last executing test programs: 3.76277054s ago: executing program 3 (id=3364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004010}, 0x810) r2 = socket(0x2, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@empty, @loopback}, 0xc) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000000)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000000206010200000000000000000000000009000273797a31000000000500010007000000050005000a000000040007800900020073797a32000000000500040000000000"], 0x48}}, 0x0) 3.652015616s ago: executing program 3 (id=3365): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000062004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x30}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="314b6be050a5", 0x6}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000700)={0x0, 0xd, 0x0}, 0x40002162) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.557358119s ago: executing program 1 (id=3367): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fff801", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x4, @broadcast, 0x9, 'XVu.*##b'}]}}}}}}}}, 0x0) 3.44064371s ago: executing program 0 (id=3369): syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900442f00fe880000000000000000000000000001fe8000000000000000000000000000aa042088be0000000000000800000086dd08008839"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000002b00000004000000020000000200020004b7125f56ad0e2e58596977383637bb6f3b22feba587214b9ca8b0264c122f945a35054ea4b5822a01879ccd77bbe1a732b98362f2b3f79e27f4e25db08a914a7bcbcf597ec55daadcb01f9cdd397b337aa68f50f2a02652e24b5e34ac69542e380216722fc3a26b6ec1b253c5d2ad89cdf0286fd13e769cfab25986a9a5c360e5a4f1d48082dbd9c3cc30659f94b27c0579d4439072849eb13875c757c8ab23a407a5df6", @ANYRES32, @ANYBLOB="f30a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000002b00000004000000020000000200020004b7125f56ad0e2e58596977383637bb6f3b22feba587214b9ca8b0264c122f945a35054ea4b5822a01879ccd77bbe1a732b98362f2b3f79e27f4e25db08a914a7bcbcf597ec55daadcb01f9cdd397b337aa68f50f2a02652e24b5e34ac69542e380216722fc3a26b6ec1b253c5d2ad89cdf0286fd13e769cfab25986a9a5c360e5a4f1d48082dbd9c3cc30659f94b27c0579d4439072849eb13875c757c8ab23a407a5df6", @ANYRES32, @ANYBLOB="f30a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000480)="10b50c52f4c3a8dee7", 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r1, &(0x7f0000000640), &(0x7f00000006c0)=""/172}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x9}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x3000000d}) gettid() r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket$inet6(0xa, 0x2, 0x2) (async) socket$inet6(0xa, 0x2, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000000000000000000000ec000000ac14140000000000000000000000000040000000000000130000000000000000000000000000000000000000000000000000000000000000d3810fad25d24dbae34d081ffd85a40000000000000000000000000000000000000000000000000000000064a1cf39599670ec000000000000000000000000000000000000000000000000000400000000000025bd70009460485f702e94bc31fada28f0b726ed33bc08bcd538e0e0c17d6fcbb8596082e7f6e0", @ANYRESOCT=r7], 0x34c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000000000000000000000ec000000ac14140000000000000000000000000040000000000000130000000000000000000000000000000000000000000000000000000000000000d3810fad25d24dbae34d081ffd85a40000000000000000000000000000000000000000000000000000000064a1cf39599670ec000000000000000000000000000000000000000000000000000400000000000025bd70009460485f702e94bc31fada28f0b726ed33bc08bcd538e0e0c17d6fcbb8596082e7f6e0", @ANYRESOCT=r7], 0x34c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 3.369291548s ago: executing program 1 (id=3371): syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e24, 0x60000000, @private2, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="de30d6cfb5ad92bb83d96bb24efc83feb31ba2a61e35ed19b76b441963637dc40375d1f1b8f440f896bed0cb83cda0d8fb7f755c898ef4337786fcf2bd6dfafc245a846c0d8df4931ca5ceb453b0f92eca8766a8c8cce86072d6187538d2a4c2d04afb42d6", 0x65}, {&(0x7f0000000100)="578348d5e9d0244acf6d198c95d2756d2fcf4729c2db2ad59e586b9be43dc46047ab12df99", 0x25}], 0x2}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) (async) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e24, 0x60000000, @private2, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="de30d6cfb5ad92bb83d96bb24efc83feb31ba2a61e35ed19b76b441963637dc40375d1f1b8f440f896bed0cb83cda0d8fb7f755c898ef4337786fcf2bd6dfafc245a846c0d8df4931ca5ceb453b0f92eca8766a8c8cce86072d6187538d2a4c2d04afb42d6", 0x65}, {&(0x7f0000000100)="578348d5e9d0244acf6d198c95d2756d2fcf4729c2db2ad59e586b9be43dc46047ab12df99", 0x25}], 0x2}, 0x40) (async) 3.150696763s ago: executing program 0 (id=3374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x40, 0x29, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x1, 0x9, 0x7, {{0x17, 0x4, 0x3, 0x1c, 0x5c, 0x65, 0x0, 0xe, 0x5a, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x1]}, @lsrr={0x83, 0x2b, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x4, "da34"}, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x7, [{@empty, 0x9}]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x1, 0x10012, r4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020004f8ffffffb703000008000000b704000001000000850000008200000002080200000000004db9060001000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x3b, &(0x7f00000001c0)=""/59, 0x40f00, 0x6, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 3.091586276s ago: executing program 1 (id=3375): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x1f4, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xde, 0x6, "edbebf46e9d0c2604dce52131be67aaaef726cdf91cca44c00f5a65c4ac53a839cc83fd5a89cca15f4fce08d06ddf3a65063b9bac6b516df144d912cc1361b5b63f32981d9e63ed16520603ced70c0ea17e7121f33a8d46977c6b27ce238d41b2487e0e25aa0a9c49a7ff5f0ac0afe84289e91a1207916bd67e72d9ae876b254b6439df0f8402d7050212899ede7641d21593882d19e7e1a1ae915b0bed19b26f6f425fc39945a37ebcb76e993076dc8b2236a3530707732178c51715de46ce1dfd82b85d82a90fdabaa841540ed8eae42be213ebac8c4261d29"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "04916624aa98cfc0c4f8a3fb947ea600300f8e2f52ae4f541887a6ed943f144fde448fc4402b2411da8abdac6d2a50d8b272ce74e6404fad39bb20d64b071ea9dcaf81a2370d8b13d9718bf471be2cd7ce110a2d37765c9724b2882e8660693f42885ae67bb728984b13746191dc3ce6a906497246296e5f1487b31d517e558a3f004f21dc56052ba2f68d830b47ca6303070bffdcf72ae8429e3b63cc5157b3cf6ae1d769aecc00c85d3c0f636258e32bb03307e67f35c5e6896bd96aeee63bafd355f9959932"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14}}, 0x314}, 0x1, 0x0, 0x0, 0x91}, 0x4008061) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-asm\x00'}, 0x58) clock_gettime(0x0, &(0x7f0000001dc0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000001d40)=[{{&(0x7f00000004c0), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/15, 0xf}, {&(0x7f0000001840)=""/183, 0xb7}], 0x7, &(0x7f0000001980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/43, 0x2b}, {&(0x7f0000001b40)=""/32, 0x20}, {&(0x7f0000001b80)=""/51, 0x33}, {&(0x7f0000001bc0)=""/173, 0xad}], 0x6, &(0x7f0000001d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x2, 0x21, &(0x7f0000001e00)={r4, r5+60000000}) recvmmsg(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000001e40)=@llc, 0x80, &(0x7f0000003100)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/147, 0x93}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)=""/110, 0x6e}, {&(0x7f0000003040)=""/183, 0xb7}], 0x5, &(0x7f0000003180)=""/229, 0xe5}, 0x5}, {{&(0x7f0000003280)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/246, 0xf6}, {&(0x7f0000004400)=""/112, 0x70}], 0x3, &(0x7f00000044c0)=""/150, 0x96}, 0xff}], 0x2, 0x40000000, 0x0) r15 = accept4$inet(r7, &(0x7f0000004600)={0x2, 0x0, @initdev}, &(0x7f0000004640)=0x10, 0x0) ioctl$sock_netdev_private(r15, 0x89f5, &(0x7f0000004680)="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") splice(r13, &(0x7f0000005680)=0x4e, r9, &(0x7f00000056c0)=0x9, 0xbcc9, 0xb) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000005700)={0x14, 0x5, {0x4, @usage=0xffffffffffff0001, 0x0, 0x2, 0x400, 0x4, 0x7, 0x9, 0x448, @struct={0x1, 0x7}, 0x7fff, 0x3ff, [0x1, 0x6, 0x80000001, 0x9, 0x100, 0x3]}, {0x7fff, @struct={0x2, 0x8001}, 0x0, 0xba8e, 0x7, 0xc15, 0x300000000, 0x3, 0x80, @struct={0x6, 0x4}, 0x0, 0x0, [0x4, 0x80000000, 0x1, 0x80000001, 0x5, 0x9]}, {0x1, @usage=0xff, 0x0, 0x7, 0x2, 0x2f, 0x0, 0x82, 0x22, @struct={0x3, 0x6}, 0x10001, 0x9, [0x80000001, 0x6, 0x80000001, 0xffffffffffffff48, 0xfffffffffffffff0, 0x7]}, {0x1, 0xfffffffffffffffd, 0xb}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000005b00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000005f00)={0x19, 0x2, {0xd7, @usage=0x240, 0x0, 0x2857c578, 0xfffffffffffffff8, 0x9, 0x7, 0x8ef0, 0x10, @usage=0x5, 0x6, 0xde2c, [0x8, 0x3, 0x4, 0x80000, 0x0, 0x200000000]}, {0xe, @usage=0x4, r16, 0xb, 0x0, 0x10, 0x5, 0xff, 0x0, @usage=0x40, 0x1, 0x0, [0x200, 0x8, 0x4, 0x8000000000000001, 0x1, 0x9]}, {0xf, @struct={0x6, 0x5}, r17, 0x4, 0x8, 0x4, 0x6, 0x8, 0x408, @usage=0x9de, 0xfffffffd, 0x1e02f930, [0x35b852f0, 0x9, 0x5, 0xffffffffffffff20, 0x9, 0x9]}, {0x6, 0xc5, 0x80}}) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006500)={0x11, 0xc, &(0x7f0000006340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000063c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000006400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000006440)={0x3, 0x8, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000006480)=[r13, r12, r11, r6, r6, r8, r10, r11, r12], &(0x7f00000064c0)=[{0x2, 0x2, 0x9}, {0x4, 0x4, 0x7, 0x3}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000065c0)={&(0x7f0000006300)='kvm_fpu\x00', r18, 0x0, 0xfffffffffffffffa}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000006600)=0x3, 0x4) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_SIOCDELDLCI(r15, 0x8981, &(0x7f0000006640)={'veth1_to_batadv\x00', 0x1000}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000006680)={0x4, {0x8, 0x5, 0x5, 0x19ed, 0x7}}) socket$pppoe(0x18, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f00000066c0), &(0x7f0000006700)=0x4) clock_gettime(0x6, &(0x7f0000006740)) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r11, &(0x7f000000b900)=[{{&(0x7f0000006780)=@vsock, 0x80, &(0x7f0000007c00)=[{&(0x7f0000006800)=""/125, 0x7d}, {&(0x7f0000006880)=""/71, 0x47}, {&(0x7f0000006900)=""/80, 0x50}, {&(0x7f0000006980)=""/192, 0xc0}, {&(0x7f0000006a40)=""/136, 0x88}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/219, 0xdb}], 0x7, &(0x7f0000007c80)=""/120, 0x78}, 0xe}, {{&(0x7f0000007d00)=@un=@abs, 0x80, &(0x7f0000009280)=[{&(0x7f0000007d80)=""/4096, 0x1000}, {&(0x7f0000008d80)=""/27, 0x1b}, {&(0x7f0000008dc0)=""/157, 0x9d}, {&(0x7f0000008e80)=""/1, 0x1}, {&(0x7f0000008ec0)=""/221, 0xdd}, {&(0x7f0000008fc0)=""/233, 0xe9}, {&(0x7f00000090c0)=""/76, 0x4c}, {&(0x7f0000009140)=""/96, 0x60}, {&(0x7f00000091c0)=""/84, 0x54}, {&(0x7f0000009240)=""/60, 0x3c}], 0xa, &(0x7f0000009340)=""/62, 0x3e}, 0x7f}, {{&(0x7f0000009380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000a400)=[{&(0x7f0000009400)=""/4096, 0x1000}], 0x1, &(0x7f000000a440)=""/218, 0xda}, 0x8}, {{0x0, 0x0, &(0x7f000000a540), 0x0, &(0x7f000000a580)=""/244, 0xf4}, 0x2}, {{0x0, 0x0, &(0x7f000000b840)=[{&(0x7f000000a680)=""/65, 0x41}, {&(0x7f000000a700)=""/4096, 0x1000}, {&(0x7f000000b700)=""/64, 0x40}, {&(0x7f000000b740)=""/253, 0xfd}], 0x4, &(0x7f000000b880)=""/77, 0x4d}}], 0x5, 0x100, 0x0) sendto$packet(r13, &(0x7f000000ba40)="a003916d9803766e6ad8bf4508487b145c9b39ecb03ae138", 0x18, 0x40000, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f000000ba80)={0x7, 0x6, 0x3, 0x7, 0xfffffffd}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f000000bb00)={&(0x7f000000bac0)=""/46, 0x21c000, 0x400, 0x2d6, 0x3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE_wg(r13, 0x1, 0x19, &(0x7f000000bb40)='wg1\x00', 0x4) 3.090879154s ago: executing program 2 (id=3376): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x1, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.999864417s ago: executing program 0 (id=3378): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000077eefa"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000b40), &(0x7f0000000b80)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000150000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000840)={&(0x7f0000000240)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000029c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xffff, @mcast2, 0x8}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000140)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xffffffffffffff9b) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/134, 0x86}], 0x1}}], 0x1, 0x10001, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="300000000000000017e2ffff0100000018"], 0x60}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c10400000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a0", 0x0, 0x7}, 0x50) 2.939551915s ago: executing program 2 (id=3379): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500243209880bd320d98a61a90057e9bf", 0x0, 0x6, 0x0, 0x327, 0xa6, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x23) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)=@newqdisc={0xc84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc58, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0xc1, 0x80000001, 0x80000001, 0x6, 0x1, 0x1ff, 0xb, 0x4, 0x7, 0x7, 0x8, 0x0, 0xad14, 0x7, 0x5, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x10001, 0xf, 0x1, 0xd76, 0xceecf3, 0x6, 0x69, 0x6, 0xe1df, 0x4, 0x5, 0x7, 0x2, 0x7, 0x90, 0x12a9f6fb, 0x1, 0x40, 0x1, 0x9, 0x8, 0x6, 0xfff, 0xfff, 0x6, 0x5, 0x9, 0x0, 0xfffffffc, 0x55dc, 0x0, 0x7f, 0x5, 0x4, 0x9, 0x7, 0x0, 0x8, 0x1000, 0x2, 0xe, 0x3, 0x9, 0x80000001, 0x4, 0x6, 0x7fffffff, 0xd, 0x3, 0x7fff, 0x1000, 0xe23, 0x8000, 0x3, 0x8, 0x9, 0x5448, 0x2, 0x4, 0xfffffff8, 0xe8, 0x200, 0x5, 0x9, 0xb, 0x5, 0x5, 0x7, 0x0, 0x2, 0x10001, 0x7fffffff, 0x3, 0x0, 0x10, 0x6, 0x9, 0x800, 0x2, 0xe, 0x4, 0xfffff001, 0x6, 0x2, 0x8001, 0x8000, 0x0, 0xffffffff, 0x3, 0x401, 0xf8000000, 0x1ff, 0x9, 0x101, 0x2, 0x2, 0x5, 0xfff, 0xfffffffa, 0x7, 0x8, 0x9, 0x5, 0x7, 0x1, 0x1e00000, 0x6, 0x5, 0x400, 0x8, 0x9, 0x9, 0x3, 0xfffffffe, 0x9, 0x0, 0x2, 0xffff, 0x5, 0x7, 0x5, 0x6, 0x2, 0x4, 0x3, 0x30e6, 0x2d2, 0xffff5410, 0x0, 0x3, 0xc08, 0x2, 0xffffffc0, 0xffffffff, 0x292, 0x2, 0x9, 0x8000, 0x7ff, 0x7ff, 0x10001, 0x8, 0xf, 0x9, 0x1, 0x7, 0x7fff, 0x8000, 0x1, 0x2, 0x4, 0x131e, 0xed, 0x4, 0xc2f, 0x7fff, 0x4, 0x0, 0x10, 0x3ff, 0xe8cd, 0xee, 0x80000001, 0x9a0, 0x2, 0xae8e, 0xffff, 0x9, 0x8, 0x5, 0x3, 0x676e, 0xfe50, 0x0, 0x7, 0x1ff, 0x6, 0x3, 0x2, 0x4, 0x4, 0x6, 0x0, 0x5, 0x6, 0x7, 0x98e3, 0xfffffffb, 0xf, 0x80, 0xfffffffe, 0x8, 0x200, 0x2, 0x9, 0x1, 0x7ff, 0x10000, 0x1, 0x5, 0x7fff, 0xe26, 0xffffffff, 0x4, 0x1, 0x1, 0x3ff, 0x0, 0x8af4, 0x1, 0x7, 0x81, 0x3, 0x7f, 0xc, 0x454, 0x80000001, 0x3ff, 0x0, 0x669, 0x0, 0x2, 0xfffffffc, 0x9, 0x2, 0x8000, 0xffff, 0x4, 0x1, 0x251c, 0x80000001, 0x6, 0x80000001]}, @TCA_TBF_BURST={0x8, 0x6, 0xe2f}, @TCA_TBF_RATE64={0xc, 0x4, 0x80715054d6510416}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x1, 0x0, 0xffffff3a, 0xff27, 0x400, 0x9, 0x401, 0xff, 0x5, 0x7ff, 0x6, 0x5, 0x1, 0xff, 0x81, 0x6, 0x252, 0x8, 0x5, 0xb, 0xe51, 0x9, 0x4, 0x75, 0x4, 0x5, 0x10, 0x7, 0xfffffffa, 0x0, 0x6, 0x8000, 0x6, 0x0, 0x10, 0xfffff000, 0x2, 0xe3b8, 0x7926, 0x6, 0x9, 0x3ff, 0x1, 0x4, 0x688f, 0x6, 0x9, 0xa, 0x73d6, 0x882, 0x0, 0xa, 0x5, 0xc, 0x0, 0x4, 0x5, 0x3, 0x8, 0x453, 0x2, 0x9e30, 0x10001, 0x3, 0x80, 0x4800cf91, 0x2, 0x9, 0xd8f, 0x1, 0x9, 0xfffffff7, 0xffffff9c, 0x1, 0x2c75, 0x401, 0x3, 0x8, 0x0, 0x7, 0x2, 0x7, 0x7, 0x400, 0x1000, 0x9, 0x7fffffff, 0x7fffffff, 0x10001, 0x81, 0xfffffeff, 0x2, 0x4b5, 0x1, 0x3, 0x1, 0x1aca, 0x0, 0x2, 0x86a, 0x9, 0xff, 0x101, 0x1ff, 0x1, 0x3000, 0x1000, 0x100, 0x8, 0x1ff, 0x6, 0x4, 0x9c5, 0x6, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x2, 0x7, 0x8, 0x7c, 0x5, 0x4, 0xff, 0x2, 0x8000, 0x2, 0x7fffffff, 0x9, 0x4, 0xfffff8e0, 0x3, 0x80000001, 0xe, 0x9, 0x9, 0x1ff, 0x5c40, 0xf097, 0x8, 0x6, 0x8, 0x6, 0x5, 0x8, 0x4, 0x6, 0x1, 0x9, 0x4, 0x6, 0x4, 0xc93f, 0xd65, 0x2704, 0xff, 0x7, 0x7, 0x3, 0x7, 0x7c, 0x0, 0x1, 0x6, 0xfffff001, 0x7, 0x9, 0x6, 0x9, 0xa2, 0x4, 0x8, 0x7, 0x256, 0x9, 0x7f, 0x2, 0x3c, 0x7, 0x104, 0x80000000, 0x5, 0x1, 0x612, 0x2, 0x2, 0xe, 0x7, 0x2, 0x6, 0x76, 0x4, 0xd, 0x8, 0x4, 0x4, 0xa3b, 0x7, 0x2, 0x1, 0x3ff, 0x7fffffff, 0xbc44, 0x1, 0x7f, 0x1, 0x8, 0x9, 0x4d, 0x7, 0xf, 0xc, 0x80, 0x4e, 0x81, 0x5, 0x4, 0x60, 0xc, 0x5, 0x9, 0x1, 0x8, 0x1, 0x3, 0xfffffff6, 0x5, 0x8, 0x6, 0x8, 0xfffffffb, 0x526f78e, 0x0, 0x1, 0x7, 0x8dd4, 0x101, 0x8, 0x1695, 0x3, 0x7, 0x3, 0x81, 0x3, 0x2a7, 0x8000, 0x10001, 0xe, 0x8, 0x5, 0x6, 0xc8]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb2fcf114e0e05b7}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x7ff, 0x200000, 0x100, 0x39d, 0xfffffff0, 0x80000001, 0xfffff000, 0xe81f, 0x1, 0x9b, 0x2, 0x0, 0x0, 0xb, 0x7, 0x677, 0x10, 0x5, 0x80000000, 0x400, 0x7, 0x1820, 0xa5, 0x0, 0x3, 0x8, 0x7, 0x5, 0x200, 0xc1fa, 0x0, 0x5, 0x100, 0xc8, 0x9, 0x0, 0xa, 0x5, 0x6, 0x7, 0x9, 0x6, 0x5, 0x5, 0x7f000, 0x7fffffff, 0x5, 0x2, 0x1ff, 0x40fb, 0x8, 0x6, 0x7, 0xffffb2e7, 0xfffffff8, 0xeae, 0x1000, 0x5, 0x0, 0x57d8, 0x7, 0xb, 0x5, 0x9, 0x5, 0x0, 0x2, 0x0, 0x2, 0x8, 0x8, 0x3, 0x9, 0x1, 0x6, 0x1, 0x2, 0x3, 0x40, 0xc00, 0x0, 0xffffffff, 0x9, 0x9, 0x6, 0x6, 0x81, 0x200, 0x800, 0xa38, 0x8, 0x73b, 0x8001, 0x200, 0x800, 0x1, 0xa6800000, 0x200002, 0x3ff, 0x6, 0x0, 0xfffffffc, 0xae, 0x7, 0x5, 0xfffffffb, 0x9, 0x7, 0x9, 0x4, 0x2, 0x401, 0xfffffff4, 0x5a, 0x4, 0x8, 0xe36d, 0x2, 0x4, 0x41, 0x9, 0x8, 0x7f, 0x3, 0x2, 0x344, 0xffffffff, 0x6, 0x1, 0x2, 0x1000, 0xfff, 0x4285, 0xffffff97, 0x200, 0x2, 0xcd2b, 0x9f0, 0x6, 0x80000000, 0x7, 0x0, 0x8, 0x1c, 0x7, 0xaab, 0xb45, 0x7fffffff, 0xff, 0x3, 0xd700000, 0x4, 0x5e5, 0x3, 0x101, 0x2, 0xffff, 0x80000, 0x7f, 0x4, 0x15c0000, 0x0, 0xe2, 0x5, 0x2, 0xcc96, 0x4, 0x30000, 0xa015, 0xc, 0x6, 0x6, 0x6, 0x1000, 0x7, 0x1, 0x1200000, 0x8, 0x9, 0x90d, 0x4, 0xd, 0x27, 0x400, 0x2, 0x8c4, 0x1000, 0x2, 0x907, 0x10000, 0x10, 0x1, 0x2, 0x3, 0x6, 0xa, 0x4, 0x0, 0x6, 0x3, 0x8, 0x5, 0x80000001, 0x2c4, 0x4, 0x2, 0x3, 0x6, 0x1, 0xc6, 0x8001, 0x3, 0x4, 0x7, 0x1, 0x2, 0x9, 0x4, 0x0, 0x0, 0x8, 0xfb4, 0x5, 0x5, 0x10000, 0xdd17, 0x8, 0x5, 0x100000, 0x96, 0x1, 0x7fffffff, 0x6, 0x641c5f25, 0xf, 0x74ac9ef3, 0x7ff, 0x2, 0x10, 0x641, 0x8c, 0xffffff81, 0x576, 0x2, 0x2, 0x1000, 0x0, 0x7, 0x81, 0x0, 0x8001, 0x2, 0x6, 0x0, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x8, 0xa, 0x8000, 0x6}, {0x1, 0x2, 0x4, 0x80, 0x8}, 0x2a, 0x6, 0x1680}}]}}]}, 0xc84}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x2}, {0x9, 0x6}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x2e]}}, &(0x7f0000001a80)=""/4096, 0x53, 0x1000, 0x0, 0xcc, 0x0, @void, @value}, 0x28) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.763148005s ago: executing program 3 (id=3381): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='[&!