last executing test programs: 3m18.079728406s ago: executing program 3 (id=329): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @remote}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfff9, 0x8}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x3, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000880], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x811d279443742e92, 0x4d, 0x8884, 'syz_tun\x00', 'ipvlan1\x00', 'veth0_to_team\x00', 'syz_tun\x00', @broadcast, [0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x9, 0x2, 0x0, 0x0, "e3fac5a2213cfb07e3abb474faae5a8644e97bfe6d6615387fde8864fdb5f92c695f3c8c511303697195a0ea0fa59f2276dcd175f0171dbc3a1eb0f476357eff"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1ee) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000580)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e20, 0x67d, @local, 0xfff}}, 0x6, 0x7fff, 0x8, 0x2, 0x8, 0x2, 0x1}, 0x9c) 3m17.931572016s ago: executing program 3 (id=333): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090a0000000000000000080000000c000280fa0b0400d2c1f7f94d3a4414064d85205035832c6eb6eed93737792675bdfc7612682c8a9675f4d14dabae177ecd0eb4f18620d267564c17fd1210dd6bfcfd2c97d6574bead76395d1758ef4c18fd6687db4b870b24f4a75eca17465c32a59d1fd093f70ba433a222436d3e13b214f8e6883625b1a43f32b1add2e2e12d1ce5f728ddf64ed218913a40b"], 0x20}}, 0x0) r2 = socket(0x26, 0x80000, 0xde8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000040000f80680000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000a5000000000000", @ANYRESDEC=r3, @ANYRES16, @ANYRES16=r5], 0x48) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000001500)={{r5}, "6ec034078e08eabd24c12c3782a2233575ec0e4a2feaf35592d4250e61bd8f466259957fe8daf7860c1aed64a598bf9511ded1e31692a33af1a5599318be7103d066b7f63622ced8c6acedbf81cef9131f7d8fe4cc89c08e44908098b26fd5b9128db1290cdacfe548367336f78c7f195c5b906b351059089d3817912b145a5000943f24eb1fbfc2afe63f871524e389bb70fa58fd288d9efbc1fc161840ad97be82918462aed0fbb2ce57e58423f590ec112d2e84130609a5d44b8f8a08f39386cc13a933fda8f0566786984c3e79704cfa577867e58985169b450040a937b12633041e1efde85cc4f10544d9f1e40ab40ff808bb6f35f90ffa543baf05a3c7f437bef56dcf2f6523bcbaa71c82f0f1790601c6736f8755da8e330feacc525bfbca8187ecec6b21576b54922711bbfafaf6e9ef8b9fe311dfe13baf071e7db53891f0b314df0e2ac3b902c2c4f160e505c8e201ecc8da05d7f4083c682ab7e0c1787f998c9c27d587cd774c2ab8a859f81467c4bfeec8792a872a2d4fe1afb789924fb79ea683dadbfebf07beee1907d43ea7b078e4837cf7bad2d0f61d64d50f423ebbe61f2dc11fb8760eeb672e8f8b924aef42b1839f628c4f199133b9faa8cf29a3b377acd9ea76c8690bf016ae7efbfbf28b8bb2c9fcce978e732b9fff076431b19488830d0477ac7ac902c802191872737bc9a2476f6922dc7f940f3e0482a05c64e743ca515fc547489fc2e07b5144c05004bf3b424e84f866279d564301885c51173d91e3d766acb970ef06d72861b9590363811d18dfd6ea962c173c1534f9181d943e3d86e7c361cb475093e04042b13fdb9341813718054d18cfa639d07109d785fec6042c8adf8c5f2ccdd0c3ae847ff2b9aaaddbd909b9ff0bb28e93509fb774d49317ecd0c50e77c1965a75664a42e1757f3491d8c52ff1e96e8c35ddd247bd4a29e579549ef03083529e270a45a7ad71529f50287dc020411c3cbc56c91297ccd5d5c246a5114c1656383a5eb30c7f49120208f37e66411643be1fe6124b4e62af3c56acb357b55a7002bc2ed921277fcf008dc4ba77998684aa9dd4224bc55415c64fa6ff7425fc5032b024706bf0e89e9dee4f4f3c3249ac8ffb77bdf8f415a2c8e6d037e097e9509a7af042da9c542d29d7a655f121153adc4680b741602773225cb9c8cea1e026341df0694d17a33892c297c904923b8752d6ae11e0a4ff4ffb29539af63e92d5a7ff43e0902c608dfa13165731e85af74e58af9befa14925fe3f03eac4b3fa019c7d1ff082c954b6cfc7f3ef43c4af53860e8a46586da42e81f655ca2615f6b1518d22a5ad4c953e3221e27e55d1f2fcd138b3a66d7d353fcaeb7be0251a195584017b45928bc1540002122854c8d5a8a5f0d90537e75b48d209c6e2976e1555ea6e98cb95c7451c820c4dca172cc49daebea34d06e34637450e792be8062519cf99df86a5eb27e065dfe1dab96ececb79d5649b1c45db5f6707f94065eab144a881870370c2f0e43a575afcd6df9f4d814b0f78c5e8a0cbd9a3a1a81df33b2eac50c2495988d09196fedc4dd70da663c69182d7ac186803fed90b378ce50e8ccc1226b2d01ce64dd4f48f7a374c81935e04515b1e221037f4a6cc874638c0835908b1b3fe71be6205d52a9a16dbf00f3695953d84c106da9e9228be3694589094c8bfc921ecae26669afca2e2f5bb3082c296f92bab13996abd006fde829ec2bf80bc33992727e21ba3f434e031cca7e9d5a033b9671fd940d1c8219f165e301e0c3b1be6ac678fd9abcff6d481dca28bc841df89dff12a96d6aa3efa9a7f63c4b8034afb7836e6886d8c3a4c2a2261d52663f11e72c1fca3ab85f226cfc50706d889701b6658de675a8560817c2e6f638f94d251d2712c3be70ab1b1314fa20ab025319f45b7a1599e5e1842a378e6cb81720e0eae9e97e13dfe5072d35dd913eb01eec895b606f14e284769d5929d8843cf1fa6e6beaf34a42b6f12219c1c0e4e472bf7724f390f9afbbea95c739dcad9c0f31426e5e1bfbe9df83cf702242d27fee35428fa989d365c2d51711caa6642daa06e203baa4fb935f3e175ca6330c5a327268b390dac811432573879ed1b6e1cabd4e34c26211e8db9e8da33692509c522fc0e1eefa134c00ce64f69e43ea85293898bdbe9862f75f50bcb332e2fad6eee2c1e1e234c7955000fec96519b785f71c830b700d1034eb2546680a762516bf67ddfc6c1ffb6d3dabafc786bf7dfddc05776ae2ae82e3c1dce97d118defc5b299a97eff43888b122de76cefd60adfe2c15e57cfcafd2ca471e67bc487faa0718f9368f0376c217b7bf419fd7ae77871e33a4f51d0deb8e8e321b193a1f0f473fe197cbf9078fa0024fb16e1e681dc70d13983e29ddb14318b2e48a1fee8c231a7ce4b87bdf9b0c7406e25ac9b6b0ffabfbbd2bf872a86de81260fee8bc8df5abbc556e0f9edf346c3f620829688120c14a36c32db479085b6b18bcd3f5cd221a1d934552fb4cb9a394d8ea69febb464ae403e8bd81c9f2f6a03edffeadfe72748037b2418383d258ebc7fbb5f0c6a79a9a40b788e04de83382adaf56d258abf898ef12d3a3c6382ee3210d697d0284255e9db90793c7d772f0192d967733fbc46dbf0688d6b724109faa395de11fdbe4098cc185cbe3c6acbc5dd992b564f8f9a44bcc056a3b0d167141c9926ee39c258bbb3232affbb43e878448a5af37e8a3848b835c78924b0f0a608b7dcab4e2981253c406e1124052339f5378cf8d4f6652cb3997c73bc986bc2bca55a1609a32c81a7b99b8deec7f4864bb6eb5b89ec741b2c31c469af0d7bda4fe862c8cac9c927b04a2b4ca4f468ddc7f1777afac18339a6fd3c8af38b1b7deb586acb6c03641027405109845f59b97fd1891fd9e9b72de9c86f3def74468bce84640889fe094bbe102fbb876b3cdb62a2b7b93eecd25d34e6409f57f3f6cfc9acac5ee0480dbe51634f2307f2109168a3272422581337c8c5a3b53d3bdc15afe6b3fcac6844f48a88db74bad30dbd2d8690a4f0d080227af0efe20e3d59853ae750b14d5c0295c4b9d08b9ed617cf1e92be4dada1a05527c31e882d56f3affef40848df8401933b66b8bb5b019a7dc79697925de7c300147fd8e92341fc8019db426cdb9644ccfc8e96a9283e8ed79734a00a8799468571ef25bd095abc0e73b6ae63cd7d26c36d0d107d42822f2d7df1e9573cb8e335d750c3155cc9ff8fcfbe7353ebdc0b172c34d840bc8ea9641fea312d0d03c1bf97d54a11d0d4bd7f560b4c890a99a599ed60e2e60c60aa566a4a5d436335b3502cb80e12f25b616d6df93ac9c553803e90002de1251ea5728cf9097e709211321371180abd414f9f38088eeb98c09841c390e242e4a73fba158ac6ab13e46bc02892c1089a498f8d788c92fb1e9a748bab0905be654668347a980cdb70d6db03c2fee6341e7d1828a5b662e690038b7be5910f8c0f5c68867956673805165ff1fbb8c22afc54fc4e0395a89550ae708f28613e0553ef17ca29453181ec75eaf18d4322577a8f529b70ce22e9cce054f9a8acdee100e1d2f088deba2cedf5c5eef93486353e433837d55a9d2770cdee1f864561e72a8ff3e4c75ca7484a50f8beb0a8b884d91851560979f04ad039957969336328d9c56af9364156c6758ea4c1dbb1da91f3884aea3ecd03181d2c6d73aa5804a3176b39395ee574359b489d272bcc9b116c409c80dae7c46581e4a24872748aac5a06fabf70b11868c54ffe821a22dec1b73b22fe4e899340992d2029e0484e5873d724e2302035d1d7e0f7b961fb986db26c0621d126f6fd237e853c670211ee362f1e70cbdcea954ea33b444189563cc7db72186d3d5303a05a1aea7ac73d8cfe0a1219c4a44aa975d0c0fb8008534c42bd7442b189f68eedef1bafab6ddeb13d925e612e3f0bd08b6d357cccc7350c47f491c1f4812799b0ef98f145a1efd136c8c10fce7cecfb0f43cdf29f5f3e852917001db019b982ee8f1de54d5751d0c367fff89aa97487d426bf17588ef06c8395d3eebfd4a52433ac4201ceec2f2d1412a5b8ec18244fd0f05234c46d7d516d06fb08e7c2395001a66fb96c041d47a015a4bc6b0c14d17943944a1dbc866b71177650babd4a12f26ad9dbf2fd18eb2251818d48abccf6865c7d5ce1ee5b40a3e54492db6afa0b25682f97c98feccd7c57ee931aeaa5678f34b0a8bd8f1ccf3f75ce46795ab87355e6f4fee523dc4ae40795879323e876f81c2a337d3bdfd7d68d878aa6679f5943ea5c7bf495b6c882aae1feeace556755c8f2deae91a1ed3e45baf42791159bd416e92b1dcc533458a08b1b285bb92ca000e194ba17dcec363306c49577023d998fd2e663dd64827440e13962e19b95f8c970ab387faedc6015f360b6bd934168291067b4377ff14e56865cbd7a018319f98b4b4645116d605c4a8b03893fa50dbf1fe87a264497e160ebc2559f1a73b10a6510522488f66ff16bbe265b46f50b0eccfd8d70e56020dc00bc921183cf91972ca58dcd8f0c637d4bb05a5bc3ea22e3d027b4f68172bbed1e93784f909553b28f5b5454a1590e08e8b98aef40275c317d231d382b76d62a254f0781b37dc354690f21c3e5837606f5e4113664819418360a7bcb9453aefb6fb7baec39774a4ba3ce679cf3692498dcc315d1bb78e5eaf559e0c08fd81c4cb676c10226643f0f5b2ab464091b0fdab8e8487b6f6986baeb5c6be7a4dae6585cdb78d020781e6a7b52eeb719a73ff89392b35960798514792c090720dc6ece77219fb28e1ebeada5ed3ee933b7f5d0187aedd503b272b2fad0ed26265826215c1907f0744ef8dbb1bf37a8bb7dbee18e9bdc0f11f902deffa267a3f55c5e5fe9f667aae32b1bba16158c7ded68f5f4cac0913735b76bd3a8fb81bceaa32f093627d88e9b94da851894852257fe79a6f5f665a1af923bb36bfb5f619c516eb2b553b59fb0c97ae07b9aef9393ac8e4c8aeffc5194a5e89d205c0c3aaf17e4f7944e8fde3cfade117527f8d71c3838e38e4b22a4e76edf69d36d4e545a6fc1132bf7adcb494abd9683a2d90d9fbf5dda933fd179758c4b340e405e80beed2295525c0c30f25775a0fe68983bbf8b587dd2f333183974626ad67fe8a58fac5221e77e6118c0b63277f317bdaaf46f2219b2aec2b55e522597c8b3b9822d9c5870eb40d6a701a3c35447a4f8ca026c9b2cf5f1900a3e1dcecbb2158cac3b3fce902ae18d77a51ac2737a28121670656241c0a0b3faec4b543c21da5cfc7f2bbf7c51783a92ca4fb0f72eef40a31a5b0f799439b108239953fa6d92cad9ba396f65694b95801550ac90d3ce1fd8580c52da60ebbf0c94bbc837edf91bc4f3c4889f092cf17011364d1542be198b37029520b7ee9a43c85fdebe392a2e8a49c8255787068ab33a3b116eb537b1ffad6878b9cca6d6ede2957c3ac990eb047465e97319aab184f738d0b4333004441424f42879738270b2967fbbbb6a342c9f6e76c8358ddf7c8f73b006294e1cec1eb4352ee50d501c91b69137d1d3d83d8300bbd89083a0e9299d6180c28d27c2ad3d67116933cc4600886eaeb0a38c9da4e8b4e8086ed1b0824c784a2ea0dc96537b285232ee4aedf12a2f3baf832f42f2df23e973606342199ae8fa2950c390b4750bd7f74f4d3e553cf2abc80c15670b407c5b829c3a25572c7505a9a54b8657692aedf1355aa779182f9c434b721534a66c3cd0c8869227b075ee5d7a76f"}) socket$inet6(0xa, 0x3, 0xff) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x40, 0x6af9db8acd7c3f0d}, @jmp={0x5, 0x0, 0x5, 0x9, 0xb, 0xfffffffffffffff0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="00032dbd7000fedbdf250a000000de000300a003909ad66bafb9e836eb1af738ec8a23e06d06c7d2d705436742a35875ba96cebf9a02ea566b5ed767aa80cd853e51114e3066ee22b0ece7042f401bf933098f35b4b9db584ecc4c321012bff42b6c892e0a26547a8c8c0660f02de04c84f3bf2b8479f1fc402ad5557d0ec662a51e70a926b1dda6abeea661ad236a70c97e23863291ce4440cbb934b823b179df63efb8b5943d8a0bde8a085dfec8316c3f5bffdbfd5d006a24acbd55447d129673670c5b76cad36ac65678891d9bd415046536c037f6ddebf2d953afbc40dd69fac4320fe41b07a95aea630000620003003d7db5070be48257d59eb72991233f73510d6f4340534cbad5ceb73360f3afaaded13ff43fbf15e665319406f0e48affe14891b70368308d2b037e88f087c517454ddb0982656f8c9b98b3b6ed7d5f0d0000ad0003007df202cb64e04dbe7d313b2737a3e89f6bac68529740926be17f6a1c6a72e2b34aaf38c6559479a2bc802d01d97f6d19affe6bb3938f5a0cb6091a58d521c2a278e5f6a37f11e231c87b8788c85c6830d8a27401f77c49f691b837fe2d5b4ea8a8e8e6ae59020aa7d09e15f989e7cb920638833f01da1395d0eda9443ef4ba19ea23377035f32733717281d36087ef2cc304ad833e127054f963bd340aec906f0740f28687cdc18e210000000000000000000000000000000000000030d63bba1e5aface91645c2bd395574fcbf20cf0bc3cb45d0c015a96f00cdc2bc73ebf0a1a655188825b8aa3ce098efdd778aa8522b47b2d9738d11777"], 0x208}}, 0x5) 3m17.741358045s ago: executing program 3 (id=338): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300050004000019040100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) 3m17.699043532s ago: executing program 3 (id=341): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x620, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 3m17.568329818s ago: executing program 3 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0xa8, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x74, 0xe, {{{}, {}, @device_a, @device_b}, 0x1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x0, 0x1}}, @val={0x6, 0x2}, @val={0x5, 0x3, {0x10, 0x18, 0x4}}, @val={0x25, 0x3, {0x0, 0x34, 0x10}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xae, 0x8}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x0, 0xb}, 0x8, 0xb, 0x8}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x68}}, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3m17.412819429s ago: executing program 3 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002400090000000e000000000006"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x10f403}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002400090000000e000000000006"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x10f403}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) 3m2.382555628s ago: executing program 32 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002400090000000e000000000006"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x10f403}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002400090000000e000000000006"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x10f403}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) 2m38.223521935s ago: executing program 0 (id=1059): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}, @NL80211_ATTR_BSS_SELECT={0x4}]}, 0x4c}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xa, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x4c0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xf55}], 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5d) r6 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x522}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x210}, {r1, 0x80}, {r4, 0x4}, {r5, 0x5010}, {r6, 0x90}, {r7, 0x400}, {r9, 0x5020}, {r10, 0x304}], 0x8, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0xf]}, 0x8) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @local}}, 0x3, 0x4, 0x7e, 0x1, 0x24, 0x2, 0x4}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000740)={r13, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0x2}}, 0xff, 0x8}, 0x90) 2m38.114790923s ago: executing program 0 (id=1063): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000008b000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m37.999715598s ago: executing program 0 (id=1064): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) 2m37.047475522s ago: executing program 0 (id=1085): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$XDP_UMEM_FILL_RING(r2, 0x29, 0x1d, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="ffff"], 0x40}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000800800010000000000"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB="08001f"], 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) r12 = epoll_create1(0x0) r13 = socket$inet(0x2, 0x2, 0x0) sendfile(r13, r12, 0x0, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000100)="0cf866", 0x3}], 0x1) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001fe0128008000800000000ab0000ac1414aa000001000000007d04000000000000"], 0x40}}, 0x0) 2m36.107530414s ago: executing program 0 (id=1107): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001300010000000000000000000700000021996c5154c4115d71360cbe14da1daa1a0acf5be71ae11c957b405a06bbeafc8e56b9174f398c4451adb2d5ad11a7a186b6c3fa9025776f773b65c2411499d7970a0c6d098840b9ab4b5d69bc74ac6ecf14b0eaacd0e3be5b18d7ea7731682c454162219d0f36f05fad92f7aa78919608be8fd8d3386c7178670b566cada5092685d9", @ANYRES32=r1, @ANYRESDEC=0x0], 0x34}}, 0x0) 2m35.931435984s ago: executing program 0 (id=1111): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x24, 0x9, 0x0, 0x0, {0x3}, [@generic="5ec4e5fe41da74ce1e23484b96c1d45ee777"]}, 0x28}}, 0x20004000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00', 0x4a}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000000)}) 2m8.179379423s ago: executing program 33 (id=1111): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x24, 0x9, 0x0, 0x0, {0x3}, [@generic="5ec4e5fe41da74ce1e23484b96c1d45ee777"]}, 0x28}}, 0x20004000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00', 0x4a}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000000)}) 54.282985315s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) (async) 46.706915062s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) (async) 36.742163109s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) (async) 28.919527082s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) (async) 16.910270868s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) (async) 8.185467947s ago: executing program 4 (id=2847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xa337, 0x6, 0x7, 0x6, 0x8b, 0xa]}}]}]}]}, 0x44}}, 0x0) socketpair(0x15, 0x800, 0x80, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x2400c005) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x84, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="2bb3c5edc1f7c2756acf61d20bd6e8fcddc09f0d580958a5d177391791127995f672108cb62b78769a2cb888fa6e4d32947cd44a568c97a5b56909c6b43b9d1bee6191b2a6ff6cbf3e3df7a7eb588de5b8779187bcc00c728dc20a17ae45a207f4476f93f8df67d47939c8aa2a9f4201f11eca23a5ea347c31e8227839155ddd6f86623459c2bfa85575fa2207beb7eb", 0x90}], 0x1, &(0x7f0000000400)=ANY=[], 0xe8, 0x841}], 0x1, 0x4001) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xa337, 0x6, 0x7, 0x6, 0x8b, 0xa]}}]}]}]}, 0x44}}, 0x0) (async) socketpair(0x15, 