last executing test programs: 5.362909361s ago: executing program 0 (id=3225): r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1b}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket(0x15, 0x5, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r9, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 4.803930537s ago: executing program 2 (id=3231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x40600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x1) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000002c0), 0x1, r8}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4.705293743s ago: executing program 2 (id=3232): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x13, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) unshare(0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="90244f777edd0d886ef0674e18233fa5f68d1531360bde1e4235cf43e443d5c668e29dd177889f978195aa33ec2b4c0d8d2d893ab7eae1013e895c355bf92f1bf89e453bd40b3f336a4b4d322ef50dabaf41c6ac742b8052d3f6bf1eab9435617dc363b0bfac4dba130fe9737e32d070354511cf6ff3021a3a8ddbcc8b32c3038ffa59db99416727c68a8c8fda58ec8549f800d3d2825025ed03824e05b7cd97321e8d6c4a3370cb88ed354f9171bb31a1a31f201b1b269644", 0xb9}], 0x1) unshare(0x20020400) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) pipe(&(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4e0e0ae967dbc6b4d4388e6fea26143c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x36c16b24}]}, 0x40}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x160, 0x700, {}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x18}}, 0x0) unshare(0x68060200) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) pselect6(0x40, &(0x7f0000007e00)={0xffffffffffffff72, 0x1000000000, 0x60, 0x4, 0x1, 0x8001, 0x5, 0x5}, &(0x7f0000007e40)={0x0, 0xb9, 0x8, 0x1f, 0x242d, 0x2}, &(0x7f0000007e80)={0x3, 0x3, 0x3, 0x1, 0x2, 0x68e, 0x3004, 0x10000000000000}, &(0x7f0000007ec0)={0x0, 0x3938700}, &(0x7f0000007f40)={&(0x7f0000007f00)={[0x3]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 4.416370372s ago: executing program 0 (id=3234): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000540)=0x4, &(0x7f0000000580)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000300)='wlan1\v', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000004c0)={0x0, 'ipvlan1\x00'}, 0x18) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000b80)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d475c5701c17866051e6a72fd9c635852af264213a47caa2cb5fb91a62d61417e32e8000890687d74ba2d1a8eaecaa169ef95f7347e7592e9283a9357185b1282ad068be2fcf88bcb", 0x83}, {&(0x7f0000000800)="8534f65f698d0200a3ee30459376efe5001dc546f93c6540e7a5215fa9f9469576e94b77cfaf3f76956c4c842247e2803e33335fa28b755829ea0000406333941d8989b0b8e304f307667026a45ceae6d184bd183144ad8f5ff9ec1ba74e97e641398ad65d31b74136c511ceac2c555398fa9239e54eb9df18d1d06fa5", 0x7d}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f099", 0x65}], 0x4}, 0xc0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.970673385s ago: executing program 2 (id=3236): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) unshare(0x2000400) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000680)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000121, 0x0) listen(r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x0, 0xfffffffd, 0x9, 0x394000, 0x2000, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48) 3.775753215s ago: executing program 2 (id=3238): r0 = socket(0x200000000000011, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000002c0)) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$sock(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0xf}}], 0x18}}], 0x1, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x8919, 0x0) tee(r1, 0xffffffffffffffff, 0x3, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x0, 0x5, 0x400, 0x0, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1805000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x41}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0xe80, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r7}) getsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 3.677422783s ago: executing program 1 (id=3239): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000020701010050fa5d28000000"], 0x20}, 0x1, 0x0, 0x0, 0xa8f7ff600318703c}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x101, 0x6, 0xe8c, 0x0, 0xa84, 0x8], 0x1, &(0x7f0000000080), 0x0, [{}]}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) 3.469976548s ago: executing program 0 (id=3240): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x0, 0x2, @prog_id}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) unshare(0x24020400) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x0, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 3.469615224s ago: executing program 2 (id=3241): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x48) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) 3.44814864s ago: executing program 4 (id=3242): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x40600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x1) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000002c0), 0x1, r8}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.110698463s ago: executing program 4 (id=3244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="980300", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0d000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3840000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf25680000003400c700c2030907fa0007040507060602020a040904010707074103640703060e050102040402010804090181533dbd0d4f3e381400c700000104070602060401a340797fb11c522a00c70002068904000706046e008307070645007104030300000905040501077f00d5896072980d460e00002000c700550297050106df030a06040009010206100180062747d2cb17c1b3c12c00c700ff010104f706020304030701f701080305010603810305013304050675014805bece71a82563c02c2600c700700207060805b80607010f05030600ff0703070006"], 0xfc}, 0x1, 0x0, 0x0, 0x20040010}, 0x4044004) socket$inet_sctp(0x2, 0x0, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x20}}}}}, 0x66) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x44, 0x0, "15a74effb00e1f975ab3d2923d75febc0eb6b5de5897a590d6f534885c64533c435e507cf447d865a35dc7e90b0b36146be1e9d3e2526d75286113c093e875c645667d59de38d7eb8643ad5db3746b60"}, 0xd8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r8, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000027c0), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x5, &(0x7f00000004c0)=[{0x25, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x6}]}) 3.066806572s ago: executing program 0 (id=3245): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000300)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0) r6 = socket(0x21, 0x2, 0x10000000000002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000f08000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000200c1c8ecd012781000000ff"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) close(r1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000181a0000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100330000009500000000000000bf91000000000000b7020000d213939f8500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x3b, &(0x7f00000001c0)=""/59}, 0x90) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x3}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000)) 3.00382983s ago: executing program 1 (id=3247): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="6ecfd0c387b5408ccc0c0fcd4425a104d64ac35e6ab7d9b3a91e998d3e8401844db8a3c31303cebccdfe82e915b3740b2be944feb284d4f256d0294a0cb8b93d33bf89a557316385663fc046c6ca50ea9aefbe2e4c8ce790eecacb5a691da213895cf806ba9f70f3ac465abb96224c5ef5dd9d3a91f0cba3b75fc817ed1a56a8c40d33bcaf9e47c978b84e24561d0126fc20a6a54ece7c030c98ab5b4a909c16d30e3b912f26fa078e74e4e8da74768714c48f9766c3c8af", @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB="a13de842e02df1f12899226386631c1773dba02b3d7b1d9970ba7d7464d6ae81d09b06a48f807d1adfa68dc41d29750760b93a47a2baac7a529bb195beea7d1d54a3e817fb05458f7cb3b01133e38c61f1030bde5b6c928981206abf1dc3fb3df7ec96badcfb87dd75a5a29dc8407e5f282c67ce644cdf5bf825dd4400ec6806d7f5c876aff0fd5c33185668"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000400), 0x4) sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r7, 0x0, 0x2, 0x296c, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r6, r8], &(0x7f0000000840)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x3, 0x9, 0x1}, {0x0, 0x0, 0x4}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.321296852s ago: executing program 1 (id=3249): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) shutdown(r4, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x5, 0x0, 0x0, 0x2, 0x2, 0x3e, 0x3, 0x2de, 0x40, 0x3bd, 0x2, 0x0, 0x38, 0x2, 0x81, 0x4, 0x3}, [{}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfee3}]}]}], {0x14}}, 0xa8}}, 0x4010) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) pwrite64(r10, 0x0, 0x0, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) 2.100336249s ago: executing program 0 (id=3250): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="6ecfd0c387b5408ccc0c0fcd4425a104d64ac35e6ab7d9b3a91e998d3e8401844db8a3c31303cebccdfe82e915b3740b2be944feb284d4f256d0294a0cb8b93d33bf89a557316385663fc046c6ca50ea9aefbe2e4c8ce790eecacb5a691da213895cf806ba9f70f3ac465abb96224c5ef5dd9d3a91f0cba3b75fc817ed1a56a8c40d33bcaf9e47c978b84e24561d0126fc20a6a54ece7c030c98ab5b4a909c16d30e3b912f26fa078e74e4e8da74768714c48f9766c3", @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB="a13de842e02df1f12899226386631c1773dba02b3d7b1d9970ba7d7464d6ae81d09b06a48f807d1adfa68dc41d29750760b93a47a2baac7a529bb195beea7d1d54a3e817fb05458f7cb3b01133e38c61f1030bde5b6c928981206abf1dc3fb3df7ec96badcfb87dd75a5a29dc8407e5f282c67ce644cdf5bf825dd4400ec6806d7f5c876aff0fd5c33185668"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000400), 0x4) sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r7, 0x0, 0x2, 0x296c, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r6, r8], &(0x7f0000000840)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x3, 0x9, 0x1}, {0x0, 0x0, 0x4}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.0435804s ago: executing program 3 (id=3251): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x4040) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000180)="84b31ee703f6dada8e") socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x3, 0x1, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x891b, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3573], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.927274959s ago: executing program 4 (id=3252): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x9, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2000000000000125, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8698}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x8, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r9, &(0x7f0000000300)=""/60, 0x3c, 0x3e8, 0x0, 0x0) 1.850603784s ago: executing program 3 (id=3253): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x1, 0x2, 0x0) shutdown(r5, 0x1) sendmmsg$unix(r5, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1}, &(0x7f0000000200)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x1001d61, 0x457, 0x2, 0x28d4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x48) getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000000180)=""/32, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x2c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d4755bf5", 0x4}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) 1.555762091s ago: executing program 3 (id=3254): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x40600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x1) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000002c0), 0x1, r8}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.130927543s ago: executing program 0 (id=3255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a000000000000791058000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="841100001400040028bd7000fbdbdf2523000f000100dc31ec9e882eb9e6ae60cb0004100100e0e8ae73172d2ae82c845f1afa7b5071bfbb17284f8e89c3198c66765be5048e90cc55e0c431675f1c263bae0df64bf2f6d389884c6485400bcc0ddc99c0d5581bfcece128c29077f9ad6d5a50742f1cd86b62b272b038f8173d51d48d5ef9d999318671cf67bf7f5184bb1f5f2b730b13456d98706daaeb704049a88b6736a92543a03b956e98ef8c28259f343d1c993a7feb0664fa40ee51f572b48b22e96dd0ad8cd2f1b8ff4a5efe9fa84fdcad37dd3aa45c73b4faad54c5301433fc8492f5f071aeb2da305a76332183dcde37ab73d4e23adbd0482695c64f1e775809e1baae798c5a63e3ff6b1f0d91e3c1dd8d91fd438123bb8d6b26ff3dde759bf435ae0d08f0844febede1ca0be5940dfb16683e21895df772df415ea2231515a487d853682e8b04242c5d8595405c81481fd9f40b26030c71d1dc3de41cfe355c71cefd656d2e56fef13830e8eb2d8af12104072e2662baeb3c9f725a30f3fc1aaf9ac8c80e031ce0554b4300799c777783bc1427f58646eb32d112cd489a020b2594b6cb679327b12340d77ffe25321c23d52dec73f5a5b6263ee76142c142ead9a9965512fd334c46e8c5f3378bb43eac542831e80a1f07bc4d26a79dbcad5ecb49eaa5633dbaa1920e627ced74e14e013b82157a911c4ea9ef9311f4063feb4fd75399b4afc9a670728bf498403e7f3b39cd1fdfb2c809d0d7afe409c6192eda5017db032f809acde4b45166a864981de02c1ab2ddf289e42e278b8f64faeec505142b06807f4140875d396eff50d330abc50859eb6f86382ddc317aa149589bac8100e8fdcbd4a5112e7a99a90a128e5d6c86932715055ebdf32842c6193fd20ab27a45538ca318c0ff8c54ab446ed96bb1f0189d8ddffae2b1b95b5fa106084f11f5eb27eda608580dc0db3ee6f401f91d3f17cb1968bdef4eb418bffb8b371fc10e1536851db0d3ac42b1b7f05fc3450c49c8c3362b6483399a8096848dd7dddb9a014fc99e5841084607c82fb87111b68216d0e7a512d3580a0754aa8b7345dcbeaae9290cdad21433453222d826cec35afeaff0b7f866e5407fbb29ab4fe8c69f1097b11368ce765834e574510b14f5734fb72a2dee9315c885632cf68d0d52dacc8d0d4cff1750aa676e9ba6629ae74f06d7c9a6d707d77cb0c609328ede245263bcce6ff1573b6e153b7fd6ea98f00224a48a37faa54f0cf0359d3fc19b665d0be31302e629c8d9bc50c130a8102b3bd83cc56be4766223a26a4fcc462dd3e07b1dc2ba3d7f77f216dda7c1dffd5b38f9f898bf82453d29bf109b57c3ff5f8b6e6eca0aa0edd839e2a3b01c8f3f4de770d021c1bc232edc35aed1a0f98b0e1a4ce4a48c77a783b337f80e084aec04d020473bfb706a0e51e009d3554d28dd1d153e820be6e95256303a70cd60a1324fb34fa0504ac23457f4881cfc82bc24d65831fc369fbe591dcb34f9d500781aaeaa309e6e608e761415e1433f9af5ba58b10959bc3c510f023c67b12e320f23cd6be9dbb73b932945b1a759eb7db6349cffcf7e3a1962fb70bcef45446c5cfd04042cc69e46a03b44342f6a59270173f331a53e571caef6b5b454cdbb20edb5193afd6cf7310eb4583db73f8735bd3b32bc587d06f242b0d122f33d80780c362dcceba3fae819b1f1945f35426d60fd4335c4cc3dd1b0bfd6d3ca2229b43085f2b2837328c794161afffce3822641b9923bfc733a82bcaf82887a1dab0bab7c26b8dac49e6e2861df12d8fe16585ce1f0f70ded43537d2be990c7fed54f6b67f5e92ea63ffa349e6b162bc5a8ec22af4786396d5023f604e60ee5e7df418e05ed998e5d60b9d958dab34fc1d1b3db121bfe73cff7af68d57ddc449ab5515078d12999ae6b8f945b1757e7f225730ececdb695f5b68950c66e77d3807fb94011324cef8777a0ffa27b2be69b952d32fb0e9bb63f2e6dbdf96f29a880756e1d75c2ab5cd22deb32767c18e14b5bc972c782a6484a6c0f82b91cc6d95da1221d0c410985fe540dc9be60972c25cc5e9d5e99ea9a5a94512388c72d133520da5e6322e8c0fcc6e320bdb00b7109e3c51a8d90d5c5865a52906dd36ac12d8c92527d92cf006757b0e5df52edd84764d9df8cf7447a94011ee61a77bcba99de13b394dae990cd708891a7ebfa2b1ec1d4aef6d663b338462dd36d800fc64754e73a0a2018a8fa2a7351d33a94e085e16b4fa952d13e1bd4073d8d90d3c2580cbdb8ac32623a6e4061bebab687b099e7de2e6e8d0faba49455e2eb8b51c8b553c6a55e811d57e54078bea7bbf694d0033cde16696448252735f91c6eaf25bc9b0e47e1a63e39249fbde3d10e516de81a6b287526cb05180e7efa34b3e3c90f7d6bec3f326c82ff85ff38c76ac420c4da5856ba0b1188bf17b709397a50dd7092285ca163c5b039a1358d68bcf6976d5d214e5295c726171975dad57204d92c2ad07b34c88e42bdb76807e8aa8aa9496349ce8439ea4d065a9960b602452a58bf700f0c58e3e7747c1bd0d8afd6f2fc073f11f7c99fb5ce9e2148687bb51c55d2f25aa1a959d7dc00db43ed6d7cf3496e96a1cd451d8be27de623d45bb4b28c918ce776612d96dd8afd691d9f68d1d8b0689fa9a440507ec2bd8da74a7d8585e952462457bcb5ea9fc8f44d01b61670a27576ede4ba8aa809367ca4b6a0de74119242cbb0f8c1a8df018ed3d0bd71f66f772062e0190e30d3089261ae52eb233a6be3fa9ec07a71a7a3da128c9ad6ef828b39baf6c8613889d6c5a73f3e459f7e1b6a8906fb98ff60175a846561eb739ec4246a3c1904dfa75f2efd9165770ddc7a9610fef19a54024beb56ee534f34f59c98fdda10d8aecc392124ae83e84b6b8056108ebfe8a2142457c14e2e6bf7b65dcfa9f6f33e7cc6a0a39706c20c12d765a233df899c7cb1bfdef874ecbf001aed7feb776edf312e904817582faa7fdcc014339c4685e29262c575c133fc16657019dfbadbc197fc7018e0d95a02b0ec64fc7a92340ec106546578a1769b475a97491c870bf5fc187236745dc8fe6b58dc7f96058db5b41b5a09b6399726bfe0613b949def1395b01c8e1ea692167db4282353c51b884e9291c248e85fecd30169d971094a640ec78a8e6663545029b527e9bad74eada1b1477e819ed40e49dc5c32d3ed4e20c0355933c9348a1d8781e6a6caa9763da49d8b303d4eff4e927805f0bddc030aa9d3fd809f39b762cda0e1dccb6a5c105eae05018be9ce48c3a4c23a6221167f005a1d5ed2112b9ffd1f12fe326ea72ddfb15408608e9d306a3425b838fb06a1b5f18b9550fd4d19e9d195214779b92c979a3678f3a202780dc8ab454e1eea4ce07cf318c7bbec8bbc86757d72c2a2503eb2cc49c7b7cc5609effd5cc61a4803ade24fbce12dbecb6e39b439f2755ee7f5d75c60a3f150116d02f9a9c5b39070329b3f2f656beb23b74cc7d79dc133cc9d921a3a2e87786bc6e554d1c89416994b0c1f390dc66ee5d625488d312ebf3404d7bbd8901d7ac5f29f2b15ce7562f6b6d82deb34217c4820db1e28e3ccaff7ffc1c42d0486a5818dffa24987e4b7a711ad30ecdf90392289fd5cff8e7e5675b24cae0f0c3a10a6e458d99bd393cb95993474ac40ca2e6ec6de0e4b415dba15df17b5a2c433fd9f3ec2447d3b4c7387d43ee0519ac605aa0ce4cb36b62a955ba401dde183a34d820f866993fc575268f9d1bb5a27778a4ee48e1fbbd30d078d6105d3b467f626e34219561e7465001e17df56634f89c3df2d6f92313c50b6c4b46cc14830ceecbfe65cb99fb061559016851f73b8d29bd0ee2e162d460b3873039561b5f1986802892866a6927883cac80eaafa13888929572be1ce64fca2d7a09f7198db8361b63f6d6e64153c23bb4d770e3035581be61dcf1fc21a5c2b171111e2e425cb483c298117b2c5d2e044a81c4fe2d4979d2235b523f50fa36c0539a36f79d43e7c0c23f2d7ce09d8e2653c3cdb1473618a395c0c42947321406d46e1b2f54a14d8774a2311e2388f7d7a4a394b7ed64f50842024690f27b18a18245f6f1da09914972311d58812ba343f2ea2817c1b3b061a22f16335fd5967b016ffd24743f6bf4df2a6c981ddea8d07e87f63a6c5929623035518888d1b93e0cf6be8b6f2ecba2e135328ca2c43f26cb6400212457ee7d6917b7d00196a8dec2a4cfe1315bb4ba9989973644b315819eff6ae2970dd242488ffa5d86934c9c27d955872b1e0df93185487a7e9acff50baef5c52c59a4fcff0f4a761da74231893a9d7b122866a89e81679e475aacc5db25140475010efff89f059b474f89e7ed7c2567d6a4c0263078987eb8a253cb81259dd7d3f432353326c8008fcc80de73df7146b31ee267dd98722110ad617f74674cce717c75df853694bf4aee7877d3b0e6750057bd0dd83c26df0f3df589bc5554b4fadd9bb9e9580116406692fe68bddb28db62ce2eb73fc8d36c8c9ee01e58aab13117264852c01f10ade97ff6d1f9d2128d9c231d4e548d253d401a3671fafbc827cf797c613df89def5c29e966d942285b69201f65cfa0f7a586bd287bee6a6258aa0092f37b855477252beb91ec3aa151f97c1663edf1d1a3e6a52e0a1d3f9a7fb75bf0c03ab86c3f89f71b4bc7b388d20b25a352ba99457c230043a9eb31c9084be5659b7ff44bfefae1ecff3140731e0b8127828ef97eb2df7c3678c82bc6a06f376598ee958ebe82dfddd5883f1b901a0f963c1a1d095451f845b5e4b284ac44dd4434cf8493c6e35ee29082859f1b25f04867a6a1b11c78e2c2f9a8bf13be7a29e0593a7b87d9460e5923f35ce208d2ae6df906c4e1a3de9ce6b2267f125ef41663ef8b5910058093635e29880f627eae9afa83de3299a5b124aa66b1cf8772a4752f84e57fa045f19c8c78fcc5c1b918ebbd8e8679b982901cd39ee103ec1bcac23e7bf2f0cd4c01be986902eea1c49edfbd500393232ff5aa738826970a7b5bac5bc5667ab35d14a214b898aeb94b6a3d3602b75b306ea0c28f4be8e7e0b0889ebb1a9aaadc1501d2f869cc6324bd067eff22b648ff047c70dc6a13d780f05dd9b78cec80020f6ba41fce4f46e4be5878eae16904198e77db7cdb4d6b7535070e9586802ab096938170436fc4ad02ed7bc5ac5dcbfe73a93a17b4970a902a25f8d77d31e9009660c04f1f1095c88e906a58f1a9242a2d018f7eb1db20d63b17d194b10754be34ad10b6337d2231415be3fc61ac79bd76f007da9af7f97be85e33d18f332911121d94e590ebb22734708cb14663f4ad95dfadf1d12de7a36d72f243bea4c6e04c80f8daaeb7cc76aa3a7202075f6f8d5c2c2017432a4405c80ce19fdc60a17c9326d79455aaa4333d989a00d8ea93cacd93969d1080c07e22c7cb6b2e9096a76a58079bc164444100cffe5e5c024021894d7db152dc250d255ff9ea74773d6e2af01e5d070b65c0fd06c1b7a95e8066a72d75c15f58cf0e40bf28a3934da89e1099c3a330541f76aad869c92ecbfc5db0ea3d6cb20c6810827888ebc9f85cc6e050a86b5827b5062151b877d0ebf4c88cdcd9987ae5c0f4ffe43958ee7057a6fa0ad707bddd6b3ae5d153ebb1ca6ba6a67a52f568b819771e8590b37105635d1c59908a502a132f6c20c5da73405f9203e5073da4b49a2c4114c9c72cde3d3aabeef3a14eb336ba41db7c09089048958d33332f49b116c08d0e2a0d6b1764e010cf8a499f428cb2a46307757e0f0a473dc7c14e56152216e7a2c82ef6489ae9bc6a100f99e65289971e7559f1a856c000100cc540500bdd51768c0a8b471b27e5e6c4417de9abf51d59ee07aa5d63c563a683ae05e12ca952871e2411ed8b59423e69fe020a688df52b6afe8e173ed3291f9c1834d00f39838463d998116f83d2973915312516f167bab202f76143612d027f2fa8b563fb0935513000100ca7e7c1da7f5d78df2ab1f289e62ec002d000100041f466da6bdc8af23a37faa6653d652c648a5b4d114d03d706466145215aca4d455508330c6c50f60000000ab000100d28ccbb7dcb6040f86a4c2b5db57c6f8961d213702d106d4e7d42ade9769c7bf2581c60fa9ba9d4d4dbe018aa154198ce7510d83496b897202c64d2ad622a083c569774640e92eae620b96a5be12d7189cffc895223feb898a6aa3051ca5e594bfa8a8dd515c9c0ea3bb8436f2901084735f68d94e9ca9f843d744b69b94127d14389b6aa2b71b1feef7111f652bf2a7c34c233f913bbf1a5e86f467eea83d069459ffd97ef86b000000"], 