last executing test programs: 2.446669468s ago: executing program 1 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0x2}}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0) 2.352945205s ago: executing program 1 (id=2512): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f000005000700880000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socket$netlink(0x10, 0x3, 0x0) 2.347811608s ago: executing program 4 (id=2513): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xe7}) r3 = socket(0x2, 0x3, 0x6) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10, 0x1, 0x41}}], 0x10, 0x8000}}], 0x1, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000002008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xe7}) (async) socket(0x2, 0x3, 0x6) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10, 0x1, 0x41}}], 0x10, 0x8000}}], 0x1, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000002008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) 2.187046118s ago: executing program 4 (id=2518): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x30}], 0x400000000000172, 0x4001c00) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket(0x0, 0x800, 0x9) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @local}, {0x306, @multicast}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2e, 0x20004840) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) 2.044579787s ago: executing program 4 (id=2520): r0 = socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x2f, 0x9, 0x8, 0x800, 0x5, @mcast1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x10, 0x20, 0xe7, 0x2}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x8, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) 1.538554465s ago: executing program 0 (id=2530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0xa) bind$bt_hci(r3, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd08000340000000030900020073797a3200000000080001", @ANYRES64=r3], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000100000000000000010000008500000041000000850000007d000000950000dd889a81c500f6f8a5d769c8b059466684bb286b740966f00b949b2861133d213b8b3777fbee48ee3ff76df14599001fe8cfcc30c864"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x69) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b000090007000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'rose0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0031197d429faca862bbc7eecf22076af6097771fc774b12b2a5ac4e746007880d34ef9f4aaf71049b90bf19c97686a3"], 0x48}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000070000000200000000000009050000000000000000000003000000000400000003000000010000000b0000000000000b030000001000000007000013050000001001000001000000008000001000000001090000000000000900000000800000080000000600000073150000008000000600000000000000d5bf00000500000000000000040000000100000001000080fdffffff0000000000000003000000000100000003000000b5f20000002e612e003000"], &(0x7f00000006c0)=""/237, 0xc7, 0xed, 0x1}, 0x28) 1.402716385s ago: executing program 1 (id=2532): bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1000000, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x40000000, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x400000, 0x1, 0x1}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000020000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ff"], 0xb8}}, 0x0) 1.375417689s ago: executing program 3 (id=2533): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) 1.351721393s ago: executing program 1 (id=2534): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000091101700000000009500"/32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.226221174s ago: executing program 1 (id=2535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39392f07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe23ebb3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x508b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2996}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x785e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fd15a1f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a9d4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc82b34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe258}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c576795}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a6b6bc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43eb90ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653cddc9}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f0a7e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe34f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f21da50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b42b7c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11070911}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15243d0a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ea4f79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x744d}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4094) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xa09200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4008081) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000580)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x180000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c45}, 0x80) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r7, 0x408, 0x70bd2d, 0x8, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000980)=0x94, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x1a1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x589}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b40)=0x0, &(0x7f0000000b80)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001280)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x624, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf06}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x35fb}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0x4, 0x4, 0x8}, {0x5, 0x40, 0x6, 0x7fffffff}, {0x6, 0x3, 0x94, 0x2}, {0x1, 0x9, 0x80, 0xbc11}, {0x5, 0x6, 0xa, 0x3}, {0x1, 0x0, 0x7, 0x401}, {0x92, 0x5, 0x7f, 0x40}]}}}]}}, {{0x8, 0x1, r9}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x4, 0x9, 0xe9}, {0xd, 0x5, 0x1, 0xfffffffb}, {0xed7, 0x56, 0xf1, 0x3}, {0x7, 0x1, 0x6, 0xb98f}, {0xfff8, 0x7, 0xd2, 0x10}, {0xed, 0x0, 0x20}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0xc, 0x48, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9cd}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x624}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x20302, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r14, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, r15, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4004810) write$tun(r13, &(0x7f0000001480)={@void, @void, @x25={0x0, 0x0, 0x25, "9448119758e17b1b5c9d7521f69ebaad3963c38fa33846b9d0e7fef6a74db4f5005d2e7408c7725d5be6462b575a54d9e01de98885c74dd68e577cf24ce4e911492530ee89258e5c7aab33eeb0646ee44d214ba4b1be0125ac2fdd47e8f20e744750c1bf7fdc8e5578fd4e101105ef6caf9f5b32e8704c181b10cfe5f7ca6f279441002449adee260b06e9eac0deeab6"}}, 0x93) 1.223920379s ago: executing program 3 (id=2536): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}, 0xfffb}) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "57ab1d702b147449f34ceb751b56"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = accept(r0, &(0x7f0000000000)=@caif=@dgm, &(0x7f0000000080)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x90, r5, 0x908, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 1.19953663s ago: executing program 0 (id=2537): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xe, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f00000001c0)=0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = openat$cgroup_ro(r1, &(0x7f0000000500)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={r3, 0x7fff, 0x257c}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000005c0)={r8, 0xffffffff, 0xffff, 0x2, 0xff26, 0x5, 0x7, 0xb, {r2, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}}, 0x4, 0x2, 0xffffffff, 0x2, 0x4}}, &(0x7f0000000680)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000006c0)={r10, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0x1}}, 0xb, 0x4}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000007c0)={r11, 0x3}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000840)={r2, 0x77e301e4, 0x4, 0x4}, &(0x7f0000000880)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000008c0)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0xf, @remote, 0x3}], 0x2c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000900)={0x1, 'veth0_to_bond\x00', {}, 0x2}) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000980), r1) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000d80)={r3, 0x2, 0x30}, &(0x7f0000000dc0)=0xc) sendmmsg$inet_sctp(r1, &(0x7f0000001c40)=[{&(0x7f0000000a80)=@in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x22}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="febd6d4b15478f8c9f85db5561ec797a1fb84f69b768320a3e423d9e5770eaff420c91629cdc4aa92406e306cd3c24683637f7083ed114fd9d14a457073d66c2a0b048ac090e00b296d7b58546863e07fa45b6baa6b7a58d72c3f661e174e790958f7321d2524202c5f916518309806f34839e7c28bac27af79648aabd8f5f7eda2a4027c650916f8507693fa2967f85b6e8bfffcec188d4b2e42f3d5ddafca17d3a9b1361969f6f8cc3b5cc8addc1b84285be5a11", 0xb5}, {&(0x7f0000000b80)="d1b271638e6f15dbecd89eb2f4f9d53c95397de26c84034e160de579c8a4dca770f4d766362c46622f3973ac50404e21fbe86bd6d135f60fc4368ee60c23da61e9", 0x41}, {&(0x7f0000000c00)="f16f972189ce8bb92ea96f5bcbbfc2de7f978a53fe460c7a240dbf740cb6d067f4ace2122eb98e0f3e8a4f15ecb550bb7d1a09e8707b44b8edeaa828e8d14900386fc0818dca03ad7ce62643bf874c5c53b7ea8c2f6ad583db76e022530fec2c5ab46869538517699b32509c003b786444ff2829231ba9086195103dbc", 0x7d}, {&(0x7f0000000c80)="9745a6bbeac5890ccf69050bdf306ff85c03b24d5e9839dce0c478b5b0d28238", 0x20}, {&(0x7f0000000cc0)="6ce7fd4b4962701bb2e126dbba7fc1b91e555d6405", 0x15}], 0x5, &(0x7f0000000e00)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x202, 0x9, 0x101, r13}}], 0x38, 0x14}, {&(0x7f0000000e40)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000e80)="3c08594048eba8d8d5dda0c7b3eeea179a95edd8fba14c", 0x17}, {&(0x7f0000000ec0)="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", 0xff}, {&(0x7f0000000fc0)="f4f95019510e423e194ac248d4a1d6404e501dc86a077ec0064685b5ed17ffa06eeb8fd9b1cc4991782f7a57aae8ff7a70214f6a2f5617daf78ae00f36779659fafbe65c41b0b12e5a20e329452ff957e9df176fe67a6d6b2f8ed427078ea0051d1d3d3ba7f68f4aae052725296ddfdb2d204ff4bdd32921b9cb03ca1e7993b17e27953d95c907532451a4fecaef3cccbd578f756a56d1e1cd68a1d4e3cf224e86deacac73d32fbe6e021e8f6ac9fd9b5730a0e68ec8221d97c5ef251e4b618b9f6cfc81094d352edc752570a072e242167f7616f01f3b", 0xd7}], 0x3, &(0x7f0000001100)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x200}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}, @authinfo={0x18, 0x84, 0x6, {0xbf}}], 0x48, 0x4000010}, {&(0x7f0000001180)=@in6={0xa, 0x4e20, 0x796, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000011c0)="c02bbe6583864329ca8ec581c9169eb7398b73899760c5a062b5ecd73f4947e51381f22f89add0a70c1a29b3485364ed1390079a5ed98ffbe5fba9b68df4736c007ecb0ac54f693aef4d46254677d79909999172bef38cbc4caaf983c8ac86acafb7e08599d82161e1833ca4be12fbbcc1c629e89cb78e0c9ee674b07c800934bb9f8e419b0da2d4a53f13f33f335e1d839f8cd30b0efe0ed47c8c76151fb8897cae1fc03f3736d9049c48282f11a968cf24df705793cecfbeffb29ac83160199903a378ec9ac162862e671372f30e06fe9202b08d837923c49cd640a9a9", 0xde}, {&(0x7f00000012c0)="368bf62d15de6b256db463195ef8b89c342096340bd8558b1da47755a8fb8135df122b51107ec9b6a322de488325323a6f65550e3398306f9e2015c42e3110145eacf4ab7c8458b92f6330ae334398fe658f346da2f793efe1bbfff396a382b57d98855a651f14b0d212a956fbdf0346b14b149c3d7fe4929a36459fb799260438efa94cb57e6dcb822290ddc2a86c09f16891b4f4f9058b26b336fba8f1122ba8409754cc456334a57414b5999d476f62951d8c4912c9faceacf3cf6c53ad124072b5f4c5da", 0xc6}, {&(0x7f00000013c0)="f61f2893474ec7127826136489dbd8ce8b84f4ec6939de3a7bb15224fc70a4a2cfd5e84e0f0cc60dd6d2375a9ddff2f1f865afca23afed8c5b24ce25496949e3e837cc4816ee72cf83c124098b04dcc6e096a530de6fcf8c545b00ebade9056fa59ee6ac94b502bec6afda035d532b8ac29899c78b28eead299b95bdab6cdd138b72761be866af3e21676087285be358f3fbd0a53cbd834cf751f2ffae496b6a31f10778b7783a82529ff27edb3bafc9a6a831d2daa02e0517cf9bdf674973581bff5c3d6ed2b177c187091156e122b85a61da24a8bcedfb20f13f849b061fb5d9fb89609504a332429f70e3c72a5ede5b01", 0xf2}, {&(0x7f00000014c0)="9ec53a6d5b6c", 0x6}, {&(0x7f0000001500)="1740", 0x2}, {&(0x7f0000001540)="a6065c46a3b330a9818126acd376beccae40f606a79812fe35c66a5f15724a96f0a82aff08231768e0319a5618524c55f283cbab544f72e0d92f431e05e537980de7a64e795f6733cd341ee6d559fe5784d2939d918fc3f85be38fa124ee0fa84f99ad94aefdabeecfbb", 0x6a}, {&(0x7f00000015c0)="0a6ecf47c62db9a536b34a9b65e482939e358ca7ce89baf05eb71f0fe17009b353351b680daf9c3b344e7c3ef34ec997bb0d5ac85ed8f1a3e32b5ccb553a6610e2869a02f9ed584dada3b0714791dfd2a7ef2c5605150f935a26033310d6e7936ddf2e8e4e83315e6c6d038e6a101085e808941dbda6217d308e9336178be7dab5cd922ce24b813cb79d0490f878fd7187b2fde82c4d4f114f0a99ecda169c4d8693aa04cd0b95364cffe627ee4ca9cf635381741a49e7", 0xb7}, {&(0x7f0000001680)="06f83a5191124b6df28802d4d3409f77e4ae43653fcb2d08e6f239f22e4171dbbcf3a22a12caf9b4a4ecbaf9e7c12f542c0dcf0d11dcf582929ed39aa516b8a3288137bc5d2da9e3fc118877", 0x4c}, {&(0x7f0000001700)="4fcfeb3f600eb88cf3bcdf538c3b90786d0ee87a57d67af94dffaf57bb1615152ddd69782b53f2eb207e31567f7e20fc59580743cf14a92e613d38382d6546ffe41709b45aa90baec8332eb8fcac1ffc87a60ec5731ba26b40b6b87ef3c338", 0x5f}], 0x9, 0x0, 0x0, 0x44}, {&(0x7f0000001840)=@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001880)="427f83f519ccbc454aa51dced4dbaa1bdfcca741a31ab985d8885a5266e0eae900354e6eb84de3d119d67e8357bd55113d08110503313e782a310845085f78d1a1fe59076b0ed4cd888ca60615df105bacd9a2439bcd3632ec90ff2c9b9dded140f6b96b06bd635aab48019d9af1d8d5ad337ce1879bc130d295d9413e28b6d8eeec96d1d0773fd3a53c877f0b27", 0x8e}, {&(0x7f0000001940)="85", 0x1}, {&(0x7f0000001980)="05e1e63faaffe08a0259463e2b985dbbb1915be656a534767c49fb11885e01adf042a550c5f4110ee4f5b53c96e4f303b9d7b1d7e6ccdb63f1edb3d3769e11b47a7d0ffa5c71a2e2d247220cf24707bad7f7e8854139e421f04effc51fa9a03da8", 0x61}, {&(0x7f0000001a00)="c69039f6a1410be8", 0x8}, {&(0x7f0000001a40)="2410db820caacde4d7442bede37ce694d79f67bf3f38fd6a7b778c1c6370ac7ae993460f8aed98edad8ce31dfad71de1dc987c71209c07ddefc4c1e37c4d1997ed0cc65c35d152857596f3afe92de634bc38a101b0d40ee3beb3e3a15325d613cb4dca1f5e3ae0107ca536caac569207f199686727b7de38e99ad800c4fadd4c45da1d364b1c7d487a8b2fae13407da91d3d6ac7d6790fc71f830b777466c561a669ebd31f32d9415265be4de9683d63566f567d15e03d6664caa956ca1f993bf62f83e178ea6a0ac9b10c77edf9f4129ce7b6e9394ecfdb3bb2c1d9f33384579da8365d6386", 0xe6}], 0x5, &(0x7f0000001bc0)=[@authinfo={0x18, 0x84, 0x6, {0x28}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x80000000}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x5, 0xf}}], 0x68, 0x20000000}], 0x4, 0x20000000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001d40)={@in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}}, 0x0, 0x0, 0x4d, 0x0, "cab61c18a6ba973777c46b549825352e6c22ff01797eeca6cda2e2be68cfc36efb677a2d84d2a3a8b98c47f1668f3700fac54b55d46b813ea63a35f53fac1509d5ffe07d83534767536285a7f35cd1ad"}, 0xd8) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e80), r1) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1180}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xc8, r14, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x405}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002040)={r3, 0x10}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000002080)=@assoc_value={r9, 0x1}, 0x8) r15 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r15, 0x84, 