(): no params data found [ 326.069287][T12369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.167957][T12369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.183394][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.190534][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.198559][T13224] bridge_slave_0: entered allmulticast mode [ 326.206169][T13224] bridge_slave_0: entered promiscuous mode [ 326.214393][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.221518][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.229045][T13224] bridge_slave_1: entered allmulticast mode [ 326.236971][T13224] bridge_slave_1: entered promiscuous mode [ 326.295381][T12369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.321862][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.344305][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.392326][T12369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.428454][T13199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.448590][T13224] team0: Port device team_slave_0 added [ 326.458187][T13224] team0: Port device team_slave_1 added [ 326.464404][T13199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.476091][T13199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.525649][T13199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.539960][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.547524][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.574889][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.601957][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.609231][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.638009][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.724751][T13224] hsr_slave_0: entered promiscuous mode [ 326.731361][T13224] hsr_slave_1: entered promiscuous mode [ 326.737906][T13224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.745663][T13224] Cannot create hsr debugfs directory [ 326.751724][T12369] bridge_slave_1: left allmulticast mode [ 326.757624][T12369] bridge_slave_1: left promiscuous mode [ 326.763628][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.773141][T12369] bridge_slave_0: left allmulticast mode [ 326.778794][T12369] bridge_slave_0: left promiscuous mode [ 326.786295][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.829131][T12369] bridge_slave_1: left allmulticast mode [ 326.842479][T12369] bridge_slave_1: left promiscuous mode [ 326.848515][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.868869][T12369] bridge_slave_0: left allmulticast mode [ 326.875556][ T5844] Bluetooth: hci0: command tx timeout [ 326.887579][T12369] bridge_slave_0: left promiscuous mode [ 326.899449][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.123796][ T5844] Bluetooth: hci2: command tx timeout [ 327.142316][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.161776][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.170300][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.179368][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.202156][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.520827][T12369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.541142][T12369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.560452][T12369] bond0 (unregistering): Released all slaves [ 327.850388][T12369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.862583][T12369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.877138][T12369] bond0 (unregistering): Released all slaves [ 327.927271][T13243] macsec1: entered allmulticast mode [ 327.945958][T13243] mac80211_hwsim hwsim92 wlan0: entered allmulticast mode [ 327.971612][T13243] mac80211_hwsim hwsim92 wlan0: left allmulticast mode [ 328.306071][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 328.357602][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 328.521072][T13266] xt_l2tp: invalid flags combination: 4 [ 328.717777][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 328.851812][T12369] hsr_slave_0: left promiscuous mode [ 328.869345][T12369] hsr_slave_1: left promiscuous mode [ 328.879201][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.887102][T12369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.901595][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.906234][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1537'. [ 328.922606][T12369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.942012][T12369] hsr_slave_0: left promiscuous mode [ 328.952826][ T5847] Bluetooth: hci0: command tx timeout [ 328.969841][T12369] hsr_slave_1: left promiscuous mode [ 328.977590][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.985326][T12369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.997704][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.005279][T12369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.066956][T12369] veth1_macvtap: left promiscuous mode [ 329.072615][T12369] veth0_macvtap: left promiscuous mode [ 329.078346][T12369] veth1_vlan: left promiscuous mode [ 329.083965][T12369] veth0_vlan: left promiscuous mode [ 329.091800][T12369] veth1_macvtap: left promiscuous mode [ 329.097451][T12369] veth0_macvtap: left promiscuous mode [ 329.103285][T12369] veth1_vlan: left promiscuous mode [ 329.108659][T12369] veth0_vlan: left promiscuous mode [ 329.193046][ T5847] Bluetooth: hci2: command tx timeout [ 329.273114][ T5844] Bluetooth: hci3: command tx timeout [ 329.628831][T12369] team0 (unregistering): Port device team_slave_1 removed [ 329.669657][T12369] team0 (unregistering): Port device team_slave_0 removed [ 330.385919][T12369] team0 (unregistering): Port device team_slave_1 removed [ 330.429640][T12369] team0 (unregistering): Port device team_slave_0 removed [ 330.961188][T13199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.033672][ T5844] Bluetooth: hci0: command tx timeout [ 331.231205][T13199] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.272701][ T5844] Bluetooth: hci2: command tx timeout [ 331.295085][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.302292][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.353312][ T5844] Bluetooth: hci3: command tx timeout [ 331.355802][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.365933][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.428698][T13249] chnl_net:caif_netlink_parms(): no params data found [ 331.759748][T13224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.797675][T13224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.834972][T13224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.883493][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.917086][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.927262][T13249] bridge_slave_0: entered allmulticast mode [ 331.935504][T13249] bridge_slave_0: entered promiscuous mode [ 331.947375][T13224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.962053][T13249] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.969853][T13324] SET target dimension over the limit! [ 331.979507][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.986953][T13249] bridge_slave_1: entered allmulticast mode [ 331.995476][T13249] bridge_slave_1: entered promiscuous mode [ 332.034418][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1544'. [ 332.091416][T13249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.117868][T13249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.191048][T13249] team0: Port device team_slave_0 added [ 332.211015][T13249] team0: Port device team_slave_1 added [ 332.329627][T13249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.343379][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.388168][T13249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.424505][T13249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.431520][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.459491][T13249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.600747][T13249] hsr_slave_0: entered promiscuous mode [ 332.608405][T13249] hsr_slave_1: entered promiscuous mode [ 332.615121][T13249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.624174][T13249] Cannot create hsr debugfs directory [ 332.727442][T13352] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 332.768015][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.790147][T13199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.898066][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.922587][T13358] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 332.934763][T13358] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 332.980942][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.988138][T12369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.013945][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.021145][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.105488][T13199] veth0_vlan: entered promiscuous mode [ 333.137641][T13199] veth1_vlan: entered promiscuous mode [ 333.197951][T13199] veth0_macvtap: entered promiscuous mode [ 333.220609][T13199] veth1_macvtap: entered promiscuous mode [ 333.261267][T13199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.285243][T13199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.331517][T13199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.350946][T13199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.359758][ T5847] Bluetooth: hci2: command tx timeout [ 333.369509][T13199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.378642][T13199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.433480][ T5847] Bluetooth: hci3: command tx timeout [ 333.460223][T13249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.485329][T13249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.502092][T13249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.512381][T13249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.558532][T12366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.574174][T12366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.574649][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.679287][T12367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.713369][T12367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.860017][T13377] veth9: entered promiscuous mode [ 333.866050][T13377] veth9: entered