0x1184}, 0x1, 0x0, 0x0, 0x20000000}, 0x240440c0) sendmsg$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x80}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0xf2f0540c6a304b27, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev, @private0, @local, @loopback, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast2, @ipv4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYRES64=r2], 0x34}}, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000580)={'bridge0\x00', 0x1000}) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4809a}, 0x81) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, &(0x7f0000000580), 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="dd7f145564e0d1c379aafd7a6261c38bb4c5bd9e9ed3bd7aa0f2d60e1f26d3bd690eeb6bea66824faf350ac2764e", 0x0, 0x0, &(0x7f0000000280), 0x9, r1}, 0x38) 1.112013976s ago: executing program 3 (id=3256): socket$kcm(0x21, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005a60100000000001400018008000100e0000002080002000000000008000740000000001c0018800800014000000000080002400000000008000340000000000800084000000000"], 0x88}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000040)=""/253, 0xfd, 0x0, &(0x7f0000000140)=""/141, 0x8d}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2b, 0x801, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r5}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000002000000002000000200004801c0001"], 0x74}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc01000010000300"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b00010067656e657665"], 0x1bc}, 0x1, 0x2}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000600001801000020786c2500000000002020207b1af8ff00000000bf2100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x21, &(0x7f00000002c0)=""/33, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xfffffffc}, 0x90) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201"], 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r9, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 1.103496991s ago: executing program 1 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000020701010050fa5d28000000"], 0x20}, 0x1, 0x0, 0x0, 0xa8f7ff600318703c}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x101, 0x6, 0xe8c, 0x0, 0xa84, 0x8], 0x1, &(0x7f0000000080), 0x0, [{}]}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) 919.759601ms ago: executing program 4 (id=3258): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket(0x2, 0x3, 0x6) sendto$inet(r3, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000002c40)=0x212, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x11, r5, 0xa8cfb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) getsockopt$inet_mreqn(r8, 0x0, 0x0, &(0x7f0000001440)={@empty, @remote}, &(0x7f0000001480)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0xe92, '\x00', r7, r8, 0x0, 0x2, 0x5, 0xd}, 0x48) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) 801.39581ms ago: executing program 1 (id=3259): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a"], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) socket(0xb, 0x800, 0xfffffffa) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x0, @empty}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000140)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000000000000c410000000c3c0c62726f616463617374466c696e6b0000c7fe35677b1ca8681b9ebb964357b38690fb77225c377ca18588e035c40343583277758ae9b103879cd024969daf4ced41f624b42d2d56cf8e6ebdda94614b4cd91072c4aacf01522328cd16aaa6a32e359b750a7f0b6f8c6dc42052c42a5e389c8c0bffe3b8d5ef94e2ee0abca60b1020df2e061da56066462acfef5f614feb455abc5fd81bfd137000"/195], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipmr_newroute={0x64, 0x18, 0x700, 0x70bd26, 0x25dfdbfe, {0x80, 0x80, 0x80, 0x40, 0x0, 0x3, 0xfe, 0x7, 0x1200}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_TABLE={0x8, 0xf, 0xffff}, @RTA_IIF={0x8, 0x3, r6}, @RTA_PRIORITY={0x8, 0x6, 0x75}, @RTA_OIF={0x8}, @RTA_OIF={0x8}]}, 0x64}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'pim6reg0\x00'}, 0x18) socket(0x10, 0x803, 0x0) 493.016191ms ago: executing program 4 (id=3260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) 357.094089ms ago: executing program 2 (id=3261): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x39c33f082c641d23}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) recvmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/247, 0xf7}], 0x2}, 0x10102) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000100)={0x7, 'nr0\x00', {0x1}, 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x0, 0x8}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8004, 0xfffffffe, 0x2, r9}, 0x10) connect$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x4, @private0, 0x9, 0x3}, 0x20) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000003c0)=0x5, 0x4) 314.085291ms ago: executing program 4 (id=3262): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0x1}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x37}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f0000000640)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc9d4}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x11}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0xffffffff, 0x24, 0x1}, 0x48) ioctl(r13, 0x5, &(0x7f00000002c0)="55644899aaff090970c77f3258214aa29213eb8733a9310264277bd544992ab05905e95228b5496a808e0de1487efb1a60252e97c2fe33bc84e48b113d897b4b0dc3765e5062b41da83499413ff973fe0955cc090bbb316032c8da70597fce730dc732860422bf5820587eb2260947f427932c20748b87ce5671c60a62dfccdcb14ab2b4bab3cdbd130126f1950e11a18c61760000000000000000") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x90) 147.756995ms ago: executing program 3 (id=3263): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffff650000e000000050010000880100007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000020000000000ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffdfff00004e234e21040071ac0600ff7f3828030005005b060000f4f200000000000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c7900000000dc000000000000000000000000000000000000001000000000000e00aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ffffffff0000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000e7ff00aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f747581000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000004000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f7461000000000000000000000000000000000000000000000000000000180000000000000000000000307b0000010000000000000007000000000000006172707265706c790008000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0xda7f, 0x10000, 0x3f, 0x202, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x80000001}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc)=0x3f, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x3f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000780)='veth1_macvtap\x00'}) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) syz_emit_ethernet(0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2, [0xf87, 0x0, 0xe77, 0x4e0]}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@random="09f9e309f8bb"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @rand_addr, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xa15}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 147.240013ms ago: executing program 1 (id=3264): sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x15}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4015492dcbbb13e7d762cf30a7797988"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000404}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400007f0000008500000082000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0xc00, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000000800010004"], 0x50}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) 0s ago: executing program 3 (id=3265): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001f0071113a000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0200000000000000b705e10008000000850000feb500000018110014", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x79) setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000040), 0x4) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x20}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC=r8, @ANYRESOCT=r5, @ANYBLOB="2a2572d31e6ce398abd2a524afaf13f4649de183aeaee646154cd6be583157884be133b51a6628f6069829"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r10, @ANYBLOB="aff7000000000006000000000000000000001069c34bdcd9b7b481220bb26f8733e7a712fa987e3c063f749ad76129d14c1f556097ce136a531cd0a9086932911ccb1ec3d4321917df9d80a0053d5f556d28667d", @ANYRES32=r8, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r13, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): -98 [ 236.337281][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.910868][ T9091] veth0_vlan: entered promiscuous mode [ 236.944986][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.952634][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.002588][ T9091] veth1_vlan: entered promiscuous mode [ 237.017012][ T9286] bridge_slave_1: left allmulticast mode [ 237.023448][ T9286] bridge_slave_1: left promiscuous mode [ 237.031240][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.059962][ T9286] bridge_slave_0: left allmulticast mode [ 237.071171][ T9286] bridge_slave_0: left promiscuous mode [ 237.097781][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.230867][ T9091] veth0_macvtap: entered promiscuous mode [ 237.256679][ T9091] veth1_macvtap: entered promiscuous mode [ 237.345910][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.369162][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.599506][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.611733][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.626827][ T5226] Bluetooth: hci9: command 0x041b tx timeout [ 237.647173][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.657902][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.669323][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.680034][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.691869][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.702644][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.712769][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.723431][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.736094][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.746747][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.756847][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.768199][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.796666][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.812922][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.823628][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.835093][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.868884][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.887435][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.907679][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.928060][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.948592][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.971481][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.017653][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.037497][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.069351][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.106490][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.127466][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.147494][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.167763][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.189668][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.207427][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.221259][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.235434][ T9304] lo speed is unknown, defaulting to 1000 [ 238.284024][ T9091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.308411][ T9091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.317145][ T9091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.347675][ T9091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.588240][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.623683][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.689415][ T9307] wg2: entered promiscuous mode [ 238.702374][ T9307] wg2: entered allmulticast mode [ 238.733455][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.752236][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.960088][ T9313] raw_sendmsg: syz.1.1045 forgot to set AF_INET. Fix it! [ 239.007340][ T9315] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 239.037324][ T9315] __nla_validate_parse: 2 callbacks suppressed [ 239.037340][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 239.348339][ T9320] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1047'. [ 239.371508][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 239.687825][ T5226] Bluetooth: hci9: command 0x041b tx timeout [ 239.696961][ T9325] netlink: 'syz.4.1048': attribute type 7 has an invalid length. [ 239.803450][ T9329] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96 [ 240.092880][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 240.367198][ T9341] tap0: tun_chr_ioctl cmd 1074025677 [ 240.383043][ T9341] tap0: linktype set to 825 [ 240.497763][ T9348] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 240.506778][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 240.520576][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 240.694135][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 240.754354][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 240.773313][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 240.990472][ T9367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1063'. [ 241.248225][ T9372] block nbd0: not configured, cannot reconfigure [ 241.402971][ T9374] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 241.614627][ T9385] xt_hashlimit: invalid rate [ 241.622853][ T9383] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 242.151305][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.158953][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.258397][ T9407] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 242.270321][ T9401] bridge_slave_1: left allmulticast mode [ 242.277559][ T9401] bridge_slave_1: left promiscuous mode [ 242.296151][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.314231][ T9405] x_tables: unsorted underflow at hook 2 [ 242.331799][ T9401] bridge_slave_0: left allmulticast mode [ 242.352416][ T9401] bridge_slave_0: left promiscuous mode [ 242.379077][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.770648][ T9418] xt_policy: neither incoming nor outgoing policy selected [ 243.444718][ T9431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.196655][ T9446] __nla_validate_parse: 9 callbacks suppressed [ 244.196675][ T9446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1092'. [ 244.244664][ T9447] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 244.403491][ T4620] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 244.414675][ T4620] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 244.424690][ T4620] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 244.439600][ T4620] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 244.441517][ T9459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1095'. [ 244.456697][ T4620] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 244.458613][ T9457] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'. [ 244.473109][ T4620] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 244.515300][ T9459] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1095'. [ 