last executing test programs: 1m25.017830051s ago: executing program 2 (id=833): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f7a45d893fe0000000000000000000000938d5e000000000000558d7a2006c2257800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4f500000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000040f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000080000001567cc0fb18ebd10677f000000000000000000000000b038562daba737bd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce113362da06e0fa83f39b50390000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d659920000000000e5c7ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002292091a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000df0000ecffffff0000000000000000000000000000000010be099dac2faa3c6cb226eccfecd2030000726564697265637400"/2376]}, 0x9c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000000000000000000000000000000040000000000000000"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x33, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r0, r3, 0xc, 0x0, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 1m13.65160015s ago: executing program 2 (id=833): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000000000000000000000000000000040000000000000000"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x33, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r0, r3, 0xc, 0x0, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 1m1.305216013s ago: executing program 2 (id=833): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f7a45d893fe0000000000000000000000938d5e000000000000558d7a2006c2257800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4f500000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000040f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000080000001567cc0fb18ebd10677f000000000000000000000000b038562daba737bd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce113362da06e0fa83f39b50390000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d659920000000000e5c7ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002292091a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000df0000ecffffff0000000000000000000000000000000010be099dac2faa3c6cb226eccfecd2030000726564697265637400"/2376]}, 0x9c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000000000000000000000000000000040000000000000000"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x33, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r0, r3, 0xc, 0x0, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 47.543554008s ago: executing program 2 (id=833): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000000000000000000000000000000040000000000000000"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x33, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r0, r3, 0xc, 0x0, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 45.485851401s ago: executing program 3 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x2, 0x44b73327, 0x3, 0x5, 0x10000]}, &(0x7f00000001c0)=0x54) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) r5 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003b0007010000000000000000046c00000cb65649225b913ea200e00008000700068ff53f08627194bd32f900000014000100880a0000080011"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x4a, 0x9, 0x6, 0x3}, {0x1ff, 0x3, 0x0, 0x48000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) 45.127358105s ago: executing program 3 (id=1387): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvfrom$ax25(r1, &(0x7f0000000040)=""/42, 0x2a, 0x23, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null]}, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000300)={0xd03, 0xe8b, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000013b80)=ANY=[@ANYBLOB="1d00000006000000000001000200000061e461f9", @ANYRES32=r4, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000000000000300"/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="378e0b14e491f10df739e708aaf6e0141cd60f72adf3dab330ce1d9a6039287eb499f09aeaee66c11b297ee0af7bbc742f604f97c8abd92e57f7dbb35c18fc6545a7637095af4b31b453e83b54ac825e782a4c67439e756e384c8f7d1640826ca1d0449920e71b64e7d832ca1d3c0f3c830f51b117147bba7b1f9aacb45ce14243aba49f82e579bc3514fcc2d24ad2eb947eac4703efc45433c247abbe3e1b4788574bf1f14dba8a9710e25a538f2fac"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe40e}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 44.756464156s ago: executing program 3 (id=1391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}}, 0x24}}, 0x0) unshare(0x22020600) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000440)={0x1d, r4, 0x2, {0x1, 0xff, 0x3}, 0xff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) r8 = accept4(r0, 0x0, 0x0, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x300c4884) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0xff, 0x9, 0x8, 0x5}, {0x5, 0x0, 0x0, 0x401}, {0x317f, 0xff, 0x8, 0xfffffffb}, {0xd0b, 0x0, 0xc, 0x4}, {0x1ff, 0xcf, 0x1, 0x4}, {0x3, 0x6, 0x5, 0x8}, {0xc85, 0xfe, 0x5, 0x80}, {0xe533, 0x6, 0x1, 0x2}]}, 0x10) close(r1) 33.777200138s ago: executing program 2 (id=833): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000000000000000000000000000000040000000000000000"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x33, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r0, r3, 0xc, 0x0, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 33.200822333s ago: executing program 3 (id=1391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}}, 0x24}}, 0x0) unshare(0x22020600) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000440)={0x1d, r4, 0x2, {0x1, 0xff, 0x3}, 0xff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) r8 = accept4(r0, 0x0, 0x0, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x300c4884) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0xff, 0x9, 0x8, 0x5}, {0x5, 0x0, 0x0, 0x401}, {0x317f, 0xff, 0x8, 0xfffffffb}, {0xd0b, 0x0, 0xc, 0x4}, {0x1ff, 0xcf, 0x1, 0x4}, {0x3, 0x6, 0x5, 0x8}, {0xc85, 0xfe, 0x5, 0x80}, {0xe533, 0x6, 0x1, 0x2}]}, 0x10) close(r1) 16.589958943s ago: executing program 3 (id=1391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}}, 0x24}}, 0x0) unshare(0x22020600) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000440)={0x1d, r4, 0x2, {0x1, 0xff, 0x3}, 0xff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) r8 = accept4(r0, 0x0, 0x0, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x300c4884) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0xff, 0x9, 0x8, 0x5}, {0x5, 0x0, 0x0, 0x401}, {0x317f, 0xff, 0x8, 0xfffffffb}, {0xd0b, 0x0, 0xc, 0x4}, {0x1ff, 0xcf, 0x1, 0x4}, {0x3, 0x6, 0x5, 0x8}, {0xc85, 0xfe, 0x5, 0x80}, {0xe533, 0x6, 0x1, 0x2}]}, 0x10) close(r1) 16.577400215s ago: executing program 2 (id=833): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000000000000000000000000000000040000000000000000"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x33, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r0, r3, 0xc, 0x0, 0x0, @void, @value=r3, @void, @void, r12}, 0x20) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 3.662040567s ago: executing program 1 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000004c0)="87", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x100, 0x6}, &(0x7f0000000200)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) 3.405273718s ago: executing program 4 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c8, 0x200000f3) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x54, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1e}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x10, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x54}, 0x1, 0x600000000000000}, 0x0) 3.190357762s ago: executing program 4 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x11, 0x64, 0x0, 0x20000000) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x42c, 0x3f4, 0x800, 0x70bd29, 0x25dfdbfc, {0x6, 0x0, 0x2d, [0xffff, 0x9, 0x4, 0x100, 0x3ff, 0x5, 0x9, 0x10002, 0x8, 0x9, 0x0, 0x2, 0x2, 0x3, 0x2, 0x6, 0x4, 0x70c, 0x6, 0x6, 0x4, 0x6, 0x3, 0x7, 0x6, 0xff, 0x9, 0x28000, 0x2, 0xb3, 0xb622, 0x81, 0x6a, 0x8000, 0x40, 0x3, 0xc, 0x1, 0x7ff, 0x8001, 0x2, 0x1, 0x5, 0x9, 0x4e, 0x3, 0x6, 0x1, 0x5, 0x5, 0x400, 0x2, 0xe8, 0xfffffffa, 0x80, 0x5, 0x7, 0x401, 0x200, 0x6, 0xbe7, 0x81, 0x34, 0x1], [0xaff8, 0x2, 0x6, 0x60, 0x2e9a, 0x1, 0x3, 0x6, 0xd, 0x5, 0x1, 0x8e, 0x6, 0xffffffff, 0x1, 0xaa8, 0x5, 0x8, 0x9, 0xf, 0x7, 0x101, 0x650, 0x1710, 0x47b, 0x8000, 0x0, 0x4, 0x40, 0xc, 0xd, 0x7, 0x8, 0x6e1b07d4, 0x3, 0x40, 0x8, 0xaba, 0x7, 0x5, 0x8001, 0xffff, 0x88d, 0x7, 0x8, 0xb8, 0x5, 0x9c7cb9e, 0xff33, 0x0, 0x0, 0x0, 0x2, 0x3, 0x65c, 0x9, 0x5, 0x200, 0x8000, 0x80000001, 0xa7, 0x0, 0x6ef11b46, 0x5], [0x5, 0x8, 0x7fffffff, 0x6, 0x1, 0x9, 0xfffffffb, 0x4, 0x8001, 0x8, 0x4, 0x8, 0x1, 0x5, 0xfffffffe, 0xf3b9, 0x5, 0x9, 0x6, 0x40, 0x89, 0x0, 0x44e, 0x8, 0x18a8, 0x6, 0x7, 0x8ac, 0x0, 0x37, 0x83f9, 0x5, 0xde4, 0x9, 0x7ff, 0x5, 0x80000001, 0x1, 0xf, 0xa, 0x7c3, 0x9, 0x9, 0xd, 0x9, 0xc, 0x2, 0x2, 0xe, 0x4e800000, 0x9, 0x6d1, 0x1, 0x7, 0x7, 0x4, 0xffffffff, 0x6, 0x9, 0x0, 0xfffffffe, 0x400, 0x0, 0x1], [0x0, 0x3, 0x8, 0x80000000, 0x800, 0x2, 0x80000001, 0xffffffd9, 0x7, 0x6b, 0x0, 0x0, 0x10000, 0x2, 0x8, 0x10001, 0xf2c5, 0x3, 0xe0f9, 0x7, 0xf4, 0x784c, 0x10, 0xd54c, 0xc, 0x40, 0xf6, 0x3, 0xb, 0x5, 0x9, 0x9, 0x8, 0x1, 0x7, 0xec, 0x5, 0x4, 0x1ff, 0x0, 0xf2, 0xb, 0xfffff0c8, 0x3, 0x9, 0xfffffff2, 0x6e, 0x81, 0x8, 0x606, 0x80, 0x9, 0xb4, 0xfffffffb, 0x6, 0x65, 0x1, 0xf, 0x66f7, 0x5, 0x4, 0x1000, 0x4f, 0x834c], 0xc, ['\x00', '!{*/\\#\x00', '\x00', '+-\x00']}, ["", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.479894325s ago: executing program 1 (id=1693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf2504"], 0xc0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x7fff, 0x5}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000380)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x6c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x2c, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044881}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4080) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x200}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) poll(&(0x7f0000000280)=[{r12}], 0x1, 0x200000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x64}, @map_fd={0x18, 0x9, 0x1, 0x0, r12}, @ldst={0x2, 0x1, 0x4, 0x0, 0x7, 0x40, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.475231975s ago: executing program 4 (id=1695): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{}, {0xe}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x171, 0x0, &(0x7f0000000240)={0x2, 0x158, {0x1, 0xc, 0xb8, "9247c2a3bcba63bb66217a10140f2cc247803c271a451cb48bb06e7f06f35e287658e65ee594f3e910cf954e2101501de69cff1118a269d803a6446d8337dc3747016a7597e3bd95a3de1286847469311b36c6119bf604905b02e5c5d26e7851e738f4b27c278a02ffe894dbde477cc8574657fc5c120eea5d7192696bb9303c7b62d8993fc9e2aebb5e0d5c3dfca7e8a744e2450172eb85b902f6f7cbed123cb2d417f6815c3d93a2de1c050a8649ebc59685201e572eb2", 0x93, "3dca1c91a9883540839a07e5b6ee04cb9a8455653fc8ac46874433365f3473154d1779de594e2c307f101e54624b5afde00a9e062acd611c6c35b78e9579cc73b560265ad03acb323aa250dd4994b5acab0989ec579d0c3842ab989205ac814e5c830d1b8cef844581035d26fa8777e895c437a6ae7ff005c32ab97ed1cea362d4373f27f77e6adfc7b8747cf05fd4f1aa5d2e"}, 0xc5, "dd5f6b1bc3d81eec6dad8e80722475ff3f98cb089f4ee0bb7378932daf7c635bd6e3dd3f40c0ac251533bf7aec2aeee0bd3b4b6a29df0930fa244a2da0e35ec7a64f71dd53336525e7b176cc21c8339fbd041320c71c2aaea094719fac30d3bb2b08ece8a0721095379d4354357cc04b9498135246308aa4f7cd3a4e8416248e78f5093d534cbdb23bad9b9208514f0e72d3d99c4aef100e3e66363dff080ea74b327b6127ab21cf50ca393b8e1db044d7a7af00abb0d9a55e4b2eba60c107625c07c28686"}, 0x229}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x4}, 0x8) r2 = accept(r1, &(0x7f0000000540)=@alg, &(0x7f00000005c0)=0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000600)='westwood\x00', 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r3) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000680)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0xb}, 0x79}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000007c0)={r4, 0x5, 0xd}, &(0x7f0000000800)=0x8) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x4e22, 0x7fff, @mcast2, 0x4}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000880)={0xffffffffffffffff, 0x1, 0xffffffffffff90ce, 0x9}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000008c0)={r4, 0x1}, 0x8) socket$inet(0x2, 0x1, 0x5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x800, 0x70bd26, 0x515, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000040) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r8, &(0x7f0000000a40)="d303baa158cf88d5eff3f1e18a9067cda76a83e95ba0ebacadb00e40bc8b42d85049e0f10c2fb9ab4ada515a7dd7f2f4f6a3a5823898b9004dc3e5", 0x3b, 0x20000045, &(0x7f0000000a80)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r10, &(0x7f0000000ac0)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x24044810) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x5, 0x662, 0x7, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x4, 0x1, 0x4, 0x5, @void, @value, @void, @value}, 0x50) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), r3) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1aa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c042}, 0x800) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e40), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'sit0\x00', 0x0, 0x10, 0x7800, 0x4, 0x6, {{0xe, 0x4, 0x1, 0x37, 0x38, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x8, [0x6, 0x5, 0x80000001]}, @ssrr={0x89, 0xf, 0xa1, [@local, @local, @empty]}, @end]}}}}}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001000)={0xff, 0xa, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0x10d5}, @jumbo={0xc2, 0x4, 0x1ff}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x6, 0x25, "0311912c9d0f33b9ce168e04f6fb8a3d18b6a7fc7599bc5262f9977be4f6732760fcbd0439"}, @ra={0x5, 0x2, 0x8001}]}, 0x58) 2.171335457s ago: executing program 1 (id=1699): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) (async) r3 = socket(0x1e, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0xe4b}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0xe4b}, &(0x7f0000000140)=0x8) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa0100fe}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x4, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa0100fe}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x4, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4088, 0xff8}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/189, 0xbd}], 0x1}, 0x2}], 0x3, 0x7ffeedc1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x301}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x44, r0, 0x801, 0x1, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x0, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x0, 0x4, "6f82356d"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}]}]}, 0x86}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 1.922114744s ago: executing program 4 (id=1700): mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/178, 0xb2, 0x0, &(0x7f0000000180)=""/241, 0xf1}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 1.889060084s ago: executing program 0 (id=1701): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x3}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0xffffffffffffffff}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x1d, r3, 0x0, {0x0, 0x1, 0x2}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000480)='z', 0x1}, 0x1, 0x0, 0x0, 0x405c0c0}, 0x4000040) socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x10026}], 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0xffffffff, 0x5, 0x8, 0x10001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @value=r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) recvmmsg(r5, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1020, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000340)="9b", &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r9, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%pS \x00'}, 0x20) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r13, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffff, 0x0, r10, 0x6, '\x00', 0x0, r14, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 1.761262679s ago: executing program 4 (id=1702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) socket$pptp(0x18, 0x1, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r5}, 0x10) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r7, r6, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) getuid() getgid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c000008000200", @ANYRES32=r9], 0x1c}}, 0x0) getgid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.677831481s ago: executing program 0 (id=1703): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x17c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x143a3db2a78c5b5a, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xc8, 