\\@{\x00', 0x7) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000003d00090000000000000800000100000004000000200001801c00108014ec0c0076657468315f766972745f77696669001cec255c08000200e2a7486145d29e856d8e685b8d5d87e6729d954bb58ba38827f5cd0043b8da19e678a69f310a059672d5a12a6c46bf891dc5f22390716b50949e3acd4c43d684880c02120fccc23e973b13cb24cbcf61b3fbadd141228cd01e4033ad37e69f3c123eb572df15a63c7d996e27a76f43af1f5bd22d37b5495c3920588700cd", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x10, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2912}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x200040c0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5}}}}]}, 0x38}}, 0x0) 2.672092022s ago: executing program 1 (id=3382): unshare(0x42000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000e00)=""/121, 0x79}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x6, &(0x7f00000006c0)=""/213, 0xd5}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000840)}], 0x2, &(0x7f0000000a40)=""/186, 0xba}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c00), 0x2, &(0x7f0000000c40)=""/156, 0x9c}}], 0x3, 0x10002, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x128}, 0x4010) (async) recvmsg$unix(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES32=r7, @ANYRES32=r4, @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap(&(0x7f00001ba000/0x2000)=nil, 0x2000, 0x0, 0x10010, r4, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r11, 0x8008743f, 0x20000000) 2.467977111s ago: executing program 3 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200004, 0x4, 0x20000}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, r5, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40821}, 0x8801) listen(r0, 0x806) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="1e001f0000801500000000000000000c0006000d001c0006080600000001000005003400c4000000080026006c09000099cac0091980fddbfd5961847701c71e6968438e93ed9fe6cd9b041fec73d2749457f57571cc6f2093b5a05c19f1c567cc77f64f38ac"], 0x4c}}, 0x0) 2.356205987s ago: executing program 2 (id=3385): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000100", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.297756607s ago: executing program 3 (id=3386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000081ff8000000000000000000008000f"], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0x4b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9e, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x34, r11, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xe0, r11, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6f, 0xa8, @random="10209a8b08863c665d494c9e60180dd34b2d599e5f5c8fe0274a6792051541c4f75acc56996f35a85f6b15aff91472e91640936f4c8729703997e721062576483553526d04ac32e208eb90656884e5ac48d840c5a4862123e0a12c2b2862a2ce92a4b914bbd4ddc44b126c"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4404}, 0x8000) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0xe00}, 0x0) 2.048120242s ago: executing program 3 (id=3388): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {}, 0x101}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x6f, 0x14, 0x0, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "eb53c1d55661f12860"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000001c0)={r3}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000017140197"], 0x20}}, 0x0) 1.981710371s ago: executing program 0 (id=3389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x34bbaffd, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "ea3b401da0c11db8", "a239cf32aba2e892ca7ad96711a18c43f8db33c032b77e9c7a5e4aab6284d225", "f9b1b1be", "a6037d2692f106fd"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x10107, 0x4) close(0x3) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socket(0x27, 0x4, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040800002500001d1240000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/209, 0xd1}], 0x1}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000009050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001"], 0xd0}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) 1.624033274s ago: executing program 0 (id=3391): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) (async) r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc054}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000004000000", 0xfe60) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0xe3, &(0x7f0000000340)=""/252, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) 1.580453425s ago: executing program 4 (id=3392): socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) close(r1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x200888a4) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000a80)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1c}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000200)="eb08df85e05f77afe6f9726c2767ddb9361fb71d5ba2d85092a8ab01cc419aaf29658edb119e7b8b09814864a84b42d49a6707bae002e2575f4f34ec13b524184a", 0x41}, {&(0x7f0000000280)="0a220617b732baf2549166090c10975cd935a5a2466f02c06a3b719a095db2cabd7d1988716373a1bc8679dbc2adca409d58b7a95780ead6621a752d23bae5bfaa1dcb06980fd03b7b73f3f6d3a745e84bbd0e72dfc8659e90c001a62dbd477127a3afbba3108fda59d4629b0d2e6b9a7f9ebec05f0992435ff32620c183c469d6dc5994a2a5", 0x86}, {&(0x7f0000000100)="b489396eda2e091b078d83a6fa4ad79efd17b5fd1c0f2f10a84738b17d4a4eef35256a7ac478247f1890b1ec4e", 0x2d}], 0x3, &(0x7f0000000580)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0xc, 0xb, 0x8c0, 0x935, 0x0, 0x5, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @sndrcv={0x30, 0x84, 0x1, {0x77, 0x2, 0x1, 0x5, 0x9, 0xfffffff7, 0x5, 0x800}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x7fff, 0x0, 0x5, 0xd6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}], 0xd0, 0x4000017}, {&(0x7f00000006c0)=@in6={0xa, 0x4e21, 0x78, @mcast1, 0x41d}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000700)="7ba4e231b70cdfa8", 0x8}, {&(0x7f0000000740)="03304d988918c03f0c8b9d648e6054bbe11676157529f35d8513910bc02c1d2dd59f8b63e3bbca387343281929a3ff0a66e80c654c23dc61a7a0306081ba44faf27c56e4558052cb9cfea80902484db09c3c21b298549a86eabe2294cd3f645520df8f4eb561310346a08fda5355b8b841e485e1aa89e03ae3af46af265302a15fa4bcdc89b61656a70196a983de19d2dd4ee9b92b9a9a22ea876cb0ebd1e102e033a014991814bd6afaf494d6521e", 0xaf}, {&(0x7f0000000800)="1a84270d9251aaab74b0e73950a4b0d4831ad97bcd37bb3f19be57a796ce022485210abe575460d24e97b6b463a72becad2263f6ffbe416ddf10f75c9f1d657c0e94d601d64c28ad59c59d32da802ad82c591680a023fbc168f92d31c8df2ef690d01cb0aba4b8dde4e5679664328be3f7b3ad6f9704d300c6b0318dc654f74d290356e53a9012f6585ba63ff0246d64c292a82a2252f13d094679dcc1874ff81ff3fbafcf5a141c4ca4abc0765de4c6a96b1f147a37680e84dc45d3ae26264ca393fb92319cdbcd2187d8917b07157dca1be2fa9305de3aaeb88f78fa3c22a9", 0xe0}, {&(0x7f0000000900)="755032a850b5aa0a20c531dc443a3dcda761522dc822f122ec5f5a8921d86ae9c3290fabfedf478c245891410c2df19aa373290fe86d5511cc117b85caaf6ef092ca18240d430c01c8696f8a98953afc838c13ba77ae4e3e3d21a3516cde804ed6a3ec40f77ccc90bcd07e91bde5d5b5ff09d10635", 0x75}, {&(0x7f0000000980)="e90f4b6838833c8cce9d217c5a0f7d4c9b40c6448e7d8bbe9a35245eadeeff4be20ec8a63f6dbfa94fa977603efcd878aff52bad8e061ca991659f", 0x3b}], 0x5, &(0x7f0000000a40)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x6, 0x5, 0xb1, 0x1, 0xffff, 0x1}}], 0x30, 0x4008040}], 0x2, 0x40002080) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$phonet(0x23, 0x2, 0x1) (async) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0), 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x3e) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @link_local}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) (async) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.559425269s ago: executing program 2 (id=3393): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="9feb01001800000000000000fe00000000000000020000000000"], 0x0, 0x1a, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) bind$can_raw(r2, &(0x7f0000000000), 0x10) read(r2, &(0x7f0000002500)=""/4103, 0x1007) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x80, 0x4) (rerun: 64) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "023ec3cf37278f72"}, 0x10}, 0x1, 0x0, 0x0, 0x20004014}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000007000000000000000000007910000061f4cd7f5578264b62469a74f79b3a4381cded982766aec6d6f441e5592e216659368565477fe99ebbe4b46aff87391763dd60491204a767e1fe8228704bd481565f9c193f466c228d6ed1e1ddcb46471c16b9f0bd279dcefc2f2927b60ae733e3de13e74067ec3e165bffa598dfcccaa6fa8e3fdf2025f9872ebc9eb47f18d2451103d6505de59cd9d2e027f03e099d7b726bdc"], &(0x7f0000000200)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000300f70000000000000100000005000700ff000000050014000c0000e6050002000100000008000a000100000008001800ec1414aa08001900e00000028e6be6c778f367c1385a874f2ce23e6777e75f4a3adcaa643c7eb1821f3a6754438527c4400cdbb4b9f75a9f818abe7c33621a3fb6f999ae329785f532440d258b915aabbcd223d10389d285b3362fd5ca2b6f1d5125bdd7a0f97ffd3ee833814621e18b10c40a936d2fb6f32b7f4c4970eca1aaf3"], 0x44}, 0x1, 0x0, 0x0, 0x1090}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), 0xffffffffffffffff) (rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="8d17dbcc2640d39c536b0fc866c0ea87aba7e7b07b48a0ca5b686eee897be52450e85812d87ac6e6abbc0cd728d885fc28ecdc86e63e5ace", 0x38, 0x1, &(0x7f00000006c0)={0xa, 0x4e23, 0x5, @empty, 0x3}, 0x1c) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250500000008000300060000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44045}, 0x4000004) 1.479740481s ago: executing program 0 (id=3394): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x5760, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000002c0)=0x30) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="75d09b678ea6f5207ddfe71150817514367bef21d12ee0095bfe8b728cd097c994a2ae201d129ad8ed3758a13c2535a8c6b6276a4aeb4f86aed3c3d96a290bdec472d0f3826b0336b7ab5234fb1ed319328a03925202c768fdffe65e2c1dc7d2e3369742d012187d75864672842f0d0bc3057c99e111d75bb7cbcb4c255e3ec7d318eb5553260880bb8b6f3136906225ef9c5d2b7991e5e7eee007e8645de41cec25cdc105da753dfd7c44fbc9fa3125a7b60050d77d16925099f98fa2b5be2babf33e999cf89b40a9356bf023da305026497a137a079a3c82f452cb39b665f94c4003604442083958ec0596e8e411a3563e1f7ed118253e761df27c7f9e2500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYBLOB="0c00028006"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=0x0, @ANYRES64=r3], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000bc0), 0x20000000}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {0x9, 0xf}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x54) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, 0x800, 0x55007}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5f3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.258962068s ago: executing program 2 (id=3395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c010000160001000000000000000000ac141400000000000000000000000000fe800000000000000000000000000000000000dfffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000b1a0000008001600000000002c"], 0x12c}, 0x1, 0x0, 0x0, 0x240008a0}, 0x4a9636a413ab672) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001a00)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5", 0x98, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'rose0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "822b42dabdb30efa4d63e82fccc6a49f6c524ed76bed79214d8d64503b0cc39c", "fbcacd2e915ed0908beef2336a78a07bae876b5c172494da428d83af95e8507e", "2b380fcce68e85f32eb0c41c3a63980c311a0165c6f7147fa83ea47d12e3dc49", "e7b307947323a4686089dad1d77b4bc13398658d8e0681fc2d018524b763019f", "7f28ad8d29afad5785083868ad0e4a7628f19055e04d76576182089ac538971e", "cf0160d09721d06ebbeea74f", 0x4, 0xfffffff2, 0xe, 0x6, 0xff}}) 1.209780109s ago: executing program 4 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f0700000000000000fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32=r5, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 963.959633ms ago: executing program 4 (id=3397): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12d8, 0xffffffff, 0x98, 0x11a8, 0x98, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1338) ioctl$int_in(r0, 0x5452, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa8e006d29000088a800008100000086"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYRESDEC=r0], 0x4c}, 0x1, 0xba01, 0x0, 0x20000801}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYRESDEC=r0], 0x4c}, 0x1, 0xba01, 0x0, 0x20000801}, 0x0) 924.297892ms ago: executing program 2 (id=3398): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r5, r4}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x0, 0x218, 0xe8, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x5, 0x1, 0xfff, 0x5, 0x6, 0x9, 0x81, 0x2, 0xe0, 0xfffc, 0x10, 0x3, 0x1, 0x0, 0x4, 0x6]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, @private1, [0x0, 0x0, 0xff000000], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1420}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711200000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 669.660985ms ago: executing program 4 (id=3399): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)=@polexpire={0xc0, 0x1b, 0x800, 0x70bd2d, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x4, 0x4e20, 0x6, 0xa, 0x0, 0x0, 0x3b}, {0x5fcc6dbd, 0x4, 0xa984, 0xfffffffffffffff7, 0x1, 0x896, 0xffff, 0x5}, {0x10000, 0x0, 0x2936, 0x6}, 0x6, 0x6e6bb0, 0x0, 0x0, 0x1, 0x2}, 0x6}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) pipe(&(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x40, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r4, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c804}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)=@polexpire={0xc0, 0x1b, 0x800, 0x70bd2d, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x4, 0x4e20, 0x6, 0xa, 0x0, 0x0, 0x3b}, {0x5fcc6dbd, 0x4, 0xa984, 0xfffffffffffffff7, 0x1, 0x896, 0xffff, 0x5}, {0x10000, 0x0, 0x2936, 0x6}, 0x6, 0x6e6bb0, 0x0, 0x0, 0x1, 0x2}, 0x6}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) pipe(&(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x40, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) listen(r2, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r4, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c804}, 0x4000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async) 396.029649ms ago: executing program 4 (id=3400): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x10001) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r5, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x15, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, r11, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val={0x1, 0x3, [{0x18, 0x1}, {0x16, 0x1}, {0x1b, 0x1}]}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r6, 0x0, 0x0, 0x80800) recvmsg$qrtr(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/27, 0x1b}], 0x1, 0x0, 0x0, 0x2000}, 0x38, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 294.47295ms ago: executing program 1 (id=3401): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x27, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x52, 0x7, 0x8, 0x0, 0x4b}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 46.182854ms ago: executing program 1 (id=3402): unshare(0x22020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d"], 0x20}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$ax25(0x3, 0x2, 0x7) 0s ago: executing program 4 (id=3403): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r3, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kmem_cache_free\x00', r5}, 0x18) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64=r6, @ANYBLOB="0000020000000000200012800b0001006d61637365630000100002800c0004000000000000000000ff75a975199818240199c5cb88c53d5d71c07185f40d44b5e90d4983b95a4746a186cdff10476ac8a57a55e286f8f8e628000d031a2adea65ef36f3192b2184e93d46f62d1230050a5cd53acfdfc8ba4dde5bbac03e7e90d9fc26a61381027636e031ef2af90877cfd4b126ea1758887f6754831633f4027fea3acc848342c94a2d1c597566090426a3c4bd2e92649847107bbdc08a6337c21f200"/208], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2000009f, &(0x7f00000010c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r9, &(0x7f0000000040), 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) writev(r12, &(0x7f0000000780)=[{0x0, 0x4}, {&(0x7f0000000100)}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0_to_hsr\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x20040040, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x2a8, 0x0, 0xffffffff, 0x0, 0xf8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x44}, @local, @icmp_id=0x65, @gre_key=0x1ba2}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'ipvlan1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x6c, 0x1, 0x8}, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x3}, {0x4}], 0x2, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @dev={0xac, 0x14, 0x14, 0x17}, @port=0x4e20, @gre_key=0x100}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg0\x00', 'gretap0\x00', {}, {0xff}, 0x6c, 0x2, 0x28}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x1, 0x5}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @dev={0xac, 0x14, 0x14, 0x12}, @local, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@multicast1, @remote, 0xa5fa4e055480ba73, 0xff, 'nr0\x00', 'wg2\x00', {0xff}, {0xff}, 0x16, 0x2, 0x24}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x101, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) kernel console output (not intermixed with test programs): etdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.430820][T13547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.440161][T13547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.449281][T13547] geneve0: entered promiscuous mode [ 314.455319][T13547] geneve0: entered allmulticast mode [ 314.571296][T13559] netlink: 'syz.0.2138': attribute type 32 has an invalid length. [ 314.784255][T13565] tipc: Can't bind to reserved