244.552725][ T9459] caif0: entered allmulticast mode [ 244.595586][ T9453] lo speed is unknown, defaulting to 1000 [ 244.796496][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 245.311284][ T9483] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1103'. [ 245.619999][ T9453] chnl_net:caif_netlink_parms(): no params data found [ 246.098023][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.105556][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.112933][ T9453] bridge_slave_0: entered allmulticast mode [ 246.120926][ T9453] bridge_slave_0: entered promiscuous mode [ 246.130015][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1106'. [ 246.152228][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.170210][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.188191][ T9453] bridge_slave_1: entered allmulticast mode [ 246.202878][ T9453] bridge_slave_1: entered promiscuous mode [ 246.216762][ T9502] bridge_slave_1: left allmulticast mode [ 246.229825][ T9502] bridge_slave_1: left promiscuous mode [ 246.244919][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.272632][ T9502] bridge2: port 1(bridge_slave_1) entered blocking state [ 246.286451][ T9502] bridge2: port 1(bridge_slave_1) entered disabled state [ 246.300216][ T9502] bridge_slave_1: entered allmulticast mode [ 246.318563][ T9502] bridge_slave_1: entered promiscuous mode [ 246.565004][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.581397][ T5226] Bluetooth: hci10: command tx timeout [ 246.593712][ T9508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1108'. [ 246.604893][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.659605][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 246.755278][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 246.898285][ T9516] netlink: 'syz.3.1111': attribute type 2 has an invalid length. [ 246.920351][ T9453] team0: Port device team_slave_0 added [ 246.954487][ T9453] team0: Port device team_slave_1 added [ 247.060397][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.073550][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.106707][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.118194][ T9524] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 247.120330][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.134362][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.213487][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.344850][ T9453] hsr_slave_0: entered promiscuous mode [ 247.353435][ T9453] hsr_slave_1: entered promiscuous mode [ 247.359928][ T9453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.370363][ T9453] Cannot create hsr debugfs directory [ 247.376062][ T9530] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 247.587167][ T9534] lo speed is unknown, defaulting to 1000 [ 247.860103][ T9453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.930614][ T5226] Bluetooth: hci7: command 0x0406 tx timeout [ 247.930750][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 247.943247][ T5241] Bluetooth: hci4: command 0x0406 tx timeout [ 248.115063][ T9453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.181489][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.216417][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.263200][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.271211][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.415068][ T9453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.647716][ T5231] Bluetooth: hci10: command tx timeout [ 248.691552][ T9453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.766969][ T9560] ax25_connect(): syz.4.1122 uses autobind, please contact jreuter@yaina.de [ 248.916729][ T9453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.006770][ T9567] netlink: 'syz.4.1125': attribute type 1 has an invalid length. [ 249.067219][ T9453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.111739][ T9453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.193295][ T9453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.470405][ T9575] __nla_validate_parse: 12 callbacks suppressed [ 249.470425][ T9575] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1127'. [ 249.678549][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.779655][ T9453] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.812322][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.819549][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.835996][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 249.858677][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.865861][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.428079][ T9594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1133'. [ 250.566752][ T9596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1134'. [ 250.731952][ T5231] Bluetooth: hci10: command tx timeout [ 252.204771][ T9594] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1133'. [ 252.216070][ T9596] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1134'. [ 252.254776][ T9453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.361924][ T9601] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 252.383548][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 252.496868][ T9598] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1135'. [ 252.538774][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 252.634867][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 252.696433][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.733510][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.763200][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.778122][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.787222][ T9617] netlink: 'syz.4.1139': attribute type 7 has an invalid length. [ 252.810083][ T5231] Bluetooth: hci10: command tx timeout [ 252.940491][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.044348][ T9453] veth0_vlan: entered promiscuous mode [ 253.072889][ T9453] veth1_vlan: entered promiscuous mode [ 253.158999][ T9453] veth0_macvtap: entered promiscuous mode [ 253.184942][ T9453] veth1_macvtap: entered promiscuous mode [ 253.241989][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.269383][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.290261][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.317509][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.337060][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.369696][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.397676][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.437488][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.447353][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.480055][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.492868][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.504130][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.514655][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.525793][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.554067][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.669541][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.696368][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.727589][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.747438][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.757306][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.778345][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.788587][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.799143][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.809097][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.822210][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.847640][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.877586][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.897471][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.917506][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.931098][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.941617][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.955189][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.995369][ T9453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.021379][ T9453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.040207][ T9453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.067799][ T9453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.166958][ T9647] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 254.306004][ T2529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.357510][ T2529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.455841][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.471675][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.620594][ T9659] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 254.640965][ T9659] macvlan2: entered allmulticast mode [ 254.646400][ T9659] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 254.673386][ T9659] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 254.948908][ T9671] __nla_validate_parse: 6 callbacks suppressed [ 254.948928][ T9671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1154'. [ 255.031380][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 255.084816][ T9674] Unknown options in mask 1f4 [ 255.142737][ T9679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1158'. [ 255.162525][ T9679] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1158'. [ 255.201834][ T9675] bridge: RTM_NEWNEIGH with invalid ether address [ 255.498279][ T9693] sctp: [Deprecated]: syz.1.1163 (pid 9693) Use of int in max_burst socket option deprecated. [ 255.498279][ T9693] Use struct sctp_assoc_value instead [ 255.593834][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 256.101334][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.350554][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 256.581725][ T9722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1170'. [ 256.767586][ T9722] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1170'. [ 257.171222][ T9729] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1172'. [ 257.545471][ T9740] gretap0: refused to change device tx_queue_len [ 257.557976][ T9740] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 257.562242][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 257.726403][ T9744] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 260.569586][ T9794] __nla_validate_parse: 3 callbacks suppressed [ 260.569616][ T9794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1188'. [ 260.622139][ T9791] IPVS: Scheduler module ip_vs_sip not found [ 260.662774][ T9800] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 260.663070][ T9794] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1188'. [ 261.047836][ T9817] wg2: entered promiscuous mode [ 261.055257][ T9817] wg2: entered allmulticast mode [ 261.123085][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 261.431578][ T9832] netlink: 'syz.1.1197': attribute type 9 has an invalid length. [ 261.472147][ T9832] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1197'. [ 262.370149][ T9839] netlink: 'syz.2.1199': attribute type 4 has an invalid length. [ 262.600652][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 262.619733][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'. [ 262.678009][ T9850] xt_policy: output policy not valid in PREROUTING and INPUT [ 263.201892][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 263.728217][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 263.854605][ T9888] bridge0: port 3(team0) entered disabled state [ 263.861165][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.876021][ T9888] bridge0: left promiscuous mode [ 263.881163][ T9888] bridge0: left allmulticast mode [ 263.908216][ T9888] team0: left allmulticast mode [ 263.916060][ T9888] team_slave_0: left allmulticast mode [ 263.922115][ T9888] team_slave_1: left allmulticast mode [ 263.929172][ T9888] macvlan3: left allmulticast mode [ 263.934317][ T9888] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 263.945229][ T9888] bridge0: port 3(team0) entered disabled state [ 263.959189][ T9888] bridge_slave_0: left allmulticast mode [ 263.966123][ T9888] bridge_slave_0: left promiscuous mode [ 263.974636][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.697023][ T9917] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 264.735378][ T9914] Cannot find add_set index 0 as target [ 264.851864][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 265.229480][ T9927] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1228'. [ 265.445968][ T9940] No such timeout policy "syz0" [ 266.196271][ T9971] IPVS: Scheduler module ip_vs_sip not found [ 266.200906][ T9974] __nla_validate_parse: 1 callbacks suppressed [ 266.200924][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 266.422960][ T9983] lo speed is unknown, defaulting to 1000 [ 266.858774][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 267.147444][ T9992] lo speed is unknown, defaulting to 1000 [ 267.708925][T10017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 267.724579][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'. [ 268.393985][T10023] tipc: Enabling of bearer rejected, failed to enable media [ 268.540102][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 268.699402][ T4620] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 268.713024][ T4620] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 268.730706][ T4620] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 268.741131][ T4620] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 268.742614][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 268.758407][ T4620] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 268.766058][ T4620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 269.299244][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 269.446359][T10041] IPVS: Scheduler module ip_vs_sip not found [ 270.811320][ T5231] Bluetooth: hci11: command tx timeout [ 271.315177][T10046] lo speed is unknown, defaulting to 1000 [ 271.832781][T10027] lo speed is unknown, defaulting to 1000 [ 271.839839][T10062] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1261'. [ 271.911448][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 271.959861][T10066] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1263'. [ 272.320711][T10074] IPVS: Scheduler module ip_vs_sip not found [ 272.543349][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 272.889050][ T5231] Bluetooth: hci11: command tx timeout [ 273.212625][T10027] chnl_net:caif_netlink_parms(): no params data found [ 273.781373][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.798138][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.818419][T10027] bridge_slave_0: entered allmulticast mode [ 273.825845][T10027] bridge_slave_0: entered promiscuous mode [ 273.873805][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.898956][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.928282][T10027] bridge_slave_1: entered allmulticast mode [ 273.958100][T10027] bridge_slave_1: entered promiscuous mode [ 273.998348][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 274.030684][T10115] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1273'. [ 274.148329][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.180427][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.292404][T10118] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1275'. [ 274.369645][T10027] team0: Port device team_slave_0 added [ 274.384111][T10122] netlink: 'syz.3.1276': attribute type 2 has an invalid length. [ 274.422606][T10122] ip6t_srh: unknown srh match flags 5294 [ 274.440777][T10027] team0: Port device team_slave_1 added [ 274.620006][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.650872][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.747600][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.784609][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.810108][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.860298][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.902978][T10134] netlink: 'syz.3.1280': attribute type 21 has an invalid length. [ 274.938105][T10135] netlink: 'syz.0.1278': attribute type 4 has an invalid length. [ 274.977859][ T5231] Bluetooth: hci11: command tx timeout [ 275.083006][T10134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1280'. [ 275.109297][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 275.219319][T10146] ip6t_srh: unknown srh invflags 92A7 [ 275.229327][T10027] hsr_slave_0: entered promiscuous mode [ 275.251757][T10027] hsr_slave_1: entered promiscuous mode [ 275.263533][T10027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.281564][T10027] Cannot create hsr debugfs directory [ 275.553051][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 275.670991][T10027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.709050][T10152] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 275.750730][T10156] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 275.920860][T10027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.123992][T10027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.299332][T10027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.646693][T10027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.681213][T10027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.728536][T10027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.794588][T10027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.047939][ T4620] Bluetooth: hci11: command tx timeout [ 277.122321][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.215789][T10027] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.266151][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.273369][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.333953][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.341191][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.452683][T10182] __nla_validate_parse: 3 callbacks suppressed [ 277.452702][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 277.896815][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.919550][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 278.107055][T10196] netlink: 'syz.1.1295': attribute type 4 has an invalid length. [ 278.447975][T10207] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1297'. [ 