0x800, 0x80, &(0x7f0000000380)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x2400c005) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x84, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r9, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) accept4(r9, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r10, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="2bb3c5edc1f7c2756acf61d20bd6e8fcddc09f0d580958a5d177391791127995f672108cb62b78769a2cb888fa6e4d32947cd44a568c97a5b56909c6b43b9d1bee6191b2a6ff6cbf3e3df7a7eb588de5b8779187bcc00c728dc20a17ae45a207f4476f93f8df67d47939c8aa2a9f4201f11eca23a5ea347c31e8227839155ddd6f86623459c2bfa85575fa2207beb7eb", 0x90}], 0x1, &(0x7f0000000400)=ANY=[], 0xe8, 0x841}], 0x1, 0x4001) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r10) (async) 7.892741413s ago: executing program 4 (id=2852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 7.741906846s ago: executing program 4 (id=2854): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, r3, 0x1, 0xc9, 0x6, @random="b7fba2f57ce9"}, 0x14) (async) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 7.395811643s ago: executing program 4 (id=2857): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f00000000c0), 0x0) 7.283826736s ago: executing program 4 (id=2859): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x44) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) unshare(0x2040400) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x8000}, 0x4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a1f00ff", @ANYRES32=r8, @ANYBLOB="140002606700ff0100"/20], 0x2c}}, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 6.123607035s ago: executing program 4 (id=2865): syz_emit_ethernet(0x452, &(0x7f0000000540)={@remote, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "6f8a25", 0x41c, 0x6, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x32, 0xe, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x1, 0x6, 0xc, 0x0, [0xffffffffffff8000, 0x90, 0x951]}}, @hao={0xc9, 0x10, @empty}, @generic={0xcd, 0x2d, "ad77a6849ded28093c613e7845fc7d60caf4c8f362a38d4a5c50e5420f3cf880305ddcce964b24fee0223cb280"}]}, @hopopts={0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x3c0}, @ra={0x5, 0x2, 0xfff}]}, @fragment={0x2b, 0x0, 0x4, 0x1, 0x0, 0x9, 0x67}, @dstopts={0x2f, 0x6, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0x401}, @pad1, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xe}, @ra={0x5, 0x2, 0xd7e9}, @ra={0x5, 0x2, 0x7f}, @enc_lim]}, @srh={0x32, 0x6, 0x4, 0x3, 0x3, 0x10, 0x16, [@loopback, @remote, @empty]}, @fragment={0x21, 0x0, 0xf0, 0x1, 0x0, 0x6, 0x66}, @dstopts={0x6c, 0x11, '\x00', [@generic={0x7a, 0x87, "78bc5b6355d2ba2cb9a3da0dbda3685e3176346fe57b4a3f88bcec385d8f03bd1c24043a66863e94e16b7c7a8154d5ec443fa945721e5f3022d6c76b6cac15a39640f249ab659caa043d2810d1fb1a65fe23b3554bae9605b6e1cb1d56079b061f8c453f5b110a64a981f71c78403826752866b53263fcb11b4104aabb2de1af6bfad7c20661be"}]}, @hopopts={0x32, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0xca, "c7b1784c625056818a07d3803afe5b186b59a02640c7b70b4c5cf7d010dbaf9c3a4baa78ca4694db182631300c1868f1827a5eaeec684c01fc9da3b006fa63bc8b1ad5c4d63b7e4dca769bbbee1a6bc1ca2d9193a1258d500a2e2a4b7774b6673c0197d569a983339529f5d69348973c3c5dfa95b624307a7c8d606a8e2c080987c5e7476ea37bde5f5e95fb15f74711674cc1fdcab9c8a3ff683b54fcdaaa857fd44189913e957b41c56c02d556d065f11885b215b2d530c66150ef6241da6f7ebb0ad0f5d98e33e6a2"}, @jumbo={0xc2, 0x4, 0x962}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x48, {0x2, 0x10, 0x7, 0xfff8, [0x8001, 0x5, 0x0, 0x0, 0x8, 0xffffffffffff7fff, 0x4, 0x1]}}, @ra={0x5, 0x2, 0xd}]}, @hopopts={0x3c, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x40}, @generic={0x21, 0x8, "04e61945f7e71710"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0xb, 0x5, [0x257ceea4, 0x7, 0xfff, 0x6]}}, @ra={0x5, 0x2, 0x9d93}]}, @dstopts={0x32, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @empty}]}], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7f, 0x0, 0x0, 0x7ff, 0xe1d, 0x0, 0x4e21, 0x4e22, 0x2}, [{0x7, 0xd, 0xe0000000, 0x1, 0x1, 0xfffff0d3, 0x7, 0x800}, {0x80, 0xfff, 0x6, 0x5c710d9, 0xed, 0x2, 0x9, 0xd8f0}, {0x4, 0x67a, 0x8, 0x1e8, 0x9, 0x3, 0xe, 0x80}, {0x9, 0x100, 0x3, 0x7fffffff, 0x6, 0x4, 0x0, 0x10001}, {0x2, 0x8, 0x2, 0xffffffff, 0x2, 0x6, 0x5, 0x4}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400090000e4ffffffffffff05"], 0x14}}, 0x0) 2.424176888s ago: executing program 5 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x5, 0x0, {0x6, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x375, 0x40}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xf, 0x34, @random="ba1ab1c3a6743aee980fba"}]}, 0x90}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) r6 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x9) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) listen(r10, 0x8) connect$unix(r9, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r10) (async) close(r3) (async) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1c) 2.263688441s ago: executing program 2 (id=2895): r0 = socket$pppoe(0x18, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) 2.254802324s ago: executing program 5 (id=2897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @private0}]}, &(0x7f0000000380)=0x10) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={r1, @in={{0x2, 0x4e21, @empty}}, 0x4e, 0x6, 0x500, 0x3, 0x414d6714bf78e135, 0x80000001, 0x3}, 0x9c) 2.246395304s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7e8050000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d505feff10000000186600000b00000000000000080000001836000001000000000000000000000018580000000000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, r2, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f00000002c0)=[r2], &(0x7f0000000340)=[{0x4, 0x1, 0x5}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7ff, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x80000001}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x6}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1a00000000000210000000000000000071101beb0000000095000095002d3b00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400018008004cc86c01000000000008000200ac1414bb0c000280e9998c1200000000080007400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r1, 0xffffe000) (async) 1.151652444s ago: executing program 2 (id=2899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61106f000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000100)) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd2c, 0x25dfdbfc, {0x2, 0x14, 0x0, 0xf9, 0x3, 0x0, 0x0, 0x3, 0x4}, [""]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @empty}, &(0x7f0000000240)=0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x56, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x1, 0xffff}, {0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 1.150876017s ago: executing program 5 (id=2900): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x34, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61144a00000000001d430000000000007a0a00fe00581c1f61144c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@loopback, 0x2a, r5}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r6, &(0x7f0000001a40)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b000000000000000000000003000001000000009b9f301477d0e7ef573a640a1d3266c4e2d8588975835606f0a8796c52c48e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f0000001880)=""/4096, 0x40f00, 0x5c, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x2, 0xee2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r7], &(0x7f0000001340)=[{0x3, 0x4, 0x0, 0x6}, {0x2, 0x1, 0xe}], 0x10, 0x9, @void, @value}, 0x94) 1.092952618s ago: executing program 2 (id=2901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) listen(r1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x4, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8b}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a3000000000140007800800124000030000050015001f000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 923.730243ms ago: executing program 2 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x29, @loopback, 0x4e20, 0x3, 'rr\x00', 0x29, 0xe21, 0x68}, 0x2c) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00j\x00\a'], 0x20}}, 0x0) 904.462876ms ago: executing program 6 (id=2904): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') r0 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@rose, @default, @default, @netrom, @remote, @remote, @rose]}, &(0x7f00000000c0)=0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001700)='cgroup.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="ecfa2824f30824b6ca544d1bf1769f8cc1439e5c39794dd9dc6b8fe2d4dcc8cc4c3467", @ANYRES16=r5, @ANYBLOB="07000000000000000000020000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000380)=@rc={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/155, 0x9b}], 0x1, &(0x7f0000000400)=""/49, 0x31}, 0x902}, {{&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)}, {&(0x7f0000001740)=""/98, 0x62}, {&(0x7f00000017c0)=""/240, 0xf0}], 0x4, &(0x7f0000001900)=""/114, 0x72}, 0x7}, {{&(0x7f0000001c00)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/199, 0xc7}], 0x1, &(0x7f0000001b40)=""/5, 0x5}, 0x5}, {{&(0x7f0000001b80)=@can, 0x80, &(0x7f0000001d80)=[{&(0x7f0000002500)=""/237, 0xed}, {&(0x7f0000001d00)=""/124, 0x7c}], 0x2, &(0x7f0000001dc0)=""/20, 0x14}, 0x5}, {{&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e80)=""/160, 0xa0}, {&(0x7f0000001f40)=""/115, 0x73}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x5, &(0x7f0000002040)=""/230, 0xe6}, 0xae}, {{&(0x7f0000002140)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002240)=[{&(0x7f00000021c0)=""/79, 0x4f}], 0x1, &(0x7f0000002280)=""/116, 0x74}, 0x81}], 0x6, 0x40010041, &(0x7f0000002480)={0x0, 0x3938700}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a8004"], 0x270}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000040), 0x4) recvmsg(r9, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) 685.423038ms ago: executing program 2 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000000000000005001600890000005794852ac8f0e68ff33d8721027553e246d13853e75656d9c83af221267f9a366417f6bab3b89753043529a3194fdf758edae4ec2e8a9225412b821b61484a1f25860f7487c59a2b4f681ce71b90972a1c8ab9413fa433d829261b23ea0ec58dc05035662fc8f7f2aab82f5b89a4d531170e353a6fde414e3a906ccc542f1eb331381d11858dec"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 614.176804ms ago: executing program 6 (id=2906): socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000025c0), &(0x7f0000002600)=0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x18c, 0x203, 0x368, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x368, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9e, 0x0, 0x40}]}}, @common=@hl={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x1103, 0x40, 0xd, 'snmp\x00', 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xb, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000a40)={0x0, 0xffffffb4, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0xc}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 499.637058ms ago: executing program 2 (id=2907): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x2, &(0x7f0000000000)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x11b, 0x4, 0x0, 0x7a9bd347011c1783) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x5d, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, r7, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0xbb, 0x6f, 0x2aa6, 0x1000, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x8}, {}, {0x0, 0x1e}, {0x6, 0x2}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xffffffffffffff28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0xff, 0x4, 0x9, 0x7ff, 0x5, 0xb]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x74}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\a\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="00000000000000001c001a80180005801400048008000200000000000800010000000000"], 0x3c}}, 0x0) write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="012dfd"], 0x7) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0)={0x10000005}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r13, 0x1}], 0x1, 0x0, 0x0, 0x3) 432.397898ms ago: executing program 6 (id=2908): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0xfffe, 0x2}, 0xe) 340.736763ms ago: executing program 6 (id=2909): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f00000001c0), &(0x7f0000000040)=@udp=r2}, 0x20) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x54, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x4}}, [{0x8}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048000) 235.800146ms ago: executing program 5 (id=2910): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5}]}, 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800000000000000000000000a00000000000000000000000800100004"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x0, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003b0001002fbd70000000000003"], 0x14d8}}, 0x0) 186.173637ms ago: executing program 5 (id=2911): r0 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000250001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) 108.368704ms ago: executing program 6 (id=2912): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x12, 0x0, &(0x7f0000000100)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x2a) ppoll(&(0x7f00000002c0)=[{r1}, {0xffffffffffffffff, 0x240c}], 0x2, &(0x7f0000000200), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr, 0x34d59fd1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x840) 15.349862ms ago: executing program 5 (id=2913): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r1, 0x0, 0x2, 0x0, 0x0, 0x74, @remote, @private0}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 6 (id=2914): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ing to the multicast group [ 170.529348][T10806] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1490'. [ 170.684783][T10813] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1492'. [ 170.703575][T10813] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 170.827398][T10823] x_tables: duplicate underflow at hook 2 [ 170.837979][T10822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1495'. [ 171.163395][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 171.691294][T10888] Cannot find set identified by id 0 to match [ 171.744518][T10888] validate_nla: 5 callbacks suppressed [ 171.744538][T10888] netlink: 'syz.6.1519': attribute type 1 has an invalid length. [ 171.785071][T10888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.811304][T10888] bond1: (slave bridge1): making interface the new active one [ 171.822065][T10888] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 172.129758][T10915] __nla_validate_parse: 6 callbacks suppressed [ 172.129776][T10915] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1525'. [ 172.203708][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.277921][T10918] netlink: 'syz.5.1528': attribute type 1 has an invalid length. [ 172.311549][T10918] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1528'. [ 172.334799][T10922] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 172.365619][T10922] netlink: 'syz.6.1529': attribute type 10 has an invalid length. [ 172.384245][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.391734][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.469022][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.476263][T10922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.483755][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.490907][T10922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.565579][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 172.568073][T10922] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.585823][T10937] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1533'. [ 172.612013][T10937] netlink: 'syz.2.1533': attribute type 5 has an invalid length. [ 172.704039][T10940] nbd: must specify an index to disconnect [ 172.798226][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1536'. [ 172.854016][T10946] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 172.862289][T10946] nbd: couldn't find a device at index 2097172 [ 173.043234][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1544'. [ 173.088442][T10959] tipc: Started in network mode [ 173.098342][T10959] tipc: Node identity 4261838eb234, cluster identity 4711 [ 173.106441][T10959] tipc: Enabled bearer , priority 0 [ 173.227113][T10959] tipc: Resetting bearer [ 173.243390][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.271870][T10957] tipc: Resetting bearer [ 174.117344][ T25] tipc: Node number set to 4032136078 [ 174.283437][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.215669][T10957] tipc: Disabling bearer [ 175.323401][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.370620][T10994] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 175.420711][T10997] xt_CT: No