service type 1 [ 315.011318][T13576] veth1_macvtap: left promiscuous mode [ 315.017821][T13576] macsec0: entered allmulticast mode [ 315.086058][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.134573][T13577] gretap0: entered promiscuous mode [ 315.434242][T13604] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 315.444781][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.474392][T13604] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 315.486912][T13604] macvlan0: entered allmulticast mode [ 315.506748][T13604] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 315.551132][T13604] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 315.811952][T13624] x_tables: duplicate underflow at hook 2 [ 315.943047][T13635] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 315.950594][T13635] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 316.205746][T11522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.295540][T13663] xt_TCPMSS: Only works on TCP SYN packets [ 316.535296][T13673] netlink: 'syz.4.2174': attribute type 4 has an invalid length. [ 316.630919][T13678] dummy0: entered promiscuous mode [ 316.645314][T13678] dummy0: left promiscuous mode [ 316.693559][T13663] lo speed is unknown, defaulting to 1000 [ 316.873013][T13687] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 316.902597][T13688] tipc: Enabled bearer , priority 0 [ 317.315793][T13704] tls_set_device_offload: netdev not found [ 317.338179][T11522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.386605][T13712] __nla_validate_parse: 11 callbacks suppressed [ 317.386626][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 317.412874][T13712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2184'. [ 317.433517][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 317.462801][T13690] lo speed is unknown, defaulting to 1000 [ 317.592214][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 317.615325][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'. [ 317.759357][T13730] validate_nla: 2 callbacks suppressed [ 317.759376][T13730] netlink: 'syz.1.2187': attribute type 12 has an invalid length. [ 317.983499][T13755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'. [ 318.319080][T13765] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2197'. [ 318.527086][T11525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 318.639643][T13766] lo speed is unknown, defaulting to 1000 [ 318.774178][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 318.783090][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 318.819602][T13795] netlink: 'syz.1.2205': attribute type 14 has an invalid length. [ 318.829624][T13795] netlink: 'syz.1.2205': attribute type 11 has an invalid length. [ 319.128632][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 319.645011][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.764582][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.948690][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 321.053681][T13804] lo speed is unknown, defaulting to 1000 [ 321.078422][T13798] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 321.088214][T13798] netlink: 'syz.0.2206': attribute type 6 has an invalid length. [ 321.978605][T13842] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 321.988990][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.682297][T13864] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 322.743653][T13869] __nla_validate_parse: 10 callbacks suppressed [ 322.743672][T13869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2225'. [ 322.775569][T13871] netlink: 'syz.2.2226': attribute type 3 has an invalid length. [ 322.799021][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 323.123654][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.164200][T13893] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 323.245413][T13893] netlink: 'syz.4.2232': attribute type 21 has an invalid length. [ 323.291845][T13893] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2232'. [ 323.315501][T13893] netlink: 'syz.4.2232': attribute type 5 has an invalid length. [ 323.377994][T13893] netlink: 'syz.4.2232': attribute type 6 has an invalid length. [ 323.386485][T13893] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2232'. [ 323.512885][T13906] netlink: 'syz.4.2239': attribute type 29 has an invalid length. [ 323.543722][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 323.699202][T13915] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 323.752048][T13915] bond5: entered allmulticast mode [ 323.759827][T13915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.798673][T13915] bond5: (slave ip6gretap2): making interface the new active one [ 323.811999][T13915] ip6gretap2: entered allmulticast mode [ 323.855562][T13915] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 323.957102][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2244'. [ 323.978598][T13931] bond0: entered promiscuous mode [ 323.984075][T13931] bond_slave_0: entered promiscuous mode [ 323.990135][T13931] bond_slave_1: entered promiscuous mode [ 323.996373][T13931] team0: entered promiscuous mode [ 324.006388][T13931] team_slave_0: entered promiscuous mode [ 324.012239][T13931] team_slave_1: entered promiscuous mode [ 324.020748][T13931] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 324.024931][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 324.030494][T13931] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 324.046261][T13931] bond0: left promiscuous mode [ 324.051057][T13931] bond_slave_0: left promiscuous mode [ 324.062702][T13931] bond_slave_1: left promiscuous mode [ 324.073236][T13931] team0: left promiscuous mode [ 324.082207][T13931] team_slave_0: left promiscuous mode [ 324.088057][T13931] team_slave_1: left promiscuous mode [ 324.094258][T13931] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 324.119412][T13924] lo speed is unknown, defaulting to 1000 [ 324.233590][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 324.265512][T13943] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2246'. [ 324.755865][T13953] veth0_vlan: entered allmulticast mode [ 324.796669][T13956] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.851697][T13960] xt_CT: No such helper "pptp" [ 324.877346][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 325.224669][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2259'. [ 325.240109][T11515] tipc: Subscription rejected, illegal request [ 325.271509][T13984] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 325.353750][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.449398][T13996] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 326.054762][T14025] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 326.099996][T14025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 326.475327][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.619124][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.714911][T14036] tipc: Invalid UDP bearer configuration [ 327.714958][T14036] tipc: Enabling of bearer rejected, failed to enable media [ 327.875019][T14046] __nla_validate_parse: 2 callbacks suppressed [ 327.875039][T14046] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.2276'. [ 327.890915][T14050] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 327.910211][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.065262][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 328.081149][T14065] openvswitch: netlink: EtherType 50a is less than min 600 [ 328.086830][T14068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2279'. [ 328.115365][T14070] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 328.295045][T14079] netlink: 'syz.3.2286': attribute type 2 has an invalid length. [ 328.305794][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 328.319144][T14079] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 328.332174][T14081] x_tables: duplicate underflow at hook 1 [ 328.342297][T14077] ipvlan2: entered promiscuous mode [ 328.444540][T14088] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 328.558888][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 328.582784][T14090] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 328.763012][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.903430][T14106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2294'. [ 328.997695][T14096] lo speed is unknown, defaulting to 1000 [ 329.062894][T14114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2296'. [ 329.096873][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 329.120995][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2299'. [ 329.171909][T14120] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.195047][T14120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 329.504615][T14119] lo speed is unknown, defaulting to 1000 [ 329.512381][T14135] netlink: 'syz.4.2305': attribute type 4 has an invalid length. [ 329.533842][T14135] netlink: 'syz.4.2305': attribute type 11 has an invalid length. [ 329.550015][T14138] netlink: 'syz.1.2302': attribute type 39 has an invalid length. [ 329.775190][T14149] tipc: Enabling of bearer rejected, already enabled [ 329.788369][T14149] tipc: Enabling of bearer rejected, already enabled [ 329.796779][T14149] tipc: Enabling of bearer rejected, already enabled [ 329.805052][T14149] tipc: Enabling of bearer rejected, already enabled [ 329.813140][T14149] tipc: Enabling of bearer rejected, already enabled [ 329.824764][T14149] tipc: Enabling of bearer rejected, already enabled [ 329.895859][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.159192][T14169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.607851][T14179] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 330.635648][T14179] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 330.832779][T14167] netlink: 'syz.4.2312': attribute type 21 has an invalid length. [ 330.843554][T14167] netlink: 'syz.4.2312': attribute type 6 has an invalid length. [ 331.094544][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 331.778261][T14222] netlink: 'syz.0.2328': attribute type 63 has an invalid length. [ 331.794062][T14222] netlink: 'syz.0.2328': attribute type 64 has an invalid length. [ 331.812424][T14217] netlink: 'syz.0.2328': attribute type 63 has an invalid length. [ 331.831964][T14217] netlink: 'syz.0.2328': attribute type 64 has an invalid length. [ 332.140223][T14233] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 332.151157][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 332.269871][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.497531][T14243] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 332.857082][T14232] lo speed is unknown, defaulting to 1000 [ 333.035710][T14275] __nla_validate_parse: 32 callbacks suppressed [ 333.035731][T14275] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2342'. [ 333.054103][T14275] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2342'. [ 333.118842][T14275] IPVS: Unknown mcast interface: veth°ñ [ 333.200318][T14280] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2344'. [ 333.209663][T14280] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2344'. [ 333.450044][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.813958][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'. [ 334.157977][T14334] netlink: 'syz.2.2359': attribute type 11 has an invalid length. [ 334.348738][T14315] lo speed is unknown, defaulting to 1000 [ 334.543765][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 334.549536][ T5144] Bluetooth: hci0: command tx timeout [ 334.631627][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.100679][T14363] batman_adv: batadv0: Adding interface: dummy0 [ 335.118548][T14363] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.161038][T14363] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 335.273310][T14379] Bluetooth: MGMT ver 1.23 [ 335.391203][T14379] bond0: (slave wlan1): Releasing backup interface [ 335.414905][T14379] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 335.444911][T14379] mac80211_hwsim hwsim8 wlan1 (unregistering): left allmulticast mode [ 335.454984][T14389] syz.3.2374[14389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.455077][T14389] syz.3.2374[14389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.472105][T14389] syz.3.2374[14389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.793927][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.829577][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 335.972244][T14407] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 335.991106][T14407] bridge0: entered promiscuous mode [ 335.999847][T14407] bridge0: entered allmulticast mode [ 336.081448][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'. [ 336.295452][ T5885] hid-generic 0005:04F3:0058.0001: item fetching failed at offset 0/1 [ 336.306996][ T5885] hid-generic 0005:04F3:0058.0001: probe with driver hid-generic failed with error -22 [ 336.417790][T14435] bond0: option mode: unable to set because the bond device has slaves [ 336.821002][T14470] netlink: 'syz.4.2396': attribute type 5 has an invalid length. [ 336.845018][T14473] netlink: 'syz.4.2396': attribute type 5 has an invalid length. [ 336.869861][T14467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2394'. [ 336.940386][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.716483][T14524] hsr_slave_0: left promiscuous mode [ 337.755693][T14524] hsr_slave_1: left promiscuous mode [ 337.899465][T14506] lo speed is unknown, defaulting to 1000 [ 337.915647][T14528] ip6gretap0: entered promiscuous mode [ 337.928811][T14528] batadv_slave_0: entered promiscuous mode [ 337.946739][T14528] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 337.968456][T14528] Cannot create hsr debugfs directory [ 338.058754][T14532] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 338.176532][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.260987][T14543] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 338.405908][T14549] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2417'. [ 338.538474][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'. [ 338.609503][T14553] dccp_close: ABORT with 52 bytes unread [ 338.734120][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 338.827633][T14552] lo speed is unknown, defaulting to 1000 [ 338.971695][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'. [ 339.324487][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 339.357250][T14579] macvlan0: entered promiscuous mode [ 339.391645][T14587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2426'. [ 339.448066][T14594] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 339.473706][T14594] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 340.092552][T14613] lo speed is unknown, defaulting to 1000 [ 340.322439][T14639] syz.0.2443[14639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.322677][T14639] syz.0.2443[14639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.344241][T14639] syz.0.2443[14639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.363062][T14642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2444'. [ 340.430097][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 340.495726][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.782787][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 340.813795][T14660] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 340.838014][T14660] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 340.974335][T14664] xt_CT: No such helper "snmp" [ 341.060923][T14666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2448'. [ 341.123645][T14674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2452'. [ 341.209506][T14677] bond_slave_0: entered promiscuous mode [ 341.215681][T14677] bond_slave_1: entered promiscuous mode [ 341.221385][T14677] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 341.242765][T14677] vlan2: entered promiscuous mode [ 341.255152][T14681] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 341.271667][T14677] bond0: entered promiscuous mode [ 341.277394][T14677] team0: entered promiscuous mode [ 341.282533][T14677] team_slave_0: entered promiscuous mode [ 341.294469][T14677] team_slave_1: entered promiscuous mode [ 341.301899][T14677] vlan2: entered allmulticast mode [ 341.307629][T14677] bond0: entered allmulticast mode [ 341.312756][T14677] bond_slave_0: entered allmulticast mode [ 341.318736][T14677] bond_slave_1: entered allmulticast mode [ 341.326220][T14685] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 341.326440][T14677] team0: entered allmulticast mode [ 341.339342][T14677] team_slave_0: entered allmulticast mode [ 341.345451][T14677] team_slave_1: entered allmulticast mode [ 341.351462][T14677] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 341.664656][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.145328][T14719] netlink: 'syz.1.2465': attribute type 322 has an invalid length. [ 342.192983][T14718] bond8 (unregistering): Released all slaves [ 342.667819][T14737] lo speed is unknown, defaulting to 1000 [ 342.794067][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.924544][T14742] lo speed is unknown, defaulting to 1000 [ 343.543177][T14776] __nla_validate_parse: 18 callbacks suppressed [ 343.543197][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2479'. [ 343.657456][T14789] netlink: 'syz.0.2479': attribute type 10 has an invalid length. [ 343.782987][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 343.816579][T14794] bond0: (slave vlan5): Opening slave failed [ 343.953743][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.987994][T14802] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 344.152953][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 344.200551][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 344.423718][T14818] geneve3: entered promiscuous mode [ 344.428992][T14818] geneve3: entered allmulticast mode [ 345.071939][T14834] lo speed is unknown, defaulting to 1000 [ 345.096261][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.215869][T14856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2501'. [ 345.376455][T14876] ipvlan2: entered promiscuous mode [ 345.392847][T14876] bridge0: port 3(ipvlan2) entered blocking state [ 345.406189][T14876] bridge0: port 3(ipvlan2) entered disabled state [ 345.419821][T14876] ipvlan2: entered allmulticast mode [ 345.438204][T14876] bridge0: entered allmulticast mode [ 