278.512202][T10027] veth0_vlan: entered promiscuous mode [ 278.570326][T10027] veth1_vlan: entered promiscuous mode [ 278.655385][ T4620] Bluetooth: hci2: command 0x0405 tx timeout [ 278.658719][T10027] veth0_macvtap: entered promiscuous mode [ 278.700291][T10027] veth1_macvtap: entered promiscuous mode [ 278.784891][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.840336][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.874098][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.901913][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.920930][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.953434][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.975948][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.998240][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.020062][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.046262][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.069873][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.100804][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.118801][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.131983][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.144944][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.158859][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.173486][T10027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.184494][T10215] macvlan1: mtu less than device minimum [ 279.225770][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.259360][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.277490][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.300401][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.313373][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.346575][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.364302][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.386627][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.406997][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.430100][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.451582][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.462622][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.473002][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.485361][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.498262][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.512246][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.523295][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.537188][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.553854][T10027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.604007][T10027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.623544][T10027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.642019][T10027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.672431][T10027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.747779][T10229] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 279.842825][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 279.935674][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.957568][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.034279][ T2529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.048077][ T2529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.065918][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 280.341675][T10245] lo speed is unknown, defaulting to 1000 [ 280.553519][T10252] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 280.822593][T10251] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1308'. [ 280.900051][T10261] netlink: 'syz.4.1310': attribute type 2 has an invalid length. [ 281.040188][T10263] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 281.083209][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'. [ 281.460183][T10268] netlink: 'syz.4.1314': attribute type 4 has an invalid length. [ 281.527273][T10273] netlink: 'syz.4.1314': attribute type 4 has an invalid length. [ 281.724685][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 281.985638][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1318'. [ 282.143455][T10291] lo speed is unknown, defaulting to 1000 [ 282.178445][T10296] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1324'. [ 282.185587][T10294] netlink: 'syz.0.1323': attribute type 75 has an invalid length. [ 282.237659][T10296] caif0: entered allmulticast mode [ 282.549794][T10305] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 282.578688][T10305] __nla_validate_parse: 2 callbacks suppressed [ 282.578709][T10305] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1326'. [ 282.663127][T10308] IPv6: NLM_F_REPLACE set, but no existing node found! [ 282.918488][T10301] lo speed is unknown, defaulting to 1000 [ 283.183091][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 283.413947][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 283.590275][T10332] netlink: 'syz.4.1333': attribute type 4 has an invalid length. [ 283.622024][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 284.041205][T10339] IPVS: Scheduler module ip_vs_sip not found [ 284.083297][T10346] team0: entered promiscuous mode [ 284.117460][T10346] team_slave_0: entered promiscuous mode [ 284.124487][T10344] xt_TCPMSS: Only works on TCP SYN packets [ 284.141259][T10346] team_slave_1: entered promiscuous mode [ 284.256234][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 284.575266][T10355] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 284.662687][T10355] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 284.725461][T10345] team0: left promiscuous mode [ 284.743168][T10345] team_slave_0: left promiscuous mode [ 284.769055][T10345] team_slave_1: left promiscuous mode [ 285.111655][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 285.156816][T10374] xt_TCPMSS: Only works on TCP SYN packets [ 285.359913][T10378] bridge0: port 2(bridge_slave_1) entered listening state [ 285.403041][T10383] x_tables: duplicate underflow at hook 2 [ 285.413442][T10383] netlink: 'syz.3.1349': attribute type 9 has an invalid length. [ 285.746103][T10390] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1352'. [ 285.956780][T10393] IPVS: Scheduler module ip_vs_sip not found [ 285.980933][T10398] IPv6: NLM_F_REPLACE set, but no existing node found! [ 286.282158][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 286.330292][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 286.474504][T10417] netlink: 'syz.3.1360': attribute type 21 has an invalid length. [ 286.485204][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 286.795036][T10422] x_tables: unsorted underflow at hook 3 [ 287.743267][T10476] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 287.760383][T10469] netlink: 'syz.2.1372': attribute type 4 has an invalid length. [ 287.814832][T10479] Bluetooth: hci3: unsupported parameter 65535 [ 287.844805][T10479] Bluetooth: hci3: unsupported parameter 65535 [ 287.949329][T10482] __nla_validate_parse: 3 callbacks suppressed [ 287.949348][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 287.987787][T10485] openvswitch: netlink: Port 8336768 exceeds max allowable 65535 [ 288.065283][T10485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1378'. [ 288.073199][T10492] netlink: 'syz.4.1377': attribute type 4 has an invalid length. [ 288.098588][T10485] block nbd0: not configured, cannot reconfigure [ 288.195565][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 288.254299][T10494] netlink: 'syz.0.1381': attribute type 3 has an invalid length. [ 288.294094][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 288.515871][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1382'. [ 288.563321][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 288.568074][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 288.598241][T10519] netlink: 208176 bytes leftover after parsing attributes in process `syz.4.1387'. [ 288.651565][T10519] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 288.678639][T10519] openvswitch: netlink: Message has 4 unknown bytes. [ 288.707295][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 288.914035][T10519] lo speed is unknown, defaulting to 1000 [ 288.948678][T10513] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.323488][T10552] netlink: 'syz.1.1395': attribute type 4 has an invalid length. [ 290.003937][T10564] bridge0: port 3(vlan2) entered blocking state [ 290.047913][T10564] bridge0: port 3(vlan2) entered disabled state [ 290.074856][T10564] vlan2: entered allmulticast mode [ 290.113758][T10564] vlan2: left allmulticast mode [ 290.288779][T10576] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1401'. [ 290.345542][T10576] caif0: entered allmulticast mode [ 290.673444][T10591] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 290.862896][T10601] xt_hashlimit: invalid rate [ 290.973948][T10605] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 291.588439][T10635] netlink: 'syz.1.1421': attribute type 4 has an invalid length. [ 291.836330][T10648] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 292.176810][T10656] bridge_slave_1: left allmulticast mode [ 292.195749][T10656] bridge_slave_1: left promiscuous mode [ 292.221840][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.569685][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 292.630038][T10656] bridge1: port 1(bridge_slave_1) entered blocking state [ 292.643493][T10656] bridge1: port 1(bridge_slave_1) entered disabled state [ 292.652136][T10656] bridge_slave_1: entered allmulticast mode [ 292.670039][T10656] bridge_slave_1: entered promiscuous mode [ 292.678531][T10656] bridge1: port 1(bridge_slave_1) entered blocking state [ 292.685728][T10656] bridge1: port 1(bridge_slave_1) entered forwarding state [ 292.695663][T10661] bridge1: port 2(veth1_to_bond) entered blocking state [ 292.704067][T10661] bridge1: port 2(veth1_to_bond) entered disabled state [ 292.711929][T10661] veth1_to_bond: entered allmulticast mode [ 292.722098][T10661] veth1_to_bond: entered promiscuous mode [ 292.735656][T10661] bridge1: port 2(veth1_to_bond) entered blocking state [ 292.742818][T10661] bridge1: port 2(veth1_to_bond) entered forwarding state [ 292.938625][T10679] netlink: 'syz.1.1434': attribute type 4 has an invalid length. [ 292.981861][T10686] __nla_validate_parse: 15 callbacks suppressed [ 292.981880][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 293.039228][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 293.259308][T10702] @ÿ: renamed from veth0_vlan (while UP) [ 293.320639][T10704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 293.327933][T10706] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 293.338874][T10707] netlink: 'syz.0.1440': attribute type 4 has an invalid length. [ 293.358499][T10704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 293.369285][T10707] netlink: 'syz.0.1440': attribute type 4 has an invalid length. [ 293.391709][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 293.441782][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 293.532060][T10713] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1444'. [ 293.729283][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'. [ 293.769773][T10717] netlink: 'syz.1.1446': attribute type 8 has an invalid length. [ 293.908884][T10727] xt_connbytes: Forcing CT accounting to be enabled [ 293.934014][T10728] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 294.144997][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 294.281678][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 294.374793][T10738] IPVS: Scheduler module ip_vs_sip not found [ 294.564258][T10745] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1455'. [ 294.701620][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 295.306067][T10778] IPVS: Scheduler module ip_vs_sip not found [ 295.642814][T10799] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 296.516728][T10824] macvlan2: entered allmulticast mode [ 296.541595][T10824] team_slave_0: entered promiscuous mode [ 296.547469][T10824] team_slave_1: entered promiscuous mode [ 296.584312][T10824] team0: entered allmulticast mode [ 296.589727][T10824] team_slave_0: entered allmulticast mode [ 296.595699][T10824] team_slave_1: entered allmulticast mode [ 296.603401][T10824] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.613807][T10824] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 296.632752][T10828] netlink: 'syz.2.1485': attribute type 4 has an invalid length. [ 297.146312][T10843] lo speed is unknown, defaulting to 1000 [ 298.132885][T10868] netlink: 'syz.2.1500': attribute type 4 has an invalid length. [ 298.157767][T10868] __nla_validate_parse: 15 callbacks suppressed [ 298.157788][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1500'. [ 298.378608][T10873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1502'. [ 298.459849][T10873] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1502'. [ 298.820366][T10886] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 298.867568][T10886] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 298.913824][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 299.341733][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 299.493609][T10904] netlink: 'syz.2.1510': attribute type 3 has an invalid length. [ 299.513629][T10904] netlink: 'syz.2.1510': attribute type 3 has an invalid length. [ 299.609752][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'. [ 299.837632][T10915] netlink: 'syz.2.1512': attribute type 4 has an invalid length. [ 299.845630][T10915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'. [ 300.271097][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 300.357023][T10930] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1518'. [ 300.382686][T10930] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 300.451589][T10930] 0ªX¹¦Dö»: entered allmulticast mode [ 300.697066][T10939] siw: device registration error -23 [ 300.781091][T10939] syz.2.1520 (10939) used obsolete PPPIOCDETACH ioctl [ 300.842803][T10945] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 300.871861][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 301.057124][T10949] IPVS: length: 215 != 6168 [ 301.185943][T10952] netlink: 'syz.1.1524': attribute type 4 has an invalid length. [ 302.091775][T10980] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 302.274944][T10982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.282174][T10982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.438406][T10990] netlink: 'syz.4.1537': attribute type 4 has an invalid length. [ 302.900068][T11003] netlink: 'syz.4.1542': attribute type 11 has an invalid length. [ 303.294753][T11019] __nla_validate_parse: 10 callbacks suppressed [ 303.294773][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 303.488867][T11022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.559954][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 304.163495][T11034] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1553'. [ 304.309125][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 304.690136][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 304.847065][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.919003][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.920279][T11048] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1558'. [ 305.196352][T11065] IPVS: Scheduler module ip_vs_sip not found [ 305.220815][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 305.266150][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'. [ 305.401559][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.430834][T11077] bridge_slave_0: left allmulticast mode [ 305.442517][T11077] bridge_slave_0: left promiscuous mode [ 305.449371][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.671598][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 305.686889][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 306.413929][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.511176][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.740780][T11115] IPVS: Scheduler module ip_vs_sip not found [ 307.450981][T11129] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 307.515032][T11135] pim6reg: entered allmulticast mode [ 307.745241][T11150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 307.755069][T11150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 307.910324][T11160] tipc: Failed to remove unknown binding: 66,1,1/0:700869631/700869633 [ 307.923104][T11160] tipc: Failed to remove unknown binding: 66,1,1/0:700869631/700869633 [ 307.932160][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.142470][T11170] tun0: tun_chr_ioctl cmd 2148553947 [ 308.672555][T11177] __nla_validate_parse: 11 callbacks suppressed [ 308.672574][T11177] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1603'. [ 308.796684][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 309.340034][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 309.360177][T11199] netlink: 'syz.2.1609': attribute type 2 has an invalid length. [ 309.368841][ T5241] Bluetooth: hci3: command 0x0406 tx timeout [ 309.375090][ T5241] Bluetooth: hci5: command 0x040f tx timeout [ 309.486849][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 309.680556][T11220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1617'. [ 309.711822][T11220] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1617'. [ 309.792503][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 310.025781][T11232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1618'. [ 312.206111][T11221] pim6reg1: entered promiscuous mode [ 312.211652][T11221] pim6reg1: entered allmulticast mode [ 312.266858][T11232] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1618'. [ 312.325701][T11236] lo speed is unknown, defaulting to 1000 [ 312.549270][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 312.800992][T11265] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 313.472947][T11274] netlink: 'syz.4.1628': attribute type 4 has an invalid length. [ 313.579716][T11282] x_tables: duplicate underflow at hook 3 [ 313.865182][T11291] __nla_validate_parse: 2 callbacks suppressed [ 313.865202][T11291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1634'. [ 313.869968][T11288] lo speed is unknown, defaulting to 1000 [ 313.891350][T11291] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1634'. [ 