such helper "pptp" [ 175.426509][T11006] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 175.456464][T11006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1553'. [ 175.463795][T10991] xt_CT: No such helper "pptp" [ 175.578304][T11013] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.1557'. [ 175.646396][T11017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1559'. [ 175.749532][T11020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1561'. [ 176.029727][T11042] xt_l2tp: wrong L2TP version: 0 [ 176.209501][T11048] vxcan1: tx address claim with dest, not broadcast [ 176.363461][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.652430][T11082] netlink: 'syz.4.1580': attribute type 10 has an invalid length. [ 176.661477][T11082] batadv0: left allmulticast mode [ 176.680633][T11082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.696587][T11082] batadv0: entered allmulticast mode [ 176.702749][T11082] team0: Port device batadv0 added [ 176.886931][T11097] netlink: 'syz.5.1585': attribute type 32 has an invalid length. [ 176.910237][T11099] netlink: 'syz.4.1583': attribute type 3 has an invalid length. [ 177.178525][T11117] vlan0: entered allmulticast mode [ 177.191162][T11117] bond0: entered allmulticast mode [ 177.198708][T11117] bond0: left allmulticast mode [ 177.403408][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 177.416627][T11135] sctp: [Deprecated]: syz.5.1597 (pid 11135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.416627][T11135] Use struct sctp_sack_info instead [ 177.469204][T11139] netlink: 'syz.4.1599': attribute type 8 has an invalid length. [ 177.478480][T11140] netlink: 'syz.1.1596': attribute type 3 has an invalid length. [ 177.493600][T11139] __nla_validate_parse: 9 callbacks suppressed [ 177.493619][T11139] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1599'. [ 177.510932][T11140] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1596'. [ 177.526938][T11132] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 177.542007][T11139] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 177.562386][T11139] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1599'. [ 177.601983][T11144] netlink: 'syz.2.1601': attribute type 18 has an invalid length. [ 177.640323][T11149] netlink: 'syz.5.1602': attribute type 3 has an invalid length. [ 177.673738][T11149] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1602'. [ 177.824419][T11158] syz.2.1607[11158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.824514][T11158] syz.2.1607[11158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.860672][T11158] syz.2.1607[11158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.979420][T11172] netlink: 'syz.5.1612': attribute type 1 has an invalid length. [ 178.009592][T11180] xt_socket: unknown flags 0x50 [ 178.013423][T11172] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1612'. [ 178.125314][T11185] netlink: 'syz.1.1615': attribute type 21 has an invalid length. [ 178.151957][T11185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1615'. [ 178.171756][T11178] netlink: 'syz.2.1614': attribute type 3 has an invalid length. [ 178.187904][T11189] netlink: zone id is out of range [ 178.193170][T11178] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1614'. [ 178.226544][T11189] netlink: zone id is out of range [ 178.231792][T11189] netlink: zone id is out of range [ 178.246563][T11189] netlink: zone id is out of range [ 178.251888][T11189] netlink: zone id is out of range [ 178.384353][T11193] syz.5.1618 (11193) used greatest stack depth: 18128 bytes left [ 178.542602][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 178.560532][T11213] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1625'. [ 178.647036][T11222] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1629'. [ 179.071032][T11247] xt_ipvs: protocol family 7 not supported [ 179.483457][ C0] net_ratelimit: 20 callbacks suppressed [ 179.483476][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.614577][T11287] sctp: [Deprecated]: syz.5.1647 (pid 11287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.614577][T11287] Use struct sctp_sack_info instead [ 179.701902][T11292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.921969][T11308] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.023138][T11320] openvswitch: netlink: Missing valid actions attribute. [ 180.031372][T11320] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.422828][T11319] lo speed is unknown, defaulting to 1000 [ 180.523587][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.924115][T11367] Cannot find del_set index 65531 as target [ 181.025522][T11372] 0·: renamed from hsr_slave_1 (while UP) [ 181.196548][T11372] 0·: entered allmulticast mode [ 181.201847][T11372] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 181.332566][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 181.332587][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 181.332628][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 181.563443][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.792480][T11430] veth0_macvtap: left promiscuous mode [ 181.844433][T11430] macvtap0: entered promiscuous mode [ 181.863526][T11430] macvtap0: left allmulticast mode [ 181.966807][T11446] validate_nla: 9 callbacks suppressed [ 181.966828][T11446] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 181.990890][T11446] bridge0: left allmulticast mode [ 181.997913][T11436] netlink: 'syz.1.1694': attribute type 3 has an invalid length. [ 182.000790][T11446] bridge0: entered allmulticast mode [ 182.027475][T11436] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.038097][T11452] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 182.103596][T11450] tipc: Invalid UDP bearer configuration [ 182.103639][T11450] tipc: Enabling of bearer rejected, failed to enable media [ 182.603474][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.735348][T11496] __nla_validate_parse: 23 callbacks suppressed [ 182.735368][T11496] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1712'. [ 182.744453][T11491] netlink: 'syz.2.1709': attribute type 3 has an invalid length. [ 182.768237][T11496] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1712'. [ 182.777109][T11491] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1709'. [ 182.796711][T11496] netlink: 'syz.6.1712': attribute type 6 has an invalid length. [ 182.814907][T11496] netlink: 'syz.6.1712': attribute type 5 has an invalid length. [ 182.831838][T11496] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1712'. [ 183.005753][T11510] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1715'. [ 183.210481][T11524] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.298314][T11533] netlink: 'syz.5.1721': attribute type 9 has an invalid length. [ 183.343514][T11533] netlink: 134660 bytes leftover after parsing attributes in process `syz.5.1721'. [ 183.546066][T11540] netlink: 'syz.1.1725': attribute type 3 has an invalid length. [ 183.566827][T11540] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1725'. [ 183.596456][T11548] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.794407][T11554] ip6t_rpfilter: unknown options [ 183.797657][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 183.825416][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 183.847064][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 183.965486][T11562] ipt_rpfilter: unknown options [ 184.265364][T11583] netlink: 'syz.1.1738': attribute type 4 has an invalid length. [ 184.298336][T11585] netlink: 'syz.5.1736': attribute type 10 has an invalid length. [ 184.332423][T11585] team0: Cannot enslave team device to itself [ 184.683470][ C0] net_ratelimit: 1 callbacks suppressed [ 184.683490][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.905723][T11631] sctp: [Deprecated]: syz.4.1747 (pid 11631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.905723][T11631] Use struct sctp_sack_info instead [ 185.233814][T11653] nlmon0: entered promiscuous mode [ 185.239455][T11653] vlan3: entered promiscuous mode [ 185.252723][T11653] vlan3: entered allmulticast mode [ 185.266061][T11653] nlmon0: entered allmulticast mode [ 185.282431][T11653] nlmon0: left allmulticast mode [ 185.288817][T11653] nlmon0: left promiscuous mode [ 185.539129][T11675] openvswitch: netlink: Key type 4112 is out of range max 32 [ 185.723498][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.341659][T11734] tipc: Enabled bearer , priority 10 [ 186.554393][T11742] netlink: 'syz.5.1790': attribute type 11 has an invalid length. [ 186.600142][T11753] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 186.763396][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.796080][T11769] sctp: [Deprecated]: syz.2.1796 (pid 11769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.796080][T11769] Use struct sctp_sack_info instead [ 187.076571][T11790] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.123595][T11789] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 187.687167][T11837] validate_nla: 10 callbacks suppressed [ 187.687186][T11837] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 187.762431][T11837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.772549][T11839] __nla_validate_parse: 83 callbacks suppressed [ 187.772569][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 187.803401][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.822942][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 187.987340][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 188.272258][T11885] netlink: 'syz.2.1836': attribute type 9 has an invalid length. [ 188.290464][T11890] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1835'. [ 188.300683][T11885] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1836'. [ 188.369060][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 188.452358][T11903] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 188.500183][T11906] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1841'. [ 188.509946][T11906] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 188.531530][T11907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1840'. [ 188.588055][T11909] sock: sock_timestamping_bind_phc: sock not bind to device [ 188.608369][T11907] team0: Port device wg2 removed [ 188.719427][T11912] team0: Port device wg2 added [ 188.785658][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 188.843539][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.852606][T11925] netlink: 'syz.4.1848': attribute type 10 has an invalid length. [ 188.894163][T11927] openvswitch: netlink: Missing valid actions attribute. [ 188.901925][T11927] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.911712][T11927] tap0: tun_chr_ioctl cmd 1074025676 [ 188.917471][T11927] tap0: owner set to 0 [ 188.964291][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1849'. [ 189.059874][T11935] x_tables: duplicate underflow at hook 1 [ 189.067100][T11935] netlink: 'syz.5.1852': attribute type 9 has an invalid length. [ 189.076433][T11935] netlink: 'syz.5.1852': attribute type 6 has an invalid length. [ 189.210264][T11941] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20002 [ 189.270639][T11941] sctp: [Deprecated]: syz.5.1855 (pid 11941) Use of int in max_burst socket option. [ 189.270639][T11941] Use struct sctp_assoc_value instead [ 189.697765][T11956] netlink: 'syz.5.1861': attribute type 12 has an invalid length. [ 189.883462][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.962681][T11989] sctp: [Deprecated]: syz.4.1870 (pid 11989) Use of int in max_burst socket option. [ 189.962681][T11989] Use struct sctp_assoc_value instead [ 190.162243][T12003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 190.182393][T12003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.321105][T12019] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 190.321393][T12018] IPVS: stopping master sync thread 12019 ... [ 190.358574][T12018] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 190.400472][T12021] bond3: entered promiscuous mode [ 190.412272][T12021] bond3: entered allmulticast mode [ 190.432713][T12021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.525966][ T5851] Bluetooth: hci0: command tx timeout [ 190.632221][T12021] bond3 (unregistering): Released all slaves [ 190.651052][T12026] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 190.661795][T12026] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 190.754722][T12033] x_tables: duplicate underflow at hook 1 [ 190.923395][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.943200][T12049] netlink: 'syz.5.1886': attribute type 3 has an invalid length. [ 191.384002][T12077] netlink: 'syz.5.1901': attribute type 9 has an invalid length. [ 191.589375][T12094] bond0: Removing last arp target with arp_interval on [ 191.963391][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.278435][T12133] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 192.319311][T12133] bond2: entered promiscuous mode [ 192.333491][T12133] bond2: entered allmulticast mode [ 192.339053][T12133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.494424][T12157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.497943][T12160] netlink: 'syz.6.1927': attribute type 3 has an invalid length. [ 192.704005][T12167] syzkaller0: entered allmulticast mode [ 192.986922][T12190] __nla_validate_parse: 25 callbacks suppressed [ 192.986942][T12190] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1933'. [ 193.004095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.011344][T12190] openvswitch: netlink: Key type 29 is not supported [ 193.241910][T12199] netlink: 'syz.1.1936': attribute type 2 has an invalid length. [ 193.251656][T12199] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1936'. [ 194.043422][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.611002][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.083451][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.088937][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1942'. [ 195.157821][T12225] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 195.164609][T12225] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 195.246925][T12232] netlink: 'syz.2.1945': attribute type 18 has an invalid length. [ 195.290075][T12232] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.299260][T12232] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.308308][T12232] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.317140][T12232] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.680524][T12268] netlink: 4272 bytes leftover after parsing attributes in process `syz.6.1957'. [ 195.815612][T12274] tap0: tun_chr_ioctl cmd 1074025677 [ 195.835685][T12274] tap0: linktype set to 778 [ 196.123398][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.223781][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1969'. [ 196.254034][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 196.273841][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1971'. [ 196.378260][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 196.388231][T12325] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1974'. [ 196.445871][T12323] netlink: 'syz.2.1973': attribute type 9 has an invalid length. [ 196.482969][T12323] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.1973'. [ 196.499783][T12323] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 196.536723][T12334] dvmrp0: entered allmulticast mode [ 196.857195][T12355] sit0: mtu less than device minimum [ 197.163503][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.172704][T12439] batadv1: entered allmulticast mode [ 198.203425][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.358637][T12424] lo speed is unknown, defaulting to 1000 [ 198.583074][T12462] __nla_validate_parse: 4 callbacks suppressed [ 198.583094][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2018'. [ 198.657789][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2018'. [ 198.684075][T12469] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 198.704118][T12469] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2017'. [ 198.846888][T12473] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 198.875577][T12473] netlink: 636 bytes leftover after parsing attributes in process `syz.4.2020'. [ 198.912616][T12450] lo speed is unknown, defaulting to 1000 [ 199.004145][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2023'. [ 199.099957][T12490] rdma_rxe: rxe_newlink: failed to add team0 [ 199.115073][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2023'. [ 199.126444][T12489] netlink: 'syz.2.2024': attribute type 27 has an invalid length. [ 199.134513][T12489] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2024'. [ 199.145372][T12489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.243417][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.419830][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2028'. [ 199.447994][T12500] nbd: must specify at least one socket [ 199.544521][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 