345.445294][T14876] ipvlan2: left allmulticast mode [ 345.458741][T14876] bridge0: left allmulticast mode [ 346.040689][T14903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2512'. [ 346.176316][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2516'. [ 346.214883][T14915] netlink: 'syz.0.2516': attribute type 7 has an invalid length. [ 346.217952][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 346.239458][T14915] netlink: 'syz.0.2516': attribute type 8 has an invalid length. [ 346.281192][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 346.324162][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 346.580541][T14934] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2522'. [ 346.663884][T14945] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 347.132491][T14964] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 347.335690][T14932] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 347.394677][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.018220][T15004] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 348.270860][T14996] lo speed is unknown, defaulting to 1000 [ 348.303377][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 348.516341][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.657428][T15028] xt_TCPMSS: Only works on TCP SYN packets [ 348.896415][T15032] __nla_validate_parse: 7 callbacks suppressed [ 348.896435][T15032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 349.156747][T15041] syzkaller0: entered promiscuous mode [ 349.189894][T15041] syzkaller0: entered allmulticast mode [ 349.343422][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 349.466447][T15061] ip6t_rpfilter: unknown options [ 349.588543][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2557'. [ 349.634203][T15070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.654515][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.669161][T15075] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2559'. [ 349.691982][T15074] netlink: 412 bytes leftover after parsing attributes in process `syz.3.2560'. [ 349.722366][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2560'. [ 349.739152][T15078] x_tables: duplicate underflow at hook 2 [ 350.176812][T15110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2570'. [ 350.193030][T15110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.383374][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.417577][T15120] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 350.431019][T15123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2576'. [ 350.640034][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 350.774947][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.815302][T15147] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2582'. [ 350.830103][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 351.059486][T15159] netlink: 'syz.1.2588': attribute type 4 has an invalid length. [ 351.300785][T15179] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 351.388763][T15187] : renamed from bond0 (while UP) [ 351.424273][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 351.875861][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.914155][T15227] xt_hashlimit: max too large, truncated to 1048576 [ 352.065068][T11526] wlan1: Trigger new scan to find an IBSS to join [ 352.130904][T15235] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.170249][T15241] xt_hashlimit: size too large, truncated to 1048576 [ 352.179981][T15244] veth1_to_team: entered allmulticast mode [ 352.211454][T15245] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 352.225300][T15235] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.324253][T15235] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.459028][T15253] netlink: 'syz.2.2616': attribute type 39 has an invalid length. [ 352.467019][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.517052][T15235] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.566229][T15242] veth1_to_team: left allmulticast mode [ 352.584794][T15259] bond0: (slave wlan1): Releasing backup interface [ 352.722515][T15235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.748164][T15235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.779158][T15235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.811569][T15235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.916687][T15278] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 353.005934][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.458981][T15304] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 353.478242][T15304] bridge0: entered promiscuous mode [ 353.487118][T15304] bridge0: entered allmulticast mode [ 353.503552][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 353.944147][T15304] netlink: 'syz.3.2625': attribute type 5 has an invalid length. [ 353.964021][T15325] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.022068][T15325] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 354.153693][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.222704][T15316] lo speed is unknown, defaulting to 1000 [ 354.452079][T15354] __nla_validate_parse: 6 callbacks suppressed [ 354.452099][T15354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.481834][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.513807][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.543637][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.606942][T15355] gretap0: left promiscuous mode [ 354.691519][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.742071][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.842602][T15355] bond0: left allmulticast mode [ 354.879094][T15355] bond_slave_0: left allmulticast mode [ 354.896268][T15355] bond_slave_1: left allmulticast mode [ 354.912262][T15355] team0: left allmulticast mode [ 354.927162][T15355] team_slave_0: left allmulticast mode [ 354.927970][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.933097][T15355] team_slave_1: left allmulticast mode [ 354.948176][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 354.969402][T15355] bond0: left promiscuous mode [ 354.990393][T15355] bond_slave_0: left promiscuous mode [ 355.016880][T15355] bond_slave_1: left promiscuous mode [ 355.033587][T15355] team0: left promiscuous mode [ 355.038397][T15355] team_slave_0: left promiscuous mode [ 355.081395][T15355] team_slave_1: left promiscuous mode [ 355.292686][T15355] macsec0: left allmulticast mode [ 355.322561][T15355] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 355.330795][T15355] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 355.339274][T15355] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.339402][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2641'. [ 355.348053][T15355] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.348086][T15355] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.348114][T15355] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.382641][T15394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2641'. [ 355.391768][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2641'. [ 355.394981][T15355] xfrm2: left allmulticast mode [ 355.405948][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.437937][T15355] bond5: left allmulticast mode [ 355.446195][T15355] ip6gretap2: left allmulticast mode [ 355.457958][T15355] vlan2: left promiscuous mode [ 355.462926][T15355] vlan2: left allmulticast mode [ 355.472882][T15355] bridge0: left promiscuous mode [ 355.480696][T15355] bridge0: left allmulticast mode [ 355.583365][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.743815][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 355.875831][T15411] IPVS: length: 99 != 8 [ 355.885450][T15411] IPVS: length: 99 != 8 [ 355.895284][T15411] IPVS: length: 99 != 8 [ 355.897379][T15362] lo speed is unknown, defaulting to 1000 [ 355.909500][T15411] IPVS: length: 99 != 8 [ 356.524283][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.618416][T15454] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 356.623388][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 356.742806][T15457] openvswitch: netlink: IPv4 tunnel dst address is zero [ 357.113108][T15480] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.386354][T15487] sctp: [Deprecated]: syz.2.2665 (pid 15487) Use of int in max_burst socket option deprecated. [ 357.386354][T15487] Use struct sctp_assoc_value instead [ 357.408390][T15488] batadv_slave_1: entered promiscuous mode [ 357.663422][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 357.682348][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 357.926790][T15512] netlink: 'syz.4.2672': attribute type 22 has an invalid length. [ 357.927391][T15517] netlink: 'syz.4.2672': attribute type 22 has an invalid length. [ 358.017682][T15519] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 358.142695][T15525] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 358.159209][T15484] batadv_slave_1: left promiscuous mode [ 358.703484][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 358.726473][T15567] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 358.756470][T15569] netlink: 'syz.1.2686': attribute type 7 has an invalid length. [ 358.761866][T15567] openvswitch: netlink: Message has 2 unknown bytes. [ 358.788762][T15567] openvswitch: netlink: Actions may not be safe on all matching packets [ 358.810840][T15569] ipvlan1: entered promiscuous mode [ 358.824979][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.196009][T15589] Bluetooth: MGMT ver 1.23 [ 359.309169][T15592] bridge6: entered promiscuous mode [ 359.338739][T15592] bridge6: entered allmulticast mode [ 359.358456][T15591] netlink: 'syz.4.2692': attribute type 10 has an invalid length. [ 359.396484][T15591] bridge0: port 1(ip6gretap0) entered blocking state [ 359.404954][T15591] bridge0: port 1(ip6gretap0) entered disabled state [ 359.419345][T15591] ip6gretap0: entered allmulticast mode [ 359.430616][T15591] ip6gretap0: entered promiscuous mode [ 359.594558][T15609] __nla_validate_parse: 16 callbacks suppressed [ 359.594576][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2696'. [ 359.652106][T15611] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2697'. [ 359.675488][T15611] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 359.728403][T15611] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 359.743364][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.806198][T15614] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.948910][T15614] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.959984][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.041205][T15622] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 360.049688][T15620] netlink: 'syz.0.2699': attribute type 2 has an invalid length. [ 360.060497][T15614] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.164224][T15614] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.207422][T15626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2702'. [ 360.230370][T15626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2702'. [ 360.356823][T15614] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.397926][T15614] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.429316][T15614] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.458542][T15614] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.675415][T15657] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2711'. [ 360.739351][T15662] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2713'. [ 360.752071][T15662] unsupported nlmsg_type 40 [ 360.782837][T15663] vlan6: entered promiscuous mode [ 360.788128][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.805114][T15663] vlan6: entered allmulticast mode [ 360.826998][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'. [ 360.867791][T15667] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 361.094247][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.145347][T15682] netlink: 'syz.4.2716': attribute type 5 has an invalid length. [ 361.163553][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 361.250578][T15688] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2719'. [ 361.259986][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 361.823371][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.945365][T15708] lo speed is unknown, defaulting to 1000 [ 361.977329][T15721] IPv6: sit1: Disabled Multicast RS [ 362.165481][T15717] xt_TCPMSS: Only works on TCP SYN packets [ 362.213549][T11515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 362.232600][T15730] tipc: Enabling of bearer rejected, already enabled [ 362.863451][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 362.898663][T15766] ip6gretap3: entered promiscuous mode [ 362.971669][T15766] ip6gretap3: entered allmulticast mode [ 363.226805][T15782] netlink: 'syz.4.2741': attribute type 2 has an invalid length. [ 363.283207][T15782] veth3: entered promiscuous mode [ 363.333767][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.512425][T15791] netlink: 'syz.4.2745': attribute type 2 has an invalid length. [ 363.903409][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 364.499038][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.950257][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.125726][T15715] Set syz1 is full, maxelem 65536 reached [ 365.656688][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.983362][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 366.290908][T15810] __nla_validate_parse: 10 callbacks suppressed [ 366.290928][T15810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2752'. [ 366.480819][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'. [ 366.503683][T15831] syzkaller0: entered allmulticast mode [ 366.586005][T15839] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2761'. [ 366.643729][T15842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2762'. [ 366.808339][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.023462][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.228330][T15879] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 367.248293][T15879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.524003][T15870] lo speed is unknown, defaulting to 1000 [ 367.710385][T15893] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2778'. [ 367.770358][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 367.819876][T15893] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 367.890073][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 367.894579][T15870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2771'. [ 367.944081][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.022212][T15901] sctp: [Deprecated]: syz.3.2780 (pid 15901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.022212][T15901] Use struct sctp_sack_info instead [ 368.046111][T15895] xt_NFQUEUE: number of total queues is 0 [ 368.063438][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.282688][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 369.103399][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.125223][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.204388][T15936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2787'. [ 369.320760][T15921] lo speed is unknown, defaulting to 1000 [ 369.377392][T15944] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 370.023644][T15965] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551607) [ 370.047417][T15965] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 370.098631][T15962] netlink: 'syz.2.2794': attribute type 2 has an invalid length. [ 370.139453][T15962] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 370.147326][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 370.253957][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 370.283531][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.682440][T15981] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 370.705870][T15981] hsr_slave_0: entered promiscuous mode [ 370.711920][T15981] team0: Port device hsr_slave_0 added [ 371.183374][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 371.261333][T16024] pim6reg: left allmulticast mode [ 371.348788][T16035] __nla_validate_parse: 7 callbacks suppressed [ 371.348808][T16035] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2811'. [ 371.415148][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 371.640864][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2817'. [ 371.678671][T16056] netlink: 'syz.1.2818': attribute type 8 has an invalid length. [ 371.707679][T16056] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2818'. [ 371.900997][T16072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.223354][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.481066][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2832'. [ 372.553735][ T6391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.246919][T16127] dvmrp0: entered allmulticast mode [ 373.263488][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 373.279565][T16127] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2838'. [ 373.442256][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2842'. [ 373.696104][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.305736][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 374.843587][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 375.346879][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 375.504795][T16167] bond_slave_1: invalid flags given to default FDB implementation [ 375.521025][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 375.623927][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2850'. [ 375.678805][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2850'. [ 375.717955][T16175] netlink: 'syz.0.2852': attribute type 1 has an invalid length. [ 375.730897][T16175] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2852'. [ 375.970978][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 376.383391][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 376.574476][T16234] __nla_validate_parse: 10 callbacks suppressed [ 376.574496][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2866'. [ 376.772270][T16248] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2869'. [ 377.005676][T16261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 377.033058][T16261] netlink: 'syz.2.2877': attribute type 9 has an invalid length. [ 377.046290][T16261] macvlan1: entered promiscuous mode [ 