313.904879][T11293] sctp: [Deprecated]: syz.1.1632 (pid 11293) Use of int in max_burst socket option deprecated. [ 313.904879][T11293] Use struct sctp_assoc_value instead [ 313.984968][T11293] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 314.027448][T11293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1632'. [ 314.075517][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'. [ 314.137290][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1633'. [ 314.346046][T11292] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1633'. [ 314.514114][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 314.769374][T11321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1641'. [ 314.959016][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 315.438746][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 315.554474][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.652253][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.669612][T11340] team0: entered promiscuous mode [ 315.674694][T11340] bond0: entered promiscuous mode [ 315.781785][T11345] netlink: 'syz.1.1648': attribute type 4 has an invalid length. [ 316.129020][T11338] team0: left promiscuous mode [ 316.141818][T11338] bond0: left promiscuous mode [ 316.335329][T11360] netlink: 'syz.0.1652': attribute type 4 has an invalid length. [ 316.487689][ T4620] Bluetooth: hci11: command 0x0405 tx timeout [ 316.700156][T11367] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 317.260602][T11381] IPVS: Scheduler module ip_vs_sip not found [ 317.596875][T11395] netlink: 'syz.2.1664': attribute type 4 has an invalid length. [ 318.000298][T11410] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 318.311401][T11423] netlink: 'syz.0.1672': attribute type 4 has an invalid length. [ 318.850275][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.857936][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.952294][T11447] bridge_slave_1: left allmulticast mode [ 318.975004][T11447] bridge_slave_1: left promiscuous mode [ 318.987801][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.016500][T11447] bridge_slave_0: left allmulticast mode [ 319.025561][T11447] bridge_slave_0: left promiscuous mode [ 319.031786][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.069905][T11454] __nla_validate_parse: 13 callbacks suppressed [ 319.069925][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 319.286264][T11460] IPVS: Scheduler module ip_vs_sip not found [ 319.352751][T11465] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 319.391435][T11468] netlink: 'syz.0.1685': attribute type 4 has an invalid length. [ 319.522312][T11470] netlink: 'syz.0.1686': attribute type 4 has an invalid length. [ 320.021082][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 320.101962][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'. [ 320.775730][T11511] netlink: 'syz.4.1697': attribute type 4 has an invalid length. [ 320.800951][T11517] netlink: 'syz.0.1696': attribute type 4 has an invalid length. [ 320.835500][T11522] netlink: 'syz.3.1699': attribute type 4 has an invalid length. [ 321.238920][T11536] IPVS: Scheduler module ip_vs_sip not found [ 321.303654][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 321.758562][T11560] netlink: 'syz.2.1710': attribute type 4 has an invalid length. [ 321.777852][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1710'. [ 321.921406][T11564] netlink: 'syz.4.1711': attribute type 4 has an invalid length. [ 322.248730][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 322.276874][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 322.465606][T11593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1719'. [ 322.482448][T11593] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1719'. [ 322.750251][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 322.886509][T11596] IPVS: Scheduler module ip_vs_sip not found [ 323.198133][T11617] validate_nla: 1 callbacks suppressed [ 323.198153][T11617] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 324.572993][T11669] IPVS: Scheduler module ip_vs_sip not found [ 324.759342][T11679] __nla_validate_parse: 5 callbacks suppressed [ 324.759362][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 324.802850][T11683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1749'. [ 324.851592][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1748'. [ 324.856681][T11683] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1749'. [ 325.042403][T11691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1752'. [ 325.079066][T11691] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1752'. [ 325.141976][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 325.299498][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 325.405215][T11702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1756'. [ 325.466316][T11702] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1756'. [ 325.657075][T11714] netlink: 'syz.3.1760': attribute type 4 has an invalid length. [ 325.777779][T11713] IPVS: Scheduler module ip_vs_sip not found [ 327.080360][T11768] netlink: 'syz.2.1776': attribute type 4 has an invalid length. [ 328.201282][T11791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.362759][T11875] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.794611][T11899] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 329.817569][T11903] __nla_validate_parse: 16 callbacks suppressed [ 329.817589][T11903] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1811'. [ 329.881906][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 330.039217][T11915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1814'. [ 330.059773][T11915] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1814'. [ 330.438308][T11931] netlink: 'syz.1.1820': attribute type 4 has an invalid length. [ 330.720006][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 330.754547][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 330.925678][T11951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1827'. [ 330.959619][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 330.971111][T11951] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1827'. [ 331.034000][T11954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1826'. [ 331.353074][T11967] netlink: 'syz.1.1833': attribute type 4 has an invalid length. [ 332.547707][T12019] netlink: 'syz.0.1847': attribute type 4 has an invalid length. [ 334.049916][T12080] netlink: 'syz.3.1864': attribute type 4 has an invalid length. [ 334.068492][T12086] netlink: 'syz.0.1863': attribute type 4 has an invalid length. [ 334.150046][T12089] lo speed is unknown, defaulting to 1000 [ 334.991282][T12113] __nla_validate_parse: 18 callbacks suppressed [ 334.991303][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 335.059297][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 335.160739][T12118] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1873'. [ 335.744395][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 335.980341][T12141] netlink: 'syz.1.1878': attribute type 4 has an invalid length. [ 336.162479][T12147] netlink: 'syz.3.1880': attribute type 64 has an invalid length. [ 336.289766][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 336.360989][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 336.771398][T12166] IPVS: Scheduler module ip_vs_sip not found [ 336.783574][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 336.817671][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 337.373146][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 337.715999][T12198] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1894'. [ 337.751565][T12192] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 338.095955][T12217] rdma_rxe: rxe_newlink: failed to add lo [ 338.933226][T12241] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 339.791590][T12281] bond0: entered promiscuous mode [ 339.815689][T12285] bond0: left promiscuous mode [ 340.086630][T12298] __nla_validate_parse: 11 callbacks suppressed [ 340.086649][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1922'. [ 340.104169][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 340.146810][T12298] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1922'. [ 340.153373][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 340.245972][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 340.445631][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 340.461354][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 340.839024][T12312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1925'. [ 340.924859][T12312] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1925'. [ 341.426219][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 342.856402][T12394] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 342.873547][T12396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.067217][T12409] netlink: 'syz.0.1950': attribute type 4 has an invalid length. [ 343.112209][T12396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.911886][T12442] netpci0: tun_chr_ioctl cmd 2148553947 [ 343.940535][T12442] veth1_macvtap: left promiscuous mode [ 343.950004][T12442] macsec0: entered allmulticast mode [ 343.975596][T12438] IPVS: Scheduler module ip_vs_sip not found [ 344.009774][T12442] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 344.250994][T12451] netlink: 'syz.3.1961': attribute type 12 has an invalid length. [ 344.316507][T12455] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 344.793164][T12472] lo speed is unknown, defaulting to 1000 [ 345.677195][T12506] __nla_validate_parse: 14 callbacks suppressed [ 345.677220][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1974'. [ 345.768628][T12508] openvswitch: netlink: Duplicate key (type 0). [ 346.426902][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 346.538276][T12526] netlink: 'syz.0.1979': attribute type 4 has an invalid length. [ 346.678261][T12528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1980'. [ 346.761356][T12528] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1980'. [ 347.049237][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 347.811635][T12576] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1992'. [ 348.077005][T12585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1995'. [ 348.094204][T12585] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1995'. [ 348.294660][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 348.445099][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 349.625765][T12647] netlink: 'syz.0.2007': attribute type 10 has an invalid length. [ 349.890143][T12647] team0: Port device team_slave_0 removed [ 350.329163][ T5231] Bluetooth: hci8: command 0x0405 tx timeout [ 350.555771][T12691] netlink: 'syz.4.2015': attribute type 4 has an invalid length. [ 350.795316][T12710] __nla_validate_parse: 2 callbacks suppressed [ 350.795336][T12710] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2018'. [ 350.864253][T12710] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2018'. [ 351.034947][T12723] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 351.055024][T12723] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 351.261970][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 351.311257][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 351.545880][T12743] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2025'. [ 351.551419][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'. [ 351.981011][T12753] netlink: 'syz.0.2028': attribute type 4 has an invalid length. [ 352.283910][T12773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.425931][T12768] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2032'. [ 352.751999][T12788] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2035'. [ 352.802647][T12789] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2039'. [ 352.885056][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2040'. [ 352.978058][T12784] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 353.978638][T12840] batman_adv: batadv2: Adding interface: netdevsim0 [ 353.992729][T12840] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.116045][T12840] batman_adv: batadv2: Interface activated: netdevsim0 [ 354.364460][T12840] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 354.376395][T12840] batman_adv: batadv2: Removing interface: netdevsim0 [ 354.447652][T12862] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 354.651692][T12864] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 354.759612][T12864] team0: Port device netdevsim0 added [ 354.801593][T12869] lo speed is unknown, defaulting to 1000 [ 355.454463][ T4620] Bluetooth: hci9: command 0x041b tx timeout [ 355.778664][T12905] lo speed is unknown, defaulting to 1000 [ 356.593310][T12924] __nla_validate_parse: 10 callbacks suppressed [ 356.593333][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2072'. [ 356.680666][T12924] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2072'. [ 356.728556][T12924] tipc: Invalid UDP bearer configuration [ 356.728613][T12924] tipc: Enabling of bearer rejected, failed to enable media [ 356.803438][T12935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2074'. [ 356.888728][T12935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.042103][T12943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2076'. [ 357.055507][T12945] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 357.236537][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 357.380396][T12949] netlink: 'syz.3.2080': attribute type 4 has an invalid length. [ 357.396094][T12949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2080'. [ 357.406675][T12943] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2076'. [ 357.660809][T12960] netlink: 'syz.1.2083': attribute type 309 has an invalid length. [ 357.978537][T12974] macsec0: entered promiscuous mode [ 357.984903][T12974] macsec1: entered promiscuous mode [ 358.600830][T13001] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2090'. [ 358.680747][T13001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.901335][T13008] netlink: 'syz.0.2094': attribute type 4 has an invalid length. [ 358.945133][T13008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2094'. [ 359.098868][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 359.568961][T13038] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 359.921123][T13058] netlink: 'syz.0.2106': attribute type 4 has an invalid length. [ 360.398959][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 361.450772][T13096] netlink: 'syz.2.2114': attribute type 4 has an invalid length. [ 361.734089][T13113] __nla_validate_parse: 7 callbacks suppressed [ 361.734109][T13113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2120'. [ 361.781081][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 361.803581][T13113] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2120'. [ 361.970113][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 362.081403][T13117] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 362.121763][T13127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2123'. [ 362.196417][T13117] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 362.219373][T13117] team0: Port device netdevsim0 added [ 362.234500][T13127] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2123'. [ 362.545991][T13143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2128'. [ 362.641387][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 363.175263][T13158] smc: net device lo applied user defined pnetid SYZ2 [ 363.388095][T13165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2134'. [ 363.475956][T13165] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2134'. [ 364.570123][T13199] sch_fq: defrate 0 ignored. [ 364.983735][T13218] pim6reg: entered allmulticast mode [ 365.377189][T13240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.402258][T13243] netlink: 'syz.0.2159': attribute type 8 has an invalid length. [ 365.453814][T13240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.830019][T13294] __nla_validate_parse: 16 callbacks suppressed [ 366.830040][T13294] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2173'. [ 366.909437][T13294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2173'. [ 366.928813][T13300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2174'. [ 367.041918][T13300] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2174'. [ 367.098940][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.173485][T13304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.219672][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.304004][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 367.730682][T13328] netlink: 'syz.3.2181': attribute type 309 has an invalid length. [ 367.793387][T13328] macsec0: entered promiscuous mode [ 367.811539][T13328] macsec2: entered promiscuous mode [ 368.289051][T13346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2188'. [ 368.319705][T13346] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2188'. [ 368.744482][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2191'. [ 369.098593][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 369.532353][T13385] netlink: 'syz.4.2200': attribute type 309 has an invalid length. [ 369.594178][T13387] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2201'. [ 369.617353][T13387] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 370.071865][T13407] team0: entered promiscuous mode [ 370.076956][T13407] team_slave_1: entered promiscuous mode [ 370.093443][T13407] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 370.652626][T13406] team0: left promiscuous mode [ 370.679682][T13406] team_slave_1: left promiscuous mode [ 370.696745][T13406] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 370.808577][ T4620] Bluetooth: hci10: command 0x0406 tx timeout [ 371.242500][T13431] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 371.266622][T13442] netlink: 'syz.4.2215': attribute type 4 has an invalid length. [ 371.296015][T13442] netlink: 'syz.4.2215': attribute type 4 has an invalid length. [ 371.580684][T13446] lo speed is unknown, defaulting to 1000 [ 371.698051][T13449] IPVS: Scheduler module ip_vs_sip not found [ 372.023471][T13458] __nla_validate_parse: 8 callbacks suppressed [ 372.023494][T13458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 