199.865358][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2036'. [ 199.998910][T12536] tipc: Enabling of bearer rejected, already enabled [ 200.064431][T12522] netlink: 'syz.4.2034': attribute type 3 has an invalid length. [ 200.283460][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.581998][T12555] syz_tun (unregistering): left promiscuous mode [ 200.787931][T12574] xfrm0: left allmulticast mode [ 201.014113][T12589] netlink: 'syz.5.2052': attribute type 3 has an invalid length. [ 201.323486][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.683285][T10494] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.705130][T10494] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.807166][T12634] netlink: 'syz.5.2069': attribute type 3 has an invalid length. [ 201.830696][T10494] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.863530][T10494] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.967164][T10494] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.985558][T12647] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 202.013109][T10494] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.081216][T12657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.126379][T10494] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.163491][T10494] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.204644][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.214204][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.227158][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.255286][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.275153][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.290581][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.363464][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.657623][T12682] openvswitch: netlink: Missing key (keys=40, expected=100) [ 202.962668][T10494] erspan0 (unregistering): left promiscuous mode [ 202.989341][T10494] gretap0 (unregistering): left promiscuous mode [ 203.081923][T12704] netlink: 'syz.2.2084': attribute type 3 has an invalid length. [ 203.321068][T10494] bond0 (unregistering): Released all slaves [ 203.406688][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 203.452984][T10494] bond1 (unregistering): Released all slaves [ 203.580125][T10494] bond2 (unregistering): Released all slaves [ 203.592568][T12661] lo speed is unknown, defaulting to 1000 [ 203.798491][T10494] tipc: Disabling bearer [ 203.814162][T10494] tipc: Disabling bearer [ 203.881455][T10494] tipc: Left network mode [ 203.886196][T12661] chnl_net:caif_netlink_parms(): no params data found [ 203.908307][T12723] xt_TCPMSS: Only works on TCP SYN packets [ 203.934730][T12720] __nla_validate_parse: 8 callbacks suppressed [ 203.934749][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2090'. [ 203.971621][T12711] syzkaller0: entered promiscuous mode [ 203.990269][T12711] syzkaller0: entered allmulticast mode [ 203.990657][T12722] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 204.260564][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.271908][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.279425][T12661] bridge_slave_0: entered allmulticast mode [ 204.291056][T12661] bridge_slave_0: entered promiscuous mode [ 204.300556][T12743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.334145][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.341297][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.352438][T12661] bridge_slave_1: entered allmulticast mode [ 204.363529][ T5858] Bluetooth: hci4: command tx timeout [ 204.375564][T12661] bridge_slave_1: entered promiscuous mode [ 204.437584][T12661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.557949][T12661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.617072][T12661] team0: Port device team_slave_0 added [ 204.651156][T12661] team0: Port device team_slave_1 added [ 204.699558][T12661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.706968][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.747570][T12661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.759625][T12754] netlink: 'syz.5.2099': attribute type 3 has an invalid length. [ 204.772097][T12754] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2099'. [ 204.806439][T12661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.814136][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.841409][T12661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.983026][T12661] hsr_slave_0: entered promiscuous mode [ 205.007701][T12661] hsr_slave_1: entered promiscuous mode [ 205.019995][T12661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.037762][T12661] Cannot create hsr debugfs directory [ 205.048216][T10494] batadv_slave_1: left promiscuous mode [ 205.081231][T10494] hsr_slave_0: left promiscuous mode [ 205.102086][T10494] 0·: left promiscuous mode [ 205.114940][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2102'. [ 205.159133][T10494] veth1_macvtap: left promiscuous mode [ 205.172749][T10494] veth0_macvtap: left promiscuous mode [ 205.183165][T10494] veth1_vlan: left promiscuous mode [ 205.199817][T10494] veth0_vlan: left promiscuous mode [ 205.375310][T10494] pimreg3 (unregistering): left allmulticast mode [ 205.990509][T11878] smc: removing ib device syz1 [ 206.105396][T10494] team0 (unregistering): Port device wg2 removed [ 206.289111][T12766] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 206.443522][ T5858] Bluetooth: hci4: command tx timeout [ 206.623861][T12793] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.818015][T12806] Unknown status report in ack skb [ 206.860555][T12806] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 206.863136][T12803] netlink: 'syz.6.2112': attribute type 3 has an invalid length. [ 206.883779][T12803] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2112'. [ 206.896445][T12806] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 207.162259][T12826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2120'. [ 207.236601][T12830] netlink: 'syz.4.2121': attribute type 4 has an invalid length. [ 207.278157][T12830] netlink: 'syz.4.2121': attribute type 4 has an invalid length. [ 207.321627][ T5893] lo speed is unknown, defaulting to 1000 [ 207.509353][T12661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.535972][T12661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.575963][T12661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.621684][T12853] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2128'. [ 207.641613][T12858] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2130'. [ 207.665807][T12841] lo speed is unknown, defaulting to 1000 [ 207.669377][T12661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.741119][T12863] netlink: 'syz.4.2129': attribute type 3 has an invalid length. [ 207.771009][T12863] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2129'. [ 208.085435][T12878] netlink: 'syz.4.2135': attribute type 21 has an invalid length. [ 208.102570][T12878] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2135'. [ 208.122358][T12878] netlink: 'syz.4.2135': attribute type 4 has an invalid length. [ 208.154513][T12878] netlink: 'syz.4.2135': attribute type 5 has an invalid length. [ 208.174380][T12878] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2135'. [ 208.233929][T12661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.251911][T12661] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.276581][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.283768][T11886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.334704][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.341790][T11886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.523659][ T5858] Bluetooth: hci4: command tx timeout [ 208.705521][T12661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.792947][T12661] veth0_vlan: entered promiscuous mode [ 208.825962][T12661] veth1_vlan: entered promiscuous mode [ 208.895383][T12661] veth0_macvtap: entered promiscuous mode [ 208.921153][T12661] veth1_macvtap: entered promiscuous mode [ 208.951119][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.973462][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.973907][T12922] netlink: 'syz.5.2145': attribute type 3 has an invalid length. [ 208.991295][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.007130][T12922] __nla_validate_parse: 2 callbacks suppressed [ 209.007150][T12922] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2145'. [ 209.025301][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.037398][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.048913][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.060818][T12661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.092940][T12926] ip6gre1: entered allmulticast mode [ 209.157810][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.188340][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.199182][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.210740][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.241289][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.263467][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.276716][T12661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.305562][T12661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.343441][T12661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.370837][T12661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.388682][T12661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.404710][T12945] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2153'. [ 209.419472][T12946] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2153'. [ 209.468357][T12948] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2154'. [ 209.598158][T10485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.620294][T10485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.698011][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.721295][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.841011][T12971] netlink: 'syz.6.2161': attribute type 3 has an invalid length. [ 209.849830][T12971] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2161'. [ 209.885426][T12973] netlink: 'syz.2.2160': attribute type 3 has an invalid length. [ 209.898143][T12973] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2160'. [ 210.000517][T12978] netlink: 'syz.6.2161': attribute type 3 has an invalid length. [ 210.020966][T12978] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2161'. [ 210.162813][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 210.217619][T12990] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 210.274378][T12990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.282669][T12990] bond2: (slave bond3): making interface the new active one [ 210.300756][T12990] bond2: (slave bond3): Enslaving as an active interface with an up link [ 210.305677][T12991] ipt_rpfilter: unknown options [ 210.663529][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2171'. [ 210.715772][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2171'. [ 210.941489][T13030] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 211.248336][T13052] netlink: 'syz.6.2173': attribute type 3 has an invalid length. [ 211.356289][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.366487][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.375225][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.384457][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.393005][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.404942][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.426615][T13062] netlink: 'syz.2.2185': attribute type 3 has an invalid length. [ 211.484635][T13057] lo speed is unknown, defaulting to 1000 [ 211.752019][ T8] IPVS: starting estimator thread 0... [ 211.785056][T13083] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 211.886621][T13057] chnl_net:caif_netlink_parms(): no params data found [ 211.893741][T13084] IPVS: using max 21 ests per chain, 50400 per kthread [ 212.065575][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.072967][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.081559][T13057] bridge_slave_0: entered allmulticast mode [ 212.088850][T13057] bridge_slave_0: entered promiscuous mode [ 212.097323][T13099] netlink: 'syz.4.2193': attribute type 3 has an invalid length. [ 212.134175][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.154577][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.183679][T13057] bridge_slave_1: entered allmulticast mode [ 212.190805][T13057] bridge_slave_1: entered promiscuous mode [ 212.269093][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.302022][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.415336][T13057] team0: Port device team_slave_0 added [ 212.449609][T13057] team0: Port device team_slave_1 added [ 212.565487][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.593997][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.640154][T13143] sctp: [Deprecated]: syz.5.2207 (pid 13143) Use of int in max_burst socket option deprecated. [ 212.640154][T13143] Use struct sctp_assoc_value instead [ 212.657811][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.702494][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.710193][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.738631][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.756981][T13139] netlink: 'syz.4.2205': attribute type 10 has an invalid length. [ 212.771121][T13139] bond0: (slave bond_slave_0): Releasing backup interface [ 212.884715][T13057] hsr_slave_0: entered promiscuous mode [ 212.892380][T13057] hsr_slave_1: entered promiscuous mode [ 212.908446][T13057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.916874][T13057] Cannot create hsr debugfs directory [ 213.187102][T13057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.276059][T13057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.316694][T13169] netlink: 'syz.2.2217': attribute type 2 has an invalid length. [ 213.380192][T13057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.471876][T13057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.484380][ T5858] Bluetooth: hci4: command tx timeout [ 213.553276][T13177] vxcan1: tx address claim with dlc 1 [ 213.670609][T13057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.692430][T13057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.707429][T13057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.734087][T13057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.969043][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.028632][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.064067][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.071258][T11886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.090532][T13195] Cannot find del_set index 4 as target [ 214.152343][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.159616][T11886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.317766][T13057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.429457][T13210] Bluetooth: MGMT ver 1.23 [ 214.612887][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.618247][T13184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.741417][T13057] veth0_vlan: entered promiscuous mode [ 214.754285][T13057] veth1_vlan: entered promiscuous mode [ 214.779507][T13057] veth0_macvtap: entered promiscuous mode [ 214.792717][T13057] veth1_macvtap: entered promiscuous mode [ 214.809083][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.820001][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.830518][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.841138][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.851541][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.862622][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.872588][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.883113][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.895040][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.904769][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.915514][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.926035][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.937095][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.947534][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.958033][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.967904][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.978649][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.990827][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.066932][T13057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.076766][T13057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.088623][T13057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.113393][T13057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.251242][T13242] syzkaller1: entered promiscuous mode [ 215.267649][T13242] syzkaller1: entered allmulticast mode [ 