0x8, "37b2a2fa6a6ff5b7f5e8b84e4aac89b935b8ef925e9e3e0548e3f92e479a55470b75a0ee1850c72d34aa0a2d5b80effd05cdeb5298b7561534526e3ddb5552053d1bfef9ffe732c0fbe1205d97dde74ee84da6f33f24caa06cd00b5d434ef2f003e60ed764b3ea2a8ab87b92118936d1b3c95f71f9618095878db7f5f9e25cf8218403d34492c151e27842c5a1a69d8376b1ef9acee9f09302097a8f0e50a4f4e7e6fb7694508464244c5198a6098555c1b68db25264f46801f34a32b5993c25575b4ed3"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x2d, 0x8, "0fd41d3c152a2120aa3934f2d3dcfbfd111be8f7810a4a323fe9f28960599ea5800eefbe8e1901db72"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x2b, 0x8, "fb6721faa9b23924ebf55e1f39a0c91479dd5b1d9edd746bd15b0b32318012df3ddb5ca43183b4"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40051}, 0x4c01) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000690003"], 0x18}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000006107e75938863884cff29540000000000000000000800048cf8c4074c9f53138de148d4f12de3a178475342298242b6c97087360b6238d433c63457c5ee4257d2e53dc52f46ff4f2c0e219d4e245fd0021a7df429ae601f11c3dc6e56c17559cfbbbb3122d793e1ebfaec950d4cec411f2fd96fe8acf8ae8ccd980b41529610c8e3a3b60974afc27e344b01fe39c716793c201029157740d82a4bb6d1ae5bded61eca17f8ccef78540318f1dffea92d5d9574456b8f7c45103a0f30936db20f900"/226, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r4, 0x14, 0x1, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.477841641s ago: executing program 0 (id=1704): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote, 0x34, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2fb4f32b12a811e01d00"/20, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xe050960e8289b74f) 1.3469222s ago: executing program 1 (id=1705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8770266025a5b1803d91a3bb7c002dbd3f1f"], 0x14}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) 1.194029308s ago: executing program 0 (id=1706): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x60}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) 1.173822308s ago: executing program 1 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0021000000000000280012800b0001006272696467650000180002800c002100000000000000000008001d0005000000080003"], 0x50}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x1, 0x4, 0x4, 0xf7, 0x3, @multicast}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2]}, 0x48) (async, rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000], 'veth0_to_team\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@empty, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "80fce83e8cba818ea34f856f153b58da9b1cd42e402e8ee77baf9ad19985"}}, {{@ipv6={@local, @private1, [], [0xff000000, 0x0, 0xff000000], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x0, 0x6, 0x34}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x40}, 'caif0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000001040)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "703fd8", 0x46, 0x2f, 0x1, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x10]}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x1, {0x9c9e}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x7, 0x3, 0x1, 0x0, 0x0, 0xc}, 0x2, {0x9, 0x0, 0x2, 0x1b, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r6, 0x203, 0x0, 0x0, {0xb}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @empty}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000880)="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", 0x539}], 0x1}}], 0x1, 0x0) (rerun: 64) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) writev(r1, &(0x7f0000001580)=[{&(0x7f0000000200)="0b06b146", 0x4}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x6c, 0x0, 0x168, 0x0, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0xff], [], 'wlan1\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e21, 0x4e23], [0x4e23, 0x4e1f], 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xfffffffffffffffe}}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4}, {}, {0x0, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3c8) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 944.560111ms ago: executing program 0 (id=1708): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x610a}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 800.454708ms ago: executing program 3 (id=1391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}}, 0x24}}, 0x0) unshare(0x22020600) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000440)={0x1d, r4, 0x2, {0x1, 0xff, 0x3}, 0xff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) r8 = accept4(r0, 0x0, 0x0, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x300c4884) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0xff, 0x9, 0x8, 0x5}, {0x5, 0x0, 0x0, 0x401}, {0x317f, 0xff, 0x8, 0xfffffffb}, {0xd0b, 0x0, 0xc, 0x4}, {0x1ff, 0xcf, 0x1, 0x4}, {0x3, 0x6, 0x5, 0x8}, {0xc85, 0xfe, 0x5, 0x80}, {0xe533, 0x6, 0x1, 0x2}]}, 0x10) close(r1) 3.05284ms ago: executing program 0 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000104000000009d10c75fc5796daa594944000000000000", @ANYRES32=0x0, @ANYBLOB="0109040000000000140012800b0001006c6f7770616e00000000028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 2.000051ms ago: executing program 1 (id=1710): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000aa63d9ae50003800800"], 0x28}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000240)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbfc}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffe00}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2b}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000009500"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) 0s ago: executing program 4 (id=1711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.906860][ T9685] xt_cgroup: xt_cgroup: no path or classid specified [ 151.995986][ T9688] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.013131][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 152.267506][ T9697] Bluetooth: MGMT ver 1.23 [ 152.387845][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.500258][ T9371] veth0_vlan: entered promiscuous mode [ 152.601219][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 152.658141][ T9371] veth1_vlan: entered promiscuous mode [ 152.864991][ T9371] veth0_macvtap: entered promiscuous mode [ 153.022382][ T9742] netlink: 'syz.0.1033': attribute type 9 has an invalid length. [ 153.030177][ T9742] netlink: 69272 bytes leftover after parsing attributes in process `syz.0.1033'. [ 153.040366][ T9742] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 153.157071][ T9711] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 153.332935][ T9760] netlink: 'syz.0.1035': attribute type 9 has an invalid length. [ 153.366859][ T9760] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1035'. [ 153.402361][ T5155] Bluetooth: hci2: command 0x0419 tx timeout [ 153.641509][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 154.371390][ T5155] Bluetooth: hci0: command 0x0401 tx timeout [ 154.686141][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.314129][ T9371] veth1_macvtap: entered promiscuous mode [ 155.541474][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.571298][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.605262][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.629234][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.661516][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.680421][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.703162][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.721181][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.726479][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.748393][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.786627][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.809289][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.830123][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.851420][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.874772][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.908815][ T9371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.918587][ T9371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.940886][ T9371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.950362][ T9371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.032971][ T9827] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.087894][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 156.318671][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 156.320698][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.368098][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.400508][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.422268][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.548994][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 156.579742][ T9843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1050'. [ 156.614093][ T9843] gretap1: entered promiscuous mode [ 156.620986][ T9849] netlink: 'syz.1.1053': attribute type 9 has an invalid length. [ 156.630620][ T9849] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1053'. [ 156.642846][ T9849] openvswitch: netlink: Message has 8 unknown bytes. [ 156.649249][ T9852] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.653776][ T9843] gretap1: entered allmulticast mode [ 156.771227][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.903852][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.922011][ T9866] netlink: 'syz.4.1057': attribute type 9 has an invalid length. [ 156.930193][ T9866] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1057'. [ 156.930772][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.979879][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.997580][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.031083][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.053821][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.078689][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.091257][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.103985][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 157.118188][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 157.129872][ T9876] netlink: 'syz.1.1058': attribute type 25 has an invalid length. [ 157.383795][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.633384][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.644967][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.653839][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.663406][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.671332][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.678727][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.811112][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 157.858829][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.042339][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.157665][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.165660][ T9902] netlink: 'syz.4.1065': attribute type 9 has an invalid length. [ 158.177014][ T9902] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1065'. [ 158.187528][ T9902] openvswitch: netlink: Message has 8 unknown bytes. [ 158.211191][ T9904] netlink: 'syz.1.1066': attribute type 3 has an invalid length. [ 158.222693][ T9898] syz_tun: entered promiscuous mode [ 158.237709][ T9898] syz_tun: left promiscuous mode [ 158.287914][ T9906] x_tables: duplicate underflow at hook 1 [ 158.300257][ T9896] syz_tun: entered promiscuous mode [ 158.308858][ T9896] syz_tun: left promiscuous mode [ 158.449193][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 158.544153][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 158.711853][ T51] bridge_slave_1: left allmulticast mode [ 158.717736][ T51] bridge_slave_1: left promiscuous mode [ 158.724205][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.752252][ T51] bridge_slave_0: left allmulticast mode [ 158.763812][ T51] bridge_slave_0: left promiscuous mode [ 158.769731][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.841125][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 159.283949][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.299300][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.312230][ T51] bond0 (unregistering): Released all slaves [ 159.357839][ T9936] netlink: 'syz.4.1075': attribute type 30 has an invalid length. [ 159.381909][ T9936] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 159.415429][ T9936] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 159.534171][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.537605][ T9945] netlink: 'syz.1.1078': attribute type 9 has an invalid length. [ 159.546052][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.580895][ T9945] openvswitch: netlink: Message has 8 unknown bytes. [ 159.583771][ T9880] bridge_slave_0: entered allmulticast mode [ 159.616327][ T9880] bridge_slave_0: entered promiscuous mode [ 159.638207][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.661692][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.676048][ T9880] bridge_slave_1: entered allmulticast mode [ 159.686796][ T9880] bridge_slave_1: entered promiscuous mode [ 159.724433][ T5155] Bluetooth: hci2: command tx timeout [ 159.738256][ T9956] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 159.822531][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.881116][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 159.992956][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.244089][ T9880] team0: Port device team_slave_0 added [ 160.418368][ T9880] team0: Port device team_slave_1 added [ 160.535582][ T51] hsr_slave_0: left promiscuous mode [ 160.551957][ T51] hsr_slave_1: left promiscuous mode [ 160.571854][ T9992] netlink: 'syz.3.1090': attribute type 9 has an invalid length. [ 160.579950][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.585787][ T9992] openvswitch: netlink: Message has 8 unknown bytes. [ 160.600449][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.622272][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.645615][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.669921][ T5841] IPVS: starting estimator thread 0... [ 160.692825][ T51] veth1_macvtap: left promiscuous mode [ 160.699307][ T51] veth0_macvtap: left promiscuous mode [ 160.707328][ T51] veth1_vlan: left promiscuous mode [ 160.712938][ T51] veth0_vlan: left promiscuous mode [ 160.761828][T10002] IPVS: using max 19 ests per chain, 45600 per kthread [ 160.921113][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.379910][ T51] team0 (unregistering): Port device team_slave_1 removed [ 161.426723][ T51] team0 (unregistering): Port device team_slave_0 removed [ 161.801425][ T5155] Bluetooth: hci2: command tx timeout [ 161.940145][T10015] : renamed from bond0 (while UP) [ 161.961239][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.015198][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.032486][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.076533][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.104612][T10027] Cannot find del_set index 17 as target [ 162.123509][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.141746][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.173440][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.190633][T10024] netlink: 'syz.1.1097': attribute type 18 has an invalid length. [ 162.210463][T10027] tipc: Started in network mode [ 162.216105][T10027] tipc: Node identity ac14140f, cluster identity 4711 [ 162.242807][T10027] tipc: New replicast peer: 255.255.255.255 [ 162.249396][T10027] tipc: Enabled bearer , priority 10 [ 162.529559][T10042] __nla_validate_parse: 10 callbacks suppressed [ 162.529579][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 162.581269][T10045] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 162.589325][T10045] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.1102'. [ 162.668789][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 162.684679][ T9880] hsr_slave_0: entered promiscuous mode [ 162.691242][T10045] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 162.737047][ T9880] hsr_slave_1: entered promiscuous mode [ 162.744587][T10050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.761224][ T9880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.787368][ T9880] Cannot create hsr debugfs directory [ 162.844259][T10055] netlink: 'syz.4.1104': attribute type 9 has an invalid length. [ 162.881564][T10055] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1104'. [ 162.902630][T10055] openvswitch: netlink: Message has 8 unknown bytes. [ 163.001124][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 163.065432][T10064] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.1106'. [ 163.076406][T10064] netlink: 209 bytes leftover after parsing attributes in process `syz.4.1106'. [ 