allmulticast mode [ 334.005706][T13381] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1555'. [ 334.096068][T13249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.158912][T13249] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.200125][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.207349][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.285064][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.292232][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.356483][T13224] veth0_vlan: entered promiscuous mode [ 334.524767][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.624044][T13224] veth1_vlan: entered promiscuous mode [ 334.722356][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.785436][T13249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.820602][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.846861][T13224] veth0_macvtap: entered promiscuous mode [ 334.865270][T13224] veth1_macvtap: entered promiscuous mode [ 334.910905][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.950269][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.978585][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.995998][T13224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.005331][T13224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.014260][T13224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.024419][T13224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.156091][T13249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.227324][ T36] bridge_slave_1: left allmulticast mode [ 335.234033][ T36] bridge_slave_1: left promiscuous mode [ 335.239696][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.252013][ T36] bridge_slave_0: left allmulticast mode [ 335.259139][ T36] bridge_slave_0: left promiscuous mode [ 335.266171][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.513380][ T5847] Bluetooth: hci3: command 0x0419 tx timeout [ 335.856127][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.873683][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.881511][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.883197][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.899902][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.909108][ T36] bond0 (unregistering): Released all slaves [ 335.910222][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.924025][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.947713][T12368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.974147][T12368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.078172][T13249] veth0_vlan: entered promiscuous mode [ 336.214113][T13249] veth1_vlan: entered promiscuous mode [ 336.290073][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.332655][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.447312][T13249] veth0_macvtap: entered promiscuous mode [ 336.535470][T13249] veth1_macvtap: entered promiscuous mode [ 336.565029][ T36] hsr_slave_0: left promiscuous mode [ 336.571309][ T36] hsr_slave_1: left promiscuous mode [ 336.583876][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.591428][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.601395][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.608974][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.629646][ T36] veth1_macvtap: left promiscuous mode [ 336.636711][ T36] veth0_macvtap: left promiscuous mode [ 336.642326][ T36] veth1_vlan: left promiscuous mode [ 336.647654][ T36] veth0_vlan: left promiscuous mode [ 337.070083][ T36] team0 (unregistering): Port device team_slave_1 removed [ 337.119133][ T36] team0 (unregistering): Port device team_slave_0 removed [ 337.597395][ T5847] Bluetooth: hci3: command 0x0419 tx timeout [ 337.642017][T13249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.686385][T13249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.718699][T13435] chnl_net:caif_netlink_parms(): no params data found [ 337.755167][T13249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.786073][T13249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.821974][T13249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.860673][T13249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.865642][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 337.896626][T13469] netlink: 'syz.5.1571': attribute type 2 has an invalid length. [ 337.933190][T13469] netlink: 'syz.5.1571': attribute type 1 has an invalid length. [ 337.940976][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1571'. [ 337.992924][ T5847] Bluetooth: hci0: command tx timeout [ 338.220927][T13435] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.229768][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.238230][T13435] bridge_slave_0: entered allmulticast mode [ 338.248133][T13435] bridge_slave_0: entered promiscuous mode [ 338.271046][T13435] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.278359][T13435] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.286599][T13435] bridge_slave_1: entered allmulticast mode [ 338.294387][T13435] bridge_slave_1: entered promiscuous mode [ 338.306808][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.318489][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.354030][T13435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.374441][T13435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.433111][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.434867][T13435] team0: Port device team_slave_0 added [ 338.442830][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.460588][T13435] team0: Port device team_slave_1 added [ 338.516503][T13435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.524235][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.550637][T13435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.565213][T13435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.572161][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.598830][T13435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.681423][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.731204][T13435] hsr_slave_0: entered promiscuous mode [ 338.744593][T13435] hsr_slave_1: entered promiscuous mode [ 338.750598][T13435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.758616][T13435] Cannot create hsr debugfs directory [ 338.779449][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.885216][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.963323][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.160611][ T36] bridge_slave_1: left allmulticast mode [ 339.178249][ T36] bridge_slave_1: left promiscuous mode [ 339.190543][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.216674][ T36] bridge_slave_0: left allmulticast mode [ 339.222353][ T36] bridge_slave_0: left promiscuous mode [ 339.233312][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.434802][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.447954][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.463949][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.485870][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.501331][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.655771][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.666848][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.678593][ T36] bond0 (unregistering): Released all slaves [ 340.002006][ T36] hsr_slave_0: left promiscuous mode [ 340.009264][ T36] hsr_slave_1: left promiscuous mode [ 340.015626][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.023323][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.031059][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.038777][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.059629][ T36] veth1_macvtap: left promiscuous mode [ 340.066086][ T36] veth0_macvtap: left promiscuous mode [ 340.071658][ T36] veth1_vlan: left promiscuous mode [ 340.077065][ T5847] Bluetooth: hci0: command tx timeout [ 340.077299][ T36] veth0_vlan: left promiscuous mode [ 340.489842][ T36] team0 (unregistering): Port device team_slave_1 removed [ 340.531005][ T36] team0 (unregistering): Port device team_slave_0 removed [ 341.120697][T13435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.165122][T13435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.244477][T13435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.265043][T13476] chnl_net:caif_netlink_parms(): no params data found [ 341.279246][T13435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.388334][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.397655][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.432845][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.442197][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.451662][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.512971][ T5844] Bluetooth: hci2: command tx timeout [ 341.589095][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.603014][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.610281][T13476] bridge_slave_0: entered allmulticast mode [ 341.618849][T13476] bridge_slave_0: entered promiscuous mode [ 341.659588][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.668512][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.677374][T13476] bridge_slave_1: entered allmulticast mode [ 341.686006][T13476] bridge_slave_1: entered promiscuous mode [ 341.777307][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.789227][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.892123][T13512] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 341.908271][T13512] netlink: 'syz.3.1579': attribute type 2 has an invalid length. [ 341.916477][T13512] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 341.925323][T13512] netlink: 'syz.3.1579': attribute type 2 has an invalid length. [ 341.938808][T13512] netlink: 'syz.3.1579': attribute type 2 has an invalid length. [ 341.948908][T13512] netlink: 'syz.3.1579': attribute type 2 has an invalid length. [ 341.957555][T13512] netlink: 'syz.3.1579': attribute type 2 has an invalid length. [ 341.965459][T13512] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 341.996694][T13476] team0: Port device team_slave_0 added [ 342.015667][T13476] team0: Port device team_slave_1 added [ 342.088862][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.153074][ T5844] Bluetooth: hci0: command tx timeout [ 342.239930][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.314969][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.321959][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.348268][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.404171][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.437167][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.446145][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.503415][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.586920][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.612931][T13536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1586'. [ 342.725170][T13476] hsr_slave_0: entered promiscuous mode [ 342.731847][T13476] hsr_slave_1: entered promiscuous mode [ 342.740514][T13476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.762540][T13476] Cannot create hsr debugfs directory [ 342.965389][T13435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.986967][T13499] chnl_net:caif_netlink_parms(): no params data found [ 343.034906][ T36] bridge_slave_1: left allmulticast mode [ 343.040579][ T36] bridge_slave_1: left promiscuous mode [ 343.046516][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.056807][ T36] bridge_slave_0: left allmulticast mode [ 343.062940][ T36] bridge_slave_0: left promiscuous mode [ 343.071335][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.464312][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.485416][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.498600][ T36] bond0 (unregistering): Released all slaves [ 343.513004][ T5847] Bluetooth: hci3: command tx timeout [ 343.528365][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1589'. [ 343.586042][T13551] dummy0: entered promiscuous mode [ 343.597983][ T5847] Bluetooth: hci2: command tx timeout [ 343.605231][T13551] dummy0: left promiscuous mode [ 343.760345][T13556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1590'. [ 343.871073][T13435] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.999603][T13499] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.024944][T13499] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.032190][T13499] bridge_slave_0: entered allmulticast mode [ 344.045548][T13499] bridge_slave_0: entered promiscuous mode [ 344.054058][T13499] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.061201][T13499] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.069267][T13499] bridge_slave_1: entered allmulticast mode [ 344.077465][T13499] bridge_slave_1: entered promiscuous mode [ 344.095835][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.103004][T12366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.162007][ T36] hsr_slave_0: left promiscuous mode [ 344.172430][ T36] hsr_slave_1: left promiscuous mode [ 344.189264][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.197086][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.205854][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.216797][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.233599][ T5847] Bluetooth: hci0: command tx timeout [ 344.248587][ T36] veth1_macvtap: left promiscuous mode [ 344.254448][ T36] veth0_macvtap: left promiscuous mode [ 344.260178][ T36] veth1_vlan: left promiscuous mode [ 344.266099][ T36] veth0_vlan: left promiscuous mode [ 344.716550][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 344.832164][ T36] team0 (unregistering): Port device team_slave_1 removed [ 344.873977][ T36] team0 (unregistering): Port device team_slave_0 removed [ 345.272001][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.279132][T12366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.365565][T13499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.396961][T13499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.593311][ T5844] Bluetooth: hci3: command tx timeout [ 345.606034][T13499] team0: Port device team_slave_0 added [ 345.646808][T13499] team0: Port device team_slave_1 added [ 345.668897][T13435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.685528][ T5844] Bluetooth: hci2: command tx timeout [ 345.721774][T13593] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.836267][T13599] openvswitch: netlink: IP tunnel dst address not specified [ 345.847963][T13499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.862505][T13499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.920889][T13499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.939104][T13604] netlink: 'syz.3.1601': attribute type 11 has an invalid length. [ 345.950838][T13604] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1601'. [ 345.988921][T13499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.001607][T13499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.038343][T13499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.066518][T13476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.122103][T13607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.185731][T13476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.246797][T13499] hsr_slave_0: entered promiscuous mode [ 346.260214][T13499] hsr_slave_1: entered promiscuous mode [ 346.267075][T13499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.274831][T13499] Cannot create hsr debugfs directory [ 346.280636][T13476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.308918][T13476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.465136][T13435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.603187][T13627] netlink: 'syz.5.1607': attribute type 1 has an invalid length. [ 346.618830][T13627] netlink: 'syz.5.1607': attribute type 3 has an invalid length. [ 346.626985][T13627] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1607'. [ 346.687014][T13435] veth0_vlan: entered promiscuous mode [ 346.736792][T13435] veth1_vlan: entered promiscuous mode [ 346.861039][T13476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.912015][T13435] veth0_macvtap: entered promiscuous mode [ 346.951644][T13476] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.958394][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 346.958413][T13640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1612'. [ 346.980349][T13435] veth1_macvtap: entered promiscuous mode [ 347.045036][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.052172][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.095300][T13435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.118514][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.125722][T12369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.161606][T13435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.210084][T13435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.227440][T13435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.236703][T13435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.246157][T13435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.451064][T13499] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.477143][T12370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.496871][T12370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.504768][T13499] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.610355][T13499] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.629586][T13499] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.651759][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.663062][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.672883][ T5844] Bluetooth: hci3: command tx timeout [ 347.757825][ T5844] Bluetooth: hci2: command tx timeout [ 347.899061][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.951513][T13499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.001550][T13499] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.039243][T12370] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.046438][T12370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.137160][T12370] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.144371][T12370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.291179][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.430152][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.513273][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.590300][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.654660][T13476] veth0_vlan: entered promiscuous mode [ 348.670994][T13476] veth1_vlan: entered promiscuous mode [ 348.752217][T13476] veth0_macvtap: entered promiscuous mode [ 348.775269][T13476] veth1_macvtap: entered promiscuous mode [ 348.812010][T13499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.829440][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.849518][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.865726][T13476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.875696][T13476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.884786][T13476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.893812][T13476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.001445][ T36] bridge_slave_1: left allmulticast mode [ 349.007308][ T36] bridge_slave_1: left promiscuous mode [ 349.014227][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.024148][ T36] bridge_slave_0: left allmulticast mode [ 349.029797][ T36] bridge_slave_0: left promiscuous mode [ 349.037631][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.511699][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.536141][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.563653][ T36] bond0 (unregistering): Released all slaves [ 349.645642][T13499] veth0_vlan: entered promiscuous mode [ 349.699532][T13499] veth1_vlan: entered promiscuous mode [ 349.754693][ T5844] Bluetooth: hci3: command tx timeout [ 349.774041][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.783700][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.791793][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.800190][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.808746][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.819421][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.835528][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.950215][T12368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.003001][T12368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.120672][T13499] veth0_macvtap: entered promiscuous mode [ 350.247959][T13499] veth1_macvtap: entered promiscuous mode [ 350.263438][ T36] hsr_slave_0: left promiscuous mode [ 350.273549][ T36] hsr_slave_1: left promiscuous mode [ 350.286762][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.298602][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.316108][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.324429][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.358695][ T36] veth1_macvtap: left promiscuous mode [ 350.364652][ T36] veth0_macvtap: left promiscuous mode [ 350.370356][ T36] veth1_vlan: left promiscuous mode [ 350.376252][ T36] veth0_vlan: left promiscuous mode [ 350.899951][ T36] team0 (unregistering): Port device team_slave_1 removed [ 350.935591][ T36] team0 (unregistering): Port device team_slave_0 removed [ 351.298793][T13713] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 351.451770][T13499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.502222][T13499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.531691][T13499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.541031][T13499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.557707][T13499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.567198][T13499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.728298][T12370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.748185][T12370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.790138][T12369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.798892][T12369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.821669][T12370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.847402][T13701] chnl_net:caif_netlink_parms(): no params data found [ 351.912986][ T5847] Bluetooth: hci0: command tx timeout [ 351.984401][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.991522][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.002659][T13701] bridge_slave_0: entered allmulticast mode [ 352.009648][T13701] bridge_slave_0: entered promiscuous mode [ 352.017504][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.025846][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.033279][T13701] bridge_slave_1: entered allmulticast mode [ 352.040201][T13701] bridge_slave_1: entered promiscuous mode [ 352.074606][T13701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.088485][T13701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.122369][T13701] team0: Port device team_slave_0 added [ 352.131332][T13701] team0: Port device team_slave_1 added [ 352.162214][T13701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.169413][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.198340][T13701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.212171][T13701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.219616][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.246614][T13701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.346271][T12370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.386333][T13701] hsr_slave_0: entered promiscuous mode [ 352.395317][T13701] hsr_slave_1: entered promiscuous mode [ 352.401662][T13701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.409311][T13701] Cannot create hsr debugfs directory [ 352.445386][T12370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.625040][T12370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.888992][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.900293][T12370] bridge_slave_1: left allmulticast mode [ 352.901103][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.906173][T12370] bridge_slave_1: left promiscuous mode [ 352.906393][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.930411][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.936187][T12370] bridge_slave_0: left allmulticast mode [ 352.939980][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.943688][T12370] bridge_slave_0: left promiscuous mode [ 352.953446][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.957133][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.275791][T12370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.286663][T12370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.300990][T12370] bond0 (unregistering): Released all slaves [ 353.577316][T13730] chnl_net:caif_netlink_parms(): no params data found [ 353.628856][T12370] hsr_slave_0: left promiscuous mode [ 353.635630][T12370] hsr_slave_1: left promiscuous mode [ 353.641376][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.648935][T12370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.661641][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.669192][T12370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.690899][T12370] veth1_macvtap: left promiscuous mode [ 353.696786][T12370] veth0_macvtap: left promiscuous mode [ 353.702355][T12370] veth1_vlan: left promiscuous mode [ 353.707769][T12370] veth0_vlan: left promiscuous mode [ 353.997010][ T5844] Bluetooth: hci0: command tx timeout [ 354.105569][T12370] team0 (unregistering): Port device team_slave_1 removed [ 354.144426][T12370] team0 (unregistering): Port device team_slave_0 removed [ 354.440105][T13737] netlink: 668 bytes leftover after parsing attributes in process `syz.5.1632'. [ 354.463417][T13737] netlink: 668 bytes leftover after parsing attributes in process `syz.5.1632'. [ 354.483868][T13738] netlink: 668 bytes leftover after parsing attributes in process `syz.5.1632'. [ 354.500801][T13738] netlink: 668 bytes leftover after parsing attributes in process `syz.5.1632'. [ 354.522313][T13737] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1632'. [ 354.531766][T13737] netlink: 'syz.5.1632': attribute type 9 has an invalid length. [ 354.550929][T13738] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1632'. [ 354.561326][T13738] netlink: 'syz.5.1632': attribute type 9 has an invalid length. [ 354.593752][T13743] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 355.033526][ T5844] Bluetooth: hci2: command tx timeout [ 355.072202][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.085928][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.097768][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.127449][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.135574][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.256963][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.269595][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.278781][T13730] bridge_slave_0: entered allmulticast mode [ 355.286946][T13730] bridge_slave_0: entered promiscuous mode [ 355.301779][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.324779][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.332048][T13730] bridge_slave_1: entered allmulticast mode [ 355.347171][T13730] bridge_slave_1: entered promiscuous mode [ 355.646670][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.690635][T13760] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 355.711480][T13701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.737572][T13701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.768338][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.821435][T13701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.877736][T13701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.917063][T13730] team0: Port device team_slave_0 added [ 355.926187][T13769] netlink: 'syz.3.1636': attribute type 9 has an invalid length. [ 355.946946][T13730] team0: Port device team_slave_1 added [ 356.020250][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.027464][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.062673][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.087562][ T5844] Bluetooth: hci0: command tx timeout [ 356.124447][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.131433][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.181141][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.234128][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 356.286638][T12370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.458722][T12370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.509790][T13730] hsr_slave_0: entered promiscuous mode [ 356.517974][T13730] hsr_slave_1: entered promiscuous mode [ 356.526478][T13730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.534507][T13730] Cannot create hsr debugfs directory [ 356.618451][T12370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.867887][T12370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.889399][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1646'. [ 357.077216][T13747] chnl_net:caif_netlink_parms(): no params data found [ 357.113215][ T5844] Bluetooth: hci2: command tx timeout [ 357.193204][ T5844] Bluetooth: hci3: command tx timeout [ 357.226439][T12370] bridge_slave_1: left allmulticast mode [ 357.232104][T12370] bridge_slave_1: left promiscuous mode [ 357.238618][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.248143][T12370] bridge_slave_0: left allmulticast mode [ 357.254170][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.275705][T12370] bridge_slave_1: left allmulticast mode [ 357.281366][T12370] bridge_slave_1: left promiscuous mode [ 357.287998][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.297884][T12370] bridge_slave_0: left allmulticast mode [ 357.304487][T12370] bridge_slave_0: left promiscuous mode [ 357.310152][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.554395][T12370] gretap0 (unregistering): left promiscuous mode [ 357.729524][T13823] netlink: 'syz.3.1648': attribute type 21 has an invalid length. [ 357.740214][T13823] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1648'. [ 357.917347][T12370] bond0 (unregistering): Released all slaves [ 358.163523][ T5844] Bluetooth: hci0: command tx timeout [ 358.185113][T12370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.197004][T12370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.208576][T12370] bond0 (unregistering): Released all slaves [ 358.240940][T13823] netlink: 'syz.3.1648': attribute type 5 has an invalid length. [ 358.253272][T13823] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1648'. [ 