215.356094][T11881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.380735][T11881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.448258][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.459056][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.526915][T13253] __nla_validate_parse: 15 callbacks suppressed [ 215.526936][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 215.772488][T13265] netlink: 'syz.4.2249': attribute type 9 has an invalid length. [ 215.810590][T13265] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.2249'. [ 215.833673][T13266] netlink: 'syz.6.2248': attribute type 1 has an invalid length. [ 215.873457][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2248'. [ 216.025663][T13272] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2252'. [ 216.094458][T13272] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 216.144683][T13278] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2254'. [ 216.264286][T13281] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2255'. [ 216.306387][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2257'. [ 216.369529][T13285] veth7: entered allmulticast mode [ 216.393655][T13283] netlink: 'syz.5.2256': attribute type 21 has an invalid length. [ 216.421374][T13283] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2256'. [ 216.483138][T13290] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2256'. [ 216.492842][T13290] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2256'. [ 216.790855][T13302] netlink: 'syz.5.2263': attribute type 12 has an invalid length. [ 217.169366][T11893] wlan1: Trigger new scan to find an IBSS to join [ 217.520050][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.533221][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.542550][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.559017][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.568800][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.583711][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.666073][T13328] lo speed is unknown, defaulting to 1000 [ 217.890680][T13351] hsr_slave_0: left promiscuous mode [ 217.897075][T13351] hsr_slave_1: left promiscuous mode [ 217.995552][T13328] chnl_net:caif_netlink_parms(): no params data found [ 218.178752][T13362] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 218.295066][T13380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.051268][T13369] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.129480][T13369] bridge_slave_0 (unregistering): left allmulticast mode [ 219.139235][T13369] bridge_slave_0 (unregistering): left promiscuous mode [ 219.147253][T13369] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.462344][T13389] hsr_slave_0 (unregistering): left promiscuous mode [ 219.476365][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.484476][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.491886][T13328] bridge_slave_0: entered allmulticast mode [ 219.502555][T13328] bridge_slave_0: entered promiscuous mode [ 219.519259][T13399] netdevsim netdevsim4: Direct firmware load for . [ 219.519259][T13399] failed with error -2 [ 219.522181][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.540557][T13399] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 219.540557][T13399] [ 219.571250][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.599291][T13328] bridge_slave_1: entered allmulticast mode [ 219.623813][T13328] bridge_slave_1: entered promiscuous mode [ 219.644244][ T5851] Bluetooth: hci4: command tx timeout [ 219.715557][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.747809][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.770170][T13410] netlink: 'syz.2.2292': attribute type 1 has an invalid length. [ 219.796269][T13410] netlink: 'syz.2.2292': attribute type 1 has an invalid length. [ 219.818246][T13410] netlink: 'syz.2.2292': attribute type 2 has an invalid length. [ 219.832277][T13328] team0: Port device team_slave_0 added [ 219.848118][T13328] team0: Port device team_slave_1 added [ 219.928371][T13417] netdevsim netdevsim5: Firmware load for 'up/../file0/file0' refused, path contains '..' component [ 219.932342][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.951621][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.980092][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.005467][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.012631][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.054217][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.111613][T13328] hsr_slave_0: entered promiscuous mode [ 220.122127][T13328] hsr_slave_1: entered promiscuous mode [ 220.129114][T13328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.136855][T13328] Cannot create hsr debugfs directory [ 220.277111][T13397] netdevsim netdevsim4: Direct firmware load for . [ 220.277111][T13397] failed with error -2 [ 220.305404][T13397] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 220.305404][T13397] [ 220.317450][T13422] pim6reg1: entered promiscuous mode [ 220.322909][T13422] pim6reg1: entered allmulticast mode [ 220.524750][T13328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.661354][T13328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.768604][T13328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.828889][T13446] __nla_validate_parse: 8 callbacks suppressed [ 220.828908][T13446] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2304'. [ 220.845249][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'. [ 220.896454][T13328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.137419][T13328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.153011][T13328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.177476][T13328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.192917][T13328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.320412][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.340437][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.358340][T11891] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.365507][T11891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.392596][T11891] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.399848][T11891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.458822][T13472] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2312'. [ 221.474160][T13472] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2312'. [ 221.503405][T13472] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2312'. [ 221.552817][T13328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.563726][T13328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.734015][ T5851] Bluetooth: hci4: command tx timeout [ 221.827816][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.863157][T13328] veth0_vlan: entered promiscuous mode [ 221.864353][T13492] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 221.876123][T13328] veth1_vlan: entered promiscuous mode [ 221.930982][T13492] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 221.937150][T13328] veth0_macvtap: entered promiscuous mode [ 221.940446][T13328] veth1_macvtap: entered promiscuous mode [ 222.066716][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.093387][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.103266][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.138897][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.149469][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.160250][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.170227][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.180902][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.190838][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.201556][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.212090][T11891] wlan1: Trigger new scan to find an IBSS to join [ 222.245505][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.256306][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.267281][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.294941][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.310340][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.324697][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.337798][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.348527][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.359571][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.370303][T13328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.381054][T13328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.398312][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.412430][T13515] netlink: 'syz.4.2321': attribute type 24 has an invalid length. [ 222.427115][T13523] bridge_slave_0 (uninitialized): option arp_validate: invalid value (14007) [ 222.436851][T13526] netlink: 'syz.6.2322': attribute type 4 has an invalid length. [ 222.466387][T13328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.475871][T13328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.491964][T13328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.502358][T13328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.506129][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 222.534729][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 222.631935][T13530] gtp1: entered promiscuous mode [ 222.638224][T13530] gtp1: entered allmulticast mode [ 222.668714][T11893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.688128][T11893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.747879][T11886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.759859][T13535] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 222.773954][T11886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.899539][T13541] netlink: 'syz.4.2329': attribute type 3 has an invalid length. [ 223.138580][T10493] wlan1: Creating new IBSS network, BSSID fa:9a:97:df:24:17 [ 223.544464][T13583] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2342'. [ 223.610198][T13586] netlink: 'syz.4.2343': attribute type 1 has an invalid length. [ 223.699621][T13587] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 223.711515][T13587] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 223.724684][T13587] bond4: (slave vti1): making interface the new active one [ 223.741779][T13587] bond4: (slave vti1): Enslaving as an active interface with an up link [ 223.891769][T13593] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2345'. [ 223.910103][ T5851] Bluetooth: hci0: command tx timeout [ 224.439744][T13606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2350'. [ 224.619474][T13621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.638034][T13621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.660639][T13621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.682988][T13621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.764935][T13621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.775160][T13621] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 225.930477][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.941613][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.950780][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.960104][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.970656][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.979251][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.222232][T13677] lo speed is unknown, defaulting to 1000 [ 226.292805][T13699] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 226.322470][T13699] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 226.439656][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.473896][T13713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.517050][T13717] ipt_ECN: cannot use operation on non-tcp rule [ 226.569646][T13717] __nla_validate_parse: 8 callbacks suppressed [ 226.569666][T13717] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2375'. [ 226.659378][T13677] chnl_net:caif_netlink_parms(): no params data found [ 226.690079][T13721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2376'. [ 226.846727][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.869491][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.890593][T13677] bridge_slave_0: entered allmulticast mode [ 226.907133][T13677] bridge_slave_0: entered promiscuous mode [ 226.933192][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.963817][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.971115][T13677] bridge_slave_1: entered allmulticast mode [ 226.994612][T13677] bridge_slave_1: entered promiscuous mode [ 227.085426][T13677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.134118][T13677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.265864][T13759] sctp: [Deprecated]: syz.2.2383 (pid 13759) Use of int in max_burst socket option deprecated. [ 227.265864][T13759] Use struct sctp_assoc_value instead [ 227.310200][T13677] team0: Port device team_slave_0 added [ 227.341707][T13677] team0: Port device team_slave_1 added [ 227.420692][T13677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.447090][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.505222][T13677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.526019][T13677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.533002][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.573186][T13677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.729201][T13677] hsr_slave_0: entered promiscuous mode [ 227.760174][T13677] hsr_slave_1: entered promiscuous mode [ 227.780453][T13677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.788829][T13677] Cannot create hsr debugfs directory [ 227.961989][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2390'. [ 228.090412][T13677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.123667][ T5858] Bluetooth: hci4: command tx timeout [ 228.242591][T13677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.262098][T13814] sctp: [Deprecated]: syz.4.2396 (pid 13814) Use of int in max_burst socket option. [ 228.262098][T13814] Use struct sctp_assoc_value instead [ 228.275892][T13808] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 228.292331][T13814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.301842][T13808] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 228.350710][T13808] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 228.401886][T13677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.441475][T13813] xt_bpf: check failed: parse error [ 228.470812][T13821] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2399'. [ 228.522171][T13677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.672372][T13677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.691322][T13677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.692601][T13831] netlink: 'syz.5.2403': attribute type 1 has an invalid length. [ 228.714771][T13831] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2403'. [ 228.716384][T13677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.750322][T13677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.875893][T13677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.934677][T13677] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.975249][T13677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.985712][T13677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.991213][T13845] xt_TCPMSS: Only works on TCP SYN packets [ 229.022297][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2406'. [ 229.045159][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.052409][T11886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.115845][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.122993][T11886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.181609][T13851] team0: No ports can be present during mode change [ 229.370154][T13677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.550520][T13677] veth0_vlan: entered promiscuous mode [ 229.595688][T13677] veth1_vlan: entered promiscuous mode [ 229.697292][T13868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.705076][T13868] IPv6: NLM_F_CREATE should be set when creating new route [ 229.743228][T13677] veth0_macvtap: entered promiscuous mode [ 229.781925][T13677] veth1_macvtap: entered promiscuous mode [ 229.802464][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.846323][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.856342][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.866912][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.876968][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.887630][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.898172][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.909211][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.919321][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.929840][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.940154][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.950671][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.962115][T13677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.972410][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.984987][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.005164][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.016711][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.040687][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.063423][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.078833][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.089964][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.103269][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.116216][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.130889][T13677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.141771][T13677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.155368][T13677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.190544][T13677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.211382][ T5858] Bluetooth: hci4: command tx timeout [ 230.258638][T13677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.276101][T13908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2424'. [ 230.277373][T13677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.295019][T13677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.310478][T13912] netlink: 'syz.4.2427': attribute type 142 has an invalid length. [ 230.338985][T13912] netlink: 'syz.4.2427': attribute type 9 has an invalid length. [ 230.381802][ T29] audit: type=1107 audit(1730575641.254:4): pid=13910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 230.402940][T13918] sctp: [Deprecated]: syz.6.2425 (pid 13918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.402940][T13918] Use struct sctp_sack_info instead [ 230.514785][T11882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.550671][T11882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.621779][T13932] xt_NFQUEUE: number of total queues is 0 [ 230.687015][T10493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.697039][T10493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.402206][T13968] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2440'. [ 231.434388][T13968] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 231.467658][T13968] netlink: 4472 bytes leftover after parsing attributes in process `syz.5.2440'. [ 231.497860][T13968] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2440'. [ 231.617629][T13975] netlink: 'syz.6.2444': attribute type 1 has an invalid length. [ 231.619989][T13980] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 231.641010][T13980] netlink: 'syz.2.2443': attribute type 4 has an invalid length. [ 231.670347][T13980] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2443'. [ 231.698086][T13980] NCSI netlink: No device for ifindex 458760 [ 232.001939][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 232.041058][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 232.208885][T14009] netlink: 'syz.2.2455': attribute type 9 has an invalid length. [ 232.217170][T14009] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.2455'. [ 232.218442][T14010] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 233.229769][T14031] netlink: 'syz.4.2461': attribute type 2 has an invalid length. [ 233.345202][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.362953][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.372070][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.395567][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.407143][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.414732][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.485712][T14035] lo speed is unknown, defaulting to 1000 [ 233.532684][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 233.574881][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2465'. [ 233.748119][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'. [ 234.021533][T14035] chnl_net:caif_netlink_parms(): no params data found [ 234.312988][T14035] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.332069][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.353503][T14035] bridge_slave_0: entered allmulticast mode [ 234.370819][T14035] bridge_slave_0: entered promiscuous mode [ 234.414862][T14035] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.422014][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.441908][T14035] bridge_slave_1: entered allmulticast mode [ 234.464742][T14035] bridge_slave_1: entered promiscuous mode [ 234.591453][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.625273][T14112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.636418][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.660022][T14115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2485'. [ 234.726544][T14035] team0: Port device team_slave_0 added [ 234.751267][T14035] team0: Port device team_slave_1 added [ 234.835042][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.842046][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.892415][T14126] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 234.902909][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.935794][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.950786][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.009588][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.034722][T14134] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2492'. [ 235.103169][T14035] hsr_slave_0: entered promiscuous mode [ 235.111244][T14035] hsr_slave_1: entered promiscuous mode [ 235.134288][T14035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.148358][T14035] Cannot create hsr debugfs directory [ 235.187976][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 235.419119][T14035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.490199][ T5858] Bluetooth: hci4: command tx timeout [ 235.528155][T14035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.693875][T14035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.867859][T14035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.970374][T14170] netlink: 'syz.4.2502': attribute type 21 has an invalid length. [ 236.157257][T14035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.221425][T14035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.303569][T14035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.348326][T14035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.471844][T11891] syzkaller0: tun_net_xmit 76 [ 236.480670][T11891] syzkaller0: tun_net_xmit 48 [ 236.493903][ T79] syzkaller0: tun_net_xmit 76 [ 237.565424][ T5858] Bluetooth: hci4: command tx timeout [ 238.892826][T14229] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 238.939930][T14035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.947543][T14229] __nla_validate_parse: 5 callbacks suppressed [ 238.947561][T14229] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2517'. [ 238.982952][T14229] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 239.017454][T14231] lo speed is unknown, defaulting to 1000 [ 239.025617][T14035] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.054637][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.061752][T11881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.075364][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.082511][T11881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.354182][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2523'. [ 239.404060][T14245] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.413069][T14245] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.432085][T14245] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.447366][T14247] netlink: 'syz.4.2524': attribute type 2 has an invalid length. [ 239.468012][T14245] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.477973][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 239.504898][T14245] geneve3: entered promiscuous mode [ 239.520717][T14245] geneve3: entered allmulticast mode [ 239.644411][ T5858] Bluetooth: hci4: command tx timeout [ 239.720505][T14035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.871721][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2527'. [ 240.082397][T14283] IPv6: sit5: Disabled Multicast RS [ 240.134051][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.289165][T14297] ip6gre2: entered allmulticast mode [ 240.296283][T14297] bond0: (slave ip6gre2): refused to change device type [ 240.355377][T14035] veth0_vlan: entered promiscuous mode [ 240.400695][T14035] veth1_vlan: entered promiscuous mode [ 240.477506][T14035] veth0_macvtap: entered promiscuous mode [ 240.511042][T14035] veth1_macvtap: entered promiscuous mode [ 240.568434][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.595782][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.606169][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.621271][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.632978][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.644275][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.657451][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.669201][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.679370][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.693012][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.705540][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.717442][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.732949][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.744374][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.756680][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.812713][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.845927][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.874968][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.904934][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.933587][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.953979][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.965072][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.984187][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.994788][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.010632][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.021991][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.032760][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.043846][T14035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.055405][T14035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.097579][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.128385][T14035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.141994][T14035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.160088][T14035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.178825][T14035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.212746][T14335] pimreg3: entered allmulticast mode [ 241.239886][T14335] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2548'. [ 241.444897][T11881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.452784][T11881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.542176][T14352] v: renamed from veth1_virt_wifi (while UP) [ 241.585481][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2555'. [ 241.588515][T11882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.614270][T11882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.713050][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2558'. [ 241.724287][ T5851] Bluetooth: hci4: command tx timeout [ 241.735258][T14361] netlink: 'syz.6.2558': attribute type 3 has an invalid length. [ 241.743888][T14361] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2558'. [ 241.768448][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'. [ 242.029893][T14376] macvtap0: entered promiscuous mode [ 242.042461][T14376] macvtap0: left promiscuous mode [ 242.074637][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 242.763724][ T5851] Bluetooth: hci5: command 0x0411 tx timeout [ 243.238025][T14412] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 243.663146][T14447] netlink: 'syz.2.2578': attribute type 1 has an invalid length. [ 243.692980][T14447] nbd: couldn't find a device at index 2097172 [ 243.850709][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.865501][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.875830][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.890612][T14460] tc_dump_action: action bad kind [ 243.897816][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.917078][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 243.927424][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.975373][T14464] netlink: 'syz.6.2583': attribute type 1 has an invalid length. [ 244.038966][T14455] lo speed is unknown, defaulting to 1000 [ 244.089773][T14474] netlink: 'syz.5.2586': attribute type 11 has an invalid length. [ 244.292962][T14455] chnl_net:caif_netlink_parms(): no params data found [ 244.536005][T14502] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.583690][T14455] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.593546][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.603758][T14455] bridge_slave_0: entered allmulticast mode [ 244.613222][T14455] bridge_slave_0: entered promiscuous mode [ 244.628889][T14455] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.651069][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.658977][T14455] bridge_slave_1: entered allmulticast mode [ 244.666081][T14455] bridge_slave_1: entered promiscuous mode [ 244.754778][T14514] __nla_validate_parse: 8 callbacks suppressed [ 244.754795][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2594'. [ 244.806336][T14455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.824039][T14455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.898454][T14520] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2597'. [ 244.922144][T14455] team0: Port device team_slave_0 added [ 244.933156][T14455] team0: Port device team_slave_1 added [ 244.977703][T14455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.985055][T14455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.012754][T14455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.026295][T14455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.033280][T14455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.060220][T14455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.077992][T14526] dvmrp0: entered allmulticast mode [ 245.084816][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2598'. [ 245.157005][T14455] hsr_slave_0: entered promiscuous mode [ 245.175158][T14455] hsr_slave_1: entered promiscuous mode [ 245.184038][T14455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.191716][T14455] Cannot create hsr debugfs directory [ 245.270963][T14533] netlink: 'syz.5.2601': attribute type 1 has an invalid length. [ 245.295053][T14533] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2601'. [ 245.319794][T14533] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2601'. [ 245.532148][T14455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.576613][T14540] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 245.601949][T14540] netlink: 'syz.2.2606': attribute type 3 has an invalid length. [ 245.609954][T14540] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2606'. [ 245.620664][T14540] NCSI netlink: No device for ifindex 0 [ 245.630857][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2605'. [ 245.675364][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2605'. [ 245.698168][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2605'. [ 245.767348][T14455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.825191][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2605'. [ 245.961225][T14455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.974258][ T5858] Bluetooth: hci4: command tx timeout [ 246.122432][T14455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.402724][T14455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.436519][T14455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.465338][T14455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.493761][T14455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.673585][T14455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.703708][T14455] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.715953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.723243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.749830][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.757058][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.922464][T14612] netlink: 'syz.4.2627': attribute type 10 has an invalid length. [ 247.219903][T14455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.263809][T14631] netlink: 'syz.4.2633': attribute type 1 has an invalid length. [ 247.297512][T14455] veth0_vlan: entered promiscuous mode [ 247.339788][T14455] veth1_vlan: entered promiscuous mode [ 247.376311][T14635] netlink: zone id is out of range [ 247.445976][T14455] veth0_macvtap: entered promiscuous mode [ 247.476012][T14455] veth1_macvtap: entered promiscuous mode [ 