163.110119][T10064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.157079][T10064] netlink: 8600 bytes leftover after parsing attributes in process `syz.4.1106'. [ 163.192658][T10067] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.215591][T10068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.234124][T10064] validate_nla: 3 callbacks suppressed [ 163.234143][T10064] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 163.238258][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 163.260451][T10064] netlink: 209 bytes leftover after parsing attributes in process `syz.4.1106'. [ 163.361290][ T9] tipc: Node number set to 2886997007 [ 163.882739][ T5155] Bluetooth: hci2: command tx timeout [ 164.041145][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 164.106691][T10100] netlink: 'syz.4.1116': attribute type 9 has an invalid length. [ 164.119763][T10100] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1116'. [ 164.151693][T10100] openvswitch: netlink: Message has 8 unknown bytes. [ 164.245938][T10087] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 164.287417][T10104] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 164.437899][T10106] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 165.081117][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 165.107455][ T9880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.158787][ T9880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.225505][ T9880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.249666][ T9880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.447257][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.517370][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.544480][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.551710][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.619919][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.627169][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.682046][T10157] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 165.961387][ T5155] Bluetooth: hci2: command tx timeout [ 166.104842][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.131162][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.234940][ T9880] veth0_vlan: entered promiscuous mode [ 166.284171][ T9880] veth1_vlan: entered promiscuous mode [ 166.338595][ T9880] veth0_macvtap: entered promiscuous mode [ 166.366107][ T9880] veth1_macvtap: entered promiscuous mode [ 166.408246][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.448513][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.470476][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.502013][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.551206][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.571116][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.596795][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.623857][T10212] netlink: 'syz.4.1134': attribute type 9 has an invalid length. [ 166.643992][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.654881][T10212] openvswitch: netlink: Message has 8 unknown bytes. [ 166.662604][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.681387][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.698074][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.725550][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.746584][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.769996][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.812028][T10216] netlink: 'syz.4.1135': attribute type 9 has an invalid length. [ 166.819786][ T9880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.819823][ T9880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.827201][T10216] openvswitch: netlink: Message has 8 unknown bytes. [ 166.853196][ T9880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.891209][ T9880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.906011][T10219] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 167.037939][T10219] bond2: entered promiscuous mode [ 167.048241][T10219] bond2: entered allmulticast mode [ 167.057478][T10219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.161209][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.263447][T10239] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 167.282140][T10239] netlink: 'syz.3.1141': attribute type 2 has an invalid length. [ 167.351771][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.382037][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.526409][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.558955][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.592407][T10257] netlink: 'syz.1.1145': attribute type 4 has an invalid length. [ 167.679768][T10262] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 167.703062][T10262] __nla_validate_parse: 24 callbacks suppressed [ 167.703083][T10262] netlink: 9312 bytes leftover after parsing attributes in process `syz.3.1147'. [ 167.720800][T10264] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1148'. [ 167.761338][T10264] openvswitch: netlink: Message has 8 unknown bytes. [ 167.801307][ T5155] Bluetooth: hci0: command 0x0401 tx timeout [ 167.909194][T10276] ebt_limit: overflow, try lower: 0/0 [ 168.047362][T10286] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1154'. [ 168.071708][ T5155] Bluetooth: hci2: command tx timeout [ 168.211122][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.223702][T10300] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1156'. [ 168.259566][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 168.275211][T10280] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 168.397625][T10293] validate_nla: 4 callbacks suppressed [ 168.397657][T10293] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 168.658047][T10313] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1160'. [ 168.692479][T10317] netlink: 'syz.1.1162': attribute type 9 has an invalid length. [ 168.729964][T10317] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1162'. [ 168.753509][T10317] openvswitch: netlink: Message has 8 unknown bytes. [ 168.870906][T10328] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 168.878899][T10328] netlink: 9336 bytes leftover after parsing attributes in process `syz.0.1164'. [ 168.889074][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 169.223982][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.241222][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 169.276568][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 169.460745][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.527446][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.587708][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.696840][ T12] bridge_slave_1: left allmulticast mode [ 169.702674][ T12] bridge_slave_1: left promiscuous mode [ 169.708423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.718644][ T12] bridge_slave_0: left allmulticast mode [ 169.727886][ T12] bridge_slave_0: left promiscuous mode [ 169.735835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.845124][T10359] netlink: 'syz.4.1177': attribute type 9 has an invalid length. [ 169.891752][T10359] openvswitch: netlink: Message has 8 unknown bytes. [ 169.903977][T10366] x_tables: duplicate underflow at hook 3 [ 170.281211][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 170.528893][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.538751][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.548750][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.568587][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.599714][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.609680][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.768232][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.779320][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.790213][ T12] bond0 (unregistering): Released all slaves [ 170.800101][T10398] netlink: 'syz.1.1180': attribute type 4 has an invalid length. [ 171.050548][T10413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.321130][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 171.349677][T10428] netlink: 'syz.0.1188': attribute type 9 has an invalid length. [ 171.378791][T10428] openvswitch: netlink: Message has 8 unknown bytes. [ 171.575397][T10443] netlink: 'syz.0.1192': attribute type 12 has an invalid length. [ 171.880081][ T12] hsr_slave_0: left promiscuous mode [ 171.900834][ T12] hsr_slave_1: left promiscuous mode [ 171.909702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.931216][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.948259][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.981240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.046925][ T12] veth1_macvtap: left promiscuous mode [ 172.053837][ T12] veth0_macvtap: left promiscuous mode [ 172.059820][ T12] veth1_vlan: left promiscuous mode [ 172.066414][ T12] veth0_vlan: left promiscuous mode [ 172.131329][T10467] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 172.361198][ C1] net_ratelimit: 1 callbacks suppressed [ 172.361220][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.570956][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.623927][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.692682][ T5155] Bluetooth: hci2: command tx timeout [ 173.080049][T10455] __nla_validate_parse: 8 callbacks suppressed [ 173.080069][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 173.110319][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1196'. [ 173.351838][T10404] chnl_net:caif_netlink_parms(): no params data found [ 173.390980][T10484] netlink: 'syz.0.1202': attribute type 9 has an invalid length. [ 173.398883][T10484] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1202'. [ 173.401132][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.409022][T10484] openvswitch: netlink: Message has 8 unknown bytes. [ 173.474247][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 173.491544][T10476] netlink: 'syz.3.1198': attribute type 3 has an invalid length. [ 173.501404][T10486] netlink: 'syz.1.1201': attribute type 8 has an invalid length. [ 173.515336][T10476] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1198'. [ 173.685179][T10499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1206'. [ 173.726750][T10404] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.766252][T10404] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.773942][T10404] bridge_slave_0: entered allmulticast mode [ 173.780945][T10404] bridge_slave_0: entered promiscuous mode [ 173.821926][T10404] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.829668][T10404] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.837687][T10404] bridge_slave_1: entered allmulticast mode [ 173.845695][T10404] bridge_slave_1: entered promiscuous mode [ 173.857659][T10511] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 173.898395][T10511] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1204'. [ 174.022293][T10404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.039772][T10404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.112720][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.180583][T10530] sock: sock_timestamping_bind_phc: sock not bind to device [ 174.206589][T10404] team0: Port device team_slave_0 added [ 174.208485][T10530] sock: sock_timestamping_bind_phc: sock not bind to device [ 174.236853][T10404] team0: Port device team_slave_1 added [ 174.343062][T10404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.361270][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.417761][T10404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.427237][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 174.441121][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.457356][T10404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.476376][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.537989][T10404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.692676][T10547] netlink: 'syz.1.1213': attribute type 9 has an invalid length. [ 174.703514][T10547] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1213'. [ 174.722633][T10547] openvswitch: netlink: Message has 8 unknown bytes. [ 174.736147][T10404] hsr_slave_0: entered promiscuous mode [ 174.759485][T10404] hsr_slave_1: entered promiscuous mode [ 174.774666][ T5155] Bluetooth: hci2: command tx timeout [ 174.823634][T10404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.835118][T10404] Cannot create hsr debugfs directory [ 174.975569][T10557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.481145][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 175.546746][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 175.959718][T10404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.989727][T10404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.039860][T10404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.066641][T10404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.200367][T10404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.221479][T10404] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.237869][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.245907][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.275302][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.282784][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.521179][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 176.577598][T10626] syzkaller0: entered allmulticast mode [ 176.618503][T10627] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 176.641764][T10627] syzkaller0: Linktype set failed because interface is up [ 176.842799][ T5853] Bluetooth: hci2: command tx timeout [ 177.174357][T10668] netlink: 'syz.1.1239': attribute type 3 has an invalid length. [ 177.561341][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.601535][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.931544][ T5853] Bluetooth: hci2: command 0x0419 tx timeout [ 178.979273][T10660] tipc: Resetting bearer [ 179.001545][T10672] __nla_validate_parse: 4 callbacks suppressed [ 179.001567][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'. [ 179.039260][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1239'. [ 179.075208][T10675] netlink: 'syz.4.1243': attribute type 9 has an invalid length. [ 179.090736][T10675] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1243'. [ 179.140298][T10404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.311327][T10684] openvswitch: netlink: EtherType 50a is less than min 600 [ 179.320855][T10685] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1244'. [ 179.354596][T10404] veth0_vlan: entered promiscuous mode [ 179.436781][T10404] veth1_vlan: entered promiscuous mode [ 179.563881][T10404] veth0_macvtap: entered promiscuous mode [ 179.586598][T10404] veth1_macvtap: entered promiscuous mode [ 179.602531][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.613204][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.623877][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.634686][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.641255][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.644802][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.663459][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.674975][T10404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.685453][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.696064][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.706009][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.716540][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.726498][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.737130][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.749881][T10404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.760092][T10404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.769150][T10404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.778313][T10404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.787973][T10404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.016724][T10715] netlink: 16210 bytes leftover after parsing attributes in process `syz.0.1252'. [ 180.030912][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.057731][T10725] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 180.073410][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.185749][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.231239][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.283364][T10733] netlink: 'syz.4.1256': attribute type 9 has an invalid length. [ 180.317314][T10733] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1256'. [ 180.578013][T10750] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 180.620661][T10750] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1262'. [ 180.681287][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.722451][T10754] batadv_slave_0: entered promiscuous mode [ 180.740697][T10757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.796006][T10750] syzkaller0: entered promiscuous mode [ 180.816723][T10766] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 180.825278][T10750] syzkaller0: entered allmulticast mode [ 180.831606][T10766] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1263'. [ 180.852886][T10766] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 180.865195][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 180.874990][T10754] batadv_slave_0: left promiscuous mode [ 180.911365][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 181.721220][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.761596][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.819112][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.842578][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.857676][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.871665][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.884900][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.893680][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.801251][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.052373][T10776] __nla_validate_parse: 3 callbacks suppressed [ 184.052395][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 184.077157][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 184.215485][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.248657][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 184.307455][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 184.548879][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.841281][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.859999][T10862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1280'. [ 184.958692][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 184.990389][T10830] chnl_net:caif_netlink_parms(): no params data found [ 185.001846][ T5855] Bluetooth: hci2: command tx timeout [ 185.217256][T10888] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 185.252247][T10888] openvswitch: netlink: Actions may not be safe on all matching packets [ 185.315137][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 185.326730][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 185.343446][T10889] vlan2: entered promiscuous mode [ 185.368430][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.381519][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.388858][T10830] bridge_slave_0: entered allmulticast mode [ 185.397063][T10830] bridge_slave_0: entered promiscuous mode [ 185.447057][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.454919][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.462551][T10830] bridge_slave_1: entered allmulticast mode [ 185.472476][T10830] bridge_slave_1: entered promiscuous mode [ 185.517044][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.590365][T10908] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 1, id = 0 [ 185.605069][T10900] tipc: Bearer : already 2 bearers with priority 10 [ 185.613531][T10900] tipc: Bearer : trying with adjusted priority [ 185.621346][T10900] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 185.634457][T10904] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.644975][T10904] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.655122][T10904] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.664164][T10904] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.675736][T10904] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.684794][T10904] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.693671][T10904] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.702765][T10904] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.714108][T10904] geneve2: entered promiscuous mode [ 185.719447][T10904] geneve2: entered allmulticast mode [ 185.792803][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.873423][T10830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.883130][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 185.925461][T10830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.009953][T10830] team0: Port device team_slave_0 added [ 186.038811][T10830] team0: Port device team_slave_1 added [ 186.087750][T10925] netlink: 'syz.4.1295': attribute type 5 has an invalid length. [ 186.215535][T10830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.233683][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.302387][T10830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.315904][T10830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.325977][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.354444][T10830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.443286][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 186.455017][ T5856] Bluetooth: hci0: command 0x0401 tx timeout [ 186.455029][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 186.544412][ T12] bridge_slave_1: left allmulticast mode [ 186.556526][ T12] bridge_slave_1: left promiscuous mode [ 186.563364][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.578200][ T12] bridge_slave_0: left allmulticast mode [ 186.596538][ T12] bridge_slave_0: left promiscuous mode [ 186.609120][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.648322][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'. [ 186.923339][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.088699][ T5155] Bluetooth: hci2: command tx timeout [ 187.206316][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.219272][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.230578][ T12] bond0 (unregistering): Released all slaves [ 187.258145][T10830] hsr_slave_0: entered promiscuous mode [ 187.265162][T10830] hsr_slave_1: entered promiscuous mode [ 187.294374][T10830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.305035][T10830] Cannot create hsr debugfs directory [ 187.828696][T10966] sctp: [Deprecated]: syz.1.1309 (pid 10966) Use of int in maxseg socket option. [ 187.828696][T10966] Use struct sctp_assoc_value instead [ 187.961230][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.052371][ T12] hsr_slave_0: left promiscuous mode [ 188.071994][ T12] hsr_slave_1: left promiscuous mode [ 188.084188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.102413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.119575][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.145637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.204924][ T12] veth1_macvtap: left promiscuous mode [ 188.215618][ T12] veth0_macvtap: left promiscuous mode [ 188.225443][ T12] veth1_vlan: left promiscuous mode [ 188.230946][ T12] veth0_vlan: left promiscuous mode [ 188.938373][ T12] team0 (unregistering): Port device team_slave_1 removed [ 188.985623][ T12] team0 (unregistering): Port device team_slave_0 removed [ 189.001255][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.170679][ T5155] Bluetooth: hci2: command 0x040f tx timeout [ 189.523616][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 189.533856][T10987] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1312'. [ 189.552175][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 189.561437][T10990] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1312'. [ 189.785738][T11009] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.830530][T11014] xt_HMARK: proto mask must be zero with L3 mode [ 190.041218][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 190.297280][T10830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.658224][T10830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.685498][T10830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.734247][T10830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.784758][T11050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.792144][T11050] IPv6: NLM_F_CREATE should be set when creating new route [ 190.799619][T11050] IPv6: NLM_F_CREATE should be set when creating new route [ 190.865910][T11055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1323'. [ 190.916388][T11059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1327'. [ 191.048293][T11067] xt_l2tp: v2 tid > 0xffff: 150994944 [ 191.081132][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.109187][T11069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1331'. [ 191.151984][T11071] netlink: 'syz.1.1330': attribute type 8 has an invalid length. [ 191.249076][ T5855] Bluetooth: hci2: command 0x040f tx timeout [ 191.342493][T10830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.438570][T10830] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.494248][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.501576][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.552471][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.559692][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.641942][T11103] netlink: 'syz.0.1337': attribute type 12 has an invalid length. [ 191.649990][T11103] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 191.772387][T11110] syz.1.1338: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 191.819533][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.1.1338 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 191.830387][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 191.840499][T11110] Call Trace: [ 191.843869][T11110] [ 191.846827][T11110] dump_stack_lvl+0x241/0x360 [ 191.851527][T11110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.856728][T11110] ? __pfx__printk+0x10/0x10 [ 191.861380][T11110] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 191.868226][T11110] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 191.874734][T11110] warn_alloc+0x278/0x410 [ 191.879073][T11110] ? __pfx_warn_alloc+0x10/0x10 [ 191.883935][T11110] ? hash_netnet_create+0x801/0x16a0 [ 191.889224][T11110] ? __get_vm_area_node+0x23d/0x270 [ 191.894447][T11110] __vmalloc_node_range_noprof+0x691/0x13f0 [ 191.900364][T11110] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 191.906128][T11110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.912571][T11110] ? rcu_is_watching+0x15/0xb0 [ 191.917399][T11110] ? trace_kmalloc+0x1f/0xd0 [ 191.922045][T11110] ? __kmalloc_node_noprof+0x247/0x440 [ 191.927548][T11110] ? __kvmalloc_node_noprof+0x72/0x190 [ 191.933020][T11110] __kvmalloc_node_noprof+0x142/0x190 [ 191.938488][T11110] ? hash_netnet_create+0x801/0x16a0 [ 191.943963][T11110] hash_netnet_create+0x801/0x16a0 [ 191.949164][T11110] ? __pfx_lock_acquire+0x10/0x10 [ 191.954203][T11110] ? ip_set_create+0x45e/0x1900 [ 191.959057][T11110] ? __pfx_lock_release+0x10/0x10 [ 191.964095][T11110] ? __pfx_hash_netnet_create+0x10/0x10 [ 191.969637][T11110] ? __nla_parse+0x40/0x60 [ 191.974073][T11110] ? __pfx_hash_netnet_create+0x10/0x10 [ 191.979662][T11110] ip_set_create+0xa5c/0x1900 [ 191.984541][T11110] ? ip_set_create+0x45e/0x1900 [ 191.989414][T11110] ? __pfx_ip_set_create+0x10/0x10 [ 191.994568][T11110] ? nfnetlink_rcv_msg+0x225/0x1180 [ 192.000306][T11110] nfnetlink_rcv_msg+0xbec/0x1180 [ 192.005348][T11110] ? nfnetlink_rcv_msg+0x225/0x1180 [ 192.010825][T11110] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 192.016333][T11110] ? __netlink_deliver_tap+0x54d/0x7c0 [ 192.021894][T11110] ? netlink_deliver_tap+0x19d/0x1b0 [ 192.027179][T11110] ? netlink_unicast+0x7c4/0x990 [ 192.032130][T11110] ? netlink_sendmsg+0x8e4/0xcb0 [ 192.037077][T11110] ? __sock_sendmsg+0x221/0x270 [ 192.042201][T11110] ? ____sys_sendmsg+0x52a/0x7e0 [ 192.047139][T11110] ? __sys_sendmsg+0x292/0x380 [ 192.051913][T11110] ? do_syscall_64+0xf3/0x230 [ 192.056603][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.062694][T11110] netlink_rcv_skb+0x1e3/0x430 [ 192.067510][T11110] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 192.073063][T11110] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.078358][T11110] ? apparmor_capable+0x13b/0x1b0 [ 192.083388][T11110] ? bpf_lsm_capable+0x9/0x10 [ 192.088076][T11110] ? security_capable+0x7e/0x2d0 [ 192.093023][T11110] nfnetlink_rcv+0x297/0x2ab0 [ 192.097703][T11110] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 192.103426][T11110] ? __dev_queue_xmit+0x2da/0x3ed0 [ 192.108625][T11110] ? __dev_queue_xmit+0x171d/0x3ed0 [ 192.113822][T11110] ? kasan_save_track+0x51/0x80 [ 192.118689][T11110] ? do_syscall_64+0xf3/0x230 [ 192.123370][T11110] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 192.128600][T11110] ? __dev_queue_xmit+0x2da/0x3ed0 [ 192.134474][T11110] ? __pfx___dev_queue_xmit+0x10/0x10 [ 192.139930][T11110] ? ref_tracker_free+0x643/0x7e0 [ 192.145002][T11110] ? __asan_memcpy+0x40/0x70 [ 192.149725][T11110] ? __pfx_ref_tracker_free+0x10/0x10 [ 192.155125][T11110] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.160352][T11110] ? skb_clone+0x240/0x390 [ 192.164783][T11110] ? __pfx_lock_release+0x10/0x10 [ 192.169987][T11110] ? __netlink_deliver_tap+0x77e/0x7c0 [ 192.175466][T11110] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.180751][T11110] netlink_unicast+0x7f6/0x990 [ 192.185520][T11110] ? __pfx_netlink_unicast+0x10/0x10 [ 192.191070][T11110] ? __virt_addr_valid+0x183/0x530 [ 192.196179][T11110] ? __check_object_size+0x48e/0x900 [ 192.201467][T11110] netlink_sendmsg+0x8e4/0xcb0 [ 192.206240][T11110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.211528][T11110] ? aa_sock_msg_perm+0x91/0x160 [ 192.216473][T11110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.221758][T11110] __sock_sendmsg+0x221/0x270 [ 192.226867][T11110] ____sys_sendmsg+0x52a/0x7e0 [ 192.231644][T11110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.236938][T11110] __sys_sendmsg+0x292/0x380 [ 192.241531][T11110] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.246757][T11110] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.253089][T11110] ? do_syscall_64+0x100/0x230 [ 192.257874][T11110] ? do_syscall_64+0xb6/0x230 [ 192.262639][T11110] do_syscall_64+0xf3/0x230 [ 192.267137][T11110] ? clear_bhb_loop+0x35/0x90 [ 192.271848][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.277863][T11110] RIP: 0033:0x7f6b4357e819 [ 192.282425][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.302067][T11110] RSP: 002b:00007f6b413b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.310494][T11110] RAX: ffffffffffffffda RBX: 00007f6b43736160 RCX: 00007f6b4357e819 [ 192.318475][T11110] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 192.326457][T11110] RBP: 00007f6b435f175e R08: 0000000000000000 R09: 0000000000000000 [ 192.334541][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.342611][T11110] R13: 0000000000000000 R14: 00007f6b43736160 R15: 00007ffff625cf48 [ 192.350604][T11110] [ 192.354621][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.389489][T11114] netlink: 'syz.4.1340': attribute type 39 has an invalid length. [ 192.409176][T11110] Mem-Info: [ 192.413099][T11110] active_anon:4915 inactive_anon:0 isolated_anon:0 [ 192.413099][T11110] active_file:1130 inactive_file:38241 isolated_file:0 [ 192.413099][T11110] unevictable:768 dirty:66 writeback:0 [ 192.413099][T11110] slab_reclaimable:10779 slab_unreclaimable:105493 [ 192.413099][T11110] mapped:28490 shmem:1479 pagetables:760 [ 192.413099][T11110] sec_pagetables:0 bounce:0 [ 192.413099][T11110] kernel_misc_reclaimable:0 [ 192.413099][T11110] free:1333884 free_pcp:449 free_cma:0 [ 192.464936][T11110] Node 0 active_anon:19460kB inactive_anon:0kB active_file:4520kB inactive_file:152892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113860kB dirty:260kB writeback:0kB shmem:4380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 192.509400][T11110] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 192.551877][T11110] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.589238][T11110] lowmem_reserve[]: 0 2463 2464 0 0 [ 192.596519][T11110] Node 0 DMA32 free:1412388kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:19524kB inactive_anon:0kB active_file:4520kB inactive_file:152332kB unevictable:1536kB writepending:256kB present:3129332kB managed:2550460kB mlocked:0kB bounce:0kB free_pcp:2160kB local_pcp:956kB free_cma:0kB [ 192.740672][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 192.778258][T11110] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:560kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 192.929136][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 192.934254][T11110] Node 1 Normal free:3907408kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.001368][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 193.026918][T10830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.044194][T11110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.108666][T11110] Node 0 DMA32: 87*4kB (UME) 90*8kB (UME) 76*16kB (UME) 336*32kB (UME) 128*64kB (UME) 49*128kB (UME) 18*256kB (UM) 14*512kB (UME) 7*1024kB (UME) 4*2048kB (UM) 332*4096kB (M) = 1414508kB [ 193.163739][T10830] veth0_vlan: entered promiscuous mode [ 193.170973][T11110] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 193.194749][T10830] veth1_vlan: entered promiscuous mode [ 193.234750][T11110] Node 1 Normal: 190*4kB (UME) 