0x22, &(0x7f00000020c0)={0x6, 0xc, 0x9, 0x4, r3}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000002100)={r2, 0x5}, &(0x7f0000002140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000002180)={r16, @in6={{0xa, 0x4e20, 0x65, @mcast2, 0xfffffff7}}, 0x7, 0x3, 0x8, 0x6, 0x3}, &(0x7f0000002240)=0x98) 1.134073238s ago: executing program 3 (id=2540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000002c0)="a7e3c11073f57f9e4978aafe780ae4f8ae7620312693639f91d0bf5de4a04117e44a1050cc03b8dc9ec3898f6fe8be971a235e2c5b4bed729efd79b53422cad3555a3fea472ba77dcfc36fafb53597b4c1507f9190a4477cc57c169ef4b1e3953659192a1315d362b9697185601352ba2100", &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2bc5bd8db70f3b80ca78f5b990c8db9117657cf0cb591f952cee90776c191451b9187caf0f1a600e4b401fad569ae25d4", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002400017f00000000000000250500000004001a00"], 0x18}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000700)=0x12, 0x80000) bind$x25(r5, &(0x7f0000000740), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f00000003c0), 0x2, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ldst={0x0, 0x2, 0x0, 0x6d1e7308fa1e0877, 0x4, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x800, 0x2c, &(0x7f0000000180)=""/44, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x1, 0x5, 0x4, 0xd}, {0x2, 0x3, 0xf, 0x8}, {0x2, 0x2, 0xc, 0x8}, {0x2, 0x4, 0x4, 0xb}, {0x3, 0x5, 0xe, 0x9985f1413a84a662}], 0x10, 0x9}, 0x94) accept4(r7, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) 1.038755712s ago: executing program 0 (id=2541): socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000280)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0xdd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xa}, 0xf, &(0x7f00000000c0)=[{&(0x7f0000000540)=':', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="3000000000000000840000000100000008000600040000007f01000009000000020000000900000001feffff", @ANYRES32=0x0, @ANYBLOB="20000000000000008400564bbd28e21305855e1a5c35521c000000bc00000000000e00d600020000005cb74855c37edc4b23d0a8ed0000", @ANYRES32=0x0], 0x50, 0x4040000}, 0xd0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) unshare(0x4000400) tee(r2, r3, 0x100000af5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000fd0800006114ac000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0xc, 0xc, 0x0, r0, 0x4, '\x00', r4, r5, 0x3, 0x1, 0x2, 0x9}, 0x50) 1.038004984s ago: executing program 1 (id=2542): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) write$cgroup_devices(r2, 0x0, 0x9) mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "ef0ea7", 0x10, 0x21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e21, 0x4e22, 0x4, 0x1, 0xe, 0x0, 0x0, 0x6, 0x5, "a09617", 0x6, "549a6e"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0) 987.889007ms ago: executing program 4 (id=2544): bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1000000, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x40000000, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x400000, 0x1, 0x1}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000200000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ff"], 0xb8}}, 0x0) 920.252132ms ago: executing program 4 (id=2545): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x40000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3e, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0xffffc000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x11c, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfd, {}, [{0x108, 0x1, [@m_gact={0x104, 0x1, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1298, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cb2, 0x6}}, @TCA_GACT_PARMS={0x22, 0x2, {0x5, 0x9, 0x10000000, 0x8, 0xa72b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c54, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xac, 0x6, 0x9, 0x2}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1db7, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd7f, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x258a, 0x8}}]}, {0x54, 0x6, "ebe8eb3dc2f34411173054f5c06413f0b0e7b144b10e4621be5f7ce180c94c3cc92de7d46ab85408150cbd69d3b8c8930c0b98fbc5f00da49b6dbeacee662d3bb153456c37e0b820ca09708256a7ad15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 682.578519ms ago: executing program 4 (id=2546): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000006067b1c4fa477982000000000000000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e0000001000000000000000000000000000d9f"], 0x38}}, 0x40000) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0x2, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000300010006", 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0xd}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) readv(r7, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 632.096193ms ago: executing program 3 (id=2548): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="53822fd833", 0x5}, {0x0}], 0x3, 0x9) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='cachefiles_ondemand_cread\x00', r3, 0x0, 0x6}, 0x18) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r4, 0x0, 0x24, 0xfffffffffffffffe}, 0x15) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r4, 0x0, 0x24, 0xfffffffffffffffe}, 0x15) write$cgroup_pid(r1, &(0x7f0000000080)=r5, 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000080)=r5, 0x12) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f0000001300)=""/4096, &(0x7f00000000c0)=0x1000) socket$inet6_udplite(0xa, 0x2, 0x88) 462.860195ms ago: executing program 3 (id=2549): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000020000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28) 462.490671ms ago: executing program 3 (id=2550): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000050) socket$inet_sctp(0x2, 0x1, 0x84) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a4000000040000000000000095"], &(0x7f0000002dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41103, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xbc85, 0x45}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x30}}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x12, 0x9, 0x24, 0x5}, 0x20) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 365.680585ms ago: executing program 2 (id=2552): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000b500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 282.700717ms ago: executing program 2 (id=2553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'veth0_to_batadv\x00', @ifru_addrs=@generic={0x2c, "c7192b6d8a96655fbeea87617fd6"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) vmsplice(r5, &(0x7f0000002440), 0x1, 0x9) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r8, 0x0, 0x0, 0x800) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 179.136078ms ago: executing program 2 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611053000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x2, 0xfffffffd, @mcast2}}}, &(0x7f0000000180)=0x84) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="46a6", 0x2}], 0x1}}], 0x1, 0xc841) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) 174.428797ms ago: executing program 0 (id=2555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x80ff, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xffffffffff7ffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) 98.770035ms ago: executing program 0 (id=2556): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000080)={0x62}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe05, &(0x7f00000000c0), 0x1}, 0x4000094) 93.528342ms ago: executing program 2 (id=2557): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x7, 0x0, 0x4}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x7, 0x0, 0x4}, 0x20) r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000002c0)=""/99, 0x63, 0x0, &(0x7f0000000340)=""/4, 0x4}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000480)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}, @call={0x85, 0x0, 0x0, 0x82}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x6, 0x8, 0x4, 0x0, 0x10}, @jmp={0x5, 0x1, 0xb, 0x0, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, &(0x7f0000000500), 0x41000, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x3fc00, 0xc}, 0x10, 0xaebe, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x2, 0x3, 0xa, 0xd}], 0x10, 0x5}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000009000000040000000100000000000000", @ANYRES32, @ANYBLOB="0a02000000000000001600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000b00"/28], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000009000000040000000100000000000000", @ANYRES32, @ANYBLOB="0a02000000000000001600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000b00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e001000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0x13, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0xb, 0x5, 0x7, 0x50, 0x8}, @jmp={0x5, 0x1, 0x8, 0x1, 0xb, 0xffffffffffffffe0}, @map_idx_val={0x18, 0x3}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x38, '\x00', r1, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x4, 0xe, 0x9, 0x9}, 0x10, r3, r4, 0x0, &(0x7f0000000a80)=[r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000ac0), 0x10, 0xe8}, 0x94) pipe(&(0x7f0000000440)) (async) pipe(&(0x7f0000000440)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 49.991741ms ago: executing program 0 (id=2558): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xd0) 45.620534ms ago: executing program 2 (id=2559): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5}, 0x0) 0s ago: executing program 2 (id=2560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES16=r1, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r0, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): 8: left allmulticast mode [ 182.214769][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 182.385202][T10063] lo speed is unknown, defaulting to 1000 [ 182.515982][T10082] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20000 [ 182.554292][T10076] syzkaller0: entered promiscuous mode [ 182.560760][T10076] syzkaller0: entered allmulticast mode [ 182.764255][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 182.982929][T10111] netlink: 'syz.0.1114': attribute type 21 has an invalid length. [ 183.008529][T10111] netlink: 'syz.0.1114': attribute type 14 has an invalid length. [ 183.028103][T10111] netlink: 'syz.0.1114': attribute type 11 has an invalid length. [ 183.243604][T10114] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 183.253562][T10114] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 183.264136][T10114] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 183.472369][T10117] __nla_validate_parse: 15 callbacks suppressed [ 183.472390][T10117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 183.631605][T10133] syzkaller1: entered promiscuous mode [ 183.638016][T10133] syzkaller1: entered allmulticast mode [ 183.652669][T10138] netlink: 'syz.2.1121': attribute type 27 has an invalid length. [ 183.665665][T10133] ip6gretap0: entered promiscuous mode [ 183.845607][ T8769] net_ratelimit: 1 callbacks suppressed [ 183.845626][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 183.926653][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 183.957674][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 183.995878][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 184.063217][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1126'. [ 184.137409][T10010] Set syz1 is full, maxelem 65536 reached [ 184.196632][T10170] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 184.338196][T10192] 8021q: VLANs not supported on ip_vti0 [ 184.348781][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 184.365504][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 184.370650][ T8753] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.387266][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 184.397538][ T8753] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.422039][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 184.448141][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 184.474943][ T8753] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.494708][ T8753] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.563732][T10209] netlink: 212924 bytes leftover after parsing attributes in process `syz.3.1140'. [ 184.626161][T10207] lo speed is unknown, defaulting to 1000 [ 184.793909][T10207] lo speed is unknown, defaulting to 1000 [ 184.812297][T10206] lo speed is unknown, defaulting to 1000 [ 184.996275][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 185.015619][T10234] lo speed is unknown, defaulting to 1000 [ 185.016194][T10206] lo speed is unknown, defaulting to 1000 [ 185.028561][T10237] tipc: Enabled bearer , priority 0 [ 185.048029][T10242] syzkaller0: entered promiscuous mode [ 185.055410][T10242] syzkaller0: entered allmulticast mode [ 185.099267][T10237] tipc: Resetting bearer [ 185.131036][T10235] tipc: Resetting bearer [ 185.192949][T10235] tipc: Disabling bearer [ 185.202928][T10236] lo speed is unknown, defaulting to 1000 [ 185.384382][T10234] lo speed is unknown, defaulting to 1000 [ 185.455767][T10236] lo speed is unknown, defaulting to 1000 [ 185.524593][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 185.549742][T10264] netlink: 'syz.0.1157': attribute type 8 has an invalid length. [ 185.924472][T10279] syzkaller0: entered promiscuous mode [ 185.930094][T10279] syzkaller0: entered allmulticast mode [ 186.030149][T10283] netlink: 'syz.0.1163': attribute type 2 has an invalid length. [ 186.050075][T10283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.067899][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 186.200721][T10296] netlink: 'syz.4.1169': attribute type 11 has an invalid length. [ 186.207004][T10294] team0: Mode changed to "loadbalance" [ 186.217777][T10285] netlink: 'syz.3.1164': attribute type 13 has an invalid length. [ 186.228161][T10285] netlink: 'syz.3.1164': attribute type 17 has an invalid length. [ 186.295290][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 186.301934][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 186.302050][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 186.381317][T10285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.428979][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.478733][T10285] dummy0: left promiscuous mode [ 186.485993][T10285] dummy0: left allmulticast mode [ 186.495529][T10285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.532697][T10315] syzkaller0: entered promiscuous mode [ 186.550224][T10315] syzkaller0: entered allmulticast mode [ 186.570522][T10301] lo speed is unknown, defaulting to 1000 [ 186.604611][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 186.732718][T10301] lo speed is unknown, defaulting to 1000 [ 186.736376][T10316] lo speed is unknown, defaulting to 1000 [ 186.868393][T10332] batadv_slave_1: entered promiscuous mode [ 186.888005][T10316] lo speed is unknown, defaulting to 1000 [ 186.983985][T10316] sctp: [Deprecated]: syz.2.1175 (pid 10316) Use of int in maxseg socket option. [ 186.983985][T10316] Use struct sctp_assoc_value instead [ 186.999324][T10316] nbd: device at index 2 is going down [ 189.314534][ T8752] net_ratelimit: 5 callbacks suppressed [ 189.314548][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 189.844412][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 190.363920][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 190.884160][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 191.404602][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 191.924399][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 