377.055501][T16265] netlink: 'syz.3.2878': attribute type 12 has an invalid length. [ 377.123895][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 377.135915][T16267] netlink: 'syz.2.2879': attribute type 1 has an invalid length. [ 377.173105][T16267] bond4: entered promiscuous mode [ 377.186614][T16268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2879'. [ 377.188919][T16267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.206035][T16272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.246686][T16272] netlink: zone id is out of range [ 377.363066][T16272] netlink: set zone limit has 4 unknown bytes [ 377.423422][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 377.726967][T16284] syz.1.2885 (16284) used obsolete PPPIOCDETACH ioctl [ 378.039039][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.048761][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.057301][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.076520][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.084608][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 378.092051][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.147784][T16292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2887'. [ 378.244865][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.272208][T16289] lo speed is unknown, defaulting to 1000 [ 378.453173][T16289] chnl_net:caif_netlink_parms(): no params data found [ 378.463405][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 378.556801][T16289] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.564084][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.571607][T16289] bridge_slave_0: entered allmulticast mode [ 378.578964][T16289] bridge_slave_0: entered promiscuous mode [ 378.595098][T16289] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.602712][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.616288][T16289] bridge_slave_1: entered allmulticast mode [ 378.626567][T16289] bridge_slave_1: entered promiscuous mode [ 378.720518][T16289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.749368][T16289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.841410][T16289] team0: Port device team_slave_0 added [ 378.853184][T16289] team0: Port device team_slave_1 added [ 378.866656][T16305] lo speed is unknown, defaulting to 1000 [ 378.926913][T16289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.934698][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.961331][T16289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.004723][T16289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.012055][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.056452][T16289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.235988][T16289] hsr_slave_0: entered promiscuous mode [ 379.254630][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2891'. [ 379.266243][T16289] hsr_slave_1: entered promiscuous mode [ 379.284069][T16289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.291677][T16289] Cannot create hsr debugfs directory [ 379.391017][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 379.503362][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 379.598099][T16325] netlink: 'syz.1.2896': attribute type 1 has an invalid length. [ 379.624156][T16325] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2896'. [ 379.682252][T16289] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.802800][T16289] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.840750][T16330] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2898'. [ 379.880869][T16289] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.005569][T16289] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.163980][ T5144] Bluetooth: hci3: command tx timeout [ 380.294034][T16289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.336277][T16289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.357242][T16289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.388371][T16289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.427384][T16353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.469925][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2904'. [ 380.543353][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 380.588273][T16289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.614148][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 380.659842][T16289] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.690828][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.698041][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.739855][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.747068][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.340875][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2909'. [ 381.450336][T16365] gretap0: entered allmulticast mode [ 381.459608][T16365] erspan0: entered promiscuous mode [ 381.502980][T16365] bond0: left allmulticast mode [ 381.512128][T16365] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 381.536361][T16365] team0: left promiscuous mode [ 381.541316][T16365] hsr_slave_0: left promiscuous mode [ 381.583624][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.584735][T16365] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.599498][T16365] batman_adv: batadv0: Interface activated: dummy0 [ 381.608860][T16365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.655762][T16289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.666408][T16289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.690029][T16385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2912'. [ 381.744923][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 381.853371][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2913'. [ 381.960949][T16289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.014396][T16364] lo speed is unknown, defaulting to 1000 [ 382.223577][ T5144] Bluetooth: hci3: command tx timeout [ 382.336153][T16371] lo speed is unknown, defaulting to 1000 [ 382.623369][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 382.636723][T16289] veth0_vlan: entered promiscuous mode [ 382.662420][T16289] veth1_vlan: entered promiscuous mode [ 382.709886][T16289] veth0_macvtap: entered promiscuous mode [ 382.737243][T16289] veth1_macvtap: entered promiscuous mode [ 382.780380][T16289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.824957][T16289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.850918][T16289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.883532][T16289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.892284][T16289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.903502][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 382.926517][T16289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.077574][T16370] lo speed is unknown, defaulting to 1000 [ 383.222868][T16289] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 383.238914][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.340097][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.352573][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.481016][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 383.502005][T16445] x_tables: duplicate underflow at hook 3 [ 383.551449][T11526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.566629][T11526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.663439][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 383.825363][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2927'. [ 383.860916][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 383.879969][T16456] ip6tnl2: entered allmulticast mode [ 383.889934][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 383.899121][ T8929] IPVS: starting estimator thread 0... [ 383.928905][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 383.945629][T16457] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.985521][T16464] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 384.003394][T16462] IPVS: using max 23 ests per chain, 55200 per kthread [ 384.033964][T16450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'. [ 384.043050][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.054905][T16450] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.064160][T16450] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.072696][T16450] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.081018][T16450] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.091693][T16450] vxlan0: entered promiscuous mode [ 384.125514][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 384.305376][ T5144] Bluetooth: hci3: command tx timeout [ 384.334293][T16468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.355868][T16473] openvswitch: netlink: IP tunnel dst address not specified [ 384.416868][T16471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 384.466644][T16471] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 384.587996][T16468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.703481][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 384.755274][T16468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.081042][T16468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.204009][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.489033][T16510] dvmrp0: left allmulticast mode [ 385.721185][T16517] IPVS: Error joining to the multicast group [ 385.743455][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 386.001674][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 386.047425][T16535] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 386.086440][T16535] netlink: 'syz.3.2951': attribute type 21 has an invalid length. [ 386.306660][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.393490][ T5144] Bluetooth: hci3: command tx timeout [ 386.783366][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 387.138989][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.148541][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.158503][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.166729][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.233639][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 387.236418][T16565] __nla_validate_parse: 1 callbacks suppressed [ 387.236434][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'. [ 387.258043][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.361680][T16567] netlink: 'syz.0.2961': attribute type 10 has an invalid length. [ 387.414933][ T1106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 387.671557][T16562] lo speed is unknown, defaulting to 1000 [ 387.722972][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 387.765703][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 387.796354][T16583] netlink: 'syz.0.2964': attribute type 22 has an invalid length. [ 387.823443][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 387.830774][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 387.980850][T16562] chnl_net:caif_netlink_parms(): no params data found [ 388.137191][T16562] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.150001][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.163029][T16562] bridge_slave_0: entered allmulticast mode [ 388.175496][T16562] bridge_slave_0: entered promiscuous mode [ 388.187692][T16562] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.195044][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.202788][T16562] bridge_slave_1: entered allmulticast mode [ 388.210215][T16562] bridge_slave_1: entered promiscuous mode [ 388.239131][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 388.252833][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.276454][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.359661][T16562] team0: Port device team_slave_0 added [ 388.380495][T16562] team0: Port device team_slave_1 added [ 388.432925][T16621] smc: net device bond0 applied user defined pnetid SYZ2 [ 388.441148][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.461464][T16621] smc: net device bond0 erased user defined pnetid SYZ2 [ 388.463734][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.498182][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.511949][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.514971][ T3478] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.519095][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.572634][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.585671][T16626] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 388.607472][T16626] batman_adv: batadv0: Adding interface: ip6gretap2 [ 388.615587][T16626] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1468. [ 388.619525][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2974'. [ 388.636660][T16626] batman_adv: batadv0: Interface activated: ip6gretap2 [ 388.706798][T16562] hsr_slave_0: entered promiscuous mode [ 388.713996][T16562] hsr_slave_1: entered promiscuous mode [ 388.719967][T16562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.728257][T16562] Cannot create hsr debugfs directory [ 388.863339][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.892149][T16634] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 388.900414][T16634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2976'. [ 388.912176][T16634] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 389.253889][T16562] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.264282][T16562] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.282491][T16562] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.307096][T16562] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.343869][ T5144] Bluetooth: hci1: command tx timeout [ 389.417915][T16656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.458428][T16468] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.474524][T16656] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 389.501883][T16468] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.531119][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.556317][T16468] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.569208][T16665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2983'. [ 389.586343][T16468] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.663791][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.686409][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.722868][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.730054][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.745199][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.752359][T11526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.903370][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.048224][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.115130][T16562] veth0_vlan: entered promiscuous mode [ 390.130429][T16562] veth1_vlan: entered promiscuous mode [ 390.205954][T16562] veth0_macvtap: entered promiscuous mode [ 390.218175][T16562] veth1_macvtap: entered promiscuous mode [ 390.273148][T16562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.303705][T16562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.319048][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.352598][T16562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.383609][T16562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.404803][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.428802][T16562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.456519][T16562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.493643][T16562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.502395][T16562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.634280][T16562] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 390.644314][T16562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.658640][T16703] netlink: 'syz.1.2992': attribute type 12 has an invalid length. [ 390.669315][T11526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.678429][T11526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.775315][T11526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.784820][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 390.853461][T16710] xfrm1: entered allmulticast mode [ 390.860194][T11526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.943380][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 391.001462][T16719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2997'. [ 391.260628][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 391.446152][ T5144] Bluetooth: hci1: command tx timeout [ 391.915531][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 391.983403][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 392.237635][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.251644][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.266491][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.292499][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.306748][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 392.319632][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.454481][T16758] __nla_validate_parse: 1 callbacks suppressed [ 392.454500][T16758] netlink: 8584 bytes leftover after parsing attributes in process `syz.4.3009'. [ 392.523930][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3009'. [ 392.608764][T16777] dummy0: entered promiscuous mode [ 392.691176][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 392.785930][T16778] dummy0: left promiscuous mode [ 392.831065][T16752] lo speed is unknown, defaulting to 1000 [ 392.917326][T16787] erspan1: entered promiscuous mode [ 392.922735][T16787] erspan1: entered allmulticast mode [ 392.944552][ T7090] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 60 sec [ 393.023383][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 393.087369][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.197312][T16752] chnl_net:caif_netlink_parms(): no params data found [ 393.423804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.434991][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 393.504975][ T5144] Bluetooth: hci1: command tx timeout [ 393.510639][T16790] lo speed is unknown, defaulting to 1000 [ 393.631253][T16787] netlink: 'syz.2.3015': attribute type 21 has an invalid length. [ 393.639638][T16787] netlink: 'syz.2.3015': attribute type 6 has an invalid length. [ 393.671304][T16787] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3015'. [ 393.806759][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'. [ 393.878439][T16792] xt_hashlimit: size too large, truncated to 