372.712597][T13473] team0: entered promiscuous mode [ 372.730253][T13473] team_slave_0: entered promiscuous mode [ 372.740411][T13473] team_slave_1: entered promiscuous mode [ 372.785959][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'. [ 373.200168][T13481] smc: net device lo applied user defined pnetid SYZ2 [ 373.308906][T13486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2230'. [ 373.428361][T13472] team0: left promiscuous mode [ 373.442449][T13472] team_slave_0: left promiscuous mode [ 373.456632][T13472] team_slave_1: left promiscuous mode [ 373.531522][T13494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2233'. [ 373.602246][T13494] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2233'. [ 374.042488][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2235'. [ 374.225514][T13522] IPVS: Scheduler module ip_vs_sip not found [ 374.431035][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'. [ 374.521445][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 374.685985][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 374.743969][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2242'. [ 374.825031][T13549] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 374.968810][T13554] netlink: 'syz.4.2245': attribute type 4 has an invalid length. [ 375.527157][T13573] IPVS: Scheduler module ip_vs_sip not found [ 376.572024][T13613] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 376.686862][T13613] team0: Port device netdevsim0 removed [ 376.706280][T13613] batman_adv: batadv0: Adding interface: netdevsim0 [ 376.723117][T13613] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.793950][T13613] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 376.857543][T13613] batman_adv: batadv0: Removing interface: netdevsim0 [ 377.099557][T13636] __nla_validate_parse: 10 callbacks suppressed [ 377.099580][T13636] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2266'. [ 377.160024][T13636] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2266'. [ 377.428634][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 377.449119][T13648] IPVS: Scheduler module ip_vs_sip not found [ 377.491975][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'. [ 377.658792][T13663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2274'. [ 377.702146][T13663] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2274'. [ 378.042764][T13675] netlink: 'syz.4.2277': attribute type 21 has an invalid length. [ 378.070411][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 378.739769][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2283'. [ 378.777291][T13702] netlink: 'syz.3.2284': attribute type 10 has an invalid length. [ 378.883006][T13702] team0: Port device netdevsim0 added [ 378.917888][T13711] netlink: 'syz.1.2287': attribute type 2 has an invalid length. [ 378.966563][T13708] siw: device registration error -23 [ 379.089668][T13717] netlink: 'syz.4.2288': attribute type 4 has an invalid length. [ 379.437156][T13728] IPVS: Scheduler module ip_vs_sip not found [ 379.468544][T13725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2290'. [ 379.893141][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 380.423752][T13773] netlink: 'syz.2.2302': attribute type 4 has an invalid length. [ 381.002028][T13791] tipc: Started in network mode [ 381.044067][T13791] tipc: Node identity 1, cluster identity 7 [ 381.060030][T13791] tipc: Node number set to 1 [ 381.129196][T13796] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 381.228337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.266448][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.523523][T13805] netlink: 'syz.0.2315': attribute type 4 has an invalid length. [ 381.589329][T13805] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 381.605554][T13805] pim6reg0: linktype set to 805 [ 381.664585][T13805] netlink: 'syz.0.2315': attribute type 38 has an invalid length. [ 381.711531][T13805] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 381.721724][T13805] pim6reg0: tun_chr_ioctl cmd 1074066701 [ 382.239827][T13829] __nla_validate_parse: 15 callbacks suppressed [ 382.239848][T13829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2322'. [ 382.242557][T13825] netlink: 'syz.2.2320': attribute type 4 has an invalid length. [ 382.269815][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2321'. [ 382.291296][T13830] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2321'. [ 382.417660][T13829] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2322'. [ 382.616895][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 382.780142][T13852] tipc: Started in network mode [ 382.801380][T13852] tipc: Node identity 1, cluster identity 7 [ 382.835239][T13852] tipc: Node number set to 1 [ 382.896488][T13855] netlink: 'syz.0.2326': attribute type 64 has an invalid length. [ 382.913147][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 383.131628][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 383.253468][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 383.756710][T13881] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2336'. [ 383.798257][T13881] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2336'. [ 384.310701][T13891] rdma_rxe: rxe_newlink: failed to add lo [ 385.499596][T13935] xt_policy: neither incoming nor outgoing policy selected [ 387.651612][T14025] pimreg: entered allmulticast mode [ 388.010446][T14044] __nla_validate_parse: 20 callbacks suppressed [ 388.010466][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 388.053176][T14047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2378'. [ 388.066217][T14047] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2378'. [ 388.218797][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'. [ 388.459530][T14051] netlink: 'syz.1.2379': attribute type 12 has an invalid length. [ 388.468213][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 388.497146][T14051] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2379'. [ 388.940040][T14075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2387'. [ 388.995265][T14075] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2387'. [ 389.204050][T14084] IPVS: Scheduler module ip_vs_sip not found [ 389.210727][T14088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2389'. [ 389.238110][T14088] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2389'. [ 390.776224][T14147] netlink: 'syz.4.2404': attribute type 23 has an invalid length. [ 391.481092][T14165] IPVS: Scheduler module ip_vs_sip not found [ 391.672967][T14177] lo speed is unknown, defaulting to 1000 [ 392.752995][T14215] netlink: 'syz.4.2419': attribute type 12 has an invalid length. [ 393.389614][T14230] tun0: tun_chr_ioctl cmd 1074025675 [ 393.394975][T14230] tun0: persist disabled [ 393.409613][T14232] __nla_validate_parse: 18 callbacks suppressed [ 393.409632][T14232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2424'. [ 393.483775][T14232] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2424'. [ 393.504234][T14234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2425'. [ 393.580445][T14234] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2425'. [ 393.782096][T14239] IPVS: Scheduler module ip_vs_sip not found [ 393.821903][T14251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2429'. [ 393.883366][T14251] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2429'. [ 394.164540][T14268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2433'. [ 394.192752][T14268] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2433'. [ 394.214202][T14268] netlink: 'syz.3.2433': attribute type 6 has an invalid length. [ 394.247699][T14268] netlink: 'syz.3.2433': attribute type 5 has an invalid length. [ 394.290496][T14268] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2433'. [ 394.291649][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2433'. [ 394.505282][T14272] lo speed is unknown, defaulting to 1000 [ 395.724338][T14322] IPVS: Scheduler module ip_vs_sip not found [ 396.037891][T14332] netlink: 'syz.0.2449': attribute type 4 has an invalid length. [ 396.834223][T14370] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 397.180197][T14383] lo speed is unknown, defaulting to 1000 [ 397.268309][T14388] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 398.372732][T14420] lo speed is unknown, defaulting to 1000 [ 398.974529][T14442] __nla_validate_parse: 27 callbacks suppressed [ 398.974550][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 399.036262][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 399.518432][T14452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2479'. [ 399.625858][T14460] netlink: 'syz.0.2478': attribute type 12 has an invalid length. [ 399.654426][T14452] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2479'. [ 399.655443][T14460] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2478'. [ 399.702266][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'. [ 399.898341][T14469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2482'. [ 399.926208][T14469] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2482'. [ 400.084450][T14472] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2483'. [ 400.108945][T14472] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2483'. [ 400.377992][T14478] netlink: 'syz.1.2486': attribute type 32 has an invalid length. [ 401.454572][T14516] cannot load conntrack support for proto=3 [ 401.563468][T14516] lo speed is unknown, defaulting to 1000 [ 402.220552][T14513] dccp_close: ABORT with 329 bytes unread [ 402.953043][T14564] lo speed is unknown, defaulting to 1000 [ 403.458842][T14583] netlink: 'syz.3.2511': attribute type 23 has an invalid length. [ 403.769790][T14598] netlink: 'syz.4.2512': attribute type 1 has an invalid length. [ 403.992542][T14605] netlink: 'syz.0.2514': attribute type 33 has an invalid length. [ 404.019574][T14605] __nla_validate_parse: 18 callbacks suppressed [ 404.019596][T14605] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2514'. [ 404.292344][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2515'. [ 404.698599][T14635] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2519'. [ 404.744950][T14632] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2518'. [ 404.755917][T14635] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2519'. [ 404.839123][T14642] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2517'. [ 405.040291][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2521'. [ 405.131399][T14653] netlink: 54 bytes leftover after parsing attributes in process `syz.0.2523'. [ 405.309712][T14663] netlink: 'syz.2.2524': attribute type 23 has an invalid length. [ 405.601062][T14664] lo speed is unknown, defaulting to 1000 [ 406.114340][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 406.322427][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'. [ 406.841810][T14722] lo speed is unknown, defaulting to 1000 [ 407.276113][T14727] 0·: renamed from hsr0 (while UP) [ 407.300195][T14727] 0·: entered allmulticast mode [ 407.337952][T14727] hsr_slave_0: entered allmulticast mode [ 407.379453][T14727] hsr_slave_1: entered allmulticast mode [ 407.396399][T14727] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 407.444439][T14736] lo speed is unknown, defaulting to 1000 [ 410.910004][T14798] __nla_validate_parse: 4 callbacks suppressed [ 410.910024][T14798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2543'. [ 411.007518][T14798] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2543'. [ 411.208739][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 411.338630][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 411.834297][T14813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'. [ 412.271004][T14821] ebtables: ebtables: counters copy to user failed while replacing table [ 412.884292][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 412.954597][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'. [ 412.980061][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'. [ 413.317803][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2562'. [ 413.546994][T14878] syzkaller1: entered promiscuous mode [ 413.553169][T14878] syzkaller1: entered allmulticast mode [ 413.575754][T14878] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 413.611783][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 414.766178][T14916] IPVS: Scheduler module ip_vs_sip not found [ 415.613038][ T5231] Bluetooth: hci0: command tx timeout [ 415.757786][T14952] syz.2.2589 (14952) used greatest stack depth: 18776 bytes left [ 415.944925][T14957] __nla_validate_parse: 13 callbacks suppressed [ 415.944944][T14957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2591'. [ 416.003183][T14959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2592'. [ 416.051992][T14959] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2592'. [ 416.109730][T14964] netlink: 'syz.1.2593': attribute type 4 has an invalid length. [ 416.196771][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'. [ 416.409079][T14973] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2598'. [ 416.437797][T14973] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 416.505947][T14981] netlink: 'syz.2.2600': attribute type 4 has an invalid length. [ 416.582282][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 416.695591][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 416.758366][T14992] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2605'. [ 416.785041][T14992] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2605'. [ 416.842663][T14995] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2606'. [ 417.091716][T15002] netlink: 'syz.1.2608': attribute type 4 has an invalid length. [ 417.532027][T15016] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 417.555754][T15016] tls_set_device_offload: netdev not found [ 417.619792][T15025] netlink: 'syz.0.2615': attribute type 4 has an invalid length. [ 418.049189][T15040] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 418.185048][T15043] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 418.684236][T15056] batadv0: entered promiscuous mode [ 419.298659][T15086] netlink: 'syz.2.2634': attribute type 4 has an invalid length. [ 419.362925][T15090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.925729][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.953487][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.985119][T15117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.996205][T15116] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.005187][T15116] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.014274][T15116] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.023299][T15116] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.055767][T15117] sctp: [Deprecated]: syz.2.2643 (pid 15117) Use of int in maxseg socket option. [ 420.055767][T15117] Use struct sctp_assoc_value instead [ 420.076966][T15116] vxlan0: entered promiscuous mode [ 420.702730][T15138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.789510][T15135] geneve2: entered promiscuous mode [ 420.794783][T15135] geneve2: entered allmulticast mode [ 420.992101][T15150] __nla_validate_parse: 23 callbacks suppressed [ 420.992120][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 421.073193][T15146] netlink: 'syz.1.2653': attribute type 4 has an invalid length. [ 421.089158][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'. [ 421.215106][T15155] lo speed is unknown, defaulting to 1000 [ 421.250006][T15161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2659'. [ 421.288537][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2656'. [ 421.339093][T15161] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2659'. [ 421.381281][T15169] netlink: 'syz.2.2656': attribute type 21 has an invalid length. [ 421.412471][T15169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'. [ 421.710237][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 421.744964][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'. [ 422.168149][T15194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2667'. [ 422.209366][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 422.895957][T15223] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 424.072767][T15274] gre0: entered allmulticast mode [ 427.075845][T15313] __nla_validate_parse: 19 callbacks suppressed [ 427.075864][T15313] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2694'. [ 427.128610][T15324] bond0: (slave bond_slave_0): Releasing backup interface [ 427.404422][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'. [ 427.544900][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'. [ 427.564539][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'. [ 427.811843][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2703'. [ 428.006411][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'. [ 428.193561][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2705'. [ 428.400992][T15377] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2709'. [ 428.443959][T15377] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2709'. [ 428.515991][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2707'. [ 429.144594][T15401] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:0 [ 429.157947][ T5275] IPVS: starting estimator thread 0... [ 429.278716][T15403] IPVS: using max 21 ests per chain, 50400 per kthread [ 431.376073][T15475] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 432.110673][T15498] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 432.660640][T15511] __nla_validate_parse: 6 callbacks suppressed [ 432.660659][T15511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2744'. [ 432.745953][T15515] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2744'. [ 433.020942][T15524] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2748'. [ 433.106173][T15531] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2747'. [ 433.829204][T15558] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2754'. [ 433.858629][T15558] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2754'. [ 433.941085][T15559] IPVS: Scheduler module ip_vs_sip not found [ 434.110026][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 434.531483][T15574] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2760'. [ 434.570563][T15574] No such timeout policy "syz1" [ 