358.282026][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.313671][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.320870][T13747] bridge_slave_0: entered allmulticast mode [ 358.352307][T13747] bridge_slave_0: entered promiscuous mode [ 358.365815][T12370] tipc: Disabling bearer [ 358.382796][T12370] tipc: Left network mode [ 358.414910][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.427705][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.436134][T13747] bridge_slave_1: entered allmulticast mode [ 358.449148][T13747] bridge_slave_1: entered promiscuous mode [ 358.489448][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.525545][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.544195][T13701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.634153][T13747] team0: Port device team_slave_0 added [ 358.677481][T13747] team0: Port device team_slave_1 added [ 358.709006][T13701] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.760719][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.769617][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.797228][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.850983][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.862237][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.890559][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.941429][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.948623][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.024182][T13730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.042070][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.049194][T12367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.059071][T13835] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 359.088477][T13747] hsr_slave_0: entered promiscuous mode [ 359.095306][T13747] hsr_slave_1: entered promiscuous mode [ 359.101666][T13747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.117111][T13747] Cannot create hsr debugfs directory [ 359.126211][T13730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.154002][T13730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.193219][ T5844] Bluetooth: hci2: command tx timeout [ 359.246083][T13730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.273014][ T5844] Bluetooth: hci3: command tx timeout [ 359.377295][T12370] batadv_slave_1: left promiscuous mode [ 359.391178][T12370] hsr_slave_0: left promiscuous mode [ 359.398773][T12370] hsr_slave_1: left promiscuous mode [ 359.404977][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.413651][T12370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.421821][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.430255][T12370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.443218][T12370] hsr_slave_0: left promiscuous mode [ 359.449231][T12370] hsr_slave_1: left promiscuous mode [ 359.455358][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.463932][T12370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.471639][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.479431][T12370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.514373][T12370] veth1_vlan: left promiscuous mode [ 359.519754][T12370] veth0_vlan: left promiscuous mode [ 359.526664][T12370] veth1_macvtap: left promiscuous mode [ 359.532214][T12370] veth0_macvtap: left promiscuous mode [ 359.538131][T12370] veth1_vlan: left promiscuous mode [ 359.543855][T12370] veth0_vlan: left promiscuous mode [ 360.049055][T12370] team0 (unregistering): Port device team_slave_1 removed [ 360.088029][T12370] team0 (unregistering): Port device team_slave_0 removed [ 360.739972][T12370] team0 (unregistering): Port device team_slave_1 removed [ 360.779748][T12370] team0 (unregistering): Port device team_slave_0 removed [ 361.253371][T13860] openvswitch: netlink: IP tunnel dst address not specified [ 361.273552][ T5844] Bluetooth: hci2: command tx timeout [ 361.293808][T13860] __nla_validate_parse: 1 callbacks suppressed [ 361.293823][T13860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1655'. [ 361.353090][ T5844] Bluetooth: hci3: command tx timeout [ 361.551187][T13730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.656940][T13867] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 361.671279][T13730] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.685257][T13867] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 361.728672][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.735854][T12369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.787728][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.794870][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.823489][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.981712][T13701] veth0_vlan: entered promiscuous mode [ 361.990285][T13747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.011898][T13747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.027567][T13701] veth1_vlan: entered promiscuous mode [ 362.036981][T13747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.056356][T13747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.183925][T13701] veth0_macvtap: entered promiscuous mode [ 362.208779][T13701] veth1_macvtap: entered promiscuous mode [ 362.269684][T13701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.282393][T13701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.320155][T13701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.330780][T13701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.341537][T13701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.350439][T13701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.434706][T13747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.448429][T13730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.482090][T13747] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.512020][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 362.537363][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'. [ 362.546540][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.554940][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.564502][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.571648][T12369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.630690][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.637892][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.698252][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.734658][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.780555][T13747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.014684][T13730] veth0_vlan: entered promiscuous mode [ 363.029900][T13730] veth1_vlan: entered promiscuous mode [ 363.077585][T13730] veth0_macvtap: entered promiscuous mode [ 363.090291][T13730] veth1_macvtap: entered promiscuous mode [ 363.151275][ T1168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.226766][T13730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.266435][ T1168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.306204][T13730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.336780][T13730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.351353][T13730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.361967][T13730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.380775][T13730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.398814][T13747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.426394][ T1168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.443335][ T5844] Bluetooth: hci3: command tx timeout [ 363.521581][ T1168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.577834][T13747] veth0_vlan: entered promiscuous mode [ 363.595321][T12370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.609522][T12370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.640196][T13747] veth1_vlan: entered promiscuous mode [ 363.669650][T12370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.686433][T12370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.780548][T13747] veth0_macvtap: entered promiscuous mode [ 363.808894][T13747] veth1_macvtap: entered promiscuous mode [ 363.854889][ T1168] bridge_slave_1: left allmulticast mode [ 363.860571][ T1168] bridge_slave_1: left promiscuous mode [ 363.867247][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.879321][ T1168] bridge_slave_0: left allmulticast mode [ 363.885739][ T1168] bridge_slave_0: left promiscuous mode [ 363.891400][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.425757][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.445604][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.475036][ T1168] bond0 (unregistering): Released all slaves [ 364.544377][T13747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.624143][T13747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.719002][T13747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.727998][T13747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.739373][T13747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.748993][T13747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.772207][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.784716][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.793903][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.802422][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.810250][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.929166][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.941616][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.986417][ T1168] hsr_slave_0: left promiscuous mode [ 364.992234][ T1168] hsr_slave_1: left promiscuous mode [ 364.999085][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.006990][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.017530][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.025384][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.049513][ T1168] veth1_macvtap: left promiscuous mode [ 365.055843][ T1168] veth0_macvtap: left promiscuous mode [ 365.061431][ T1168] veth1_vlan: left promiscuous mode [ 365.066797][ T1168] veth0_vlan: left promiscuous mode [ 365.541156][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 365.584292][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 365.986094][T12367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.018216][T12367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.247871][T13902] chnl_net:caif_netlink_parms(): no