1048576 [ 393.896552][T16752] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.916173][T16752] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.947773][T16752] bridge_slave_0: entered allmulticast mode [ 393.965342][T16752] bridge_slave_0: entered promiscuous mode [ 394.063407][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.123519][T16752] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.148056][T16752] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.176100][T16752] bridge_slave_1: entered allmulticast mode [ 394.194495][T16752] bridge_slave_1: entered promiscuous mode [ 394.233502][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.389005][ T5144] Bluetooth: hci5: command tx timeout [ 394.452168][T16752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.467548][T16752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.629525][T16752] team0: Port device team_slave_0 added [ 394.698177][T16752] team0: Port device team_slave_1 added [ 394.766534][T16821] ip6gretap0: entered promiscuous mode [ 394.789191][T16822] netlink: 328 bytes leftover after parsing attributes in process `syz.3.3020'. [ 394.799243][T16821] batadv_slave_0: entered promiscuous mode [ 394.816290][T16821] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 394.828313][T16821] Cannot create hsr debugfs directory [ 394.849680][T16752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.858005][T16752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.892140][T16752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.916492][T16752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.928966][T16752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.980156][T16752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.103386][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 395.119577][T16752] hsr_slave_0: entered promiscuous mode [ 395.126633][T16752] hsr_slave_1: entered promiscuous mode [ 395.132747][T16752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.141151][T16752] Cannot create hsr debugfs directory [ 395.208328][T16834] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3024'. [ 395.228388][T16838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.354985][T11526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.489560][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'. [ 395.590971][ T5144] Bluetooth: hci1: command tx timeout [ 395.616281][T16752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.694897][T16752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.727562][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 395.741732][T16861] vlan1: entered allmulticast mode [ 395.758277][T16861] macvlan1: entered allmulticast mode [ 395.812889][T16752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.921271][T16752] bond0: (slave netdevsim0): Releasing backup interface [ 395.934026][T16752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.116811][T16752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.141978][T16752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.143438][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 396.163083][T16752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.184545][T16752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.214499][T16880] netlink: 'syz.4.3038': attribute type 3 has an invalid length. [ 396.244453][T16880] openvswitch: netlink: Message has 8 unknown bytes. [ 396.329506][T16752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.369423][T16752] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.462689][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.469974][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.477484][ T5144] Bluetooth: hci5: command 0x041b tx timeout [ 396.494681][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.545800][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.552929][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.780579][T16900] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 396.807478][T16900] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.825953][T16900] bond0: (slave team0): Enslaving as an active interface with an up link [ 397.024720][T16752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.054445][T16917] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 397.183512][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.203778][T16752] veth0_vlan: entered promiscuous mode [ 397.222333][T16752] veth1_vlan: entered promiscuous mode [ 397.298377][T16752] veth0_macvtap: entered promiscuous mode [ 397.311341][T16752] veth1_macvtap: entered promiscuous mode [ 397.352966][T16752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.366232][T16752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.376225][T16752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.393595][T16752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.419380][T16752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.453223][T16752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.473039][T16752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.484517][T16752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.497940][T16752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.523122][T16752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.540339][T16752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.561445][T16752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.571622][T16752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.581042][T16752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.643819][T16939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.655394][T16958] __nla_validate_parse: 8 callbacks suppressed [ 397.655414][T16958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3053'. [ 397.661559][T16959] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 397.661584][T16959] nbd: couldn't find a device at index 20 [ 397.686101][T16958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3053'. [ 397.699592][T16958] ip6gretap1: entered allmulticast mode [ 397.750368][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 397.771266][T16752] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 397.791877][T16752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.810360][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.845108][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.908038][T16937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.936007][T16937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.031808][T16975] lo speed is unknown, defaulting to 1000 [ 398.067612][T16975] lo speed is unknown, defaulting to 1000 [ 398.081772][T16975] lo speed is unknown, defaulting to 1000 [ 398.193141][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3060'. [ 398.223403][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.487816][T16975] infiniband syz0: set active [ 398.492566][T16975] infiniband syz0: added lo [ 398.500821][ T7093] lo speed is unknown, defaulting to 1000 [ 398.512825][T16992] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3062'. [ 398.546732][ T5831] Bluetooth: hci5: command 0x041b tx timeout [ 398.553960][T16975] RDS/IB: syz0: added [ 398.558019][T16975] smc: adding ib device syz0 with port count 1 [ 398.565122][T16975] smc: ib device syz0 port 1 has pnetid [ 398.571183][ T7093] lo speed is unknown, defaulting to 1000 [ 398.578215][T16975] lo speed is unknown, defaulting to 1000 [ 398.597620][T16992] netlink: zone id is out of range [ 398.602759][T16992] netlink: zone id is out of range [ 398.608147][T16992] netlink: zone id is out of range [ 398.613493][T16992] netlink: zone id is out of range [ 398.618765][T16992] netlink: zone id is out of range [ 398.805338][T16937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.967626][T16975] lo speed is unknown, defaulting to 1000 [ 399.000735][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.016245][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.027837][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.037595][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.046885][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 399.086441][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.196786][T17015] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 399.228265][T17015] netlink: 'syz.2.3069': attribute type 3 has an invalid length. [ 399.256579][T16975] lo speed is unknown, defaulting to 1000 [ 399.280273][T17015] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3069'. [ 399.325406][T17015] NCSI netlink: No device for ifindex 813332851 [ 399.453088][T17008] lo speed is unknown, defaulting to 1000 [ 399.454424][T16975] lo speed is unknown, defaulting to 1000 [ 399.588929][T17039] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.3072'. [ 399.651858][T16975] lo speed is unknown, defaulting to 1000 [ 399.760098][T17008] lo speed is unknown, defaulting to 1000 [ 399.853597][T17050] netlink: 'syz.2.3077': attribute type 10 has an invalid length. [ 399.882806][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 399.997595][T16975] lo speed is unknown, defaulting to 1000 [ 400.024050][T16927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 400.039017][T17055] netlink: 'syz.4.3079': attribute type 6 has an invalid length. [ 400.048311][T17055] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3079'. [ 400.058945][T17059] netlink: 'syz.1.3078': attribute type 2 has an invalid length. [ 400.108823][T17059] netlink: 'syz.1.3078': attribute type 1 has an invalid length. [ 400.303367][ C0] net_ratelimit: 3 callbacks suppressed [ 400.303386][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.362667][T16975] lo speed is unknown, defaulting to 1000 [ 400.396628][T17075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.426321][T17075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3082'. [ 400.456072][T17008] chnl_net:caif_netlink_parms(): no params data found [ 400.583995][T17083] x_tables: ip_tables: REJECT target: only valid in filter table, not [ 400.588290][T17081] team0: Device gtp0 is of different type [ 400.602685][T16975] lo speed is unknown, defaulting to 1000 [ 400.624127][ T5831] Bluetooth: hci5: command 0x041b tx timeout [ 400.734829][T17008] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.747524][T17008] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.761113][T17008] bridge_slave_0: entered allmulticast mode [ 400.771365][T17008] bridge_slave_0: entered promiscuous mode [ 400.809184][T17008] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.821802][T17008] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.833153][T17008] bridge_slave_1: entered allmulticast mode [ 400.842899][T17008] bridge_slave_1: entered promiscuous mode [ 400.878994][T17008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.901489][T17008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.012413][T17008] team0: Port device team_slave_0 added [ 401.041475][T17008] team0: Port device team_slave_1 added [ 401.144759][T17101] netlink: 'syz.1.3089': attribute type 8 has an invalid length. [ 401.164749][T16937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.184193][ T5831] Bluetooth: hci0: command tx timeout [ 401.274016][T17008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.281002][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.343452][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.384144][T17008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.430737][T17008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.446681][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.472919][T17008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.657433][T17008] hsr_slave_0: entered promiscuous mode [ 401.664175][T17008] hsr_slave_1: entered promiscuous mode [ 401.670246][T17008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.713575][T17008] Cannot create hsr debugfs directory [ 401.726040][T17126] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 402.051641][T17147] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 402.324232][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.383421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.456341][T17161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.504734][T17163] infiniband syz0: set active [ 402.538294][T17163] infiniband syz0: set active [ 402.544103][T17163] infiniband syz0: set active [ 402.588433][T17163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.617980][T17168] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 402.631995][T17163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.658691][ T7093] lo speed is unknown, defaulting to 1000 [ 402.683665][ T7100] lo speed is unknown, defaulting to 1000 [ 402.703812][ T5831] Bluetooth: hci5: command 0x041b tx timeout [ 402.730211][ T7091] lo speed is unknown, defaulting to 1000 [ 402.970812][T17008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.017269][T17008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.052262][T17008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.084359][T17008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.263372][ T5831] Bluetooth: hci0: command tx timeout [ 403.277438][T17008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.334351][T17008] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.390593][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.397761][T16939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.423626][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.445567][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.462641][T11522] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.469809][T11522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.493942][T17200] __nla_validate_parse: 5 callbacks suppressed [ 403.493960][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'. [ 403.557308][T17200] caif0: Master is either lo or non-ether device [ 403.612112][T17008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.661726][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3119'. [ 403.687790][T17203] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 403.816668][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 403.947437][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.994093][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'. [ 404.059689][T17008] veth0_vlan: entered promiscuous mode [ 404.088541][T17008] veth1_vlan: entered promiscuous mode [ 404.115923][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 404.131671][T17008] veth0_macvtap: entered promiscuous mode [ 404.143804][T17008] veth1_macvtap: entered promiscuous mode [ 404.158846][T17008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.169385][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.179419][T17008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.190095][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.200027][T17008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.210577][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.221790][T17008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.237692][T17225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3124'. [ 404.255083][T17008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.266072][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.276847][T17008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.302040][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.343627][T17008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.370295][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.383693][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.408569][T17008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.447778][T17008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.463600][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.481059][T17008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.501326][T17008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.519186][T17008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.675622][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.720266][T17008] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 404.747480][T17008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.788082][T17259] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 404.831434][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.839806][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.901636][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3133'. [ 404.913096][T16939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.933886][T16939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.050028][T17274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3135'. [ 405.120552][T17279] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3059'. [ 405.138823][T17280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.343646][ T5831] Bluetooth: hci0: command tx timeout [ 405.454166][T17290] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3141'. [ 405.503429][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.543955][T17290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.790026][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.810652][T17304] sctp: [Deprecated]: syz.1.3144 (pid 17304) Use of int in max_burst socket option. [ 405.810652][T17304] Use struct sctp_assoc_value instead [ 405.829616][T17283] lo speed is unknown, defaulting to 1000 [ 405.833802][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 405.850129][T17283] lo speed is unknown, defaulting to 1000 [ 405.854332][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.880499][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.895329][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.908711][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 405.933174][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.076196][T17300] lo speed is unknown, defaulting to 1000 [ 406.227122][T17300] lo speed is unknown, defaulting to 1000 [ 406.293969][T17315] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 406.543353][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.619712][T17326] lo speed is unknown, defaulting to 1000 [ 406.792674][T17326] lo speed is unknown, defaulting to 1000 [ 406.893455][T17327] lo speed is unknown, defaulting to 1000 [ 406.900747][T17300] chnl_net:caif_netlink_parms(): no params data found [ 406.953763][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 407.040889][T17327] lo speed is unknown, defaulting