51*8kB (UME) 42*16kB (UME) 199*32kB (UME) 95*64kB (UME) 33*128kB (UME) 11*256kB (UM) 8*512kB (UME) 5*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3907408kB [ 193.321364][ T5855] Bluetooth: hci2: command 0x040f tx timeout [ 193.324114][T10830] veth0_macvtap: entered promiscuous mode [ 193.334471][T11110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.352355][T11110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.362157][T11110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.401650][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.423260][T11110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.459473][T11110] 40800 total pagecache pages [ 193.486817][T11110] 0 pages in swap cache [ 193.495078][T10830] veth1_macvtap: entered promiscuous mode [ 193.501586][T11110] Free swap = 124996kB [ 193.505869][T11110] Total swap = 124996kB [ 193.510037][T11110] 2097051 pages RAM [ 193.529491][T11174] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1350'. [ 193.541705][T11110] 0 pages HighMem/MovableOnly [ 193.546437][T11110] 427650 pages reserved [ 193.569596][T11110] 0 pages cma reserved [ 193.583178][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.661186][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.711207][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.759904][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.803498][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.828257][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.840841][T10830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.853234][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.865299][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.886737][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.898901][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.910674][T10830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.921844][T10830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.932978][T10830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.945888][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 193.994086][T11189] bond_slave_0: entered promiscuous mode [ 194.000037][T11189] bond_slave_1: entered promiscuous mode [ 194.033188][T11189] macvtap1: entered promiscuous mode [ 194.061118][T11189] bond0: entered promiscuous mode [ 194.066463][T11189] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 194.104831][T11189] macvtap1: entered allmulticast mode [ 194.110518][T11189] bond0: entered allmulticast mode [ 194.116990][T11189] bond_slave_0: entered allmulticast mode [ 194.124416][T11189] bond_slave_1: entered allmulticast mode [ 194.130491][T11189] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 194.139761][T11189] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.152189][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 194.164111][T11199] bond0: left allmulticast mode [ 194.169005][T11199] bond_slave_0: left allmulticast mode [ 194.175989][T11199] bond_slave_1: left allmulticast mode [ 194.183161][T11199] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 194.190068][T11199] bond0: left promiscuous mode [ 194.195632][T11199] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 194.205129][T11199] bond_slave_0: left promiscuous mode [ 194.210571][T11199] bond_slave_1: left promiscuous mode [ 194.232411][T10830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.241563][T10830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.250412][T10830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.260228][T10830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.441293][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.517685][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.561307][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.613079][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.628638][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.629008][T11221] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 194.651709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.671751][T11221] team0: Device hsr_slave_0 failed to register rx_handler [ 194.707315][T11224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1361'. [ 194.744550][T11226] netlink: 'syz.4.1362': attribute type 4 has an invalid length. [ 195.057315][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'. [ 195.275256][ C1] Unknown status report in ack skb [ 195.415055][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.481270][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.500808][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.856112][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.917189][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.146413][T11262] tipc: Enabling of bearer rejected, failed to enable media [ 196.222992][ T12] bridge_slave_1: left allmulticast mode [ 196.228759][ T12] bridge_slave_1: left promiscuous mode [ 196.235458][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.269774][ T12] bridge_slave_0: left allmulticast mode [ 196.280649][ T12] bridge_slave_0: left promiscuous mode [ 196.308320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.521283][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.818968][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.834334][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.852227][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.874711][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.885989][ T5155] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.900976][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.099880][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.115112][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.125730][ T12] bond0 (unregistering): Released all slaves [ 197.137667][T11269] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 197.152051][T11269] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 197.383098][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'. [ 197.410521][T11308] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 197.561192][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.912716][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 197.949760][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 198.358775][ T12] hsr_slave_0: left promiscuous mode [ 198.381279][ T12] hsr_slave_1: left promiscuous mode [ 198.389045][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.401203][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.413395][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.420889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.515754][ T12] veth1_macvtap: left promiscuous mode [ 198.530347][ T12] veth0_macvtap: left promiscuous mode [ 198.551449][ T12] veth1_vlan: left promiscuous mode [ 198.557072][ T12] veth0_vlan: left promiscuous mode [ 198.601208][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.894035][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.904687][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.914007][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.937690][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.952613][ T5155] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.960121][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.019165][ T5855] Bluetooth: hci2: command tx timeout [ 199.346762][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.403053][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.651237][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.991685][T11364] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1396'. [ 200.000705][T11364] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1396'. [ 200.298602][T11377] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 200.524000][T11297] chnl_net:caif_netlink_parms(): no params data found [ 200.626657][ T5841] hid-generic 0005:0B57:0040.0003: item fetching failed at offset 0/1 [ 200.636386][ T5841] hid-generic 0005:0B57:0040.0003: probe with driver hid-generic failed with error -22 [ 200.681176][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.878068][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'. [ 200.939274][T11369] chnl_net:caif_netlink_parms(): no params data found [ 201.001418][ T5855] Bluetooth: hci0: command tx timeout [ 201.091159][ T5855] Bluetooth: hci2: command tx timeout [ 201.122833][T11297] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.144622][T11297] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.177152][T11297] bridge_slave_0: entered allmulticast mode [ 201.184656][T11297] bridge_slave_0: entered promiscuous mode [ 201.290367][T11297] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.301713][T11297] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.357836][T11297] bridge_slave_1: entered allmulticast mode [ 201.373408][T11297] bridge_slave_1: entered promiscuous mode [ 201.421477][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.428631][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.445745][T11369] bridge_slave_0: entered allmulticast mode [ 201.455922][T11369] bridge_slave_0: entered promiscuous mode [ 201.525131][T11297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.576139][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.580828][T11454] ieee802154 phy0 wpan0: encryption failed: -126 [ 201.594675][T11454] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 201.609675][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.639592][T11369] bridge_slave_1: entered allmulticast mode [ 201.652498][T11369] bridge_slave_1: entered promiscuous mode [ 201.688283][T11297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.721224][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.791877][T11459] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 201.818438][T11459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1414'. [ 201.846612][T11466] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 201.863834][T11466] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1414'. [ 201.885295][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.900085][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.917911][T11297] team0: Port device team_slave_0 added [ 201.928443][T11297] team0: Port device team_slave_1 added [ 201.978000][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1417'. [ 202.037727][T11297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.045516][T11297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.072523][T11297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.089278][T11369] team0: Port device team_slave_0 added [ 202.100726][T11369] team0: Port device team_slave_1 added [ 202.126001][T11297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.126903][T11478] delete_channel: no stack [ 202.138643][T11297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.138674][T11297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.335835][T11297] hsr_slave_0: entered promiscuous mode [ 202.371667][T11297] hsr_slave_1: entered promiscuous mode [ 202.411225][T11297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.429607][T11297] Cannot create hsr debugfs directory [ 202.503754][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.529558][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.558432][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.617019][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.635374][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.718539][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.771166][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 202.899310][T11369] hsr_slave_0: entered promiscuous mode [ 202.927348][T11369] hsr_slave_1: entered promiscuous mode [ 202.945050][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.972224][T11369] Cannot create hsr debugfs directory [ 203.081586][ T5855] Bluetooth: hci0: command tx timeout [ 203.161293][ T5855] Bluetooth: hci2: command tx timeout [ 203.386017][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 203.400860][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 203.420966][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 203.441437][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 203.517048][T11547] IPv6: sit2: Disabled Multicast RS [ 203.586676][T11548] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 203.778826][T11558] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.801284][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.932932][T11369] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.034834][T11369] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.154517][T11369] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.268117][T11369] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.296217][T11584] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.572765][T11297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.602458][T11297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.632590][T11297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.650188][T11593] netlink: 'syz.4.1441': attribute type 1 has an invalid length. [ 204.681152][T11297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.798863][T11369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.844704][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.868719][T11369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.890651][T11369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.912785][T11369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.110778][T11610] netlink: 'syz.4.1449': attribute type 9 has an invalid length. [ 205.161268][ T5855] Bluetooth: hci0: command tx timeout [ 205.176797][T11297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.227182][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.241427][ T5855] Bluetooth: hci2: command tx timeout [ 205.308868][T11297] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.348620][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.355818][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.436883][T11625] bond4: entered promiscuous mode [ 205.442395][T11625] bond4: entered allmulticast mode [ 205.448320][T11625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.510418][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.517629][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.539355][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.603799][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.611111][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.624895][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.632089][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.881212][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.204871][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.239165][T11297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.307993][T11672] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 206.338407][T11297] veth0_vlan: entered promiscuous mode [ 206.449532][T11369] veth0_vlan: entered promiscuous mode [ 206.473184][T11297] veth1_vlan: entered promiscuous mode [ 206.529340][T11369] veth1_vlan: entered promiscuous mode [ 206.708664][T11297] veth0_macvtap: entered promiscuous mode [ 206.742117][T11369] veth0_macvtap: entered promiscuous mode [ 206.772554][T11369] veth1_macvtap: entered promiscuous mode [ 206.788817][T11297] veth1_macvtap: entered promiscuous mode [ 206.817553][T11690] __nla_validate_parse: 97 callbacks suppressed [ 206.817572][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 206.852817][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.865849][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.879241][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.911180][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.930405][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.931255][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.942870][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.981493][T11297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.010947][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.042780][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.063855][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.083135][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.101662][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.120848][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.146221][T11297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.175858][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.216874][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.241962][ T5855] Bluetooth: hci0: command tx timeout [ 