params data found [ 366.330404][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.338557][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.345964][T13902] bridge_slave_0: entered allmulticast mode [ 366.353683][T13902] bridge_slave_0: entered promiscuous mode [ 366.364101][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.371432][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.378872][T13902] bridge_slave_1: entered allmulticast mode [ 366.386081][T13902] bridge_slave_1: entered promiscuous mode [ 366.422341][T13902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.435112][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.477413][T12370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.508482][T13902] team0: Port device team_slave_0 added [ 366.518458][T13902] team0: Port device team_slave_1 added [ 366.630146][T12370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.689163][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.703274][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.752684][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.784658][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.791633][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.852692][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.873735][ T5847] Bluetooth: hci0: command tx timeout [ 366.915866][T12370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.003042][T12370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.029487][T13902] hsr_slave_0: entered promiscuous mode [ 367.036978][T13902] hsr_slave_1: entered promiscuous mode [ 367.045447][T13902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.053113][T13902] Cannot create hsr debugfs directory [ 367.085557][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.094657][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.103826][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.112387][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.129253][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.239686][T12370] bridge_slave_1: left allmulticast mode [ 367.246196][T12370] bridge_slave_1: left promiscuous mode [ 367.251914][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.262552][T12370] bridge_slave_0: left allmulticast mode [ 367.268215][T12370] bridge_slave_0: left promiscuous mode [ 367.274304][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.570400][T12370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.581041][T12370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.591006][T12370] bond0 (unregistering): Released all slaves [ 367.909928][T13913] chnl_net:caif_netlink_parms(): no params data found [ 367.956120][T12370] hsr_slave_0: left promiscuous mode [ 367.961992][T12370] hsr_slave_1: left promiscuous mode [ 367.970960][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.978641][T12370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.988907][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.997500][T12370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.017200][T12370] veth1_macvtap: left promiscuous mode [ 368.022829][T12370] veth0_macvtap: left promiscuous mode [ 368.028383][T12370] veth1_vlan: left promiscuous mode [ 368.033812][T12370] veth0_vlan: left promiscuous mode [ 368.452141][T12370] team0 (unregistering): Port device team_slave_1 removed [ 368.498395][T12370] team0 (unregistering): Port device team_slave_0 removed [ 368.954366][ T5847] Bluetooth: hci0: command tx timeout [ 369.174408][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.184490][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.193061][ T5844] Bluetooth: hci2: command tx timeout [ 369.194094][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.221490][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.230032][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.258840][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.271017][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.278677][T13913] bridge_slave_0: entered allmulticast mode [ 369.288249][T13913] bridge_slave_0: entered promiscuous mode [ 369.296743][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.312701][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.319895][T13913] bridge_slave_1: entered allmulticast mode [ 369.327671][T13913] bridge_slave_1: entered promiscuous mode [ 369.437477][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.459908][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.549366][T13902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.563704][T13913] team0: Port device team_slave_0 added [ 369.573391][T13913] team0: Port device team_slave_1 added [ 369.586368][T13938] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 369.608858][T13902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.624153][T13902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.682036][T13902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.704393][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.711367][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.741157][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.748098][T13942] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1665'. [ 369.754426][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.768984][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.795575][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.916745][T13913] hsr_slave_0: entered promiscuous mode [ 369.923544][T13913] hsr_slave_1: entered promiscuous mode [ 369.929543][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.937572][T13913] Cannot create hsr debugfs directory [ 370.165274][T12370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.197169][T13927] chnl_net:caif_netlink_parms(): no params data found [ 370.269215][T12370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.366147][T12370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.487197][T12370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.501122][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.513550][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.520726][T13927] bridge_slave_0: entered allmulticast mode [ 370.529485][T13927] bridge_slave_0: entered promiscuous mode [ 370.538882][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.546109][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.553785][T13927] bridge_slave_1: entered allmulticast mode [ 370.561517][T13927] bridge_slave_1: entered promiscuous mode [ 370.626395][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.641477][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.707141][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.730344][T13927] team0: Port device team_slave_0 added [ 370.770927][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.784575][T13927] team0: Port device team_slave_1 added [ 370.808563][T12370] bridge_slave_1: left allmulticast mode [ 370.815171][T12370] bridge_slave_1: left promiscuous mode [ 370.821431][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.830662][T12370] bridge_slave_0: left allmulticast mode [ 370.837225][T12370] bridge_slave_0: left promiscuous mode [ 370.843037][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.034352][ T5847] Bluetooth: hci0: command tx timeout [ 371.137834][T12370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.148983][T12370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.159207][T12370] bond0 (unregistering): Released all slaves [ 371.246574][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.262559][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.289149][ T5847] Bluetooth: hci2: command tx timeout [ 371.294138][ T5847] Bluetooth: hci3: command tx timeout [ 371.306753][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.321553][T13965] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1670'. [ 371.332975][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 371.333056][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.341986][T13965] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1670'. [ 371.349049][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.368124][T13965] netlink: 'syz.3.1670': attribute type 2 has an invalid length. [ 371.376438][T13965] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1670'. [ 371.415495][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.422582][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.449369][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.523466][T13965] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1670'. [ 371.565239][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.572415][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.678033][T13927] hsr_slave_0: entered promiscuous mode [ 371.685282][T13927] hsr_slave_1: entered promiscuous mode [ 371.692270][T13927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.704055][T13927] Cannot create hsr debugfs directory [ 371.734947][T12370] hsr_slave_0: left promiscuous mode [ 371.741835][T12370] hsr_slave_1: left promiscuous mode [ 371.749368][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.757427][T12370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.774228][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.781640][T12370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.832934][T12370] veth1_macvtap: left promiscuous mode [ 371.838514][T12370] veth0_macvtap: left promiscuous mode [ 371.848325][T12370] veth1_vlan: left promiscuous mode [ 371.853808][T12370] veth0_vlan: left promiscuous mode [ 372.119675][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.129736][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.137614][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.146585][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.156467][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.409389][T12370] team0 (unregistering): Port device team_slave_1 removed [ 372.448142][T12370] team0 (unregistering): Port device team_slave_0 removed [ 372.808211][T13913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.893012][T13913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.903293][T13913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 