to 1000 [ 407.391278][T17355] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 2, id = 0 [ 407.423660][ T5144] Bluetooth: hci0: command tx timeout [ 407.444614][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.462039][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.474667][T17300] bridge_slave_0: entered allmulticast mode [ 407.481886][T17300] bridge_slave_0: entered promiscuous mode [ 407.551776][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.574089][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.583755][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.599765][T17358] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 407.603032][T17300] bridge_slave_1: entered allmulticast mode [ 407.619896][T17300] bridge_slave_1: entered promiscuous mode [ 407.830421][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.890107][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.984095][ T5144] Bluetooth: hci2: command tx timeout [ 408.044463][T17300] team0: Port device team_slave_0 added [ 408.064659][ T6389] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.104453][T17300] team0: Port device team_slave_1 added [ 408.283616][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.323390][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.353858][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.403800][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.423160][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.503148][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.623485][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.750747][T17398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.828419][T17300] hsr_slave_0: entered promiscuous mode [ 408.854230][T17300] hsr_slave_1: entered promiscuous mode [ 408.860438][T17300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.874119][T17300] Cannot create hsr debugfs directory [ 409.121410][T17300] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.200180][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 409.277527][T17300] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.381383][T17300] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.415031][T17427] __nla_validate_parse: 8 callbacks suppressed [ 409.415051][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 409.436510][T17427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3175'. [ 409.567073][T17300] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.663425][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.668413][ T5144] Bluetooth: hci0: command 0x0401 tx timeout [ 409.768801][T17438] netlink: 'syz.3.3179': attribute type 10 has an invalid length. [ 409.796306][T17300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.804794][T17438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3179'. [ 409.828600][T17300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.838384][T17300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.855652][T17300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.873921][T17438] bond0: entered promiscuous mode [ 409.893464][T17438] bond_slave_0: entered promiscuous mode [ 409.924741][T17438] bond_slave_1: entered promiscuous mode [ 409.939967][T17438] bond0: entered allmulticast mode [ 409.945627][T17438] bond_slave_0: entered allmulticast mode [ 409.965521][T17438] bond_slave_1: entered allmulticast mode [ 409.972139][T17438] bridge0: port 3(bond0) entered blocking state [ 409.996390][T17438] bridge0: port 3(bond0) entered disabled state [ 410.016684][T17438] bridge0: port 3(bond0) entered blocking state [ 410.023016][T17438] bridge0: port 3(bond0) entered forwarding state [ 410.063589][ T5144] Bluetooth: hci2: command tx timeout [ 410.173545][T17453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3181'. [ 410.286952][T17434] lo speed is unknown, defaulting to 1000 [ 410.307358][T17434] lo speed is unknown, defaulting to 1000 [ 410.338814][T17300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.364642][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 410.471443][T17300] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.494728][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.501892][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.555487][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.562617][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.649193][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3185'. [ 410.661735][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3188'. [ 410.698517][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 410.703393][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.103606][T17485] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 411.289423][T17487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3190'. [ 411.455353][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.523824][T16939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 411.591029][T17300] veth0_vlan: entered promiscuous mode [ 411.625276][T17300] veth1_vlan: entered promiscuous mode [ 411.699305][T17300] veth0_macvtap: entered promiscuous mode [ 411.709074][T17300] veth1_macvtap: entered promiscuous mode [ 411.743516][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.758852][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.790301][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.803456][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.814034][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.833352][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.843848][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.853960][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.864633][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.875658][T17300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.893167][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.913363][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.923205][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.953488][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.973458][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.993629][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.008470][T17300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.041059][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.054569][T17300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.080233][T17512] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.089236][T17512] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.098211][T17512] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.107038][T17512] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.143809][ T5144] Bluetooth: hci2: command tx timeout [ 412.149514][T17300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.158880][T17300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.167796][T17300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.176745][T17300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.180463][T17517] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 412.244428][T17517] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3196'. [ 412.294420][T17300] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 412.336958][T17300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.362903][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.367674][T17523] bridge0: port 3(hsr0) entered blocking state [ 412.380037][T17523] bridge0: port 3(hsr0) entered disabled state [ 412.387139][T17523] hsr0: entered allmulticast mode [ 412.395513][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.402972][T17523] hsr_slave_0: entered allmulticast mode [ 412.411001][T17523] hsr_slave_1: entered allmulticast mode [ 412.418226][T17523] hsr0: entered promiscuous mode [ 412.424033][T17523] bridge0: port 3(hsr0) entered blocking state [ 412.430328][T17523] bridge0: port 3(hsr0) entered forwarding state [ 412.539339][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.549077][T17527] netlink: 'syz.0.3199': attribute type 2 has an invalid length. [ 412.573847][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.591133][T17527] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 412.660994][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 412.760619][T17534] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 412.783346][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.793979][T17534] macvlan2: entered allmulticast mode [ 412.799409][T17534] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 412.827000][T17534] mac80211_hwsim hwsim39 wlan0: left allmulticast mode [ 412.844196][T17534] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 412.960275][T17541] netlink: 'syz.1.3202': attribute type 21 has an invalid length. [ 412.993441][T17541] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3202'. [ 413.018572][T17548] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 413.044000][T17548] smc: net device bond0 applied user defined pnetid S [ 413.217340][T17562] infiniband syz0: set down [ 413.351650][T17569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.432700][T17565] syz.1.3208: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 413.461065][T17565] CPU: 1 UID: 0 PID: 17565 Comm: syz.1.3208 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 413.471887][T17565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 413.481984][T17565] Call Trace: [ 413.485296][T17565] [ 413.488253][T17565] dump_stack_lvl+0x241/0x360 [ 413.492981][T17565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.498211][T17565] ? __pfx__printk+0x10/0x10 [ 413.502834][T17565] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 413.509279][T17565] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 413.515817][T17565] warn_alloc+0x278/0x410 [ 413.520180][T17565] ? __pfx_warn_alloc+0x10/0x10 [ 413.525060][T17565] ? xskq_create+0xb6/0x170 [ 413.529678][T17565] ? __get_vm_area_node+0x1c8/0x2d0 [ 413.534908][T17565] ? __get_vm_area_node+0x25c/0x2d0 [ 413.540143][T17565] __vmalloc_node_range_noprof+0x62f/0x1380 [ 413.546088][T17565] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 413.552443][T17565] ? __kasan_kmalloc+0x98/0xb0 [ 413.557225][T17565] vmalloc_user_noprof+0x74/0x80 [ 413.562156][T17565] ? xskq_create+0xb6/0x170 [ 413.566719][T17565] xskq_create+0xb6/0x170 [ 413.571045][T17565] xsk_init_queue+0xa1/0x100 [ 413.575632][T17565] xsk_setsockopt+0x598/0x950 [ 413.580302][T17565] ? __pfx_xsk_setsockopt+0x10/0x10 [ 413.585491][T17565] ? __pfx_aa_sk_perm+0x10/0x10 [ 413.590340][T17565] ? __pfx_lock_acquire+0x10/0x10 [ 413.595364][T17565] ? aa_sock_opt_perm+0x79/0x120 [ 413.600299][T17565] ? __pfx_xsk_setsockopt+0x10/0x10 [ 413.605514][T17565] do_sock_setsockopt+0x3af/0x720 [ 413.610582][T17565] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 413.616140][T17565] ? __fget_files+0x395/0x410 [ 413.620824][T17565] ? __fget_files+0x2a/0x410 [ 413.625436][T17565] __x64_sys_setsockopt+0x1ee/0x280 [ 413.630634][T17565] do_syscall_64+0xf3/0x230 [ 413.635138][T17565] ? clear_bhb_loop+0x35/0x90 [ 413.639823][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.645746][T17565] RIP: 0033:0x7efd74985d29 [ 413.650157][T17565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.669783][T17565] RSP: 002b:00007efd757fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.678208][T17565] RAX: ffffffffffffffda RBX: 00007efd74b76080 RCX: 00007efd74985d29 [ 413.686190][T17565] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 413.694170][T17565] RBP: 00007efd74a01b08 R08: 0000000000000004 R09: 0000000000000000 [ 413.702325][T17565] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 413.710308][T17565] R13: 0000000000000001 R14: 00007efd74b76080 R15: 00007fff1ef32718 [ 413.718313][T17565] [ 413.727864][T17565] Mem-Info: [ 413.731029][T17565] active_anon:10282 inactive_anon:0 isolated_anon:0 [ 413.731029][T17565] active_file:1697 inactive_file:38396 isolated_file:0 [ 413.731029][T17565] unevictable:768 dirty:130 writeback:0 [ 413.731029][T17565] slab_reclaimable:12150 slab_unreclaimable:131397 [ 413.731029][T17565] mapped:33569 shmem:4293 pagetables:724 [ 413.731029][T17565] sec_pagetables:0 bounce:0 [ 413.731029][T17565] kernel_misc_reclaimable:0 [ 413.731029][T17565] free:1294636 free_pcp:771 free_cma:0 [ 413.783737][T17565] Node 0 active_anon:41128kB inactive_anon:0kB active_file:6788kB inactive_file:153512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134276kB dirty:520kB writeback:0kB shmem:15636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15252kB pagetables:2896kB sec_pagetables:0kB all_unreclaimable? no [ 413.817540][T17565] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 413.847905][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.856883][T17565] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.885019][T17565] lowmem_reserve[]: 0 2465 2466 0 0 [ 413.889591][T17562] bridge0: port 3(bond0) entered disabled state [ 413.890293][T17565] Node 0 DMA32 free:1258856kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:41092kB inactive_anon:0kB active_file:6788kB inactive_file:152672kB unevictable:1536kB writepending:516kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:2232kB local_pcp:1976kB free_cma:0kB [ 413.890354][T17565] lowmem_reserve[]: 0 0 [ 413.896863][T17562] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.940674][T17562] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.940677][T17565] 0 [ 413.949205][ T74] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 413.972221][T17565] 0 0 [ 413.977616][T17565] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.043216][T17565] lowmem_reserve[]: 0 0 0 0 0 [ 414.048883][T17565] Node 1 Normal free:3905584kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.053962][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.092730][T17565] lowmem_reserve[]: 0 0 0 0 0 [ 414.094331][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.102190][T17565] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 414.141157][T17565] Node 0 DMA32: 72*4kB (UM) 25*8kB (UME) 5*16kB (UME) 10*32kB (UME) 5*64kB (UME) 51*128kB (UME) 52*256kB (UME) 31*512kB (UM) 23*1024kB (UM) 11*2048kB (UM) 287*4096kB (UM) = 1258552kB [ 414.161573][T17565] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 414.173622][T17565] Node 1 Normal: 230*4kB (UE) 61*8kB (UME) 49*16kB (UME) 201*32kB (UME) 100*64kB (UME) 29*128kB (UME) 15*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3905584kB [ 414.194282][T17565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.204020][T17565] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.218931][T17562] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.221629][T17565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.230646][T17562] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.238201][T17565] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.238224][T17565] 44394 total pagecache pages [ 414.238243][T17565] 0 pages in swap cache [ 414.238252][T17565] Free swap = 124996kB [ 414.263656][ T5144] Bluetooth: hci2: command tx timeout [ 414.265789][T17562] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.290417][T17562] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.293780][T17565] Total swap = 124996kB [ 414.304957][T17565] 2097051 pages RAM [ 414.309817][T17565] 0 pages HighMem/MovableOnly [ 414.314667][T17565] 427013 pages reserved [ 414.318830][T17565] 0 pages cma reserved [ 414.396791][T17562] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.406387][T17562] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.416006][T17562] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.425565][T17562] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.445941][ T5885] lo speed is unknown, defaulting to 1000 [ 414.455364][ T5885] lo speed is unknown, defaulting to 1000 [ 414.499551][T17533] lo speed is unknown, defaulting to 1000 [ 414.502422][T17580] nicvf0: tun_chr_ioctl cmd 1074025676 [ 414.510978][T17580] nicvf0: owner set to 0 [ 414.522136][T17533] lo speed is unknown, defaulting to 1000 [ 414.725970][T17590] vlan2: entered promiscuous mode [ 414.754633][T17589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.863348][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.997408][T17604] netlink: 'syz.3.3217': attribute type 29 has an invalid length. [ 415.064099][T16939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 415.341686][T17595] lo speed is unknown, defaulting to 1000 [ 415.361503][T17595] lo speed is unknown, defaulting to 1000 [ 415.372296][T17582] lo speed is unknown, defaulting to 1000 [ 415.590035][T17600] __nla_validate_parse: 5 callbacks suppressed [ 415.590057][T17600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3215'. [ 415.622091][T17582] lo speed is unknown, defaulting to 1000 [ 415.639923][T17600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3215'. [ 415.718747][T17600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.903945][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.942479][T17623] team0: Device gtp0 is of different type [ 416.217102][T11522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 416.305037][ T5144] Bluetooth: hci2: command tx timeout [ 416.477264][T17626] team0: Device gtp0 is of different type [ 416.943511][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 417.059374][T17650] team0: entered promiscuous mode [ 417.078161][T17650] team_slave_0: entered promiscuous mode [ 417.084995][T17650] team_slave_1: entered promiscuous mode [ 417.090830][T17650] team0: entered allmulticast mode [ 417.096235][T17650] team_slave_0: entered allmulticast mode [ 417.102000][T17650] team_slave_1: entered allmulticast mode [ 417.296597][T17657] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.304175][T17657] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.327133][T17657] team0: left promiscuous mode [ 417.332023][T17657] team_slave_0: left promiscuous mode [ 417.337894][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 417.346167][T17657] team_slave_1: left promiscuous mode [ 417.351797][T17657] team0: left allmulticast mode [ 417.356948][T17657] team_slave_0: left allmulticast mode [ 417.362519][T17657] team_slave_1: left allmulticast mode [ 