207.246490][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.281330][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.309811][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.321774][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.341379][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.366670][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.399415][T11369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.416151][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.427318][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.447226][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.471873][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.498593][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.519281][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.541270][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.565858][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.592674][T11369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.603933][T11369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.640238][T11369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.651267][T11369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.662720][T11369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.666343][T11728] openvswitch: netlink: Duplicate or invalid key (type 0). [ 207.683774][T11728] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.705855][T11723] tipc: Started in network mode [ 207.710869][T11723] tipc: Node identity type_len, cluster identity 4711 [ 207.735933][T11723] tipc: Enabling of bearer rejected, failed to enable media [ 207.756520][T11297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.783712][T11297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.831244][T11297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.840003][T11297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.897557][T11730] tipc: Enabling of bearer rejected, failed to enable media [ 207.961421][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.972007][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 208.083517][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 208.158818][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 208.315707][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.348528][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.397187][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.412233][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.546025][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.571304][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.572488][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.608824][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.760260][T11777] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1478'. [ 208.867452][T11773] tipc: Enabling of bearer rejected, already enabled [ 208.900425][T11777] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 208.917694][T11777] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 209.011358][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.078808][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.112515][T11773] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1477'. [ 209.345501][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.426300][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.433509][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.535299][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.850102][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.983202][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 210.041314][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 210.193793][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.442593][T11837] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 210.507948][T11837] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.1488'. [ 210.556628][T11843] netlink: 'syz.1.1489': attribute type 10 has an invalid length. [ 210.590053][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.602155][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.613031][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.616402][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.622630][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.627360][T11843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.662394][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.673021][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.679640][T11843] : (slave bridge0): Enslaving as an active interface with an up link [ 210.700159][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.700320][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.716168][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.719228][ T5155] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.724324][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.739515][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.794467][ T3465] bridge_slave_1: left allmulticast mode [ 210.800705][ T3465] bridge_slave_1: left promiscuous mode [ 210.838684][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.884400][ T3465] bridge_slave_0: left allmulticast mode [ 210.890916][ T3465] bridge_slave_0: left promiscuous mode [ 210.910618][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.997736][T11857] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1492'. [ 211.091248][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 211.385973][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.404427][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.419821][ T3465] bond0 (unregistering): Released all slaves [ 211.438201][T11855] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 211.466090][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.499801][T11853] netlink: 'syz.4.1492': attribute type 4 has an invalid length. [ 211.516371][T11853] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1492'. [ 211.530214][T11853] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 211.782496][T11871] netlink: 'syz.1.1496': attribute type 2 has an invalid length. [ 212.062004][T11877] __nla_validate_parse: 1 callbacks suppressed [ 212.062025][T11877] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1498'. [ 212.121385][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 212.736223][T11900] netlink: 'syz.0.1502': attribute type 18 has an invalid length. [ 212.762498][ T5853] Bluetooth: hci2: command tx timeout [ 212.819700][ T3465] hsr_slave_0: left promiscuous mode [ 212.834255][ T3465] hsr_slave_1: left promiscuous mode [ 212.841604][ T5853] Bluetooth: hci0: command tx timeout [ 212.848610][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.865731][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.874141][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.881843][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.900490][ T3465] veth1_macvtap: left promiscuous mode [ 212.906224][ T3465] veth0_macvtap: left promiscuous mode [ 212.912352][ T3465] veth1_vlan: left promiscuous mode [ 212.918932][ T3465] veth0_vlan: left promiscuous mode [ 212.926127][T11917] x_tables: unsorted entry at hook 2 [ 212.934811][T11918] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 212.943191][T11918] netlink: 616 bytes leftover after parsing attributes in process `syz.0.1505'. [ 213.161684][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 213.187424][T11921] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1505'. [ 213.508092][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 213.556114][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 214.033074][T11904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 214.046786][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 214.091397][T11915] macvlan0: entered allmulticast mode [ 214.201248][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.254667][T11844] chnl_net:caif_netlink_parms(): no params data found [ 214.355837][T11847] chnl_net:caif_netlink_parms(): no params data found [ 214.429755][T11936] netlink: 'syz.0.1508': attribute type 1 has an invalid length. [ 214.495556][T11936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.659124][T11941] bond2: (slave ip6gretap2): making interface the new active one [ 214.673110][T11941] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 214.841409][ T5853] Bluetooth: hci2: command tx timeout [ 214.894491][T11973] openvswitch: netlink: Actions may not be safe on all matching packets [ 214.925660][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.931285][ T5853] Bluetooth: hci0: command tx timeout [ 214.941635][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.948932][T11844] bridge_slave_0: entered allmulticast mode [ 214.960304][T11844] bridge_slave_0: entered promiscuous mode [ 214.996067][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.004606][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.013955][T11844] bridge_slave_1: entered allmulticast mode [ 215.022638][T11844] bridge_slave_1: entered promiscuous mode [ 215.035883][T11847] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.044603][T11976] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1513'. [ 215.057999][T11847] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.086208][T11847] bridge_slave_0: entered allmulticast mode [ 215.093560][T11847] bridge_slave_0: entered promiscuous mode [ 215.199240][T11983] sctp: [Deprecated]: syz.1.1515 (pid 11983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.199240][T11983] Use struct sctp_sack_info instead [ 215.251291][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 215.279300][T11847] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.287430][T11847] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.296431][T11847] bridge_slave_1: entered allmulticast mode [ 215.304141][T11847] bridge_slave_1: entered promiscuous mode [ 215.333855][T11844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.363011][T11844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.451009][ T3465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.484653][T11994] netlink: 'syz.1.1515': attribute type 4 has an invalid length. [ 215.515138][T11847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.593047][T11847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.631026][ T3465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.657426][T11844] team0: Port device team_slave_0 added [ 215.702546][T11844] team0: Port device team_slave_1 added [ 215.792747][ T3465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.872770][T11847] team0: Port device team_slave_0 added [ 215.880387][T11844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.899563][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.946946][T11844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.011632][ T3465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.045427][T11847] team0: Port device team_slave_1 added [ 216.101001][T11844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.118690][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.155853][T11844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.281231][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 216.290441][T11996] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 216.312466][T11847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.329656][T11847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.396377][T11847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.421932][T12026] netlink: 'syz.4.1526': attribute type 3 has an invalid length. [ 216.441438][T12026] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1526'. [ 216.478649][T11847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.486042][T11847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.520553][T11847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.552154][T11844] hsr_slave_0: entered promiscuous mode [ 216.560839][T11844] hsr_slave_1: entered promiscuous mode [ 216.568226][T11844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.577522][T11844] Cannot create hsr debugfs directory [ 216.713234][T11847] hsr_slave_0: entered promiscuous mode [ 216.732856][T11847] hsr_slave_1: entered promiscuous mode [ 216.751318][T11847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.772862][T11847] Cannot create hsr debugfs directory [ 216.881332][T12042] veth0_vlan: entered allmulticast mode [ 216.921192][ T5853] Bluetooth: hci2: command tx timeout [ 217.001806][ T5853] Bluetooth: hci0: command tx timeout [ 217.008343][T12045] ªªªªªª: renamed from vlan0 [ 217.130062][ T3465] bridge_slave_1: left allmulticast mode [ 217.141362][ T3465] bridge_slave_1: left promiscuous mode [ 217.154541][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.169877][ T3465] bridge_slave_0: left allmulticast mode [ 217.176440][ T3465] bridge_slave_0: left promiscuous mode [ 217.197138][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.321226][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.707771][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.719784][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.738023][ T3465] bond0 (unregistering): Released all slaves [ 217.754116][T12058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1532'. [ 218.146705][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 218.361279][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.652698][ T3465] hsr_slave_0: left promiscuous mode [ 218.659271][ T3465] hsr_slave_1: left promiscuous mode [ 218.683998][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.696827][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.716157][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.724263][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.756781][ T3465] veth1_macvtap: left promiscuous mode [ 218.769999][ T3465] veth0_macvtap: left promiscuous mode [ 218.780236][ T3465] veth1_vlan: left promiscuous mode [ 218.790900][ T3465] veth0_vlan: left promiscuous mode [ 219.002361][ T5853] Bluetooth: hci2: command tx timeout [ 219.083428][ T5853] Bluetooth: hci0: command 0x0419 tx timeout [ 219.403148][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 219.548806][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 219.594663][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 220.111843][T12114] lo: left promiscuous mode [ 220.118896][T12120] netlink: 'syz.4.1545': attribute type 4 has an invalid length. [ 220.378498][T12132] geneve2: entered promiscuous mode [ 220.384228][T12132] geneve2: entered allmulticast mode [ 220.436044][T12137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.443050][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.646623][T12146] syz.4.1552 uses old SIOCAX25GETINFO [ 220.748287][T12154] netlink: 'syz.4.1552': attribute type 1 has an invalid length. [ 220.772693][T12154] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1552'. [ 220.919770][T11847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.963853][T11847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.001604][T11847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.032011][T11847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.053351][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 221.161508][ T5853] Bluetooth: hci0: command 0x0419 tx timeout [ 221.232652][T11844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.273245][T11844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.302169][T11844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.322062][T12176] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1557'. [ 221.344549][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 221.351261][T11844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.481388][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.517285][T11847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.615662][T11847] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.692156][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.699432][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.722208][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.729396][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.899117][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.995146][T11844] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.036597][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.043886][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.077048][T12220] unknown channel width for channel at 909000KHz? [ 222.088594][T12220] unknown channel width for channel at 909000KHz? [ 222.107658][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.114902][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.143366][T12220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1566'. [ 222.341651][T12228] macvlan0 (unregistering): left allmulticast mode [ 222.447679][T11847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.521264][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 222.614080][T11847] veth0_vlan: entered promiscuous mode [ 222.669752][T11847] veth1_vlan: entered promiscuous mode [ 222.699296][T11844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.816000][T11847] veth0_macvtap: entered promiscuous mode [ 222.875451][T11847] veth1_macvtap: entered promiscuous mode [ 222.900254][T12251] sctp: [Deprecated]: syz.1.1571 (pid 12251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.900254][T12251] Use struct sctp_sack_info instead [ 222.922478][T11844] veth0_vlan: entered promiscuous mode [ 222.965352][T11844] veth1_vlan: entered promiscuous mode [ 222.996206][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.025902][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.043665][T12257] netlink: 'syz.4.1572': attribute type 13 has an invalid length. [ 223.044449][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.062787][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.073153][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.085546][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.106813][T11847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.152555][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.193691][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.217157][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.233162][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.261585][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.285739][T12266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1573'. [ 223.305810][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.329610][T11847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.355786][T11847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.387509][T11847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.409364][T11847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.420216][T11847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.455128][T11844] veth0_macvtap: entered promiscuous mode [ 223.552913][T11844] veth1_macvtap: entered promiscuous mode [ 223.561203][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 223.729060][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.766308][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.778867][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.811298][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.830471][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.861359][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.886713][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.911322][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.940043][T11844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.956243][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.024340][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.076632][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.111374][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.128680][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.140624][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.159017][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.180116][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.190558][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.209912][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.223082][T11844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.264405][T11844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.282867][T11844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.301270][T11844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.320736][T11844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.350361][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.384062][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.601398][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 224.659710][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.724174][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.786875][T12329] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 224.853478][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.861775][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.191277][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1590'. [ 225.244403][ T3534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.305900][T12348] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 225.333501][T12348] netlink: 'syz.0.1590': attribute type 2 has an invalid length. [ 225.351936][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 225.426481][ T3534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.647901][ T3534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.651268][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.833293][ T3534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.017840][ T3534] bridge_slave_1: left allmulticast mode [ 226.026256][ T3534] bridge_slave_1: left promiscuous mode [ 226.039334][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.061467][ T3534] bridge_slave_0: left allmulticast mode [ 226.068374][ T3534] bridge_slave_0: left promiscuous mode [ 226.075551][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.125980][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.135951][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.146307][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.157232][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.165757][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.178849][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.681244][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.758014][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.817511][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.850164][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.863295][ T3534] bond0 (unregistering): Released all slaves [ 226.872920][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.888262][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.899303][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.917469][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.925780][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.721120][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.991396][T12434] unknown channel width for channel at 909000KHz? [ 228.119243][ T3534] hsr_slave_0: left promiscuous mode [ 228.135549][ T3534] hsr_slave_1: left promiscuous mode [ 228.164638][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.177991][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.204158][ T5853] Bluetooth: hci0: command tx timeout [ 228.228572][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.246641][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.288576][ T3534] veth1_macvtap: left promiscuous mode [ 228.294757][ T3534] veth0_macvtap: left promiscuous mode [ 228.300519][ T3534] veth1_vlan: left promiscuous mode [ 228.306417][ T3534] veth0_vlan: left promiscuous mode [ 228.766775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.827410][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 228.893626][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 228.938045][T12454] xt_nat: multiple ranges no longer supported [ 229.006967][ T5853] Bluetooth: hci2: command tx timeout [ 229.433159][T12465] xt_CT: No such helper "pptp" [ 229.538650][T12472] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1612'. [ 229.728294][T12372] chnl_net:caif_netlink_parms(): no params data found [ 229.740749][T12448] netlink: 'syz.0.1603': attribute type 21 has an invalid length. [ 229.749787][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 229.801308][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.054945][T12490] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 230.068713][T12488] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.071921][T12490] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1616'. [ 230.086039][T12488] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 230.104151][T12490] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1616'. [ 230.178699][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 230.237138][T12392] chnl_net:caif_netlink_parms(): no params data found [ 230.305164][ T5853] Bluetooth: hci0: command tx timeout [ 230.505944][T12372] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.513485][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.520782][T12372] bridge_slave_0: entered allmulticast mode [ 230.528337][T12372] bridge_slave_0: entered promiscuous mode [ 230.536622][T12372] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.543876][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.551628][T12372] bridge_slave_1: entered allmulticast mode [ 230.558673][T12372] bridge_slave_1: entered promiscuous mode [ 230.732388][T12372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.746025][T12372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.759557][T12526] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1620'. [ 230.770168][T12526] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 230.851253][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.960574][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.969220][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.996479][T12392] bridge_slave_0: entered allmulticast mode [ 231.004722][T12392] bridge_slave_0: entered promiscuous mode [ 231.050374][T12372] team0: Port device team_slave_0 added [ 231.081777][ T5853] Bluetooth: hci2: command tx timeout [ 231.166852][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.228681][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.250070][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.272001][T12392] bridge_slave_1: entered allmulticast mode [ 231.282038][T12392] bridge_slave_1: entered promiscuous mode [ 231.317600][T12372] team0: Port device team_slave_1 added [ 231.331493][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 231.424030][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.527652][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.553810][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.658994][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.739859][T12372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.751505][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.816235][T12372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.881176][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.939296][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.003116][T12392] team0: Port device team_slave_0 added [ 232.018011][T12372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.027988][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.058587][T12372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.105753][T12392] team0: Port device team_slave_1 added [ 232.367468][ T5853] Bluetooth: hci0: command tx timeout [ 232.610966][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.630358][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.669777][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.752755][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.756954][T12604] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1640'. [ 232.777966][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.806229][T12604] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 232.836036][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.870889][T12372] hsr_slave_0: entered promiscuous mode [ 232.878546][T12372] hsr_slave_1: entered promiscuous mode [ 232.886348][T12372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.901276][T12372] Cannot create hsr debugfs directory [ 232.921208][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.063171][T12392] hsr_slave_0: entered promiscuous mode [ 233.089072][T12392] hsr_slave_1: entered promiscuous mode [ 233.097657][T12392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.116009][T12392] Cannot create hsr debugfs directory [ 233.162101][ T5853] Bluetooth: hci2: command tx timeout [ 233.200384][T12615] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1645'. [ 233.745433][ T3465] bridge_slave_1: left allmulticast mode [ 233.757118][ T3465] bridge_slave_1: left promiscuous mode [ 233.780483][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.818897][ T3465] bridge_slave_0: left allmulticast mode [ 233.835323][ T3465] bridge_slave_0: left promiscuous mode [ 233.862003][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.961209][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 234.429788][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.441567][ T5853] Bluetooth: hci0: command tx timeout [ 234.447855][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.460255][ T3465] bond0 (unregistering): Released all slaves [ 234.917158][T12671] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1655'. [ 235.001280][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 235.036577][T12674] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1656'. [ 235.176801][T12678] ieee802154 phy0 wpan0: encryption failed: -126 [ 235.241349][ T5853] Bluetooth: hci2: command tx timeout [ 235.307074][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 235.554802][T12697] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1663'. [ 235.722682][ T3465] hsr_slave_0: left promiscuous mode [ 235.750604][ T3465] hsr_slave_1: left promiscuous mode [ 235.766241][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.784754][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.814371][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.830188][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.897963][ T3465] veth1_macvtap: left promiscuous mode [ 235.912579][ T3465] veth0_macvtap: left promiscuous mode [ 235.920091][ T3465] veth1_vlan: left promiscuous mode [ 235.941258][ T3465] veth0_vlan: left promiscuous mode [ 236.041145][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.497063][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 236.540414][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 237.018508][T12706] netlink: 'syz.0.1665': attribute type 4 has an invalid length. [ 237.081157][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 237.135952][T12720] netlink: 'syz.0.1669': attribute type 15 has an invalid length. [ 237.591539][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 237.740927][T12757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1677'. [ 237.828924][T12757] team0 (unregistering): Port device team_slave_0 removed [ 237.850232][T12757] team0 (unregistering): Port device team_slave_1 removed [ 237.877927][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 237.888514][T12758] dummy0: left allmulticast mode [ 237.896134][T12758] dummy0: left promiscuous mode [ 237.902743][T12758] bridge0: port 3(dummy0) entered disabled state [ 237.919062][T12758] –eth0_vlan: left allmulticast mode [ 237.930574][T12758] –eth0_vlan: left promiscuous mode [ 237.937429][T12758] bridge0: port 2(–eth0_vlan) entered disabled state [ 237.950451][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.121458][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 238.142646][T12372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.212268][T12372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.248811][T12768] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1680'. [ 238.278053][T12372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.308862][T12372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.644798][T12372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.706355][T12372] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.743439][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 238.757173][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1686'. [ 238.803369][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.810585][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.882179][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.889326][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.898016][T12794] openvswitch: netlink: Actions may not be safe on all matching packets [ 238.984469][T12392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.026970][T12392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.070713][T12392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.123250][T12392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.161207][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 239.421736][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.482911][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.522241][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.529406][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.584202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.591405][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.696413][T12824] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 239.727231][T12824] team0: Cannot enslave team device to itself [ 239.742184][T12829] netlink: 'syz.1.1693': attribute type 1 has an invalid length. [ 239.854213][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.973673][T12372] veth0_vlan: entered promiscuous mode [ 240.007887][T12372] veth1_vlan: entered promiscuous mode [ 240.093129][T12849] __nla_validate_parse: 1 callbacks suppressed [ 240.093148][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1696'. [ 