372.964146][T13913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.122674][ T5843] Bluetooth: hci0: command tx timeout [ 373.336138][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 373.354722][ T5843] Bluetooth: hci3: command tx timeout [ 373.360304][ T5847] Bluetooth: hci2: command tx timeout [ 373.456346][T13991] bridge9: port 1(ip6gretap1) entered blocking state [ 373.463457][T13991] bridge9: port 1(ip6gretap1) entered disabled state [ 373.470324][T13991] ip6gretap1: entered allmulticast mode [ 373.479996][T13991] ip6gretap1: entered promiscuous mode [ 373.491605][T13991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1675'. [ 373.589038][T13976] chnl_net:caif_netlink_parms(): no params data found [ 373.625669][T13902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.727266][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.815895][T14007] : entered promiscuous mode [ 373.891857][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.929192][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.936798][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.944671][T13976] bridge_slave_0: entered allmulticast mode [ 373.951632][T13976] bridge_slave_0: entered promiscuous mode [ 373.972116][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.979291][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.992304][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.002397][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.004664][T14010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1679'. [ 374.016545][T13976] bridge_slave_1: entered allmulticast mode [ 374.026830][T13976] bridge_slave_1: entered promiscuous mode [ 374.061608][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.068793][T12367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.078629][T13927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.131014][T13976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.140830][T13927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.161118][T13927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.180347][T13976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.193419][T13902] veth0_vlan: entered promiscuous mode [ 374.211991][T13927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.242972][ T5847] Bluetooth: hci4: command tx timeout [ 374.279271][T13976] team0: Port device team_slave_0 added [ 374.308236][T13976] team0: Port device team_slave_1 added [ 374.366484][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1681'. [ 374.414494][T13902] veth1_vlan: entered promiscuous mode [ 374.425058][T13976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.432008][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.459219][T13976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.471740][T13976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.479549][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.511469][T13976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.619363][T14028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.660193][T13976] hsr_slave_0: entered promiscuous mode [ 374.668743][T13976] hsr_slave_1: entered promiscuous mode [ 374.675010][T13976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.683395][T13976] Cannot create hsr debugfs directory [ 374.848276][T13902] veth0_macvtap: entered promiscuous mode [ 374.904756][T13902] veth1_macvtap: entered promiscuous mode [ 375.036047][T13927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.065527][T13902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.100411][T13902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.157933][T13927] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.179013][T13902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.222639][T13902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.231374][T13902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.262894][T13902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.317112][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.324317][T12351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.352285][T13976] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.389533][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.407629][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.414808][T12351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.433612][ T5847] Bluetooth: hci2: command tx timeout [ 375.434174][ T5843] Bluetooth: hci3: command tx timeout [ 375.447356][T13976] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.458892][T13976] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.477245][T13976] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.732593][T12370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.751031][T12370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.868466][T14072] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.880314][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.922562][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.042352][T13976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.189243][T13976] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.229109][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.236225][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.261346][T14081] tipc: Enabled bearer , priority 0 [ 376.274085][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.281180][T12367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.291624][T13913] veth0_vlan: entered promiscuous mode [ 376.301154][T14081] syzkaller0: entered promiscuous mode [ 376.306791][T14081] syzkaller0: entered allmulticast mode [ 376.314481][ T5843] Bluetooth: hci4: command tx timeout [ 376.351027][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.376104][T14081] tipc: Resetting bearer [ 376.438974][ T1168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.472151][T14080] tipc: Resetting bearer [ 376.503282][T14080] tipc: Disabling bearer [ 376.564398][T13913] veth1_vlan: entered promiscuous mode [ 376.631790][ T1168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.670837][T13976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.681471][T13976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.729456][ T1168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.818395][ T1168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.860502][T13913] veth0_macvtap: entered promiscuous mode [ 376.881557][T13927] veth0_vlan: entered promiscuous mode [ 376.899477][T13913] veth1_macvtap: entered promiscuous mode [ 376.963049][T13927] veth1_vlan: entered promiscuous mode [ 376.997948][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.054133][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.077831][ T1168] bridge_slave_1: left allmulticast mode [ 377.084460][ T1168] bridge_slave_1: left promiscuous mode [ 377.090133][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.100039][ T1168] bridge_slave_0: left allmulticast mode [ 377.106721][ T1168] bridge_slave_0: left promiscuous mode [ 377.112388][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.399718][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.410522][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.420321][ T1168] bond0 (unregistering): Released all slaves [ 377.440187][T13913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.450035][T13913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.459810][T13913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.469797][T13913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.487998][T13927] veth0_macvtap: entered promiscuous mode [ 377.510489][T13976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.513034][ T5843] Bluetooth: hci3: command tx timeout [ 377.607067][T14091] __nla_validate_parse: 1 callbacks suppressed [ 377.607084][T14091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1692'. [ 377.690390][T13927] veth1_macvtap: entered promiscuous mode [ 377.971012][T13927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.023192][T12351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.031041][T12351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.109015][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.127454][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.135800][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.144536][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.152144][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.161157][T13927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.231156][ T1168] hsr_slave_0: left promiscuous mode [ 378.245129][ T1168] hsr_slave_1: left promiscuous mode [ 378.251141][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.266694][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.278893][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.286577][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.322225][ T1168] veth1_macvtap: left promiscuous mode [ 378.329159][ T1168] veth0_macvtap: left promiscuous mode [ 378.335453][ T1168] veth1_vlan: left promiscuous mode [ 378.340736][ T1168] veth0_vlan: left promiscuous mode [ 378.392797][ T5843] Bluetooth: hci4: command tx timeout [ 378.478201][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488161][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.509855][T14112] netlink: 'syz.3.1697': attribute type 11 has an invalid length. [ 378.518936][T14112] netlink: 'syz.3.1697': attribute type 11 has an invalid length. [ 378.527256][T14112] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1697'. [ 378.797346][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 378.836117][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 379.202106][T13927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.215102][T13927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.225787][T13927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.234530][T13927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.265748][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.283868][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.535977][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1698'. [ 379.557505][T13976] veth0_vlan: entered promiscuous mode [ 379.599764][T12370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.617141][T12370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.654238][T13976] veth1_vlan: entered promiscuous mode [ 379.664781][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.693284][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.750731][T12370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.939238][T12370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.036892][T12370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.058602][T14102] chnl_net:caif_netlink_parms(): no params data found [ 380.115527][T13976] veth0_macvtap: entered promiscuous mode [ 380.143950][T13976] veth1_macvtap: entered promiscuous mode [ 380.173539][T12370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.233563][ T5843] Bluetooth: hci0: command tx timeout [ 380.311878][T14102] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.330383][T14102] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.338658][T14102] bridge_slave_0: entered allmulticast mode [ 380.359615][T14102] bridge_slave_0: entered promiscuous mode [ 380.391675][T14102] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.400780][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.413816][T14102] bridge_slave_1: entered allmulticast mode [ 380.421526][T14102] bridge_slave_1: entered promiscuous mode [ 380.448514][T13976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.473747][ T5843] Bluetooth: hci4: command tx timeout [ 380.546988][T13976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.574980][T14102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.617425][T13976] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.633072][T13976] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.642479][T13976] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.651187][T13976] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.685283][T14102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.742277][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.752040][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.760417][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.769648][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.778017][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.818623][T14102] team0: Port device team_slave_0 added [ 380.828825][T14102] team0: Port device team_slave_1 added [ 380.836353][T12370] bridge_slave_1: left allmulticast mode [ 380.842006][T12370] bridge_slave_1: left promiscuous mode [ 380.848394][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.858741][T12370] bridge_slave_0: left allmulticast mode [ 380.865403][T12370] bridge_slave_0: left promiscuous mode [ 380.871059][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.183441][T12370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.196408][T12370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.206472][T12370] bond0 (unregistering): Released all slaves [ 381.310041][T14102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.318094][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.344438][T14102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.408498][T14102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.416567][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.446084][T14102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.552061][T12351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.565186][T12351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.599123][T14102] hsr_slave_0: entered promiscuous mode [ 381.609061][T14102] hsr_slave_1: entered promiscuous mode [ 381.615580][T14102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.627801][T14102] Cannot create hsr debugfs directory [ 381.716527][T12370] hsr_slave_0: left promiscuous mode [ 381.722341][T12370] hsr_slave_1: left promiscuous mode [ 381.729334][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.736860][T12370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.747538][T12370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.755135][T12370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.776450][T12370] veth1_macvtap: left promiscuous mode [ 381.781957][T12370] veth0_macvtap: left promiscuous mode [ 381.788341][T12370] veth1_vlan: left promiscuous mode [ 381.794794][T12370] veth0_vlan: left promiscuous mode [ 381.858645][T12370] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 381.870569][T12370] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 381.880113][T12370] CPU: 0 UID: 0 PID: 12370 Comm: kworker/u8:39 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 381.892420][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.902474][T12370] Workqueue: netns cleanup_net [ 381.907283][T12370] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 381.912911][T12370] Code: ff ff ff e8 69 e6 41 01 89 c5 31 ff 89 c6 e8 ae 1d 9c f7 85 ed 74 45 e8 65 19 9c f7 eb 05 e8 5e 19 9c f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 90 ff f7 49 8b 2c 24 49 8d 7c [ 381.932517][T12370] RSP: 0018:ffffc90003877038 EFLAGS: 00010206 [ 381.938572][T12370] RAX: 000000001fffe000 RBX: 1ffff1100e3e1982 RCX: ffff888025b53c00 [ 381.946540][T12370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 381.954499][T12370] RBP: 0000000000000001 R08: ffffffff8fa103f7 R09: 1ffffffff1f4207e [ 381.962468][T12370] R10: dffffc0000000000 R11: fffffbfff1f4207f R12: 00000000ffff0000 [ 381.970438][T12370] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888071f0cc10 [ 381.978399][T12370] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 381.987317][T12370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.993890][T12370] CR2: 00007fff805b5b88 CR3: 0000000032e98000 CR4: 00000000003526f0 [ 382.001852][T12370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.009810][T12370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.017770][T12370] Call Trace: [ 382.021044][T12370] [ 382.023966][T12370] __ipv6_dev_mc_dec+0x30d/0x390 [ 382.028898][T12370] __ipv6_ifa_notify+0x43d/0xac0 [ 382.033830][T12370] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 382.039277][T12370] ? __lock_acquire+0xab9/0xd20 [ 382.044124][T12370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 382.049487][T12370] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.054693][T12370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 382.060054][T12370] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 382.065768][T12370] addrconf_ifdown+0xe69/0x1880 [ 382.070607][T12370] ? tls_dev_event+0x717/0xec0 [ 382.075356][T12370] ? __pfx_addrconf_ifdown+0x10/0x10 [ 382.080632][T12370] addrconf_notify+0x1bc/0x1010 [ 382.085479][T12370] notifier_call_chain+0x1b3/0x3e0 [ 382.090591][T12370] dev_close_many+0x29c/0x410 [ 382.095256][T12370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 382.101232][T12370] ? __pfx_dev_close_many+0x10/0x10 [ 382.106420][T12370] unregister_netdevice_many_notify+0x834/0x2320 [ 382.112743][T12370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 382.118109][T12370] ? __local_bh_enable_ip+0x12d/0x1c0 [ 382.123480][T12370] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 382.130242][T12370] ? unregister_netdevice_queue+0x1b3/0x380 [ 382.136129][T12370] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 382.142272][T12370] default_device_exit_batch+0x819/0x890 [ 382.147897][T12370] ? __pfx___might_resched+0x10/0x10 [ 382.153178][T12370] ? __pfx_default_device_exit_batch+0x10/0x10 [ 382.159320][T12370] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 382.164770][T12370] ? net_generic+0x1e/0x240 [ 382.169266][T12370] ? __pfx_default_device_exit_batch+0x10/0x10 [ 382.175407][T12370] ops_undo_list+0x522/0x990 [ 382.179991][T12370] ? __pfx_ops_undo_list+0x10/0x10 [ 382.185111][T12370] cleanup_net+0x4c5/0x800 [ 382.189515][T12370] ? __pfx_cleanup_net+0x10/0x10 [ 382.194444][T12370] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.199639][T12370] ? process_scheduled_works+0x9ef/0x17b0 [ 382.205351][T12370] ? process_scheduled_works+0x9ef/0x17b0 [ 382.211064][T12370] process_scheduled_works+0xae1/0x17b0 [ 382.216611][T12370] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.222592][T12370] worker_thread+0x8a0/0xda0 [ 382.227181][T12370] kthread+0x70e/0x8a0 [ 382.231240][T12370] ? __pfx_worker_thread+0x10/0x10 [ 382.236345][T12370] ? __pfx_kthread+0x10/0x10 [ 382.240921][T12370] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.246111][T12370] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.251299][T12370] ? __pfx_kthread+0x10/0x10 [ 382.255878][T12370] ret_from_fork+0x3fc/0x770 [ 382.260460][T12370] ? __pfx_ret_from_fork+0x10/0x10 [ 382.265571][T12370] ? __switch_to_asm+0x39/0x70 [ 382.270324][T12370] ? __switch_to_asm+0x33/0x70 [ 382.275073][T12370] ? __pfx_kthread+0x10/0x10 [ 382.279652][T12370] ret_from_fork_asm+0x1a/0x30 [ 382.284407][T12370] [ 382.287423][T12370] Modules linked in: [ 382.293837][T12370] ---[ end trace 0000000000000000 ]--- [ 382.302848][T12370] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 382.308487][T12370] Code: ff ff ff e8 69 e6 41 01 89 c5 31 ff 89 c6 e8 ae 1d 9c f7 85 ed 74 45 e8 65 19 9c f7 eb 05 e8 5e 19 9c f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 90 ff f7 49 8b 2c 24 49 8d 7c [ 382.313128][ T5847] Bluetooth: hci0: command tx timeout [ 382.331801][T12370] RSP: 0018:ffffc90003877038 EFLAGS: 00010206 [ 382.339619][T12370] RAX: 000000001fffe000 RBX: 1ffff1100e3e1982 RCX: ffff888025b53c00 [ 382.348047][T12370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 SYZFAIL: failed to recv rpc [ 382.356309][T12370] RBP: 0000000000000001 R08: ffffffff8fa103f7 R09: 1ffffffff1f4207e [ 382.364452][T12370] R10: dffffc0000000000 R11: fffffbfff1f4207f R12: 00000000ffff0000 [ 382.372482][T12370] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888071f0cc10 [ 382.380443][T12370] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 382.389765][T12370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.396458][T12370] CR2: 00007fff805b5b88 CR3: 0000000032e98000 CR4: 00000000003526f0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 382.405062][T12370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.426058][T12370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.448274][T12370] Kernel panic - not syncing: Fatal exception [ 382.454598][T12370] Kernel Offset: disabled [ 382.458907][T12370] Rebooting in 86400 seconds..