417.432718][T17657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.456210][T17657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.557267][T17657] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.567610][T17657] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.576732][T17657] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.589322][T17657] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.754429][T17674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.983319][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.180464][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 418.475689][T11522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 418.562486][T17714] netpci0: renamed from team0 (while UP) [ 418.620603][T17714] netpci0: Cannot enslave team device to itself [ 418.641907][T17714] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 418.676031][T17689] lo speed is unknown, defaulting to 1000 [ 418.704552][T17689] lo speed is unknown, defaulting to 1000 [ 419.023646][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.295624][T17747] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 419.368360][T17747] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.379137][T17750] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3256'. [ 419.390117][T17747] bond0: (slave team0): Enslaving as an active interface with an up link [ 419.419701][T17751] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3048:85ff:fea3:45a0 error=-28 [ 419.636380][ T6389] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.717930][T17768] Bluetooth: MGMT ver 1.23 [ 419.849112][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3260'. [ 419.983077][T17751] infiniband syz1: set active [ 420.027513][T17751] infiniband syz1: added team_slave_0 [ 420.063356][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.085183][T17780] bridge: RTM_NEWNEIGH with invalid ether address [ 420.160165][T17751] RDS/IB: syz1: added [ 420.184541][T17751] smc: adding ib device syz1 with port count 1 [ 420.190787][T17751] smc: ib device syz1 port 1 has pnetid [ 420.283311][T17788] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 420.291087][T17788] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3266'. [ 420.322269][T17783] : entered promiscuous mode [ 420.635105][T17805] IPv6: sit1: Disabled Multicast RS [ 420.824700][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 421.094688][T17822] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 421.103846][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.148379][T17826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3279'. [ 421.204537][T17829] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 421.224118][T17829] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 421.239803][T17829] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 421.250001][T17831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.258219][T17829] netlink: 'syz.2.3280': attribute type 2 has an invalid length. [ 421.286024][T17831] netlink: 'syz.1.3281': attribute type 10 has an invalid length. [ 421.294821][T17829] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3280'. [ 421.349739][T17831] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 421.768632][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3282'. [ 421.832838][ T5144] Bluetooth: hci0: command 0x0401 tx timeout [ 422.083679][T17858] netlink: 'syz.0.3289': attribute type 1 has an invalid length. [ 422.091569][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'. [ 422.144399][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 422.159884][ T6389] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 422.220028][T17863] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3291'. [ 422.260456][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3293'. [ 422.271166][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'. [ 422.287685][T17867] netlink: 'syz.3.3292': attribute type 9 has an invalid length. [ 422.552000][T17882] vlan2: entered promiscuous mode [ 422.557784][T17882] bond0: entered promiscuous mode [ 422.563035][T17882] bond_slave_0: entered promiscuous mode [ 422.569182][T17882] bond_slave_1: entered promiscuous mode [ 422.576656][T17882] team0: entered promiscuous mode [ 422.581802][T17882] team_slave_0: entered promiscuous mode [ 422.588302][T17882] team_slave_1: entered promiscuous mode [ 422.626350][T17882] bond0: left promiscuous mode [ 422.635142][T17882] bond_slave_0: left promiscuous mode [ 422.647568][T17882] bond_slave_1: left promiscuous mode [ 422.664375][T17882] team0: left promiscuous mode [ 422.675083][T17882] team_slave_0: left promiscuous mode [ 422.688583][T17882] team_slave_1: left promiscuous mode [ 422.728420][T17885] vlan2: entered promiscuous mode [ 422.734809][T17885] bond0: entered promiscuous mode [ 422.740108][T17885] bond_slave_0: entered promiscuous mode [ 422.747741][T17885] bond_slave_1: entered promiscuous mode [ 422.753967][T17885] team0: entered promiscuous mode [ 422.759162][T17885] team_slave_0: entered promiscuous mode [ 422.765749][T17885] team_slave_1: entered promiscuous mode [ 422.774236][T17885] bond0: left promiscuous mode [ 422.779251][T17885] bond_slave_0: left promiscuous mode [ 422.785962][T17885] bond_slave_1: left promiscuous mode [ 422.792370][T17885] team0: left promiscuous mode [ 422.798019][T17885] team_slave_0: left promiscuous mode [ 422.804701][T17885] team_slave_1: left promiscuous mode [ 422.840278][T17897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3303'. [ 422.974428][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 422.983958][T17901] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.183340][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.275004][T11522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 423.361378][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3311'. [ 423.511317][T17919] netlink: 'syz.1.3312': attribute type 1 has an invalid length. [ 423.525041][T17922] tipc: Started in network mode [ 423.529968][T17922] tipc: Node identity 08000000000000006e, cluster identity 8 [ 423.780620][T17941] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 423.783776][T17938] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 423.937507][T17926] lo speed is unknown, defaulting to 1000 [ 423.954543][T17926] lo speed is unknown, defaulting to 1000 [ 424.223624][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.413815][ T6389] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 424.951677][T17993] dvmrp0: entered allmulticast mode [ 424.959989][T17995] dvmrp0: left allmulticast mode [ 424.967702][T17974] lo speed is unknown, defaulting to 1000 [ 425.159274][T17974] lo speed is unknown, defaulting to 1000 [ 425.175411][T18001] nbd: socks must be embedded in a SOCK_ITEM attr [ 425.243785][T17995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.263347][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.554227][T16939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.764222][T18010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.776883][T18000] lo speed is unknown, defaulting to 1000 [ 425.848614][T18000] lo speed is unknown, defaulting to 1000 [ 426.132569][T18026] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 426.260883][T18029] __nla_validate_parse: 16 callbacks suppressed [ 426.260911][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3344'. [ 426.303360][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.694771][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 427.018358][T18060] vlan2: entered promiscuous mode [ 427.065579][T18060] team0: entered promiscuous mode [ 427.075250][T18060] team_slave_0: entered promiscuous mode [ 427.095027][T18060] team_slave_1: entered promiscuous mode [ 427.101819][T18060] vlan2: entered allmulticast mode [ 427.123658][T18060] team0: entered allmulticast mode [ 427.134069][T18060] team_slave_0: entered allmulticast mode [ 427.148828][T18060] team_slave_1: entered allmulticast mode [ 427.230188][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 427.343354][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.367501][T18060] hsr_slave_1 (unregistering): left promiscuous mode [ 427.378708][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 427.432845][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 427.516722][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 427.526153][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3354'. [ 427.620556][T18072] gtp0: entered promiscuous mode [ 427.678501][T18075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3356'. [ 427.746336][T18082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3357'. [ 427.774372][T18076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3357'. [ 427.782975][T18085] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 427.854494][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 428.278452][T18104] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 428.343317][T18109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3364'. [ 428.383316][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.798791][T18131] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 428.850592][T18134] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 428.854667][T18131] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 428.869151][T18134] netlink: 'syz.4.3372': attribute type 2 has an invalid length. [ 428.984012][T16925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 429.181710][T18157] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 429.231412][T18157] xt_hashlimit: size too large, truncated to 1048576 [ 429.423350][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.434308][T18170] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 429.713072][T18192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.739865][T18192] netlink: 'syz.2.3385': attribute type 10 has an invalid length. [ 429.756103][T18192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 429.886693][T18179] lo speed is unknown, defaulting to 1000 [ 429.895361][T18179] lo speed is unknown, defaulting to 1000 [ 430.133452][T16925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 430.223998][ T5144] Bluetooth: hci0: command 0x0401 tx timeout [ 430.463320][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.558372][T18204] lo speed is unknown, defaulting to 1000 [ 430.691457][T18204] lo speed is unknown, defaulting to 1000 [ 430.810336][T18233] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.817667][T18233] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.935156][T18237] dvmrp0: entered allmulticast mode [ 430.948344][T18237] pimreg: entered allmulticast mode [ 430.955763][T18237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.964891][T18237] batadv_slave_1: entered promiscuous mode [ 431.191636][T18242] xt_cgroup: path and classid specified [ 431.284170][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 431.470090][T18250] __nla_validate_parse: 6 callbacks suppressed [ 431.470108][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'. [ 431.495248][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3399'. [ 431.504305][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.710315][ C1] Unknown status report in ack skb [ 431.720239][ T74] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 431.860031][T16925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.878394][T16925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.936525][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.950331][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.069751][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.088282][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.135153][T16925] ------------[ cut here ]------------ [ 432.141160][T16925] WARNING: CPU: 1 PID: 16925 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d1/0x440 [ 432.151985][T16925] Modules linked in: [ 432.155983][T16925] CPU: 1 UID: 0 PID: 16925 Comm: kworker/u8:23 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 432.167161][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 432.177844][T16925] Workqueue: cfg80211 cfg80211_event_work [ 432.184086][T16925] RIP: 0010:__cfg80211_ibss_joined+0x3d1/0x440 [ 432.190756][T16925] Code: 0f 85 81 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 bb 71 77 f6 90 0f 0b 90 eb ba e8 b0 71 77 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb aa e8 a0 71 77 f6 90 0f 0b 90 e9 c2 fd [ 432.211104][T16925] RSP: 0018:ffffc900054b7a20 EFLAGS: 00010293 [ 432.217327][T16925] RAX: ffffffff8b2810c0 RBX: 0000000000000006 RCX: ffff888078c7da00 [ 432.225746][T16925] RDX: 0000000000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb220 [ 432.234338][T16925] RBP: ffffc900054b7b00 R08: ffffffff942c18ff R09: 1ffffffff285831f [ 432.242345][T16925] R10: dffffc0000000000 R11: fffffbfff2858320 R12: ffff888034d83338 [ 432.250858][T16925] R13: 1ffff92000a96f4c R14: dffffc0000000000 R15: ffff888022780d90 [ 432.252113][T18264] syz.1.3402[18264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.258873][T16925] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 432.258954][T16925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.258971][T16925] CR2: 00007f556a23ab04 CR3: 000000005b096000 CR4: 00000000003526f0 [ 432.258991][T16925] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 432.259005][T16925] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 432.259019][T16925] Call Trace: [ 432.259029][T16925] [ 432.259039][T16925] ? __warn+0x165/0x4d0 [ 432.259066][T16925] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 432.259093][T16925] ? report_bug+0x2b3/0x500 [ 432.259116][T16925] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 432.259164][T16925] ? handle_bug+0x60/0x90 [ 432.259190][T16925] ? exc_invalid_op+0x1a/0x50 [ 432.259215][T16925] ? asm_exc_invalid_op+0x1a/0x20 [ 432.259247][T16925] ? __cfg80211_ibss_joined+0x3d0/0x440 [ 432.350719][T18264] syz.1.3402[18264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.353072][T16925] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 432.353112][T16925] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 432.353136][T16925] ? lockdep_hardirqs_on+0x99/0x150 [ 432.388006][T16925] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 432.393980][T16925] ? cfg80211_event_work+0x24/0x60 [ 432.399147][T16925] ? __pfx___mutex_lock+0x10/0x10 [ 432.404504][T16925] cfg80211_process_wdev_events+0x3af/0x510 [ 432.410432][T16925] ? process_scheduled_works+0x976/0x1840 [ 432.416430][T16925] cfg80211_process_rdev_events+0xac/0x110 [ 432.422265][T16925] cfg80211_event_work+0x2c/0x60 [ 432.423539][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 432.427583][T16925] process_scheduled_works+0xa66/0x1840 [ 432.441018][T16925] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.447570][T16925] ? assign_work+0x364/0x3d0 [ 432.452204][T16925] worker_thread+0x870/0xd30 [ 432.456929][T16925] ? __kthread_parkme+0x169/0x1d0 [ 432.461989][T16925] ? __pfx_worker_thread+0x10/0x10 [ 432.467473][T16925] kthread+0x2f0/0x390 [ 432.471572][T16925] ? __pfx_worker_thread+0x10/0x10 [ 432.476991][T16925] ? __pfx_kthread+0x10/0x10 [ 432.481612][T16925] ret_from_fork+0x4b/0x80 [ 432.484441][T18268] x_tables: duplicate underflow at hook 1 [ 432.486366][T16925] ? __pfx_kthread+0x10/0x10 [ 432.496457][T16925] ret_from_fork_asm+0x1a/0x30 [ 432.501253][T16925] [ 432.504823][T16925] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.512125][T16925] CPU: 1 UID: 0 PID: 16925 Comm: kworker/u8:23 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 432.523180][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 432.533251][T16925] Workqueue: cfg80211 cfg80211_event_work [ 432.539014][T16925] Call Trace: [ 432.542318][T16925] [ 432.545353][T16925] dump_stack_lvl+0x241/0x360 [ 432.550057][T16925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.555272][T16925] ? __pfx__printk+0x10/0x10 [ 432.559862][T16925] ? _printk+0xd5/0x120 [ 432.564025][T16925] ? __init_begin+0x41000/0x41000 [ 432.569054][T16925] ? vscnprintf+0x5d/0x90 [ 432.573379][T16925] panic+0x349/0x880 [ 432.577305][T16925] ? __warn+0x174/0x4d0 [ 432.581461][T16925] ? __pfx_panic+0x10/0x10 [ 432.585882][T16925] ? ret_from_fork_asm+0x1a/0x30 [ 432.590815][T16925] __warn+0x344/0x4d0 [ 432.594793][T16925] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 432.600340][T16925] report_bug+0x2b3/0x500 [ 432.604677][T16925] ? __cfg80211_ibss_joined+0x3d1/0x440 [ 432.610236][T16925] handle_bug+0x60/0x90 [ 432.614392][T16925] exc_invalid_op+0x1a/0x50 [ 432.618891][T16925] asm_exc_invalid_op+0x1a/0x20 [ 432.623739][T16925] RIP: 0010:__cfg80211_ibss_joined+0x3d1/0x440 [ 432.629911][T16925] Code: 0f 85 81 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 bb 71 77 f6 90 0f 0b 90 eb ba e8 b0 71 77 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb aa e8 a0 71 77 f6 90 0f 0b 90 e9 c2 fd [ 432.649511][T16925] RSP: 0018:ffffc900054b7a20 EFLAGS: 00010293 [ 432.655577][T16925] RAX: ffffffff8b2810c0 RBX: 0000000000000006 RCX: ffff888078c7da00 [ 432.663541][T16925] RDX: 0000000000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb220 [ 432.671505][T16925] RBP: ffffc900054b7b00 R08: ffffffff942c18ff R09: 1ffffffff285831f [ 432.679467][T16925] R10: dffffc0000000000 R11: fffffbfff2858320 R12: ffff888034d83338 [ 432.687430][T16925] R13: 1ffff92000a96f4c R14: dffffc0000000000 R15: ffff888022780d90 [ 432.695403][T16925] ? __cfg80211_ibss_joined+0x3d0/0x440 [ 432.700955][T16925] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 432.706846][T16925] ? lockdep_hardirqs_on+0x99/0x150 [ 432.712044][T16925] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 432.717934][T16925] ? cfg80211_event_work+0x24/0x60 [ 432.723054][T16925] ? __pfx___mutex_lock+0x10/0x10 [ 432.728085][T16925] cfg80211_process_wdev_events+0x3af/0x510 [ 432.733985][T16925] ? process_scheduled_works+0x976/0x1840 [ 432.739788][T16925] cfg80211_process_rdev_events+0xac/0x110 [ 432.745590][T16925] cfg80211_event_work+0x2c/0x60 [ 432.750528][T16925] process_scheduled_works+0xa66/0x1840 [ 432.756087][T16925] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.762075][T16925] ? assign_work+0x364/0x3d0 [ 432.766668][T16925] worker_thread+0x870/0xd30 [ 432.771260][T16925] ? __kthread_parkme+0x169/0x1d0 [ 432.776285][T16925] ? __pfx_worker_thread+0x10/0x10 [ 432.781390][T16925] kthread+0x2f0/0x390 [ 432.785456][T16925] ? __pfx_worker_thread+0x10/0x10 [ 432.790568][T16925] ? __pfx_kthread+0x10/0x10 [ 432.795153][T16925] ret_from_fork+0x4b/0x80 [ 432.799583][T16925] ? __pfx_kthread+0x10/0x10 [ 432.804170][T16925] ret_from_fork_asm+0x1a/0x30 [ 432.808935][T16925] [ 432.812209][T16925] Kernel Offset: disabled [ 432.816599][T16925] Rebooting in 86400 seconds..