192.444214][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 192.964619][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 193.484038][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 194.004905][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 194.455506][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525223][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 195.044180][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 195.564902][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 196.085300][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 196.603875][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 197.123904][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 197.645051][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 198.163859][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 198.683950][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 199.203844][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 199.724730][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 200.244788][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 200.764965][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 201.284062][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 201.804314][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 202.324061][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 202.844534][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 203.364199][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 203.884079][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 204.414931][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 204.935019][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 205.454730][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 205.973987][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 206.493925][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 207.015405][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 207.534060][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 208.053923][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 208.573908][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 209.093877][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 209.614025][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 210.144263][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 210.664872][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 211.184015][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 211.704647][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 212.224066][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 212.744527][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 213.264632][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 213.784066][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 214.304851][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 214.824027][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 215.343959][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 215.863869][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 216.384869][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 216.914666][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 217.434853][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 217.954639][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 218.474576][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 218.994549][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 219.514985][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 220.034505][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 220.554908][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 221.074681][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 221.593854][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 222.113863][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 222.633931][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 223.153933][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 223.673918][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 224.193905][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 224.714597][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 225.234132][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 225.753888][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 226.274187][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 226.793935][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 227.314571][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 227.834682][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 228.354126][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 228.874846][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 229.394579][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 229.913885][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 230.434135][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 230.953874][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 231.474978][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 231.993903][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 232.513940][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 233.033847][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 233.553944][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 234.074030][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 234.594350][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 235.114053][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 235.634520][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 236.164017][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 236.684525][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 237.204911][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 237.724574][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 238.244658][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 238.764013][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 239.284566][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 239.803926][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 240.323862][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 240.843893][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 241.364653][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 241.884883][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 242.403826][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 242.923964][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 243.444105][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 243.963861][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 244.485130][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 245.005124][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 245.533931][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 246.053980][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 246.574934][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 247.095194][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 247.613897][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 248.134549][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 248.654125][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 249.175166][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 249.694036][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 250.214492][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 250.734510][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 251.254156][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 251.773938][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 252.293895][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 252.814118][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 253.335249][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 253.853828][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 254.373903][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 254.893902][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 255.414151][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 255.896158][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934289][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 256.453882][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 256.973938][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 257.493899][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 258.013831][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 258.534445][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 259.053856][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 259.575170][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 260.094429][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 260.613899][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 261.134063][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 261.665137][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 262.183956][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 262.704508][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 263.224322][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 263.743910][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 264.263879][ T8769] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 264.784661][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 265.304502][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 265.824621][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 266.343953][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 266.864529][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 267.383994][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 267.904555][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 268.423915][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 268.943902][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 269.464518][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 269.983907][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 270.504983][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 271.024333][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 271.543834][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 272.064651][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 272.583887][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 273.103863][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 273.625006][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 274.144666][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 274.664922][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 275.184577][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 275.704949][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 276.224072][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 276.744096][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 277.264944][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 277.783919][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 278.304643][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 278.824554][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 279.344855][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 279.864566][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 280.394191][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 280.914264][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 281.434607][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 281.964962][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 282.484579][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 283.014629][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 283.544229][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 284.063903][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 284.584379][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 285.104351][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 285.623885][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 286.143886][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 286.663862][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 287.184173][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 287.704214][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 288.225250][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 288.755047][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 289.274634][ T8753] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 289.793892][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 290.314952][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 290.471005][T10360] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 290.476110][T10359] FAULT_INJECTION: forcing a failure. [ 290.476110][T10359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.492451][T10360] batadv_slave_0: entered promiscuous mode [ 290.510154][T10360] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 290.525677][T10359] CPU: 1 UID: 0 PID: 10359 Comm: syz.3.1186 Not tainted syzkaller #0 PREEMPT(full) [ 290.525703][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.525718][T10359] Call Trace: [ 290.525725][T10359] [ 290.525733][T10359] dump_stack_lvl+0x189/0x250 [ 290.525765][T10359] ? __pfx____ratelimit+0x10/0x10 [ 290.525789][T10359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.525813][T10359] ? __pfx__printk+0x10/0x10 [ 290.525838][T10359] ? rcu_is_watching+0x15/0xb0 [ 290.525857][T10359] should_fail_ex+0x414/0x560 [ 290.525881][T10359] _copy_to_user+0x31/0xb0 [ 290.525900][T10359] simple_read_from_buffer+0xe1/0x170 [ 290.525927][T10359] proc_fail_nth_read+0x1b3/0x220 [ 290.525947][T10359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.525967][T10359] ? rw_verify_area+0x2a6/0x4d0 [ 290.525988][T10359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.526007][T10359] vfs_read+0x1fd/0xa30 [ 290.526030][T10359] ? lock_release+0x4b/0x3e0 [ 290.526053][T10359] ? __pfx_vfs_read+0x10/0x10 [ 290.526074][T10359] ? rds_getsockopt+0x236/0x500 [ 290.526092][T10359] ? __pfx_rds_getsockopt+0x10/0x10 [ 290.526111][T10359] ? do_sock_getsockopt+0x36f/0x450 [ 290.526134][T10359] ksys_read+0x145/0x250 [ 290.526155][T10359] ? __pfx_ksys_read+0x10/0x10 [ 290.526176][T10359] ? __x64_sys_getsockopt+0x1a5/0x250 [ 290.526194][T10359] ? rcu_is_watching+0x15/0xb0 [ 290.526212][T10359] do_syscall_64+0xfa/0x3b0 [ 290.526228][T10359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.526246][T10359] ? clear_bhb_loop+0x60/0xb0 [ 290.526263][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.526280][T10359] RIP: 0033:0x7f950958d5fc [ 290.526300][T10359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.526316][T10359] RSP: 002b:00007f950a438030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.526339][T10359] RAX: ffffffffffffffda RBX: 00007f95097b5fa0 RCX: 00007f950958d5fc [ 290.526352][T10359] RDX: 000000000000000f RSI: 00007f950a4380a0 RDI: 0000000000000004 [ 290.526364][T10359] RBP: 00007f950a438090 R08: 0000000000000000 R09: 0000000000000000 [ 290.526375][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.526386][T10359] R13: 00007f95097b6038 R14: 00007f95097b5fa0 R15: 00007fff42f3e2e8 [ 290.526426][T10359] [ 290.530496][T10360] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.595616][T10365] __nla_validate_parse: 7 callbacks suppressed [ 290.595650][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1184'. [ 290.614688][T10360] hsr1: entered promiscuous mode [ 290.835400][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 290.949156][T10357] bond_slave_1: left allmulticast mode [ 290.970142][T10357] bond2: left promiscuous mode [ 290.983251][T10357] geneve3: left allmulticast mode [ 291.016355][T10357] xfrm1: left allmulticast mode [ 291.049788][ T6183] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.058527][ T6183] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.072266][ T6183] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.103103][ T6183] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.115570][ T6183] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.126712][ T6183] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.143019][ T6183] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.154646][ T6183] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.171953][T10391] syzkaller0: entered promiscuous mode [ 291.179176][T10391] syzkaller0: entered allmulticast mode [ 291.386022][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 291.419582][T10405] netlink: 'syz.1.1199': attribute type 4 has an invalid length. [ 291.431082][ T5986] lo speed is unknown, defaulting to 1000 [ 291.438115][ T5986] syz1: Port: 1 Link ACTIVE [ 291.538517][ T1208] lo speed is unknown, defaulting to 1000 [ 291.547836][ T1208] syz1: Port: 1 Link DOWN [ 291.691349][T10428] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1206'. [ 291.700658][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 291.711374][T10428] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 291.735037][T10428] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1206'. [ 291.897959][T10444] nbd: couldn't find device at index 536870912 [ 291.914327][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 291.942900][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 291.968430][T10449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 291.984704][T10448] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1212'. [ 292.012612][T10453] sctp: [Deprecated]: syz.2.1207 (pid 10453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.012612][T10453] Use struct sctp_sack_info instead [ 292.021358][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 292.031209][T10449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1212'. [ 292.212986][T10467] batadv_slave_1: left promiscuous mode [ 292.222409][T10467] ip6gre1: left promiscuous mode [ 292.229913][T10467] veth3: left promiscuous mode [ 292.236894][T10467] geneve3: left promiscuous mode [ 292.243144][T10467] vlan2: left allmulticast mode [ 292.248903][T10467] veth1: left allmulticast mode [ 292.258194][ T8752] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.269243][ T8752] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.288734][ T8752] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.306800][ T8752] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.363111][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1222'. [ 292.376242][T10479] bridge_slave_0: entered allmulticast mode [ 292.406447][T10481] geneve2: entered promiscuous mode [ 292.430695][ T6183] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.447725][ T6183] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.458513][ T6183] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.469806][ T8752] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 292.484911][ T6183] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.560507][T10491] batadv_slave_0: entered promiscuous mode [ 292.578601][T10485] batadv_slave_0: left promiscuous mode [ 292.617813][T10494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.754540][T10504] pim6reg1: entered promiscuous mode [ 292.772443][T10504] pim6reg1: entered allmulticast mode [ 292.857954][T10507] netlink: 'syz.4.1234': attribute type 5 has an invalid length. [ 292.881705][T10520] bond_slave_0: entered promiscuous mode [ 292.887564][T10520] bond_slave_1: entered promiscuous mode [ 292.911355][T10520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.926304][T10520] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.942051][T10520] 0ªX¹¦À: left allmulticast mode [ 293.020697][T10519] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.031962][T10519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.201110][T10534] siw: device registration error -23 [ 293.234680][ T6878] lo speed is unknown, defaulting to 1000 [ 293.244379][ T6878] syz0: Port: 1 Link ACTIVE [ 293.249070][ T6878] lo speed is unknown, defaulting to 1000 [ 293.340036][T10519] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.362615][T10519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.391372][T10542] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.442728][T10519] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.463792][T10519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.494801][T10548] Unsupported xt match [ 293.494819][T10548] unable to load match [ 293.516722][ T3553] net_ratelimit: 2 callbacks suppressed [ 293.516739][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 293.539210][T10519] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.556941][T10519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.650093][T10553] lo speed is unknown, defaulting to 1000 [ 293.731537][ T8753] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.760067][ T8753] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.807270][ T8753] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.809366][T10561] netlink: 'syz.3.1251': attribute type 4 has an invalid length. [ 293.827071][ T8753] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.844172][ T8753] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.863225][ T8753] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.877114][T10553] lo speed is unknown, defaulting to 1000 [ 293.962330][ T8753] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.994067][ T8753] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.081922][T10561] lo speed is unknown, defaulting to 1000 [ 294.105644][ T6190] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 294.295203][T10561] lo speed is unknown, defaulting to 1000 [ 294.475218][T10602] syzkaller0: entered promiscuous mode [ 294.480726][T10602] syzkaller0: entered allmulticast mode [ 294.645279][ T6183] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 295.193923][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 295.450245][T10641] erspan0: entered promiscuous mode [ 295.459570][T10641] erspan0: left promiscuous mode [ 295.648443][T10653] __nla_validate_parse: 15 callbacks suppressed [ 295.648460][T10653] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1277'. [ 295.674362][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 295.726399][T10659] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 295.780732][ T3553] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 295.833536][T10661] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1278'. [ 295.856875][T10664] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 295.899932][T10664] batman_adv: batadv0: Interface deactivated: 0! [ 295.901684][T10668] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 295.915111][T10664] batman_adv: batadv0: Removing interface: 0! [ 295.925641][T10664] bridge_slave_0: left allmulticast mode [ 295.932366][T10664] bridge_slave_0: left promiscuous mode [ 295.938785][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.963500][T10664] bridge_slave_1: left allmulticast mode [ 295.984788][T10664] bridge_slave_1: left promiscuous mode [ 295.990548][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.011268][T10664] bond0: (slave bond_slave_0): Releasing backup interface [ 296.023089][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1282'. [ 296.034830][T10664] bond_slave_0: left promiscuous mode [ 296.043430][T10664] bond0: (slave bond_slave_1): Releasing backup interface [ 296.058510][T10664] bond_slave_1: left promiscuous mode [ 296.069431][T10664] team0: Port device team_slave_0 removed [ 296.080518][T10664] team0: Port device team_slave_1 removed [ 296.092431][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.101599][T10664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.111038][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.121475][T10664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.137872][T10664] veth3: left allmulticast mode [ 296.142945][T10664] veth3: left promiscuous mode [ 296.148797][T10664] bridge1: port 1(veth3) entered disabled state [ 296.149461][T10683] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 296.171042][T10664] bond3: (slave macvlan2): Removing an active aggregator [ 296.179335][T10664] bond3: (slave macvlan2): Releasing backup interface [ 296.207564][T10668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.315319][T10670] lo speed is unknown, defaulting to 1000 [ 296.408287][T10691] netlink: 'syz.4.1286': attribute type 13 has an invalid length. [ 296.424493][T10691] netlink: 'syz.4.1286': attribute type 17 has an invalid length. [ 296.593436][T10697] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 296.617308][T10697] bridge2: left promiscuous mode [ 296.624748][T10697] macvtap1: left promiscuous mode [ 296.636063][T10697] geneve2: left promiscuous mode [ 296.642138][T10670] lo speed is unknown, defaulting to 1000 [ 296.664682][T10706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.665982][T10702] : entered promiscuous mode [ 296.932668][T10728] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1297'. [ 296.974047][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 297.079425][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1299'. [ 297.133461][T10744] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1302'. [ 297.243638][T10750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 297.283063][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 297.327350][T10755] pimreg: entered allmulticast mode [ 297.345457][T10755] pimreg: left allmulticast mode [ 297.350757][T10755] dvmrp8: left allmulticast mode [ 297.420128][T10761] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 297.426517][T10761] dvmrp1: linktype set to 801 [ 297.902487][T10800] bridge0: left allmulticast mode [ 297.927937][ T6190] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.942681][ T6190] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.981587][ T6190] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.009365][ T6190] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.056465][T10822] bridge0: port 1(batadv2) entered blocking state [ 298.066995][T10820] FAULT_INJECTION: forcing a failure. [ 298.066995][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 298.072886][T10822] bridge0: port 1(batadv2) entered disabled state [ 298.082009][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.2.1327 Not tainted syzkaller #0 PREEMPT(full) [ 298.082032][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.082042][T10820] Call Trace: [ 298.082049][T10820] [ 298.082056][T10820] dump_stack_lvl+0x189/0x250 [ 298.082081][T10820] ? __pfx____ratelimit+0x10/0x10 [ 298.082104][T10820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.082123][T10820] ? __pfx__printk+0x10/0x10 [ 298.082150][T10820] should_fail_ex+0x414/0x560 [ 298.082173][T10820] should_failslab+0xa8/0x100 [ 298.082197][T10820] kmem_cache_alloc_noprof+0x73/0x3c0 [ 298.082218][T10820] ? skb_clone+0x212/0x3a0 [ 298.082238][T10820] skb_clone+0x212/0x3a0 [ 298.082257][T10820] __netlink_deliver_tap+0x404/0x850 [ 298.082287][T10820] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.082311][T10820] netlink_deliver_tap+0x19c/0x1b0 [ 298.082334][T10820] netlink_unicast+0x7fa/0x9e0 [ 298.082359][T10820] ? __pfx_netlink_unicast+0x10/0x10 [ 298.082381][T10820] ? netlink_sendmsg+0x642/0xb30 [ 298.082394][T10820] ? skb_put+0x11b/0x210 [ 298.082410][T10820] netlink_sendmsg+0x805/0xb30 [ 298.082429][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.082445][T10820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.082461][T10820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.082479][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.082494][T10820] __sock_sendmsg+0x21c/0x270 [ 298.082516][T10820] ____sys_sendmsg+0x505/0x830 [ 298.082535][T10820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.082556][T10820] ? import_iovec+0x74/0xa0 [ 298.082576][T10820] ___sys_sendmsg+0x21f/0x2a0 [ 298.082593][T10820] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.082624][T10820] ? __fget_files+0x2a/0x420 [ 298.082638][T10820] ? __fget_files+0x3a0/0x420 [ 298.082656][T10820] __x64_sys_sendmsg+0x19b/0x260 [ 298.082674][T10820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.082695][T10820] ? __pfx_ksys_write+0x10/0x10 [ 298.082717][T10820] ? rcu_is_watching+0x15/0xb0 [ 298.082735][T10820] do_syscall_64+0xfa/0x3b0 [ 298.082750][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.082767][T10820] ? clear_bhb_loop+0x60/0xb0 [ 298.082785][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.082800][T10820] RIP: 0033:0x7f168498ebe9 [ 298.082815][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.082830][T10820] RSP: 002b:00007f1685801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.082849][T10820] RAX: ffffffffffffffda RBX: 00007f1684bb5fa0 RCX: 00007f168498ebe9 [ 298.082862][T10820] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 298.082873][T10820] RBP: 00007f1685801090 R08: 0000000000000000 R09: 0000000000000000 [ 298.082884][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.082894][T10820] R13: 00007f1684bb6038 R14: 00007f1684bb5fa0 R15: 00007fffb57ae278 [ 298.082913][T10820] [ 298.385358][T10822] batadv2: entered allmulticast mode [ 298.392300][T10822] batadv2: entered promiscuous mode [ 298.401185][T10823] bridge0: port 2(batadv3) entered blocking state [ 298.408206][T10823] bridge0: port 2(batadv3) entered disabled state [ 298.418639][T10823] batadv3: entered allmulticast mode [ 298.425111][T10823] batadv3: entered promiscuous mode [ 298.461153][T10837] tipc: Enabled bearer , priority 0 [ 298.508483][T10838] syzkaller0: entered promiscuous mode [ 298.553915][ T8769] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 298.559775][T10838] syzkaller0: entered allmulticast mode [ 298.563360][ T8769] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 298.608195][T10831] tipc: Resetting bearer [ 298.655830][T10830] tipc: Resetting bearer [ 298.675452][T10830] tipc: Disabling bearer [ 298.905253][ T6190] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 298.915164][ T6190] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 299.042373][ T6864] IPVS: starting estimator thread 0... [ 299.118280][T10902] openvswitch: netlink: Message has 16 unknown bytes. [ 299.183865][T10899] IPVS: using max 39 ests per chain, 93600 per kthread [ 299.482525][T10919] netlink: 'syz.1.1356': attribute type 13 has an invalid length. [ 299.493263][T10919] netlink: 'syz.1.1356': attribute type 17 has an invalid length. [ 299.552139][T10918] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 299.769467][T10919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.785699][T10919] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.807763][T10936] netlink: 'syz.4.1362': attribute type 2 has an invalid length. [ 299.817004][T10934] delete_channel: no stack [ 299.821947][T10936] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 299.834456][T10919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.871966][ T6864] lo speed is unknown, defaulting to 1000 [ 299.878698][ T6864] syz1: Port: 1 Link ACTIVE [ 299.893038][T10922] lo speed is unknown, defaulting to 1000 [ 300.001402][T10922] lo speed is unknown, defaulting to 1000 [ 300.243484][T10960] xt_socket: unknown flags 0xd0 [ 300.276921][T10969] tipc: Cannot configure node identity twice [ 300.383395][T10974] tipc: Enabled bearer , priority 0 [ 300.391099][T10974] syzkaller0: entered promiscuous mode [ 300.399407][T10974] syzkaller0: entered allmulticast mode [ 300.411158][T10974] sch_fq: defrate 257 ignored. [ 300.439063][T10974] tipc: Resetting bearer [ 300.461997][T10973] tipc: Resetting bearer [ 300.488796][T10973] tipc: Disabling bearer [ 300.602735][T10982] netlink: 'syz.3.1379': attribute type 4 has an invalid length. [ 300.701895][T10997] __nla_validate_parse: 12 callbacks suppressed [ 300.701916][T10997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1385'. [ 300.755423][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'. [ 300.814442][T11010] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1388'. [ 300.960474][T11028] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 300.976734][T11028] netlink: 'syz.4.1394': attribute type 12 has an invalid length. [ 301.140632][T11043] batadv_slave_1: entered promiscuous mode [ 301.161664][T11048] lo speed is unknown, defaulting to 1000 [ 301.195540][T11042] batadv_slave_1: left promiscuous mode [ 301.214508][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 301.234236][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'. [ 301.306847][T11062] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1403'. [ 301.332060][T11065] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 301.390189][T11065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.409501][T11069] syz_tun: entered allmulticast mode [ 301.427892][T11066] veth11: entered promiscuous mode [ 301.437415][T11066] bond3: (slave veth11): Enslaving as an active interface with a down link [ 301.470474][T11052] lo speed is unknown, defaulting to 1000 [ 301.573787][T11048] lo speed is unknown, defaulting to 1000 [ 301.652318][T11052] lo speed is unknown, defaulting to 1000 [ 301.968718][T11068] syz_tun: left allmulticast mode [ 302.058795][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 302.219601][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1420'. [ 302.392057][T11134] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 302.409070][T11141] netlink: 'syz.4.1423': attribute type 12 has an invalid length. [ 302.417340][T11141] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1423'. [ 302.554804][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 302.656337][T11156] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 302.978346][T11181] lo speed is unknown, defaulting to 1000 [ 303.321789][T11208] netlink: 'syz.4.1445': attribute type 10 has an invalid length. [ 303.332945][T11208] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.477757][T11219] netlink: 'syz.4.1447': attribute type 21 has an invalid length. [ 303.499932][T11219] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 303.539275][T11227] netlink: 'syz.0.1449': attribute type 13 has an invalid length. [ 303.568015][T11223] lo speed is unknown, defaulting to 1000 [ 303.594224][T11190] tipc: Enabled bearer , priority 0 [ 303.602320][T11190] syzkaller0: entered promiscuous mode [ 303.610704][T11190] syzkaller0: entered allmulticast mode [ 303.627171][T11181] lo speed is unknown, defaulting to 1000 [ 303.730953][T11223] lo speed is unknown, defaulting to 1000 [ 303.806089][T11180] tipc: Resetting bearer [ 303.817693][T11180] tipc: Disabling bearer [ 304.297916][T11274] bond0: (slave dummy0): Releasing backup interface [ 304.307405][T11274] bond0: (slave bond_slave_0): Releasing backup interface [ 304.323051][T11274] bond0: (slave bond_slave_1): Releasing backup interface [ 304.332541][T11274] team0: Port device team_slave_0 removed [ 304.343114][T11274] team0: Port device team_slave_1 removed [ 304.349676][T11274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.375182][T11274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.386499][T11274] bond3: (slave veth11): Releasing active interface [ 304.409363][T11275] macsec1: entered promiscuous mode [ 304.424634][T11275] bond0: entered promiscuous mode [ 304.433217][T11275] bond0: left promiscuous mode [ 304.581916][T11296] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 304.594487][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.602748][T11296] team0: Port device bond0 added [ 304.646611][T11304] tipc: Enabled bearer , priority 0 [ 304.695595][T11304] tipc: Disabling bearer [ 304.743481][T11309] bond4: entered promiscuous mode [ 304.752130][T11309] bond4: entered allmulticast mode [ 304.760652][T11309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.917737][T11309] lo speed is unknown, defaulting to 1000 [ 305.091700][T11309] lo speed is unknown, defaulting to 1000 [ 305.598957][T11366] sctp: [Deprecated]: syz.0.1486 (pid 11366) Use of int in max_burst socket option. [ 305.598957][T11366] Use struct sctp_assoc_value instead [ 305.655431][T11366] mac80211_hwsim hwsim2 ªªªªª;: renamed from wlan0 [ 305.733885][T11366] __nla_validate_parse: 18 callbacks suppressed [ 305.733906][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 305.818343][T11377] netlink: 'syz.3.1488': attribute type 9 has an invalid length. [ 305.827404][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 305.868354][T11366] netlink: 'syz.0.1486': attribute type 18 has an invalid length. [ 305.920098][T11377] lo speed is unknown, defaulting to 1000 [ 306.471924][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 306.524978][T11377] lo speed is unknown, defaulting to 1000 [ 306.682809][T11411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1496'. [ 306.682826][T11410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1497'. [ 306.856548][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 306.876721][T11417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1498'. [ 307.126161][T11427] pimreg: entered allmulticast mode [ 307.132092][T11427] pimreg: left allmulticast mode [ 307.440107][T11447] lo speed is unknown, defaulting to 1000 [ 307.549940][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 307.597935][T11462] validate_nla: 4 callbacks suppressed [ 307.597955][T11462] netlink: 'syz.1.1510': attribute type 13 has an invalid length. [ 307.641623][T11462] netlink: 'syz.1.1510': attribute type 17 has an invalid length. [ 307.642601][T11465] IPVS: Error connecting to the multicast addr [ 307.681011][T11462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.700793][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 307.706741][T11447] lo speed is unknown, defaulting to 1000 [ 307.710497][T11467] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1515'. [ 307.734730][T11450] lo speed is unknown, defaulting to 1000 [ 307.758419][T11462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.778077][T11469] netlink: 'syz.4.1516': attribute type 10 has an invalid length. [ 307.788920][T11469] bond0: (slave wlan1): Opening slave failed [ 307.870543][T11469] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 307.940786][T11479] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 307.997609][T11450] lo speed is unknown, defaulting to 1000 [ 308.033204][T11484] netlink: 'syz.0.1520': attribute type 4 has an invalid length. [ 308.259097][T11488] bridge_slave_0: left allmulticast mode [ 308.345365][T11488] tipc: Resetting bearer [ 308.375215][T11488] syzkaller0: left promiscuous mode [ 308.386406][T11488] syzkaller0: left allmulticast mode [ 308.397966][T11488] geneve4: left promiscuous mode [ 308.438641][T11488] veth9: left promiscuous mode [ 308.505470][T11488] hsr1: left promiscuous mode [ 308.549391][ T3553] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.553825][T11498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.569560][ T3553] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.586920][ T3553] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.597322][ T3553] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.641499][ T3553] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.655725][ T3553] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.676717][ T3553] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.705147][ T3553] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.769159][T11517] netlink: 'syz.3.1529': attribute type 2 has an invalid length. [ 309.021274][T11545] tipc: Enabled bearer , priority 0 [ 309.047158][T11545] syzkaller0: entered promiscuous mode [ 309.062727][T11545] syzkaller0: entered allmulticast mode [ 309.106047][T11545] tipc: Resetting bearer [ 309.150646][T11544] tipc: Resetting bearer [ 309.182982][T11544] tipc: Disabling bearer [ 309.366911][T11579] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 309.582686][T11601] tc_dump_action: action bad kind [ 309.610477][T11603] team0: Refused to change device type [ 309.770321][T11623] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 309.781402][T11621] lo speed is unknown, defaulting to 1000 [ 309.828476][T11629] netlink: 'syz.3.1561': attribute type 3 has an invalid length. [ 309.938320][T11621] lo speed is unknown, defaulting to 1000 [ 310.118494][T11648] : entered promiscuous mode [ 310.189416][T11654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.317348][T11666] netlink: 'syz.3.1571': attribute type 7 has an invalid length. [ 310.488660][T11688] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 310.719630][T11700] tipc: Enabled bearer , priority 0 [ 310.742823][T11700] syzkaller0: entered promiscuous mode [ 310.759848][T11700] syzkaller0: entered allmulticast mode [ 310.870036][T11700] tipc: Resetting bearer [ 310.889544][T11698] tipc: Resetting bearer [ 310.898659][T11698] tipc: Disabling bearer [ 310.929330][T11710] lo speed is unknown, defaulting to 1000 [ 311.046931][T11710] lo speed is unknown, defaulting to 1000 [ 311.220085][T11720] lo speed is unknown, defaulting to 1000 [ 311.461450][T11720] lo speed is unknown, defaulting to 1000 [ 311.551957][T11738] lo speed is unknown, defaulting to 1000 [ 311.661148][T11738] lo speed is unknown, defaulting to 1000 [ 311.803217][T11759] __nla_validate_parse: 18 callbacks suppressed [ 311.803240][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 311.822020][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 312.043575][T11771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 312.186291][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 312.202724][T11784] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20004 [ 312.207257][T11780] pim6reg: entered allmulticast mode [ 312.221793][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 312.426124][T11795] lo speed is unknown, defaulting to 1000 [ 312.426424][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 312.479800][T11787] pim6reg: left allmulticast mode [ 312.542050][T11800] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1604'. [ 312.589207][T11803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.662813][T11804] syzkaller1: entered promiscuous mode [ 312.680862][T11804] syzkaller1: entered allmulticast mode [ 312.697072][T11795] lo speed is unknown, defaulting to 1000 [ 312.698971][T11803] lo speed is unknown, defaulting to 1000 [ 312.783231][T11809] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 312.894451][T11803] lo speed is unknown, defaulting to 1000 [ 312.936014][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 313.128191][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 313.151874][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 313.153155][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 313.200743][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 313.412995][T11833] pimreg: tun_chr_ioctl cmd 2147767506 [ 313.511406][T11846] validate_nla: 3 callbacks suppressed [ 313.511425][T11846] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 313.547005][T11846] team0: Port device dummy0 added [ 313.568626][T11859] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 313.642496][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.667097][T11857] lo speed is unknown, defaulting to 1000 [ 313.689809][T11862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.725516][T11862] bond6: (slave bond7): making interface the new active one [ 313.744872][T11862] bond6: (slave bond7): Enslaving as an active interface with an up link [ 313.883030][T11878] openvswitch: netlink: Key type 9488 is out of range max 32 [ 313.903388][T11857] lo speed is unknown, defaulting to 1000 [ 313.934025][T11878] bridge_slave_0: entered promiscuous mode [ 313.940632][T11878] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 314.703478][T11930] netlink: 'syz.0.1640': attribute type 6 has an invalid length. [ 314.759372][T11908] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 314.782583][ T6864] lo speed is unknown, defaulting to 1000 [ 314.793794][ T6864] syz0: Port: 1 Link DOWN [ 314.804580][ T6728] lo speed is unknown, defaulting to 1000 [ 314.904387][T11942] tipc: Enabled bearer , priority 0 [ 314.927308][T11942] syzkaller0: entered promiscuous mode [ 314.947532][T11942] syzkaller0: entered allmulticast mode [ 314.970740][T11942] tipc: Resetting bearer [ 314.995976][T11950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.007168][T11941] tipc: Resetting bearer [ 315.019899][T11941] tipc: Disabling bearer [ 315.179523][T11965] lo speed is unknown, defaulting to 1000 [ 315.409907][T11982] openvswitch: netlink: Missing valid actions attribute. [ 315.426437][T11982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.557869][T11965] lo speed is unknown, defaulting to 1000 [ 315.682244][T11995] netlink: 'syz.1.1663': attribute type 3 has an invalid length. [ 315.840662][T12002] 8021q: VLANs not supported on syzkaller1 [ 315.871910][T12004] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 315.937684][T12006] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 316.191831][T12017] netlink: 'syz.1.1668': attribute type 13 has an invalid length. [ 316.214827][T12017] netlink: 'syz.1.1668': attribute type 17 has an invalid length. [ 316.215386][T12018] netlink: 'syz.3.1669': attribute type 19 has an invalid length. [ 316.233439][T12017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.292185][T12013] lo speed is unknown, defaulting to 1000 [ 316.359570][T12022] netlink: 'syz.2.1671': attribute type 4 has an invalid length. [ 316.389671][T12022] netlink: 'syz.2.1671': attribute type 4 has an invalid length. [ 316.407949][ T6864] lo speed is unknown, defaulting to 1000 [ 316.408033][T12013] lo speed is unknown, defaulting to 1000 [ 316.414845][ T6864] syz0: Port: 1 Link ACTIVE [ 316.434905][T12022] IPVS: length: 24 != 55320 [ 316.456621][ T6864] lo speed is unknown, defaulting to 1000 [ 316.708246][T12043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.779867][T12049] bond0: entered promiscuous mode [ 316.787298][T12049] bond0: left promiscuous mode [ 316.860820][T12055] lo speed is unknown, defaulting to 1000 [ 317.000135][T12058] syzkaller1: entered promiscuous mode [ 317.009092][T12058] syzkaller1: entered allmulticast mode [ 317.094296][T12055] lo speed is unknown, defaulting to 1000 [ 317.178901][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.337314][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.410665][T12084] __nla_validate_parse: 19 callbacks suppressed [ 317.410682][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 317.791607][T12108] lo speed is unknown, defaulting to 1000 [ 317.835326][T12102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.885694][T12111] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1702'. [ 317.921744][T12108] lo speed is unknown, defaulting to 1000 [ 317.950294][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1704'. [ 317.970411][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 318.041549][T12118] lo speed is unknown, defaulting to 1000 [ 318.062622][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 318.084906][T12121] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.1707'. [ 318.167330][T12118] lo speed is unknown, defaulting to 1000 [ 318.173956][T12122] lo speed is unknown, defaulting to 1000 [ 318.226948][T12125] nbd0: detected capacity change from 0 to 127 [ 318.239468][ T5857] block nbd0: Receive control failed (result -32) [ 318.257680][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'. [ 318.291037][T12122] lo speed is unknown, defaulting to 1000 [ 318.431979][T12137] lo speed is unknown, defaulting to 1000 [ 318.621988][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 318.659066][T12137] lo speed is unknown, defaulting to 1000 [ 318.666188][T12150] lo speed is unknown, defaulting to 1000 [ 318.784492][T12169] validate_nla: 5 callbacks suppressed [ 318.784508][T12169] netlink: 'syz.3.1717': attribute type 23 has an invalid length. [ 318.841033][T12150] lo speed is unknown, defaulting to 1000 [ 318.885828][T12171] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 318.985470][T12137] netlink: 'syz.0.1711': attribute type 6 has an invalid length. [ 319.004428][T12171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.028396][T12177] bond5: (slave wlan0): Opening slave failed [ 319.053054][T12178] vlan4: entered allmulticast mode [ 319.058700][T12178] veth1: entered allmulticast mode [ 319.067106][T12178] bond5: (slave vlan4): making interface the new active one [ 319.101378][T12178] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 319.448300][T12214] bond0: entered promiscuous mode [ 319.458184][T12214] bond0: left promiscuous mode [ 319.587955][T12222] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1733'. [ 319.720734][T12236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1734'. [ 319.801225][T12222] syzkaller1: entered promiscuous mode [ 319.807145][T12222] syzkaller1: entered allmulticast mode [ 320.050936][T12245] net_ratelimit: 1 callbacks suppressed [ 320.050951][T12245] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 320.081408][ T5937] lo speed is unknown, defaulting to 1000 [ 320.087457][ T5937] syz0: Port: 1 Link DOWN [ 320.099315][ T5937] lo speed is unknown, defaulting to 1000 [ 320.375322][T12263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.398489][T12263] bond0: (slave rose0): Enslaving as an active interface with an up link [ 320.481617][T12262] batadv2: left allmulticast mode [ 320.491226][T12262] batadv2: left promiscuous mode [ 320.498080][T12262] bridge0: port 1(batadv2) entered disabled state [ 320.527264][T12262] batadv3: left allmulticast mode [ 320.544529][T12262] batadv3: left promiscuous mode [ 320.550851][T12262] bridge0: port 2(batadv3) entered disabled state [ 320.562028][T12283] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 320.581725][T12275] vlan0: entered promiscuous mode [ 320.685464][T12294] rdma_rxe: rxe_newlink: failed to add lo [ 320.743013][T12296] lo speed is unknown, defaulting to 1000 [ 320.880980][T12317] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 321.040062][T12296] lo speed is unknown, defaulting to 1000 [ 321.203122][ T6183] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 321.699726][T12376] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 322.267709][T12408] lo speed is unknown, defaulting to 1000 [ 322.462997][T12408] lo speed is unknown, defaulting to 1000 [ 322.464155][T12413] lo speed is unknown, defaulting to 1000 [ 322.637930][T12436] netlink: 'syz.4.1777': attribute type 10 has an invalid length. [ 322.659956][T12436] __nla_validate_parse: 10 callbacks suppressed [ 322.659975][T12436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1777'. [ 322.722375][T12438] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 322.758041][T12436] veth0_vlan: left promiscuous mode [ 322.765486][T12436] veth0_vlan: entered promiscuous mode [ 322.773875][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 322.791361][T12436] veth0_vlan: entered allmulticast mode [ 322.812230][T12436] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 322.845242][T12443] tipc: Enabled bearer , priority 0 [ 322.864847][T12443] syzkaller0: MTU too low for tipc bearer [ 322.870872][T12443] tipc: Disabling bearer [ 322.909168][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 323.004151][T12413] lo speed is unknown, defaulting to 1000 [ 323.121896][T12461] tipc: Enabled bearer , priority 0 [ 323.218702][T12447] netlink: 'syz.3.1781': attribute type 12 has an invalid length. [ 323.221149][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1787'. [ 323.226981][T12447] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1781'. [ 323.263548][T12451] tipc: Disabling bearer [ 323.413035][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 323.443871][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1790'. [ 323.469529][T12480] lo speed is unknown, defaulting to 1000 [ 323.501647][T12484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1789'. [ 323.522744][T12484] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1789'. [ 323.585431][T12484] can: request_module (can-proto-0) failed. [ 323.607230][T12494] lo speed is unknown, defaulting to 1000 [ 323.610770][T12480] lo speed is unknown, defaulting to 1000 [ 324.017564][T12494] lo speed is unknown, defaulting to 1000 [ 324.184349][T12520] lo speed is unknown, defaulting to 1000 [ 324.352830][T12517] lo speed is unknown, defaulting to 1000 [ 324.353037][T12520] lo speed is unknown, defaulting to 1000 [ 324.435549][T12543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1805'. [ 324.447912][T12543] tc_dump_action: action bad kind [ 324.618182][T12551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.624437][T12526] lo speed is unknown, defaulting to 1000 [ 324.746268][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1810'. [ 324.801651][T12517] lo speed is unknown, defaulting to 1000 [ 324.801830][T12546] lo speed is unknown, defaulting to 1000 [ 324.836081][T12526] lo speed is unknown, defaulting to 1000 [ 325.008676][T12546] lo speed is unknown, defaulting to 1000 [ 325.130825][T12572] netlink: 'syz.2.1813': attribute type 2 has an invalid length. [ 325.142226][T12572] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 325.161453][T12573] netlink: 'syz.2.1813': attribute type 2 has an invalid length. [ 325.173198][T12573] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 325.341949][T12585] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 325.441637][T12587] lo speed is unknown, defaulting to 1000 [ 325.579029][T12587] lo speed is unknown, defaulting to 1000 [ 325.991717][T12623] veth0_vlan: left allmulticast mode [ 326.008008][T12623] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 326.019523][T12623] veth11: left promiscuous mode [ 326.029917][T12623] bond4: left promiscuous mode [ 326.036374][T12623] bond4: left allmulticast mode [ 326.182355][T12639] tipc: Enabling of bearer rejected, failed to enable media [ 326.518301][T12666] veth1_to_bond: entered promiscuous mode [ 326.525734][T12666] veth1_to_bond: left promiscuous mode [ 326.562550][T12669] lo speed is unknown, defaulting to 1000 [ 326.628316][T12679] tipc: Enabled bearer , priority 0 [ 326.636481][T12679] syzkaller0: entered promiscuous mode [ 326.642299][T12679] syzkaller0: entered allmulticast mode [ 326.651813][T12679] syzkaller0: mtu less than device minimum [ 326.680532][T12678] tipc: Resetting bearer [ 326.711068][T12678] tipc: Disabling bearer [ 326.719699][T12669] lo speed is unknown, defaulting to 1000 [ 326.939079][T12705] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 327.106027][T12717] bond6: (slave bond7): Releasing backup interface [ 327.250989][T12717] netlink: 'syz.0.1858': attribute type 10 has an invalid length. [ 327.274758][T12717] bond0: (slave wlan1): Opening slave failed [ 327.281922][T12741] batadv_slave_1: entered promiscuous mode [ 327.295013][T12740] batadv_slave_1: left promiscuous mode [ 327.378971][T12750] netlink: 'syz.4.1866': attribute type 4 has an invalid length. [ 327.406798][T12750] netlink: 'syz.4.1866': attribute type 4 has an invalid length. [ 327.532112][T12767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.545077][T12767] netlink: 'syz.1.1872': attribute type 1 has an invalid length. [ 327.691022][T12770] __nla_validate_parse: 12 callbacks suppressed [ 327.691034][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1873'. [ 327.707555][T12770] netlink: 'syz.3.1873': attribute type 29 has an invalid length. [ 327.927643][T12784] IPVS: length: 49 != 24 [ 328.017331][T12793] syzkaller0: entered promiscuous mode [ 328.022941][T12793] syzkaller0: entered allmulticast mode [ 328.056598][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 328.096376][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 328.241923][T12807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1883'. [ 328.308550][T12816] netlink: 'syz.4.1885': attribute type 21 has an invalid length. [ 328.543544][T12845] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 328.553726][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'. [ 328.580524][T12842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.604909][T12849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.710487][T12860] lo speed is unknown, defaulting to 1000 [ 328.779337][T12865] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 328.805736][T12865] bond9: entered promiscuous mode [ 328.811525][T12865] bond9: entered allmulticast mode [ 328.817365][T12865] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.828097][T12858] lo speed is unknown, defaulting to 1000 [ 328.844603][T12860] lo speed is unknown, defaulting to 1000 [ 328.940512][T12858] lo speed is unknown, defaulting to 1000 [ 328.947516][T12870] pimreg: entered allmulticast mode [ 329.212856][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 329.232895][T12883] pimreg: entered allmulticast mode [ 329.242157][T12883] macvlan1: entered allmulticast mode [ 329.276615][T12885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1904'. [ 329.297789][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 329.377297][T12891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.432501][ T6864] lo speed is unknown, defaulting to 1000 [ 329.447139][ T6864] syz1: Port: 1 Link DOWN [ 329.604275][T12897] tipc: Enabled bearer , priority 0 [ 329.611317][T12898] syzkaller0: entered promiscuous mode [ 329.619046][T12898] syzkaller0: entered allmulticast mode [ 329.636924][T12898] tipc: Resetting bearer [ 329.644778][T12894] tipc: Resetting bearer [ 329.657711][T12894] tipc: Disabling bearer [ 329.658145][T12901] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1909'. [ 329.748528][T12905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1911'. [ 329.985926][T12881] pimreg: left allmulticast mode [ 330.022198][T12925] bond9: left promiscuous mode [ 330.027583][T12925] bond9: left allmulticast mode [ 330.312029][T12940] tipc: Enabling of bearer rejected, already enabled [ 330.333059][T12940] syzkaller0: entered promiscuous mode [ 330.351322][T12940] syzkaller0: entered allmulticast mode [ 330.764706][ T30] audit: type=1800 audit(1756406909.923:5): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1928" name="memory.events" dev="tmpfs" ino=1924 res=0 errno=0 [ 330.849970][T12978] IPVS: length: 49 != 24 [ 330.934664][T12981] pim6reg1: entered promiscuous mode [ 330.951037][T12981] pim6reg1: entered allmulticast mode [ 331.105015][T12987] batman_adv: batadv0: Adding interface: dummy0 [ 331.106243][T12989] validate_nla: 5 callbacks suppressed [ 331.106260][T12989] netlink: 'syz.1.1942': attribute type 3 has an invalid length. [ 331.111295][T12987] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.111325][T12987] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 331.119170][T12987] batman_adv: batadv0: Adding interface: ip6gretap1 [ 331.176844][T12987] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.221809][T12987] batman_adv: batadv0: Interface activated: ip6gretap1 [ 331.241335][T12994] tipc: Resetting bearer [ 331.443893][T13013] lo speed is unknown, defaulting to 1000 [ 331.802589][T13013] lo speed is unknown, defaulting to 1000 [ 331.892543][T13034] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 332.053450][T13057] lo speed is unknown, defaulting to 1000 [ 332.320635][T13057] lo speed is unknown, defaulting to 1000 [ 332.405623][T13063] syzkaller1: entered promiscuous mode [ 332.424836][T13063] syzkaller1: entered allmulticast mode [ 332.832849][T13082] lo speed is unknown, defaulting to 1000 [ 332.880560][T13086] syzkaller0: left promiscuous mode [ 332.894597][T13086] syzkaller0: left allmulticast mode [ 332.985339][T13103] netlink: 'syz.3.1970': attribute type 3 has an invalid length. [ 333.010005][T13103] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 333.054295][T13103] __nla_validate_parse: 6 callbacks suppressed [ 333.054314][T13103] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1970'. [ 333.058266][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1972'. [ 333.112160][T13106] netlink: 'syz.0.1971': attribute type 12 has an invalid length. [ 333.249524][T13088] lo speed is unknown, defaulting to 1000 [ 333.251701][T13082] lo speed is unknown, defaulting to 1000 [ 333.498682][T13088] lo speed is unknown, defaulting to 1000 [ 333.577167][T13149] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1984'. [ 334.069521][T13186] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 334.257876][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'. [ 334.268076][T13197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1999'. [ 334.441772][T13213] netlink: 'syz.1.1998': attribute type 16 has an invalid length. [ 334.450147][T13213] netlink: 'syz.1.1998': attribute type 17 has an invalid length. [ 334.554339][T13213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.562597][T13213] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.575850][T13213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.624044][ T5937] lo speed is unknown, defaulting to 1000 [ 334.629950][ T5937] syz1: Port: 1 Link ACTIVE [ 334.660738][T13221] sctp: [Deprecated]: syz.3.2004 (pid 13221) Use of int in maxseg socket option. [ 334.660738][T13221] Use struct sctp_assoc_value instead [ 334.871301][T13240] netlink: 'syz.2.2010': attribute type 13 has an invalid length. [ 334.882426][T13240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 334.896649][T13240] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 335.281995][T13269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2016'. [ 335.290739][T13267] lo speed is unknown, defaulting to 1000 [ 335.298544][T13269] sctp: [Deprecated]: syz.2.2016 (pid 13269) Use of int in maxseg socket option. [ 335.298544][T13269] Use struct sctp_assoc_value instead [ 335.335372][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 335.350853][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 335.450684][T13267] lo speed is unknown, defaulting to 1000 [ 335.909557][T13324] vlan4: entered promiscuous mode [ 335.917319][T13324] bridge0: entered promiscuous mode [ 336.012272][T13326] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 336.355923][T13347] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 336.364290][T13348] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 336.470743][T13313] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 336.488656][T13313] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2026'. [ 336.597903][T13367] tipc: Enabled bearer , priority 14 [ 336.669513][T13371] netlink: 'syz.3.2042': attribute type 13 has an invalid length. [ 336.674071][T13373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.677964][T13371] netlink: 'syz.3.2042': attribute type 17 has an invalid length. [ 336.760520][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.847128][T13371] batman_adv: batadv0: Interface activated: dummy0 [ 336.861899][T13371] batadv0: mtu less than device minimum [ 