240.097706][T12372] veth0_macvtap: entered promiscuous mode [ 240.201330][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 240.257545][T12372] veth1_macvtap: entered promiscuous mode [ 240.279786][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.330665][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.352598][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.363423][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.374524][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.391218][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.402193][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.413524][T12372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.424224][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.434757][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.445115][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.455876][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.465925][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.476542][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.487649][T12372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.528117][T12372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.537430][T12372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.558800][T12372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.588394][T12372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.699799][T12872] sctp: [Deprecated]: syz.1.1699 (pid 12872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.699799][T12872] Use struct sctp_sack_info instead [ 240.717636][T12871] sctp: [Deprecated]: syz.1.1699 (pid 12871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.717636][T12871] Use struct sctp_sack_info instead [ 240.815147][T12392] veth0_vlan: entered promiscuous mode [ 240.872790][T12392] veth1_vlan: entered promiscuous mode [ 240.941908][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.970179][T12881] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 240.974212][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.050763][T12876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1699'. [ 241.087169][T12392] veth0_macvtap: entered promiscuous mode [ 241.120011][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.141796][T12392] veth1_macvtap: entered promiscuous mode [ 241.153861][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.206693][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.241150][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.258504][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.299594][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.331260][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.357809][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.384386][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.395219][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.406446][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.433167][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.487913][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.516964][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.551268][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.571679][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.591344][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.611455][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.641639][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.661078][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.685413][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.955485][T12392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.991220][T12392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.010295][T12392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.030567][T12392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.102586][T12922] veth1_virt_wifi: entered promiscuous mode [ 242.291204][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.300256][ T2965] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.435671][ T2965] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.530419][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.550332][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.592267][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.603171][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.638536][ T2965] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.865946][T12656] ================================================================== [ 242.874080][T12656] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 242.883107][T12656] Read of size 8 at addr ffff888024d81308 by task kbnepd bnep0/12656 [ 242.891456][T12656] [ 242.895066][T12656] CPU: 1 UID: 0 PID: 12656 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 242.906120][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 242.916766][T12656] Call Trace: [ 242.920067][T12656] [ 242.923014][T12656] dump_stack_lvl+0x241/0x360 [ 242.927730][T12656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.933062][T12656] ? __pfx__printk+0x10/0x10 [ 242.937689][T12656] ? _printk+0xd5/0x120 [ 242.941884][T12656] ? __virt_addr_valid+0x183/0x530 [ 242.947625][T12656] ? __virt_addr_valid+0x183/0x530 [ 242.954412][T12656] print_report+0x169/0x550 [ 242.959579][T12656] ? __virt_addr_valid+0x183/0x530 [ 242.965252][T12656] ? __virt_addr_valid+0x183/0x530 [ 242.970836][T12656] ? __virt_addr_valid+0x45f/0x530 [ 242.975999][T12656] ? __phys_addr+0xba/0x170 [ 242.981240][T12656] ? device_for_each_child+0xbb/0x1b0 [ 242.987340][T12656] kasan_report+0x143/0x180 [ 242.992154][T12656] ? device_for_each_child+0xbb/0x1b0 [ 242.999085][T12656] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 243.004681][T12656] device_for_each_child+0xbb/0x1b0 [ 243.010368][T12656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.016848][T12656] ? __pfx_device_for_each_child+0x10/0x10 [ 243.023008][T12656] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.028745][T12656] ? lockdep_hardirqs_on+0x99/0x150 [ 243.033962][T12656] pm_runtime_set_memalloc_noio+0x114/0x260 [ 243.039871][T12656] netdev_unregister_kobject+0x178/0x250 [ 243.046072][T12656] unregister_netdevice_many_notify+0x1851/0x1da0 [ 243.052651][T12656] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 243.059623][T12656] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.065561][T12656] ? rcu_is_watching+0x15/0xb0 [ 243.070333][T12656] ? trace_contention_end+0x3c/0x120 [ 243.075620][T12656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.081948][T12656] unregister_netdevice_queue+0x303/0x370 [ 243.087680][T12656] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 243.093935][T12656] ? down_write+0x18c/0x220 [ 243.098521][T12656] ? __pfx_down_write+0x10/0x10 [ 243.103376][T12656] unregister_netdev+0x1c/0x30 [ 243.108139][T12656] bnep_session+0x2e0e/0x3000 [ 243.112821][T12656] ? __pfx_bnep_session+0x10/0x10 [ 243.117844][T12656] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.124183][T12656] ? __pfx_woken_wake_function+0x10/0x10 [ 243.129814][T12656] ? __kthread_parkme+0x169/0x1d0 [ 243.134836][T12656] ? __pfx_bnep_session+0x10/0x10 [ 243.139855][T12656] kthread+0x2f0/0x390 [ 243.143939][T12656] ? __pfx_bnep_session+0x10/0x10 [ 243.148954][T12656] ? __pfx_kthread+0x10/0x10 [ 243.153621][T12656] ret_from_fork+0x4b/0x80 [ 243.158035][T12656] ? __pfx_kthread+0x10/0x10 [ 243.163404][T12656] ret_from_fork_asm+0x1a/0x30 [ 243.168177][T12656] [ 243.171197][T12656] [ 243.173526][T12656] Allocated by task 12392: [ 243.177927][T12656] kasan_save_track+0x3f/0x80 [ 243.182619][T12656] __kasan_kmalloc+0x98/0xb0 [ 243.187287][T12656] __kmalloc_noprof+0x1fc/0x400 [ 243.192130][T12656] hci_alloc_dev_priv+0x27/0x2030 [ 243.197151][T12656] vhci_create_device+0x116/0x6a0 [ 243.202166][T12656] vhci_write+0x3cf/0x490 [ 243.206692][T12656] vfs_write+0xaeb/0xd30 [ 243.210945][T12656] ksys_write+0x183/0x2b0 [ 243.215261][T12656] do_syscall_64+0xf3/0x230 [ 243.219768][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.225658][T12656] [ 243.227991][T12656] Freed by task 12392: [ 243.232058][T12656] kasan_save_track+0x3f/0x80 [ 243.236727][T12656] kasan_save_free_info+0x40/0x50 [ 243.241851][T12656] __kasan_slab_free+0x59/0x70 [ 243.246607][T12656] kfree+0x1a0/0x440 [ 243.250491][T12656] hci_release_dev+0x1525/0x16b0 [ 243.255453][T12656] bt_host_release+0x83/0x90 [ 243.260149][T12656] device_release+0x99/0x1c0 [ 243.265045][T12656] kobject_put+0x22f/0x480 [ 243.269473][T12656] vhci_release+0x88/0xd0 [ 243.273977][T12656] __fput+0x23f/0x880 [ 243.277990][T12656] task_work_run+0x24f/0x310 [ 243.282665][T12656] do_exit+0xa2f/0x28e0 [ 243.286816][T12656] do_group_exit+0x207/0x2c0 [ 243.291579][T12656] __x64_sys_exit_group+0x3f/0x40 [ 243.296593][T12656] x64_sys_call+0x2634/0x2640 [ 243.301278][T12656] do_syscall_64+0xf3/0x230 [ 243.305949][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.311835][T12656] [ 243.314155][T12656] Last potentially related work creation: [ 243.319862][T12656] kasan_save_stack+0x3f/0x60 [ 243.324559][T12656] __kasan_record_aux_stack+0xac/0xc0 [ 243.329943][T12656] insert_work+0x3e/0x330 [ 243.334276][T12656] __queue_work+0xc8b/0xf50 [ 243.338832][T12656] queue_work_on+0x1c2/0x380 [ 243.343511][T12656] hci_send_cmd+0xb6/0x180 [ 243.347918][T12656] hci_conn_security+0x550/0xa40 [ 243.353108][T12656] l2cap_chan_connect+0xb18/0xeb0 [ 243.358134][T12656] l2cap_sock_connect+0x5c9/0x800 [ 243.363170][T12656] __sys_connect+0x2d1/0x300 [ 243.367771][T12656] __x64_sys_connect+0x7a/0x90 [ 243.372533][T12656] do_syscall_64+0xf3/0x230 [ 243.377031][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.382919][T12656] [ 243.385284][T12656] Second to last potentially related work creation: [ 243.391853][T12656] kasan_save_stack+0x3f/0x60 [ 243.396525][T12656] __kasan_record_aux_stack+0xac/0xc0 [ 243.401887][T12656] insert_work+0x3e/0x330 [ 243.406208][T12656] __queue_work+0xc8b/0xf50 [ 243.410713][T12656] queue_work_on+0x1c2/0x380 [ 243.415307][T12656] l2cap_chan_send+0x3d6/0x2690 [ 243.420161][T12656] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 243.425179][T12656] __sock_sendmsg+0x221/0x270 [ 243.429857][T12656] kernel_sendmsg+0x151/0x220 [ 243.434531][T12656] bnep_session+0x287a/0x3000 [ 243.439213][T12656] kthread+0x2f0/0x390 [ 243.443271][T12656] ret_from_fork+0x4b/0x80 [ 243.447691][T12656] ret_from_fork_asm+0x1a/0x30 [ 243.452447][T12656] [ 243.454758][T12656] The buggy address belongs to the object at ffff888024d80000 [ 243.454758][T12656] which belongs to the cache kmalloc-8k of size 8192 [ 243.468888][T12656] The buggy address is located 4872 bytes inside of [ 243.468888][T12656] freed 8192-byte region [ffff888024d80000, ffff888024d82000) [ 243.482851][T12656] [ 243.485167][T12656] The buggy address belongs to the physical page: [ 243.491661][T12656] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d80 [ 243.500419][T12656] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 243.508902][T12656] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 243.516455][T12656] page_type: f5(slab) [ 243.520466][T12656] raw: 00fff00000000040 ffff88801ac42280 ffffea0001681800 0000000000000006 [ 243.529072][T12656] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 243.537865][T12656] head: 00fff00000000040 ffff88801ac42280 ffffea0001681800 0000000000000006 [ 243.546775][T12656] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 243.555732][T12656] head: 00fff00000000003 ffffea0000936001 ffffffffffffffff 0000000000000000 [ 243.564773][T12656] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 243.573538][T12656] page dumped because: kasan: bad access detected [ 243.580070][T12656] page_owner tracks the page as allocated [ 243.586304][T12656] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5511, tgid 5511 (dhcpcd), ts 216456804989, free_ts 216148647573 [ 243.608233][T12656] post_alloc_hook+0x1f3/0x230 [ 243.613045][T12656] get_page_from_freelist+0x3649/0x3790 [ 243.618586][T12656] __alloc_pages_noprof+0x292/0x710 [ 243.623778][T12656] alloc_pages_mpol_noprof+0x3e8/0x680 [ 243.629231][T12656] alloc_slab_page+0x6a/0x140 [ 243.633904][T12656] allocate_slab+0x5a/0x2f0 [ 243.638517][T12656] ___slab_alloc+0xcd1/0x14b0 [ 243.643243][T12656] __slab_alloc+0x58/0xa0 [ 243.648335][T12656] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 243.654774][T12656] kmalloc_reserve+0x111/0x2a0 [ 243.659556][T12656] __alloc_skb+0x1f3/0x440 [ 243.663985][T12656] netlink_dump+0x1f7/0xd80 [ 243.668504][T12656] netlink_recvmsg+0x6bb/0x11d0 [ 243.673351][T12656] sock_recvmsg+0x22f/0x280 [ 243.677846][T12656] ____sys_recvmsg+0x1c6/0x480 [ 243.682609][T12656] __sys_recvmsg+0x2e6/0x3d0 [ 243.687204][T12656] page last free pid 12017 tgid 12017 stack trace: [ 243.693693][T12656] free_unref_page+0xdf9/0x1140 [ 243.698561][T12656] __slab_free+0x31b/0x3d0 [ 243.702973][T12656] qlist_free_all+0x9a/0x140 [ 243.707560][T12656] kasan_quarantine_reduce+0x14f/0x170 [ 243.713008][T12656] __kasan_slab_alloc+0x23/0x80 [ 243.717849][T12656] kmem_cache_alloc_noprof+0x135/0x2a0 [ 243.723306][T12656] getname_flags+0xb7/0x540 [ 243.727805][T12656] __x64_sys_symlinkat+0x7a/0xb0 [ 243.732735][T12656] do_syscall_64+0xf3/0x230 [ 243.737232][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.743122][T12656] [ 243.745435][T12656] Memory state around the buggy address: [ 243.751056][T12656] ffff888024d81200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.759141][T12656] ffff888024d81280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.767237][T12656] >ffff888024d81300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.775308][T12656] ^ [ 243.779627][T12656] ffff888024d81380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.787685][T12656] ffff888024d81400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.795763][T12656] ================================================================== [ 243.804898][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.813459][T12656] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.820679][T12656] CPU: 1 UID: 0 PID: 12656 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 243.831632][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 243.841709][T12656] Call Trace: [ 243.845002][T12656] [ 243.847947][T12656] dump_stack_lvl+0x241/0x360 [ 243.852669][T12656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.857924][T12656] ? __pfx__printk+0x10/0x10 [ 243.862556][T12656] ? preempt_schedule+0xe1/0xf0 [ 243.867438][T12656] ? vscnprintf+0x5d/0x90 [ 243.872421][T12656] panic+0x349/0x880 [ 243.876365][T12656] ? check_panic_on_warn+0x21/0xb0 [ 243.881503][T12656] ? __pfx_panic+0x10/0x10 [ 243.885964][T12656] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 243.891976][T12656] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.898424][T12656] ? print_report+0x502/0x550 [ 243.903146][T12656] check_panic_on_warn+0x86/0xb0 [ 243.908114][T12656] ? device_for_each_child+0xbb/0x1b0 [ 243.913516][T12656] end_report+0x77/0x160 [ 243.917803][T12656] kasan_report+0x154/0x180 [ 243.922345][T12656] ? device_for_each_child+0xbb/0x1b0 [ 243.927744][T12656] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 243.933223][T12656] device_for_each_child+0xbb/0x1b0 [ 243.938444][T12656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.944822][T12656] ? __pfx_device_for_each_child+0x10/0x10 [ 243.950750][T12656] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.955980][T12656] ? lockdep_hardirqs_on+0x99/0x150 [ 243.961201][T12656] pm_runtime_set_memalloc_noio+0x114/0x260 [ 243.967137][T12656] netdev_unregister_kobject+0x178/0x250 [ 243.972797][T12656] unregister_netdevice_many_notify+0x1851/0x1da0 [ 243.979258][T12656] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 243.986047][T12656] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.992061][T12656] ? rcu_is_watching+0x15/0xb0 [ 243.996860][T12656] ? trace_contention_end+0x3c/0x120 [ 244.002182][T12656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.008551][T12656] unregister_netdevice_queue+0x303/0x370 [ 244.014303][T12656] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 244.020576][T12656] ? down_write+0x18c/0x220 [ 244.025114][T12656] ? __pfx_down_write+0x10/0x10 [ 244.029993][T12656] unregister_netdev+0x1c/0x30 [ 244.034783][T12656] bnep_session+0x2e0e/0x3000 [ 244.039497][T12656] ? __pfx_bnep_session+0x10/0x10 [ 244.044545][T12656] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.051514][T12656] ? __pfx_woken_wake_function+0x10/0x10 [ 244.057193][T12656] ? __kthread_parkme+0x169/0x1d0 [ 244.062247][T12656] ? __pfx_bnep_session+0x10/0x10 [ 244.067285][T12656] kthread+0x2f0/0x390 [ 244.071367][T12656] ? __pfx_bnep_session+0x10/0x10 [ 244.076407][T12656] ? __pfx_kthread+0x10/0x10 [ 244.081015][T12656] ret_from_fork+0x4b/0x80 [ 244.085452][T12656] ? __pfx_kthread+0x10/0x10 [ 244.090067][T12656] ret_from_fork_asm+0x1a/0x30 [ 244.094873][T12656] [ 244.098192][T12656] Kernel Offset: disabled [ 244.102505][T12656] Rebooting in 86400 seconds..