435.070083][T15596] ipt_rpfilter: unknown options [ 435.350106][T15608] openvswitch: netlink: Unknown nsh attribute 0 [ 435.364787][T15598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2766'. [ 435.524925][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'. [ 436.488525][ T4620] Bluetooth: hci3: command 0x0406 tx timeout [ 436.494621][ T5231] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 436.810310][T15660] xt_CT: No such helper "netbios-ns" [ 437.111756][T15675] IPVS: length: 215 != 24 [ 437.408934][T15679] lo speed is unknown, defaulting to 1000 [ 437.432426][T15686] netlink: 'syz.1.2785': attribute type 4 has an invalid length. [ 437.728790][T15694] netlink: 'syz.0.2783': attribute type 2 has an invalid length. [ 437.736570][T15694] __nla_validate_parse: 5 callbacks suppressed [ 437.736585][T15694] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2783'. [ 437.873938][T15702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2788'. [ 437.892934][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 437.919337][T15695] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 437.986712][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2782'. [ 438.056497][T15680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2782'. [ 438.143673][T15702] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2788'. [ 438.373839][T15711] netlink: 'syz.4.2789': attribute type 4 has an invalid length. [ 438.671021][T15718] xt_l2tp: v2 doesn't support IP mode [ 439.033367][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'. [ 439.120050][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 439.214780][T15734] ipvlan3: entered allmulticast mode [ 439.235365][T15734] veth0_vlan: entered allmulticast mode [ 439.615347][T15757] netlink: 'syz.3.2802': attribute type 4 has an invalid length. [ 439.657029][T15759] netlink: 'syz.1.2801': attribute type 21 has an invalid length. [ 439.666870][T15759] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.675173][T15759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.682549][T15759] IPv6: NLM_F_CREATE should be set when creating new route [ 439.689879][T15759] IPv6: NLM_F_CREATE should be set when creating new route [ 439.697108][T15759] IPv6: NLM_F_CREATE should be set when creating new route [ 439.911238][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2804'. [ 440.129337][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'. [ 440.149654][T15777] xt_l2tp: missing protocol rule (udp|l2tpip) [ 440.255064][T15779] netlink: 'syz.2.2807': attribute type 11 has an invalid length. [ 440.285329][T15779] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 440.569784][T15796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.809573][T15801] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 440.854033][T15801] pim6reg: entered allmulticast mode [ 440.925960][T15801] pim6reg: left allmulticast mode [ 441.040557][T15813] netlink: 'syz.0.2818': attribute type 5 has an invalid length. [ 441.101489][T15813] : entered promiscuous mode [ 441.824261][ T5279] IPVS: starting estimator thread 0... [ 441.865891][T15844] netlink: 'syz.4.2825': attribute type 2 has an invalid length. [ 441.886992][T15844] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 441.947779][T15845] IPVS: using max 19 ests per chain, 45600 per kthread [ 442.007835][T15852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.991039][T15893] netlink: 'syz.4.2838': attribute type 4 has an invalid length. [ 443.009487][T15894] netlink: 'syz.2.2840': attribute type 2 has an invalid length. [ 443.027910][T15894] __nla_validate_parse: 10 callbacks suppressed [ 443.027931][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 443.347065][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 443.499182][T15901] syzkaller0: entered promiscuous mode [ 443.505117][T15901] syzkaller0: entered allmulticast mode [ 443.521657][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 443.522397][T15904] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2843'. [ 443.543680][T15904] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2843'. [ 443.560014][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2844'. [ 443.573224][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'. [ 447.287723][T15942] netlink: 'syz.1.2852': attribute type 4 has an invalid length. [ 447.550701][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2856'. [ 447.624828][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 447.748600][T15967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2859'. [ 447.802087][T15969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.833633][T15969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.086008][T15978] team0: left promiscuous mode [ 448.089536][T15971] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 448.107412][T15978] team_slave_0: left promiscuous mode [ 448.112978][T15978] team_slave_1: left promiscuous mode [ 448.119192][T15978] macvlan2: left promiscuous mode [ 448.136433][T15978] macvlan3: left promiscuous mode [ 448.144048][T15978] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 448.474679][T15995] netlink: 'syz.3.2866': attribute type 1 has an invalid length. [ 448.710071][T16000] netlink: 'syz.0.2867': attribute type 4 has an invalid length. [ 448.794535][T16004] __nla_validate_parse: 1 callbacks suppressed [ 448.794555][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 448.986779][T16013] Cannot find del_set index 2048 as target [ 448.998258][T16015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2873'. [ 449.035986][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2873'. [ 449.139555][T16023] netlink: 4156 bytes leftover after parsing attributes in process `syz.2.2876'. [ 449.159041][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 449.291015][T16023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2876'. [ 449.321082][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 449.346232][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 449.469039][T16037] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2880'. [ 449.519561][T16037] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 449.531835][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 450.102955][T16051] SET target dimension over the limit! [ 450.332898][T16060] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 450.365077][T16060] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 451.022587][T16089] netlink: 'syz.0.2897': attribute type 1 has an invalid length. [ 451.430840][T16102] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 451.464164][T16102] tls_set_device_offload: netdev not found [ 451.486579][T16105] vlan2: entered promiscuous mode [ 451.492113][T16105] bridge0: entered promiscuous mode [ 451.555767][ T5231] Bluetooth: hci11: link tx timeout [ 451.562877][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.576769][ T5231] Bluetooth: hci11: link tx timeout [ 451.585080][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.614608][ T5231] Bluetooth: hci11: link tx timeout [ 451.620111][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.629796][ T5231] Bluetooth: hci11: link tx timeout [ 451.635375][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.643296][ T5231] Bluetooth: hci11: link tx timeout [ 451.648697][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 451.751699][T16109] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 452.816222][T16155] netlink: 'syz.3.2918': attribute type 4 has an invalid length. [ 453.035056][T16167] netlink: 'syz.0.2922': attribute type 3 has an invalid length. [ 453.607956][ T5231] Bluetooth: hci11: command 0x0405 tx timeout [ 453.644015][T16188] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 453.683855][T16183] Dead loop on virtual device ipvlan1, fix it urgently! [ 453.723510][T16183] syz.2.2930 (16183) used greatest stack depth: 7960 bytes left [ 453.828670][T16197] netlink: 'syz.4.2934': attribute type 4 has an invalid length. [ 453.945923][T16204] vlan3: entered allmulticast mode [ 453.951365][T16204] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 453.963140][T16204] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 454.202963][T16217] __nla_validate_parse: 20 callbacks suppressed [ 454.202983][T16217] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2939'. [ 454.282770][T16217] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2939'. [ 454.444790][T16227] netlink: 'syz.3.2940': attribute type 11 has an invalid length. [ 454.849293][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'. [ 454.885653][T16245] netlink: 'syz.4.2946': attribute type 29 has an invalid length. [ 454.907770][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2945'. [ 455.249322][T16258] lo speed is unknown, defaulting to 1000 [ 455.751933][T16278] netlink: 'syz.3.2959': attribute type 4 has an invalid length. [ 456.122841][T16286] netlink: 'syz.2.2962': attribute type 2 has an invalid length. [ 456.150988][T16286] netlink: 'syz.2.2962': attribute type 8 has an invalid length. [ 456.177255][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2962'. [ 456.424665][T16302] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2967'. [ 456.436194][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'. [ 456.610076][T16302] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.619899][T16302] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.629072][T16302] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.638247][T16302] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.835856][T16308] team0: Port device team_slave_1 removed [ 456.994813][T16331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2973'. [ 457.040560][T16331] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2973'. [ 457.085433][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 457.198709][T16335] netlink: 'syz.4.2975': attribute type 4 has an invalid length. [ 457.220543][T16333] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 457.612087][T16349] tap0: tun_chr_ioctl cmd 1074025677 [ 457.624904][T16349] tap0: linktype set to 6 [ 457.778974][T16359] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 457.793325][T16359] netlink: 'syz.0.2983': attribute type 21 has an invalid length. [ 457.950101][T16365] sctp: [Deprecated]: syz.4.2987 (pid 16365) Use of int in maxseg socket option. [ 457.950101][T16365] Use struct sctp_assoc_value instead [ 458.568224][T16383] IPVS: Error connecting to the multicast addr [ 459.089035][T16405] vxcan1: tx address claim with different name [ 459.635502][T16421] dummy0: entered promiscuous mode [ 459.645617][T16421] dummy0: left promiscuous mode [ 460.003556][T16440] __nla_validate_parse: 16 callbacks suppressed [ 460.003578][T16440] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3012'. [ 460.049809][T16440] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3012'. [ 460.150876][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 460.558174][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3017'. [ 460.632486][T16458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3018'. [ 460.854658][T16467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.889469][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 461.004003][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'. [ 461.041099][T16466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.111788][T16464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.122445][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3021'. [ 461.222457][T16481] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3025'. [ 461.261208][T16481] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3025'. [ 461.355445][T16488] x_tables: duplicate underflow at hook 1 [ 461.397028][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3026'. [ 462.123834][T16520] validate_nla: 2 callbacks suppressed [ 462.123853][T16520] netlink: 'syz.4.3038': attribute type 7 has an invalid length. [ 462.163767][T16521] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 462.222577][T16526] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 462.246419][T16527] netlink: 'syz.2.3035': attribute type 10 has an invalid length. [ 462.816232][T16547] netlink: 'syz.3.3046': attribute type 11 has an invalid length. [ 463.099493][T16555] sctp: [Deprecated]: syz.4.3049 (pid 16555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.099493][T16555] Use struct sctp_sack_info instead [ 463.384389][T16576] Dead loop on virtual device ipvlan1, fix it urgently! [ 463.500043][T16576] netlink: 'syz.2.3053': attribute type 10 has an invalid length. [ 463.538914][T16576] team0: Port device dummy0 added [ 464.319605][T16597] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 464.364248][T16597] bond0: entered promiscuous mode [ 464.394027][T16597] bond_slave_0: entered promiscuous mode [ 464.408281][T16597] bond_slave_1: entered promiscuous mode [ 464.491163][T16597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.654845][T16610] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 464.704644][T16595] bond0: left promiscuous mode [ 464.712467][T16595] bond_slave_0: left promiscuous mode [ 464.721010][T16613] netlink: 'syz.4.3067': attribute type 2 has an invalid length. [ 464.731129][T16595] bond_slave_1: left promiscuous mode [ 465.412544][T16638] __nla_validate_parse: 16 callbacks suppressed [ 465.412564][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3082'. [ 465.472669][ T5279] IPVS: starting estimator thread 0... [ 465.497019][T16635] ɶƣ0GC¦!: entered promiscuous mode [ 465.597690][T16640] IPVS: using max 17 ests per chain, 40800 per kthread [ 465.802845][T16647] dccp_invalid_packet: P.Data Offset(172) too large [ 465.828464][T16652] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3077'. [ 465.887643][T16652] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3077'. [ 465.939654][T16655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.255574][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 467.285711][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3085'. [ 467.390566][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3084'. [ 468.292455][T16697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3091'. [ 468.347198][T16697] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3091'. [ 468.511757][T16703] xt_hashlimit: overflow, try lower: 0/0 [ 468.747111][T16707] netlink: 'syz.3.3094': attribute type 10 has an invalid length. [ 469.373122][T16718] netlink: 'syz.2.3098': attribute type 4 has an invalid length. [ 469.598572][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'. [ 469.710695][T16727] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3101'. [ 469.742197][T16727] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 469.838111][T16734] netlink: 'syz.0.3102': attribute type 2 has an invalid length. [ 470.175833][T16742] veth0_macvtap: left promiscuous mode [ 470.564093][T16754] __nla_validate_parse: 6 callbacks suppressed [ 470.564114][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'. [ 470.658058][T16754] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3108'. [ 470.749361][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 470.758778][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3110'. [ 470.774717][T16758] tc_dump_action: action bad kind [ 470.870666][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 471.401252][T16782] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 47243 - 0 [ 471.410470][T16782] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 47243 - 0 [ 471.420799][T16782] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 47243 - 0 [ 471.430511][T16782] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 47243 - 0 [ 471.440026][T16782] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 46851 - 0 [ 471.454025][T16782] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 46851 - 0 [ 471.463471][T16782] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 46851 - 0 [ 471.472857][T16782] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 46851 - 0 [ 471.497693][T16782] geneve3: entered promiscuous mode [ 471.517435][T16782] geneve3: entered allmulticast mode [ 471.650742][T16787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3116'. [ 471.688905][T16787] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3116'. [ 471.922940][T16793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.226291][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 472.723349][T16812] bridge1: entered promiscuous mode [ 472.760185][T16812] bridge1: entered allmulticast mode [ 472.867686][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'. [ 472.926882][T16815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 472.936930][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3124'. [ 472.960077][T16815] team0: Port device batadv1 added [ 473.646659][T16837] netlink: 'syz.4.3129': attribute type 10 has an invalid length. [ 474.454398][T16866] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.463625][T16866] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.472599][T16866] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.481409][T16866] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.528892][T16866] vxlan0: entered promiscuous mode [ 474.534064][T16866] vxlan0: entered allmulticast mode [ 474.545442][T16870] netlink: 'syz.0.3139': attribute type 2 has an invalid length. [ 474.589655][T16866] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.598919][T16866] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.607891][T16866] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.616762][T16866] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.788103][T16868] pim6reg1: entered promiscuous mode [ 474.796178][T16868] pim6reg1: entered allmulticast mode [ 474.912302][T16878] netlink: 'syz.1.3141': attribute type 1 has an invalid length. [ 475.137663][T16887] Timeout policy `syz0' can only be used by L3 protocol number 34888 [ 475.485409][T16894] netlink: 'syz.3.3146': attribute type 4 has an invalid length. [ 475.568347][T16891] tipc: Enabled bearer , priority 10 [ 475.848035][T16898] lo speed is unknown, defaulting to 1000 [ 476.420491][T16922] __nla_validate_parse: 11 callbacks suppressed [ 476.420513][T16922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3154'. [ 476.450895][T16922] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3154'. [ 