336.868624][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.880127][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.891314][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.902505][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.913807][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.925419][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.937393][T13371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.169728][ T30] audit: type=1800 audit(1756406916.323:6): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2045" name="rdma.current" dev="tmpfs" ino=2016 res=0 errno=0 [ 337.436507][ T24] lo speed is unknown, defaulting to 1000 [ 337.442312][ T24] syz1: Port: 1 Link DOWN [ 337.463110][T13392] netlink: 'syz.4.2046': attribute type 4 has an invalid length. [ 337.523500][T13379] lo speed is unknown, defaulting to 1000 [ 337.645959][T13412] sctp: [Deprecated]: syz.1.2051 (pid 13412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.645959][T13412] Use struct sctp_sack_info instead [ 337.799241][T13427] bond0: entered promiscuous mode [ 337.821632][T13427] bond0: entered allmulticast mode [ 337.915553][T13379] lo speed is unknown, defaulting to 1000 [ 337.942822][T13443] netlink: 'syz.0.2062': attribute type 7 has an invalid length. [ 337.960215][T13443] netlink: 'syz.0.2062': attribute type 8 has an invalid length. [ 338.127995][T13455] __nla_validate_parse: 4 callbacks suppressed [ 338.128015][T13455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2063'. [ 338.226527][T13459] netlink: 'syz.0.2067': attribute type 13 has an invalid length. [ 338.239158][T13451] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 338.264194][T13459] netlink: 'syz.0.2067': attribute type 17 has an invalid length. [ 338.302535][T13451] bridge7: entered allmulticast mode [ 338.372683][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 338.498580][T13459] ip6gretap0: left promiscuous mode [ 338.519710][T13459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.533952][T13459] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.203467][T13499] wireguard0: entered allmulticast mode [ 339.237244][T13499] wireguard1: entered allmulticast mode [ 339.261434][T13504] wireguard2: entered allmulticast mode [ 339.308299][T13516] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2083'. [ 339.310292][T13514] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 339.398502][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 339.409131][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 339.421780][T13527] net_ratelimit: 15 callbacks suppressed [ 339.421798][T13527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.985451][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 340.082540][T13578] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 340.095307][T13579] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 340.114149][T13581] tipc: New replicast peer: 255.255.255.255 [ 340.124794][T13581] tipc: Enabled bearer , priority 10 [ 340.153317][T13576] "syz.2.2099" (13576) uses obsolete ecb(arc4) skcipher [ 340.179139][ T5937] lo speed is unknown, defaulting to 1000 [ 340.185468][ T5937] syz0: Port: 1 Link ACTIVE [ 340.190041][ T5937] lo speed is unknown, defaulting to 1000 [ 340.247590][T13581] lo speed is unknown, defaulting to 1000 [ 340.837508][T13581] lo speed is unknown, defaulting to 1000 [ 340.979281][T13589] tipc: Enabled bearer , priority 0 [ 341.030116][T13589] tipc: Disabling bearer [ 341.089159][T13596] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2104'. [ 341.314704][T13611] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2109'. [ 341.397730][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 341.399462][T13611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2109'. [ 341.416551][T13617] validate_nla: 4 callbacks suppressed [ 341.416569][T13617] netlink: 'syz.1.2110': attribute type 10 has an invalid length. [ 341.437911][ T6183] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.473283][T13617] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.493096][ T6183] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.508979][ T6183] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.538422][T13618] bond0: (slave bridge0): Releasing backup interface [ 341.589723][ T6183] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.736103][T13636] sch_fq: defrate 0 ignored. [ 341.747858][T13641] tipc: Enabled bearer , priority 0 [ 341.755524][T13641] syzkaller0: entered promiscuous mode [ 341.778937][T13641] syzkaller0: entered allmulticast mode [ 341.818201][T13641] tipc: Resetting bearer [ 341.848126][T13640] tipc: Resetting bearer [ 341.861404][T13640] tipc: Disabling bearer [ 342.130952][T13668] bridge0: port 1(erspan0) entered blocking state [ 342.138316][T13668] bridge0: port 1(erspan0) entered disabled state [ 342.145386][T13668] erspan0: entered allmulticast mode [ 342.154942][T13668] erspan0: entered promiscuous mode [ 342.211906][T13668] erspan0: left allmulticast mode [ 342.224944][T13668] erspan0: left promiscuous mode [ 342.252611][T13668] bridge0: port 1(erspan0) entered disabled state [ 342.355399][T13683] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 342.371492][ T5937] lo speed is unknown, defaulting to 1000 [ 342.383431][T13678] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 342.390121][ T5937] syz0: Port: 1 Link DOWN [ 342.401941][ T5916] lo speed is unknown, defaulting to 1000 [ 342.640060][T13700] lo speed is unknown, defaulting to 1000 [ 342.791438][ T6183] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 342.798408][T13700] lo speed is unknown, defaulting to 1000 [ 343.020024][T13722] veth13: entered promiscuous mode [ 343.277680][T13730] __nla_validate_parse: 10 callbacks suppressed [ 343.278132][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 343.370905][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 343.433864][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2141'. [ 343.486064][T13745] netlink: 'syz.0.2142': attribute type 66 has an invalid length. [ 343.792396][T13767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2148'. [ 343.878735][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'. [ 344.079882][T13783] nbd: must specify a size in bytes for the device [ 344.095294][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2155'. [ 344.263112][T13796] C: renamed from team_slave_0 [ 344.291579][T13796] netlink: 'syz.4.2159': attribute type 4 has an invalid length. [ 344.336647][T13796] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 344.393936][T13799] syzkaller0: entered promiscuous mode [ 344.400001][T13799] syzkaller0: entered allmulticast mode [ 344.549125][T13811] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2163'. [ 344.686321][T13818] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2166'. [ 344.728768][ T30] audit: type=1800 audit(1756406923.883:7): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2165" name="memory.events" dev="tmpfs" ino=2129 res=0 errno=0 [ 344.772434][T13824] xt_socket: unknown flags 0xd0 [ 344.804227][T13825] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2167'. [ 344.817092][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2168'. [ 345.018626][T13837] lo speed is unknown, defaulting to 1000 [ 345.156273][T13837] lo speed is unknown, defaulting to 1000 [ 345.191081][T13850] netlink: 'syz.4.2176': attribute type 6 has an invalid length. [ 345.612846][T13872] tun0: tun_chr_ioctl cmd 35111 [ 345.734475][T13875] netlink: 'syz.1.2183': attribute type 6 has an invalid length. [ 346.300909][T13906] lo speed is unknown, defaulting to 1000 [ 346.319910][T13915] netlink: 'syz.4.2197': attribute type 13 has an invalid length. [ 346.341519][T13915] netlink: 'syz.4.2197': attribute type 17 has an invalid length. [ 346.460191][T13915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.508077][T13915] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.524190][T13915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.550292][T13906] lo speed is unknown, defaulting to 1000 [ 346.623132][T13920] lo speed is unknown, defaulting to 1000 [ 346.925818][T13920] lo speed is unknown, defaulting to 1000 [ 347.287063][T13973] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 347.318933][T13977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.320856][T13973] bond5: entered promiscuous mode [ 347.334460][T13973] bond5: entered allmulticast mode [ 347.340129][T13973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.696502][T14013] siw: device registration error -23 [ 348.324349][T14007] __nla_validate_parse: 19 callbacks suppressed [ 348.324369][T14007] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2224'. [ 348.541773][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'. [ 348.555555][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 348.573763][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 348.592989][T14052] netlink: 'syz.3.2240': attribute type 18 has an invalid length. [ 348.679354][T14047] raw_sendmsg: syz.4.2238 forgot to set AF_INET. Fix it! [ 348.710118][T14063] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2241'. [ 348.729735][T14065] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2244'. [ 349.002812][T14088] netlink: 'syz.4.2250': attribute type 13 has an invalid length. [ 349.019107][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 349.043450][T14088] netlink: 'syz.4.2250': attribute type 13 has an invalid length. [ 349.058046][T14091] lo speed is unknown, defaulting to 1000 [ 349.060683][ T196] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.072634][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 349.086100][ T196] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.117060][ T196] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.117719][T14093] netlink: 'syz.2.2251': attribute type 13 has an invalid length. [ 349.304887][T14107] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2253'. [ 349.334904][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 349.565583][ T196] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.576325][ T196] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.586079][ T196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.598227][ T196] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.607671][T14091] lo speed is unknown, defaulting to 1000 [ 349.607670][ T196] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.607697][ T196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.634323][ T196] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.659144][ T196] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.693734][ T196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.702639][ T196] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.718600][ T196] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.729190][ T196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.738938][ T196] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.865047][T14110] veth13: left promiscuous mode [ 349.876544][T14121] netlink: 'syz.1.2257': attribute type 4 has an invalid length. [ 349.884838][T14110] bond5: left promiscuous mode [ 349.902778][T14110] bond5: left allmulticast mode [ 349.925940][ T196] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.939030][T14121] netlink: 'syz.1.2257': attribute type 4 has an invalid length. [ 349.939439][ T196] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.961078][ T196] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.990118][ T6862] lo speed is unknown, defaulting to 1000 [ 349.995951][ T196] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.005846][ T6862] syz1: Port: 1 Link ACTIVE [ 350.111792][T14130] lo speed is unknown, defaulting to 1000 [ 350.214534][T14130] lo speed is unknown, defaulting to 1000 [ 350.696736][T14155] sctp: [Deprecated]: syz.1.2267 (pid 14155) Use of int in max_burst socket option. [ 350.696736][T14155] Use struct sctp_assoc_value instead [ 350.720373][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.976532][T14170] veth0_to_bridge: entered promiscuous mode [ 350.993434][T14167] veth0_to_bridge: left promiscuous mode [ 351.082811][T14173] macvlan1: entered promiscuous mode [ 351.089816][T14173] macvlan1: left promiscuous mode [ 351.469541][ T5937] lo speed is unknown, defaulting to 1000 [ 351.483581][ T5937] syz1: Port: 1 Link DOWN [ 351.636493][T14223] veth5: entered promiscuous mode [ 351.865678][T14236] bond0: (slave 0!): Releasing backup interface [ 352.097546][T14242] tap0: tun_chr_ioctl cmd 1074025677 [ 352.103121][T14242] tap0: linktype set to 0 [ 352.261922][T14245] netlink: 'syz.2.2291': attribute type 1 has an invalid length. [ 352.346162][T14251] lo speed is unknown, defaulting to 1000 [ 352.393161][T14256] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 352.410998][T14259] netlink: 'syz.0.2292': attribute type 13 has an invalid length. [ 352.429011][T14259] netlink: 'syz.0.2292': attribute type 17 has an invalid length. [ 352.443285][T14261] sctp: [Deprecated]: syz.2.2296 (pid 14261) Use of int in max_burst socket option deprecated. [ 352.443285][T14261] Use struct sctp_assoc_value instead [ 352.619362][T14259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.657962][T14251] lo speed is unknown, defaulting to 1000 [ 352.700413][T14273] batman_adv: batadv0: Interface deactivated: dummy0 [ 352.710273][T14273] bridge_slave_0: left promiscuous mode [ 352.717118][T14273] vlan0: left promiscuous mode [ 352.722433][T14273] macvlan1: left allmulticast mode [ 352.734368][T14273] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 352.743376][T14273] wireguard0: left allmulticast mode [ 352.750840][T14273] wireguard1: left allmulticast mode [ 352.757048][T14273] wireguard2: left allmulticast mode [ 352.763238][T14273] veth5: left promiscuous mode [ 352.789956][T14250] lo speed is unknown, defaulting to 1000 [ 352.956328][T14250] lo speed is unknown, defaulting to 1000 [ 353.190259][T14309] bond6: entered promiscuous mode [ 353.195909][T14309] bond6: entered allmulticast mode [ 353.228245][T14309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.295977][T14309] lo speed is unknown, defaulting to 1000 [ 353.541017][T14309] lo speed is unknown, defaulting to 1000 [ 353.672744][T14339] __nla_validate_parse: 12 callbacks suppressed [ 353.672769][T14339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2316'. [ 353.976905][T14344] wg1: entered promiscuous mode [ 353.982019][T14344] wg1: entered allmulticast mode [ 354.017583][T14360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.205776][T14365] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 354.215114][T14365] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2324'. [ 354.309436][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2328'. [ 354.341282][T14371] vlan5: entered allmulticast mode [ 354.369781][T14371] bond6: entered allmulticast mode [ 354.386421][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 354.461593][T14384] netlink: 53 bytes leftover after parsing attributes in process `syz.1.2333'. [ 354.623075][T14394] lo speed is unknown, defaulting to 1000 [ 354.761083][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'. [ 354.763263][T14394] lo speed is unknown, defaulting to 1000 [ 354.827293][T14411] tipc: Enabling of bearer rejected, already enabled [ 355.211775][T14435] lo speed is unknown, defaulting to 1000 [ 355.280534][T14435] lo speed is unknown, defaulting to 1000 [ 355.373077][T14435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2349'. [ 355.385874][T14435] netlink: 'syz.0.2349': attribute type 5 has an invalid length. [ 355.401379][T14435] netlink: 'syz.0.2349': attribute type 13 has an invalid length. [ 355.409908][T14435] netlink: 'syz.0.2349': attribute type 17 has an