477.025931][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3159'. [ 477.153410][T16947] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.3160'. [ 477.195310][T16947] Cannot find del_set index 3 as target [ 477.212663][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 477.249929][T16947] vlan3: entered promiscuous mode [ 477.471654][T16956] netlink: 'syz.0.3162': attribute type 3 has an invalid length. [ 477.851865][T16967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3165'. [ 477.892960][T16967] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3165'. [ 477.914745][T16959] Cannot find add_set index 3 as target [ 478.169881][T16969] siw: device registration error -23 [ 478.231527][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'. [ 478.633879][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'. [ 478.932480][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3172'. [ 479.455766][T17010] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.547975][T17010] sch_fq: defrate 0 ignored. [ 479.578065][T17022] bond0: option mode: unable to set because the bond device has slaves [ 480.229128][T17041] vlan2: entered allmulticast mode [ 480.246507][T17041] bridge_slave_0: entered allmulticast mode [ 480.278710][T17041] bridge_slave_0: left allmulticast mode [ 480.435956][T17053] bridge0 (unregistering): left promiscuous mode [ 480.575530][T17055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 481.033268][T17070] xt_SECMARK: invalid mode: 0 [ 481.176216][T17075] lo speed is unknown, defaulting to 1000 [ 481.417989][T17085] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 481.494899][T17085] pimreg: entered allmulticast mode [ 481.546421][T17093] __nla_validate_parse: 10 callbacks suppressed [ 481.546440][T17093] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3203'. [ 481.623626][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.646190][T17097] xt_TCPMSS: Only works on TCP SYN packets [ 481.759422][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'. [ 482.125242][T17111] netlink: 'syz.3.3208': attribute type 29 has an invalid length. [ 482.148088][T17114] netlink: 'syz.3.3208': attribute type 29 has an invalid length. [ 482.494126][T17122] netlink: 'syz.3.3211': attribute type 4 has an invalid length. [ 482.791117][T17138] netlink: 'syz.1.3216': attribute type 7 has an invalid length. [ 482.847655][T17138] netlink: 'syz.1.3216': attribute type 39 has an invalid length. [ 483.003284][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 483.059063][ T4620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 483.606822][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 483.637656][T17163] netlink: 'syz.0.3225': attribute type 6 has an invalid length. [ 483.676289][T17163] netlink: 'syz.0.3225': attribute type 5 has an invalid length. [ 483.686542][T17169] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 483.740315][T17163] vxlan1: entered promiscuous mode [ 484.045740][T17180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.093588][T17180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.225168][T17185] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 485.546876][T17219] ebt_among: src integrity fail: 30a [ 485.647321][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 485.674476][T17219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3243'. [ 485.911842][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 486.076635][T17251] netlink: 'syz.0.3245': attribute type 2 has an invalid length. [ 486.150056][T17243] vxlan1: entered promiscuous mode [ 486.227505][T17243] vxlan1: entered allmulticast mode [ 486.673880][T17260] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3248'. [ 486.750172][T17264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 486.778830][T17264] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 486.810418][ T35] bridge_slave_1: left allmulticast mode [ 486.816139][ T35] bridge_slave_1: left promiscuous mode [ 486.840716][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.869324][ T35] bridge_slave_0: left allmulticast mode [ 486.875012][ T35] bridge_slave_0: left promiscuous mode [ 486.906107][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.126494][T17278] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 487.412648][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 487.658263][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.671432][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.683553][ T35] bond0 (unregistering): Released all slaves [ 487.851236][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 487.878422][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 487.994635][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3256'. [ 488.037559][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 488.081507][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 488.094378][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 488.153656][T17298] netlink: 'syz.4.3258': attribute type 15 has an invalid length. [ 488.210189][T17298] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.219338][T17298] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.228180][T17298] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.236899][T17298] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.258459][T17298] vxlan0: entered promiscuous mode [ 488.873696][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3264'. [ 488.893589][T17318] [ 488.895958][T17318] ================================================ [ 488.902452][T17318] WARNING: lock held when returning to user space! [ 488.908950][T17318] 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 Not tainted [ 488.916093][T17318] ------------------------------------------------ [ 488.922570][T17318] syz.4.3262/17318 is leaving the kernel with locks still held! [ 488.930177][T17318] 1 lock held by syz.4.3262/17318: [ 488.935271][T17318] #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_act_cable_test+0x187/0x3f0 [ 489.004037][T17315] ================================================================== [ 489.012145][T17315] BUG: KASAN: slab-use-after-free in __mutex_lock+0xcf5/0xd70 [ 489.019627][T17315] Read of size 4 at addr ffff888050863c34 by task syz.2.3261/17315 [ 489.027532][T17315] [ 489.029877][T17315] CPU: 1 UID: 0 PID: 17315 Comm: syz.2.3261 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 [ 489.040652][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.050722][T17315] Call Trace: [ 489.054018][T17315] [ 489.056957][T17315] dump_stack_lvl+0x241/0x360 [ 489.061660][T17315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.066872][T17315] ? __pfx__printk+0x10/0x10 [ 489.071464][T17315] ? _printk+0xd5/0x120 [ 489.075597][T17315] ? __virt_addr_valid+0x183/0x530 [ 489.080706][T17315] ? __virt_addr_valid+0x183/0x530 [ 489.085835][T17315] print_report+0x169/0x550 [ 489.090361][T17315] ? __virt_addr_valid+0x183/0x530 [ 489.095478][T17315] ? __virt_addr_valid+0x183/0x530 [ 489.100589][T17315] ? __virt_addr_valid+0x45f/0x530 [ 489.105697][T17315] ? __phys_addr+0xba/0x170 [ 489.110191][T17315] ? __mutex_lock+0xcf5/0xd70 [ 489.114861][T17315] kasan_report+0x143/0x180 [ 489.119364][T17315] ? __mutex_lock+0xcf5/0xd70 [ 489.124036][T17315] __mutex_lock+0xcf5/0xd70 [ 489.128531][T17315] ? __pfx___might_resched+0x10/0x10 [ 489.133809][T17315] ? vlan_ioctl_handler+0x112/0x9d0 [ 489.138994][T17315] ? __pfx_lock_release+0x10/0x10 [ 489.144011][T17315] ? __pfx___mutex_lock+0x10/0x10 [ 489.149028][T17315] ? __might_fault+0xc6/0x120 [ 489.153699][T17315] vlan_ioctl_handler+0x112/0x9d0 [ 489.158709][T17315] ? sock_ioctl+0x664/0x8e0 [ 489.163207][T17315] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 489.168748][T17315] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 489.174282][T17315] sock_ioctl+0x683/0x8e0 [ 489.178610][T17315] ? __pfx_sock_ioctl+0x10/0x10 [ 489.183453][T17315] ? __fget_files+0x29/0x470 [ 489.188044][T17315] ? __fget_files+0x3f6/0x470 [ 489.192712][T17315] ? __fget_files+0x29/0x470 [ 489.197297][T17315] ? bpf_lsm_file_ioctl+0x9/0x10 [ 489.202226][T17315] ? security_file_ioctl+0x87/0xb0 [ 489.207323][T17315] ? __pfx_sock_ioctl+0x10/0x10 [ 489.212171][T17315] __se_sys_ioctl+0xfc/0x170 [ 489.216751][T17315] do_syscall_64+0xf3/0x230 [ 489.221246][T17315] ? clear_bhb_loop+0x35/0x90 [ 489.225917][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.231818][T17315] RIP: 0033:0x7fd40e579e79 [ 489.236228][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.255826][T17315] RSP: 002b:00007fd40f2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.264316][T17315] RAX: ffffffffffffffda RBX: 00007fd40e715f80 RCX: 00007fd40e579e79 [ 489.272279][T17315] RDX: 0000000020000100 RSI: 0000000000008983 RDI: 0000000000000009 [ 489.280239][T17315] RBP: 00007fd40e5e793e R08: 0000000000000000 R09: 0000000000000000 [ 489.288292][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.296251][T17315] R13: 0000000000000000 R14: 00007fd40e715f80 R15: 00007ffea72b71f8 [ 489.304233][T17315] [ 489.307235][T17315] [ 489.309542][T17315] Allocated by task 17311: [ 489.313942][T17315] kasan_save_track+0x3f/0x80 [ 489.318611][T17315] __kasan_slab_alloc+0x66/0x80 [ 489.323456][T17315] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 489.329333][T17315] dup_task_struct+0x57/0x8c0 [ 489.334020][T17315] copy_process+0x5d1/0x3e10 [ 489.338597][T17315] kernel_clone+0x226/0x8f0 [ 489.343085][T17315] __se_sys_clone3+0x2cb/0x350 [ 489.347837][T17315] do_syscall_64+0xf3/0x230 [ 489.352327][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.358208][T17315] [ 489.360512][T17315] Freed by task 24: [ 489.364296][T17315] kasan_save_track+0x3f/0x80 [ 489.368986][T17315] kasan_save_free_info+0x40/0x50 [ 489.373998][T17315] poison_slab_object+0xe0/0x150 [ 489.378923][T17315] __kasan_slab_free+0x37/0x60 [ 489.383670][T17315] kmem_cache_free+0x145/0x350 [ 489.388419][T17315] delayed_put_task_struct+0x125/0x300 [ 489.393952][T17315] rcu_core+0xafd/0x1830 [ 489.398182][T17315] handle_softirqs+0x2c4/0x970 [ 489.402930][T17315] run_ksoftirqd+0xca/0x130 [ 489.407417][T17315] smpboot_thread_fn+0x544/0xa30 [ 489.412339][T17315] kthread+0x2f0/0x390 [ 489.416393][T17315] ret_from_fork+0x4b/0x80 [ 489.420793][T17315] ret_from_fork_asm+0x1a/0x30 [ 489.425540][T17315] [ 489.427844][T17315] Last potentially related work creation: [ 489.433534][T17315] kasan_save_stack+0x3f/0x60 [ 489.438198][T17315] __kasan_record_aux_stack+0xac/0xc0 [ 489.443551][T17315] call_rcu+0x167/0xa70 [ 489.447712][T17315] __schedule+0x1808/0x4a60 [ 489.452206][T17315] schedule+0x14b/0x320 [ 489.456433][T17315] do_nanosleep+0x197/0x600 [ 489.460931][T17315] hrtimer_nanosleep+0x227/0x470 [ 489.465852][T17315] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 489.471389][T17315] do_syscall_64+0xf3/0x230 [ 489.476059][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.481940][T17315] [ 489.484252][T17315] Second to last potentially related work creation: [ 489.490818][T17315] kasan_save_stack+0x3f/0x60 [ 489.495486][T17315] __kasan_record_aux_stack+0xac/0xc0 [ 489.500842][T17315] task_work_add+0xb8/0x450 [ 489.505328][T17315] sched_tick+0x322/0x610 [ 489.509640][T17315] update_process_times+0x202/0x230 [ 489.514824][T17315] tick_nohz_handler+0x37c/0x500 [ 489.519745][T17315] __hrtimer_run_queues+0x551/0xd50 [ 489.524928][T17315] hrtimer_interrupt+0x396/0x990 [ 489.529857][T17315] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 489.535827][T17315] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 489.541450][T17315] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.547417][T17315] [ 489.549732][T17315] The buggy address belongs to the object at ffff888050863c00 [ 489.549732][T17315] which belongs to the cache task_struct of size 7424 [ 489.563855][T17315] The buggy address is located 52 bytes inside of [ 489.563855][T17315] freed 7424-byte region [ffff888050863c00, ffff888050865900) [ 489.577641][T17315] [ 489.579955][T17315] The buggy address belongs to the physical page: [ 489.586353][T17315] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50860 [ 489.595103][T17315] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 489.603582][T17315] memcg:ffff888066ea81c1 [ 489.607804][T17315] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 489.615771][T17315] page_type: 0xfdffffff(slab) [ 489.620430][T17315] raw: 00fff00000000040 ffff8880166fd500 0000000000000000 dead000000000001 [ 489.629009][T17315] raw: 0000000000000000 0000000000040004 00000001fdffffff ffff888066ea81c1 [ 489.637574][T17315] head: 00fff00000000040 ffff8880166fd500 0000000000000000 dead000000000001 [ 489.646226][T17315] head: 0000000000000000 0000000000040004 00000001fdffffff ffff888066ea81c1 [ 489.654883][T17315] head: 00fff00000000003 ffffea0001421801 ffffffffffffffff 0000000000000000 [ 489.663535][T17315] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 489.672183][T17315] page dumped because: kasan: bad access detected [ 489.678602][T17315] page_owner tracks the page as allocated [ 489.684298][T17315] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6634, tgid 6634 (syz-executor), ts 203503987901, free_ts 203407918997 [ 489.707209][T17315] post_alloc_hook+0x1f3/0x230 [ 489.711973][T17315] get_page_from_freelist+0x2e4c/0x2f10 [ 489.717512][T17315] __alloc_pages_noprof+0x256/0x6c0 [ 489.722696][T17315] alloc_slab_page+0x5f/0x120 [ 489.727362][T17315] allocate_slab+0x5a/0x2f0 [ 489.731858][T17315] ___slab_alloc+0xcd1/0x14b0 [ 489.736519][T17315] __slab_alloc+0x58/0xa0 [ 489.740835][T17315] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 489.746711][T17315] dup_task_struct+0x57/0x8c0 [ 489.751373][T17315] copy_process+0x5d1/0x3e10 [ 489.755947][T17315] kernel_clone+0x226/0x8f0 [ 489.760437][T17315] __x64_sys_clone+0x258/0x2a0 [ 489.765185][T17315] do_syscall_64+0xf3/0x230 [ 489.769672][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.775554][T17315] page last free pid 8398 tgid 8398 stack trace: [ 489.781864][T17315] free_unref_page+0xd22/0xea0 [ 489.786622][T17315] __put_partials+0xeb/0x130 [ 489.791198][T17315] put_cpu_partial+0x17c/0x250 [ 489.795981][T17315] __slab_free+0x2ea/0x3d0 [ 489.800385][T17315] qlist_free_all+0x9e/0x140 [ 489.804994][T17315] kasan_quarantine_reduce+0x14f/0x170 [ 489.810441][T17315] __kasan_slab_alloc+0x23/0x80 [ 489.815288][T17315] kmem_cache_alloc_noprof+0x135/0x2a0 [ 489.820735][T17315] getname_flags+0xb7/0x540 [ 489.825227][T17315] do_sys_openat2+0xd2/0x1d0 [ 489.829798][T17315] __x64_sys_openat+0x247/0x2a0 [ 489.834629][T17315] do_syscall_64+0xf3/0x230 [ 489.839118][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.845007][T17315] [ 489.847320][T17315] Memory state around the buggy address: [ 489.852932][T17315] ffff888050863b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 489.860976][T17315] ffff888050863b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 489.869025][T17315] >ffff888050863c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.877064][T17315] ^ [ 489.882673][T17315] ffff888050863c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.890717][T17315] ffff888050863d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.898762][T17315] ================================================================== [ 489.910266][T17315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 489.917492][T17315] CPU: 1 UID: 0 PID: 17315 Comm: syz.2.3261 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 [ 489.928327][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.938405][T17315] Call Trace: [ 489.941691][T17315] [ 489.944614][T17315] dump_stack_lvl+0x241/0x360 [ 489.949286][T17315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.954472][T17315] ? __pfx__printk+0x10/0x10 [ 489.959059][T17315] ? rcu_is_watching+0x15/0xb0 [ 489.963840][T17315] ? vscnprintf+0x5d/0x90 [ 489.968162][T17315] panic+0x349/0x860 [ 489.972045][T17315] ? check_panic_on_warn+0x21/0xb0 [ 489.977159][T17315] ? __pfx_panic+0x10/0x10 [ 489.981569][T17315] ? trace_irq_enable+0x2c/0x120 [ 489.986529][T17315] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 489.992440][T17315] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 489.998329][T17315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 490.004648][T17315] ? print_report+0x502/0x550 [ 490.009317][T17315] check_panic_on_warn+0x86/0xb0 [ 490.014241][T17315] ? __mutex_lock+0xcf5/0xd70 [ 490.018904][T17315] end_report+0x77/0x160 [ 490.023143][T17315] kasan_report+0x154/0x180 [ 490.027643][T17315] ? __mutex_lock+0xcf5/0xd70 [ 490.032321][T17315] __mutex_lock+0xcf5/0xd70 [ 490.036816][T17315] ? __pfx___might_resched+0x10/0x10 [ 490.042093][T17315] ? vlan_ioctl_handler+0x112/0x9d0 [ 490.047276][T17315] ? __pfx_lock_release+0x10/0x10 [ 490.052292][T17315] ? __pfx___mutex_lock+0x10/0x10 [ 490.057312][T17315] ? __might_fault+0xc6/0x120 [ 490.061981][T17315] vlan_ioctl_handler+0x112/0x9d0 [ 490.066991][T17315] ? sock_ioctl+0x664/0x8e0 [ 490.071487][T17315] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 490.077023][T17315] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 490.082554][T17315] sock_ioctl+0x683/0x8e0 [ 490.086879][T17315] ? __pfx_sock_ioctl+0x10/0x10 [ 490.091726][T17315] ? __fget_files+0x29/0x470 [ 490.096310][T17315] ? __fget_files+0x3f6/0x470 [ 490.100977][T17315] ? __fget_files+0x29/0x470 [ 490.105557][T17315] ? bpf_lsm_file_ioctl+0x9/0x10 [ 490.110485][T17315] ? security_file_ioctl+0x87/0xb0 [ 490.115579][T17315] ? __pfx_sock_ioctl+0x10/0x10 [ 490.120435][T17315] __se_sys_ioctl+0xfc/0x170 [ 490.125038][T17315] do_syscall_64+0xf3/0x230 [ 490.129542][T17315] ? clear_bhb_loop+0x35/0x90 [ 490.134220][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.140110][T17315] RIP: 0033:0x7fd40e579e79 [ 490.144520][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.164122][T17315] RSP: 002b:00007fd40f2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.172528][T17315] RAX: ffffffffffffffda RBX: 00007fd40e715f80 RCX: 00007fd40e579e79 [ 490.180488][T17315] RDX: 0000000020000100 RSI: 0000000000008983 RDI: 0000000000000009 [ 490.188463][T17315] RBP: 00007fd40e5e793e R08: 0000000000000000 R09: 0000000000000000 [ 490.196447][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.204411][T17315] R13: 0000000000000000 R14: 00007fd40e715f80 R15: 00007ffea72b71f8 [ 490.212382][T17315] [ 490.215619][T17315] Kernel Offset: disabled [ 490.219934][T17315] Rebooting in 86400 seconds..