invalid length. [ 355.427752][T14435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.809106][T14460] lo speed is unknown, defaulting to 1000 [ 355.816005][T14468] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 355.899086][T14469] syzkaller1: entered promiscuous mode [ 355.904771][T14469] syzkaller1: entered allmulticast mode [ 356.006840][T14460] lo speed is unknown, defaulting to 1000 [ 356.048015][T14480] sctp: [Deprecated]: syz.1.2364 (pid 14480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.048015][T14480] Use struct sctp_sack_info instead [ 356.259156][T14504] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2372'. [ 356.295510][T14502] lo speed is unknown, defaulting to 1000 [ 356.300033][T14506] syzkaller0: entered promiscuous mode [ 356.307403][T14506] syzkaller0: entered allmulticast mode [ 356.360261][T14493] netlink: 'syz.1.2369': attribute type 2 has an invalid length. [ 356.400172][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 356.512585][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 356.544106][T14525] netlink: 'syz.0.2379': attribute type 6 has an invalid length. [ 356.639653][T14502] lo speed is unknown, defaulting to 1000 [ 356.649702][T14539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.937080][T14550] syzkaller0: entered promiscuous mode [ 356.953232][T14550] syzkaller0: entered allmulticast mode [ 357.161784][T14566] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 357.257265][T14578] tipc: Enabled bearer , priority 0 [ 357.274834][T14578] syzkaller0: entered promiscuous mode [ 357.291233][T14578] syzkaller0: entered allmulticast mode [ 357.395309][T14578] tipc: Resetting bearer [ 357.434839][T14577] tipc: Resetting bearer [ 357.485283][T14577] tipc: Disabling bearer [ 357.677731][T14602] tipc: Enabling of bearer rejected, already enabled [ 357.760154][T14610] syzkaller1: entered promiscuous mode [ 357.766425][T14610] syzkaller1: entered allmulticast mode [ 357.887123][T14617] lo speed is unknown, defaulting to 1000 [ 357.900377][T14616] netlink: 'syz.2.2409': attribute type 21 has an invalid length. [ 357.972015][T14624] team0: Mode changed to "activebackup" [ 357.996759][T14628] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 358.097395][T14612] lo speed is unknown, defaulting to 1000 [ 358.103770][T14617] lo speed is unknown, defaulting to 1000 [ 358.234887][T14646] veth0: entered promiscuous mode [ 358.249298][T14645] veth0: left promiscuous mode [ 358.262309][T14644] lo speed is unknown, defaulting to 1000 [ 358.262313][T14612] lo speed is unknown, defaulting to 1000 [ 358.440978][T14644] lo speed is unknown, defaulting to 1000 [ 358.572927][T14665] syzkaller0: entered promiscuous mode [ 358.578628][T14665] syzkaller0: entered allmulticast mode [ 358.638407][T14669] bond0: option arp_validate: invalid value (18446744073491447809) [ 358.796109][T14680] __nla_validate_parse: 4 callbacks suppressed [ 358.796126][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 358.910170][T14689] netlink: 'syz.3.2432': attribute type 4 has an invalid length. [ 359.009068][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 359.044519][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 359.053497][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 359.060115][T14690] lo speed is unknown, defaulting to 1000 [ 359.097764][T14700] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.2436'. [ 359.113025][T14695] netlink: 'syz.1.2433': attribute type 18 has an invalid length. [ 359.189729][ T30] audit: type=1800 audit(1756406938.323:8): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2438" name="memory.events" dev="tmpfs" ino=2454 res=0 errno=0 [ 359.214553][T14707] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2437'. [ 359.302212][T14690] lo speed is unknown, defaulting to 1000 [ 359.470085][T14727] netlink: 'syz.1.2443': attribute type 13 has an invalid length. [ 359.489742][T14727] netlink: 'syz.1.2443': attribute type 17 has an invalid length. [ 359.591137][T14727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.603494][T14727] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.622542][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 359.632099][T14727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.648348][ T24] lo speed is unknown, defaulting to 1000 [ 359.655611][ T24] syz1: Port: 1 Link ACTIVE [ 359.732876][T14736] bond4: entered promiscuous mode [ 359.751931][T14727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.811365][T14729] lo speed is unknown, defaulting to 1000 [ 359.972009][T14729] lo speed is unknown, defaulting to 1000 [ 360.092585][T14753] lo speed is unknown, defaulting to 1000 [ 360.132330][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 360.196734][T14753] lo speed is unknown, defaulting to 1000 [ 360.390369][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 360.393790][T14761] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 360.449444][T14762] IPVS: Scheduler module ip_vs_sip not found [ 360.541248][T14765] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2454'. [ 360.633747][T14767] syzkaller0: entered promiscuous mode [ 360.639376][T14767] syzkaller0: entered allmulticast mode [ 360.818954][T14781] dvmrp1: entered allmulticast mode [ 360.871035][T14781] team0: Unable to change to the same mode the team is in [ 360.879909][T14788] team0: Unable to change to the same mode the team is in [ 360.892211][T14788] pimreg: left allmulticast mode [ 360.899126][T14788] dvmrp1: left allmulticast mode [ 361.052638][T14800] vlan5: entered promiscuous mode [ 361.067163][T14800] bond0: entered promiscuous mode [ 361.146231][T14808] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 361.908258][T14871] lo speed is unknown, defaulting to 1000 [ 362.034602][T14883] 8021q: VLANs not supported on ip6tnl0 [ 362.136413][T14883] lo speed is unknown, defaulting to 1000 [ 362.142951][T14871] lo speed is unknown, defaulting to 1000 [ 362.178639][T14902] sock: sock_set_timeout: `syz.4.2492' (pid 14902) tries to set negative timeout [ 362.443899][T14921] netlink: 'syz.4.2498': attribute type 32 has an invalid length. [ 362.632413][T14906] wg1: left promiscuous mode [ 362.643373][T14906] wg1: left allmulticast mode [ 362.658348][T14906] tipc: Resetting bearer [ 362.669707][T14906] syzkaller0: left promiscuous mode [ 362.675314][T14906] syzkaller0: left allmulticast mode [ 362.740672][T14922] tipc: Enabled bearer , priority 0 [ 362.758025][T14883] lo speed is unknown, defaulting to 1000 [ 362.767004][T14925] syzkaller0: entered promiscuous mode [ 362.773258][T14925] syzkaller0: entered allmulticast mode [ 362.801165][T14918] tipc: Resetting bearer [ 362.813563][T14941] nftables ruleset with unbound set [ 362.912822][T14917] tipc: Resetting bearer [ 362.924591][T14917] tipc: Disabling bearer [ 362.939813][T14943] team0: Port device bond0 removed [ 362.947129][T14943] bond0 (unregistering): Released all slaves [ 363.117233][T14955] netlink: 'syz.3.2506': attribute type 1 has an invalid length. [ 363.130289][T14957] netlink: 'syz.0.2505': attribute type 1 has an invalid length. [ 363.161082][T14957] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.212906][T14955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 363.234486][T14959] 8021q: adding VLAN 0 to HW filter on device bond5 [ 363.241428][T14959] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.257643][T14959] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 363.287616][T14955] veth7: entered promiscuous mode [ 363.309662][T14955] bond5: (slave veth7): Enslaving as an active interface with a down link [ 363.417307][T14976] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 363.510641][T14982] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 363.530606][T14982] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 363.767607][T15008] netlink: 'syz.2.2516': attribute type 9 has an invalid length. [ 363.812854][T15008] netlink: 'syz.2.2516': attribute type 9 has an invalid length. [ 363.946484][T15019] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 363.958138][T15018] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 363.984500][T15021] __nla_validate_parse: 17 callbacks suppressed [ 363.984521][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 364.002529][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 364.012305][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 364.091907][T15032] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 364.135255][T15031] lo speed is unknown, defaulting to 1000 [ 364.235519][T15041] bond4: left promiscuous mode [ 364.289588][T15041] veth7: left promiscuous mode [ 364.362025][T15031] lo speed is unknown, defaulting to 1000 [ 364.455074][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2530'. [ 364.476595][T15051] netlink: 'syz.0.2530': attribute type 6 has an invalid length. [ 364.548596][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2530'. [ 364.566566][T15061] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2530'. [ 364.920725][T15078] lo speed is unknown, defaulting to 1000 [ 365.082030][T15095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2543'. [ 365.092544][T15091] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.112823][T15095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2543'. [ 365.141410][T15091] bond7: entered promiscuous mode [ 365.148001][T15091] bond7: entered allmulticast mode [ 365.170795][T15091] bond7 (unregistering): Released all slaves [ 365.189273][T15078] lo speed is unknown, defaulting to 1000 [ 365.235080][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 365.374051][T15108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.381384][T15108] IPv6: NLM_F_CREATE should be set when creating new route [ 365.388820][T15108] IPv6: NLM_F_CREATE should be set when creating new route [ 365.411601][T15108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.508720][T15116] lo speed is unknown, defaulting to 1000 [ 365.621604][T15116] lo speed is unknown, defaulting to 1000 [ 365.746315][T15083] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.773843][T15083] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 365.792359][T15083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.808824][T15083] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 365.835027][T15083] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.851881][T15083] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 365.856537][T15134] 8021q: VLANs not supported on vxcan0 [ 365.871245][T15083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.913756][T15083] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 365.955183][T15142] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2560'. [ 365.975084][T15083] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 365.987356][T15083] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 365.995952][T15083] CPU: 0 UID: 0 PID: 15083 Comm: syz.1.2542 Not tainted syzkaller #0 PREEMPT(full) [ 366.005422][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.015564][T15083] RIP: 0010:klist_remove+0x14a/0x340 [ 366.020854][T15083] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 2e b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 2e b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 366.041154][T15083] RSP: 0018:ffffc9000b7b7820 EFLAGS: 00010202 [ 366.047315][T15083] RAX: 000000000000000b RBX: ffff888077778000 RCX: 0000000000000000 [ 366.055382][T15083] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 366.063669][T15083] RBP: ffffc9000b7b7908 R08: ffffffff8f89fe03 R09: 1ffffffff1f13fc0 [ 366.071655][T15083] R10: dffffc0000000000 R11: fffffbfff1f13fc1 R12: 0000000000000000 [ 366.079804][T15083] R13: 1ffff1100aa4bc0c R14: ffff88805525e060 R15: dffffc0000000000 [ 366.087965][T15083] FS: 00007f375b2e06c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 366.096925][T15083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.104111][T15083] CR2: 000055557d7f4808 CR3: 0000000029b6c000 CR4: 00000000003526f0 [ 366.112342][T15083] Call Trace: [ 366.115622][T15083] [ 366.118546][T15083] ? __pfx_klist_remove+0x10/0x10 [ 366.123847][T15083] ? __pfx_kobject_move+0x10/0x10 [ 366.128955][T15083] ? get_device_parent+0x366/0x3a0 [ 366.134143][T15083] device_move+0x193/0x700 [ 366.138561][T15083] hci_conn_del_sysfs+0xb8/0x170 [ 366.143926][T15083] hci_conn_del+0x9b7/0xd60 [ 366.148440][T15083] hci_conn_hash_flush+0x191/0x230 [ 366.153726][T15083] hci_dev_close_sync+0xaef/0x1330 [ 366.158835][T15083] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 366.164556][T15083] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 366.170621][T15083] hci_dev_do_close+0x2f/0x90 [ 366.175658][T15083] hci_rfkill_set_block+0x21d/0x2e0 [ 366.181139][T15083] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 366.186853][T15083] rfkill_set_block+0x1cf/0x440 [ 366.191727][T15083] rfkill_fop_write+0x44b/0x570 [ 366.196786][T15083] ? __pfx_rfkill_fop_write+0x10/0x10 [ 366.202162][T15083] ? __pfx_security_file_permission+0x10/0x10 [ 366.208416][T15083] ? rw_verify_area+0x255/0x4d0 [ 366.213352][T15083] ? __pfx_rfkill_fop_write+0x10/0x10 [ 366.218833][T15083] vfs_write+0x27e/0xb30 [ 366.223353][T15083] ? __pfx_vfs_write+0x10/0x10 [ 366.228122][T15083] ? lock_release+0x4b/0x3e0 [ 366.232808][T15083] ? __fget_files+0x2a/0x420 [ 366.237389][T15083] ? __fget_files+0x3a0/0x420 [ 366.242233][T15083] ? __fget_files+0x2a/0x420 [ 366.247163][T15083] ksys_write+0x145/0x250 [ 366.252008][T15083] ? __pfx_ksys_write+0x10/0x10 [ 366.257023][T15083] ? rcu_is_watching+0x15/0xb0 [ 366.261975][T15083] ? rcu_is_watching+0x15/0xb0 [ 366.266769][T15083] do_syscall_64+0xfa/0x3b0 [ 366.271355][T15083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.277617][T15083] ? clear_bhb_loop+0x60/0xb0 [ 366.282292][T15083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.288179][T15083] RIP: 0033:0x7f375a38ebe9 [ 366.292679][T15083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.313489][T15083] RSP: 002b:00007f375b2e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.322068][T15083] RAX: ffffffffffffffda RBX: 00007f375a5b5fa0 RCX: 00007f375a38ebe9 [ 366.330208][T15083] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 366.338268][T15083] RBP: 00007f375a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 366.346502][T15083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.354550][T15083] R13: 00007f375a5b6038 R14: 00007f375a5b5fa0 R15: 00007fff7f811ba8 [ 366.362613][T15083] [ 366.365631][T15083] Modules linked in: [ 366.370585][T15083] ---[ end trace 0000000000000000 ]--- [ 366.398386][T15083] RIP: 0010:klist_remove+0x14a/0x340 [ 366.406283][T15083] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 2e b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 2e b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 366.428235][T15083] RSP: 0018:ffffc9000b7b7820 EFLAGS: 00010202 [ 366.436143][T15083] RAX: 000000000000000b RBX: ffff888077778000 RCX: 0000000000000000 [ 366.444747][T15083] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 366.452987][T15083] RBP: ffffc9000b7b7908 R08: ffffffff8f89fe03 R09: 1ffffffff1f13fc0 [ 366.461692][T15083] R10: dffffc0000000000 R11: fffffbfff1f13fc1 R12: 0000000000000000 [ 366.471044][T15083] R13: 1ffff1100aa4bc0c R14: ffff88805525e060 R15: dffffc0000000000 [ 366.479745][T15083] FS: 00007f375b2e06c0(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 366.489456][T15083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.496443][T15083] CR2: 00007faa3ba78f98 CR3: 0000000029b6c000 CR4: 00000000003526f0 [ 366.504776][T15083] Kernel panic - not syncing: Fatal exception [ 366.511463][T15083] Kernel Offset: disabled [ 366.515881][T15083] Rebooting in 86400 seconds..