247.549630][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.577980][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.603421][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.622965][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.633624][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.647147][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.659175][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.691495][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.705464][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.717334][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.730599][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.741173][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.751216][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.779315][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.789722][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.800401][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.816390][T14455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.828045][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.838638][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.863503][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.876842][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.887572][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.901912][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.913907][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.926536][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.936620][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.950839][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.960769][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.972733][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.982795][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.005542][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.015667][T14455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.029606][T14455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.040888][T14455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.048434][ T5858] Bluetooth: hci4: command tx timeout [ 248.054790][T14645] netlink: 'syz.6.2638': attribute type 21 has an invalid length. [ 248.066546][T14455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.075426][T14455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.084510][T14455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.093227][T14455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.186549][T14659] veth1_macvtap: left promiscuous mode [ 248.384191][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.413054][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.465176][T14674] netlink: 'syz.5.2646': attribute type 14 has an invalid length. [ 248.525689][T11880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.540406][T11880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.590372][ T25] hid-generic 0005:15C2:FFF9.0001: item fetching failed at offset 0/1 [ 248.610351][ T25] hid-generic 0005:15C2:FFF9.0001: probe with driver hid-generic failed with error -22 [ 248.756092][T14692] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 249.008531][T14705] netlink: 'syz.4.2657': attribute type 7 has an invalid length. [ 249.035958][T14705] Êü: entered promiscuous mode [ 249.277158][T14721] netlink: 'syz.6.2659': attribute type 1 has an invalid length. [ 249.297681][T14721] netlink: 'syz.6.2659': attribute type 1 has an invalid length. [ 249.317242][T14721] netlink: 'syz.6.2659': attribute type 1 has an invalid length. [ 249.333036][T14721] netlink: 'syz.6.2659': attribute type 2 has an invalid length. [ 249.448667][T14731] netlink: 'syz.6.2663': attribute type 29 has an invalid length. [ 250.034423][T14751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.041768][T14751] IPv6: NLM_F_CREATE should be set when creating new route [ 250.049142][T14751] IPv6: NLM_F_CREATE should be set when creating new route [ 250.150452][T14754] __nla_validate_parse: 15 callbacks suppressed [ 250.150471][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2669'. [ 251.047217][T14760] Bluetooth: MGMT ver 1.23 [ 251.076411][T14763] sctp: [Deprecated]: syz.6.2670 (pid 14763) Use of int in maxseg socket option. [ 251.076411][T14763] Use struct sctp_assoc_value instead [ 251.408469][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.420266][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.435656][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.450681][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.466380][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 251.476230][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.578825][T14782] lo speed is unknown, defaulting to 1000 [ 251.777515][T14809] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2684'. [ 251.814660][T14811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2685'. [ 251.848651][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'. [ 251.858356][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'. [ 251.955994][T14782] chnl_net:caif_netlink_parms(): no params data found [ 252.046727][T14826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 252.321025][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.348111][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.374006][T14782] bridge_slave_0: entered allmulticast mode [ 252.390385][T14782] bridge_slave_0: entered promiscuous mode [ 252.435290][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.445157][T14850] xt_l2tp: missing protocol rule (udp|l2tpip) [ 252.454193][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.461707][T14782] bridge_slave_1: entered allmulticast mode [ 252.481085][T14850] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 252.485684][T14782] bridge_slave_1: entered promiscuous mode [ 252.495422][T14850] netlink: 'syz.6.2696': attribute type 1 has an invalid length. [ 252.504468][T14850] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.2696'. [ 252.526681][T14854] openvswitch: netlink: Actions may not be safe on all matching packets [ 252.563173][T14852] netlink: 'syz.5.2699': attribute type 2 has an invalid length. [ 252.586697][T14855] netlink: 'syz.5.2699': attribute type 8 has an invalid length. [ 252.610660][T14850] batadv0: entered promiscuous mode [ 252.632660][T14850] macsec1: entered promiscuous mode [ 252.647232][T14850] macsec1: entered allmulticast mode [ 252.663181][T14850] batadv0: entered allmulticast mode [ 252.689813][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.713576][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.726046][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 252.748635][T14858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2700'. [ 252.915407][T14865] : entered promiscuous mode [ 252.929979][T14782] team0: Port device team_slave_0 added [ 252.966756][T14782] team0: Port device team_slave_1 added [ 253.204210][T14877] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 253.263702][T14878] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 253.296595][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.320921][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.399615][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.420906][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.448076][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.486451][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.573581][ T5851] Bluetooth: hci4: command tx timeout [ 253.589130][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.606522][T14885] netlink: 'syz.6.2710': attribute type 10 has an invalid length. [ 253.697051][T14885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.733993][T14885] team0: Device batadv0 failed to register rx_handler [ 253.816059][T14903] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 253.951204][T14912] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 253.962590][T14912] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.2717'. [ 253.973662][T14912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2717'. [ 253.986645][T14912] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 254.065550][T14913] netlink: 'syz.6.2718': attribute type 1 has an invalid length. [ 254.123508][T14908] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 254.207481][T14782] hsr_slave_0: entered promiscuous mode [ 254.226427][T14782] hsr_slave_1: entered promiscuous mode [ 254.244797][T14782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.254326][T14782] Cannot create hsr debugfs directory [ 254.512855][T14920] pim6reg1: entered promiscuous mode [ 254.532177][T14920] pim6reg1: entered allmulticast mode [ 255.071703][T14782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.264543][T14969] __nla_validate_parse: 1 callbacks suppressed [ 255.264562][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 255.307212][T14971] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2731'. [ 255.368280][T14971] netlink: 'syz.2.2731': attribute type 1 has an invalid length. [ 255.427434][T14782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.643777][ T5851] Bluetooth: hci4: command tx timeout [ 255.680839][T14782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.726827][T14985] pimreg: entered allmulticast mode [ 255.750536][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 255.866178][T14782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.060547][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.400523][T14782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.459281][T14782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.571606][T14782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.627654][T14782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.859291][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 256.934654][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 257.004078][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 257.023195][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 257.063003][T14782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.082973][T14782] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.095560][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.102723][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.112830][T15043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2749'. [ 257.185724][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 257.226377][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2753'. [ 257.256905][T15047] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 257.294099][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.301288][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.359531][T15051] bridge0: port 1(veth0_to_bridge) entered blocking state [ 257.376091][T15051] bridge0: port 1(veth0_to_bridge) entered disabled state [ 257.396088][T15051] veth0_to_bridge: entered allmulticast mode [ 257.408388][T15051] veth0_to_bridge: entered promiscuous mode [ 257.507134][T15060] netlink: 'syz.2.2755': attribute type 3 has an invalid length. [ 257.723986][ T5851] Bluetooth: hci4: command tx timeout [ 258.007471][T14782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.245566][T14782] veth0_vlan: entered promiscuous mode [ 258.396496][T14782] veth1_vlan: entered promiscuous mode [ 258.598301][T15109] netlink: 'syz.4.2766': attribute type 2 has an invalid length. [ 258.624394][T14782] veth0_macvtap: entered promiscuous mode [ 258.643255][T14782] veth1_macvtap: entered promiscuous mode [ 258.745957][T15118] ip6t_srh: unknown srh invflags 5F00 [ 258.764074][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.804940][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.847326][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.887221][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.917516][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.946539][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.977058][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.996101][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.006807][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.017894][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.033196][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.047888][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.058472][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.070808][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.101157][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.138132][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.158186][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.201856][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.232808][T14782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.296464][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.330374][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.358179][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.382396][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.408990][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.426352][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.453396][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.469422][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.481841][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.532601][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.564642][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.595645][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.611888][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.639627][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.657609][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.678745][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.689030][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.716655][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.745905][T15111] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.746882][T14782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.804178][ T5851] Bluetooth: hci4: command tx timeout [ 259.870508][T15147] netlink: 'syz.5.2778': attribute type 16 has an invalid length. [ 259.878986][T15147] netlink: 'syz.5.2778': attribute type 3 has an invalid length. [ 259.938233][T14782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.987451][T14782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.013560][T14782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.022317][T14782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.194166][T15153] ip6t_REJECT: ECHOREPLY is not supported [ 260.210188][T15153] netlink: 'syz.5.2780': attribute type 5 has an invalid length. [ 260.296200][T15157] __nla_validate_parse: 7 callbacks suppressed [ 260.296221][T15157] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2783'. [ 260.334031][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.359177][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.558257][T11891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.566733][T11891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.882609][T15175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2786'. [ 260.907141][T15175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2786'. [ 261.338665][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2790'. [ 261.703925][T15192] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2792'. [ 261.713861][T15192] netlink: 'syz.2.2792': attribute type 2 has an invalid length. [ 261.743254][T15192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2792'. [ 263.155572][T15226] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2799'. [ 263.210552][T15226] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 263.546971][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.567078][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.591512][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.606983][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.626966][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.635460][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.729824][ T5851] Bluetooth: hci4: command tx timeout [ 267.788080][T15234] netem: change failed [ 267.841917][ T5851] Bluetooth: hci4: command tx timeout [ 267.898448][T15240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2804'. [ 267.907632][T15240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2804'. [ 267.979873][T15231] lo speed is unknown, defaulting to 1000 [ 268.165148][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2804'. [ 268.405498][T15264] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2810'. [ 268.459058][T15264] Êü: entered promiscuous mode [ 268.551660][T15231] chnl_net:caif_netlink_parms(): no params data found [ 268.633286][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2812'. [ 268.654029][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2812'. [ 268.666827][T15268] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2811'. [ 268.913774][T15282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.923902][T15231] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.931417][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.934965][T15290] x_tables: duplicate underflow at hook 1 [ 268.961695][T15231] bridge_slave_0: entered allmulticast mode [ 268.975740][T15231] bridge_slave_0: entered promiscuous mode [ 268.995911][T15231] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.003134][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.024213][T15231] bridge_slave_1: entered allmulticast mode [ 269.040873][T15231] bridge_slave_1: entered promiscuous mode [ 269.044591][T15297] x_tables: duplicate underflow at hook 1 [ 269.159085][T15231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.181934][T15303] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2820'. [ 269.190665][T15231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.335423][T15231] team0: Port device team_slave_0 added [ 269.361252][T15231] team0: Port device team_slave_1 added [ 269.418309][T15231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.443578][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.503507][T15231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.517571][T15231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.525316][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.552230][T15231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.618261][T15323] netlink: 'syz.2.2826': attribute type 7 has an invalid length. [ 269.627995][T15323] netlink: 'syz.2.2826': attribute type 8 has an invalid length. [ 269.662809][T15231] hsr_slave_0: entered promiscuous mode [ 269.682166][T15231] hsr_slave_1: entered promiscuous mode [ 269.710074][T15231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.735945][T15231] Cannot create hsr debugfs directory [ 269.752310][T15324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.813420][T15331] ɶƣ0GC¦: entered promiscuous mode [ 269.884110][ T5851] Bluetooth: hci4: command tx timeout [ 269.913166][T15334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2831'. [ 269.939145][T15336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2832'. [ 270.109198][T15231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.277328][T15231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.427611][T15231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.609824][T15231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.685753][ T29] audit: type=1107 audit(1730575681.564:5): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 270.939492][T15231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.069108][T15388] netlink: 'syz.4.2847': attribute type 11 has an invalid length. [ 271.074247][T15390] netlink: 'syz.6.2849': attribute type 4 has an invalid length. [ 271.121059][T15231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.190808][T15231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.242515][T15231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.395834][T15412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.419210][T15412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.431215][T15412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.443577][T15412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.473950][T15412] batadv0 (unregistering): left allmulticast mode [ 271.495038][T15412] team0: Port device batadv0 removed [ 271.509072][T15418] pimreg: entered allmulticast mode [ 271.599533][T15231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.629461][T15231] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.656775][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.663973][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.699571][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.706748][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.964654][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 271.972389][ T5851] Bluetooth: hci4: command tx timeout [ 272.071277][T15231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.110956][T15231] veth0_vlan: entered promiscuous mode [ 272.142446][T15231] veth1_vlan: entered promiscuous mode [ 272.231623][T15416] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 272.253222][T15231] veth0_macvtap: entered promiscuous mode [ 272.295197][T15231] veth1_macvtap: entered promiscuous mode [ 272.357315][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.392925][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.413596][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.434873][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.456295][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.490547][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.519254][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.550802][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.569414][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.583706][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.601932][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.633424][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.653397][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.673474][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.685185][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.696154][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.706820][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.717950][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.729549][T15231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.739901][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.750488][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.760422][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.771342][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.781325][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.791870][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.802584][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.813754][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.823749][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.834330][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.844443][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.854975][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.864922][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.875499][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.885511][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.896007][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.907162][T15231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.918383][T15231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.930069][T15231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.977251][T15231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.986786][T15231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.004212][T15231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.033480][T15231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.256335][T15458] syzkaller0: entered promiscuous mode [ 273.270299][T15458] syzkaller0: entered allmulticast mode [ 275.570885][T15481] __nla_validate_parse: 5 callbacks suppressed [ 275.570898][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2871'. [ 275.574052][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2871'. [ 275.614512][T10485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.632577][T10485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.725199][T10485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.752509][T10485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.843911][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2876'. [ 275.934178][T15489] netlink: 'syz.2.2875': attribute type 11 has an invalid length. [ 275.942045][T15489] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2875'. [ 276.204978][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2881'. [ 276.240148][T15513] pimreg: entered allmulticast mode [ 276.277144][T15517] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2884'. [ 276.279841][T15513] pimreg: left allmulticast mode [ 276.637082][T15526] netlink: 'syz.6.2889': attribute type 3 has an invalid length. [ 276.645124][T15526] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2889'. [ 277.953166][T15562] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 277.974811][T15562] xt_HMARK: spi-set and port-set can't be combined [ 278.078594][T15569] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2902'. [ 278.103627][T15569] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 278.215648][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 278.272604][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.284307][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.293931][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.302207][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.312524][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.321123][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.354966][T15581] netlink: 'syz.6.2904': attribute type 3 has an invalid length. [ 278.373194][T15581] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2904'. [ 278.399308][T15579] lo speed is unknown, defaulting to 1000 [ 278.606798][T15579] chnl_net:caif_netlink_parms(): no params data found [ 278.631349][T15593] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 278.702528][T15579] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.713850][T15579] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.724558][T15579] bridge_slave_0: entered allmulticast mode [ 278.732005][T15579] bridge_slave_0: entered promiscuous mode [ 278.756352][T15579] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.783668][T15579] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.806247][T15579] bridge_slave_1: entered allmulticast mode [ 278.816484][T15579] bridge_slave_1: entered promiscuous mode [ 278.840868][T15607] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 278.893637][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.920357][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.994487][T15579] team0: Port device team_slave_0 added [ 279.013140][T15579] team0: Port device team_slave_1 added [ 279.071874][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.079848][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.117797][ T30] INFO: task syz.0.1111:9569 blocked for more than 143 seconds. [ 279.125943][ T30] Not tainted 6.12.0-rc5-syzkaller-00179-gb2183187c5fd #0 [ 279.137694][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.143948][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.156719][ T30] task:syz.0.1111 state:D stack:22000 pid:9569 tgid:9568 ppid:5845 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.181723][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.203386][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.203740][ T30] Call Trace: [ 279.254527][ T30] [ 279.257520][ T30] __schedule+0x18af/0x4bd0 [ 279.262239][ T30] ? __pfx___schedule+0x10/0x10 [ 279.272632][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.282498][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.289006][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.316177][ T30] ? schedule+0x90/0x320 [ 279.320489][ T30] schedule+0x14b/0x320 [ 279.383691][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.389225][ T30] __mutex_lock+0x6a7/0xd70 [ 279.404152][ T30] ? __mutex_lock+0x52a/0xd70 [ 279.408916][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7b0 [ 279.416607][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.421694][ T30] ? genlmsg_put+0x145/0x2e0 [ 279.426615][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7b0 [ 279.432215][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 279.438803][ T30] ? __asan_memcpy+0x40/0x70 [ 279.468055][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 279.472794][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 279.486886][ T30] genl_rcv_msg+0xb14/0xec0 [ 279.491446][ T30] ? mark_lock+0x9a/0x360 [ 279.496865][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.501954][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 279.507351][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 279.513686][ T30] ? __pfx___might_resched+0x10/0x10 [ 279.519025][ T30] netlink_rcv_skb+0x1e3/0x430 [ 279.524225][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.529296][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.534879][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 279.540386][ T30] genl_rcv+0x28/0x40 [ 279.544520][ T30] netlink_unicast+0x7f6/0x990 [ 279.549329][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 279.555187][ T30] ? __virt_addr_valid+0x183/0x530 [ 279.561959][ T30] ? __check_object_size+0x48e/0x900 [ 279.567613][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 279.572410][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.577931][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 279.582920][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.588609][ T30] __sock_sendmsg+0x221/0x270 [ 279.593371][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 279.598175][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.603812][ T30] __sys_sendmsg+0x292/0x380 [ 279.608445][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.614124][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.620499][ T30] ? do_syscall_64+0x100/0x230 [ 279.625541][ T30] ? do_syscall_64+0xb6/0x230 [ 279.630248][ T30] do_syscall_64+0xf3/0x230 [ 279.634882][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.639598][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.646034][ T30] RIP: 0033:0x7fe27597e719 [ 279.650498][ T30] RSP: 002b:00007fe2766cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.659017][ T30] RAX: ffffffffffffffda RBX: 00007fe275b35f80 RCX: 00007fe27597e719 [ 279.669125][ T30] RDX: 0000000020004000 RSI: 0000000020000100 RDI: 0000000000000005 [ 279.677513][ T30] RBP: 00007fe2759f132e R08: 0000000000000000 R09: 0000000000000000 [ 279.687016][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.695120][ T30] R13: 0000000000000000 R14: 00007fe275b35f80 R15: 00007ffc5c77bd08 [ 279.703123][ T30] [ 279.706779][ T30] [ 279.706779][ T30] Showing all locks held in the system: [ 279.714736][ T30] 1 lock held by khungtaskd/30: [ 279.719621][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 279.731501][ T30] 2 locks held by kworker/u8:3/51: [ 279.743008][ T30] 2 locks held by getty/5592: [ 279.748073][ T30] #0: ffff8880313e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.758075][ T30] #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 279.782997][ T30] 2 locks held by kworker/0:4/5892: [ 279.792808][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 279.840745][ T30] #1: ffffc90004167d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 279.858728][ T30] 2 locks held by syz.3.349/7045: [ 279.867880][ T30] #0: ffffffff8fd39210 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 279.882324][ T30] #1: ffffffff8ec19288 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 279.892894][ T30] 2 locks held by syz.0.1111/9569: [ 279.898503][ T30] #0: ffffffff8fd39210 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 279.906961][ T30] #1: ffffffff8ec19288 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7b0 [ 279.917366][ T30] 4 locks held by kworker/u8:18/10494: [ 279.922845][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 279.934297][ T30] #1: ffffc9001766fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 279.945178][ T30] #2: ffffffff8fcc6910 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 279.954915][ T30] #3: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 279.965414][ T30] 3 locks held by kworker/u8:23/11878: [ 279.972348][ T30] #0: ffff88801bfb9148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 279.984043][ T30] #1: ffffc90017817d00 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 279.997742][ T30] #2: ffff88805f3246b0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x264/0x3d0 [ 280.009375][ T30] 2 locks held by syz.4.2865/15457: [ 280.014856][ T30] #0: ffffffff8fd39210 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 280.023096][ T30] #1: ffffffff8ec19288 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790 [ 280.033682][ T30] 1 lock held by syz.2.2907/15593: [ 280.038822][ T30] #0: ffffffff8fcd3448 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 280.048883][ T30] 1 lock held by syz.6.2914/15623: [ 280.054077][ T30] #0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 280.083382][ T30] [ 280.085756][ T30] ============================================= [ 280.085756][ T30] [ 280.123599][ T30] NMI backtrace for cpu 0 [ 280.128007][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00179-gb2183187c5fd #0 [ 280.138535][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.148709][ T30] Call Trace: [ 280.152008][ T30] [ 280.154961][ T30] dump_stack_lvl+0x241/0x360 [ 280.159669][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.164894][ T30] ? __pfx__printk+0x10/0x10 [ 280.169527][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 280.174516][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 280.180000][ T30] ? _printk+0xd5/0x120 [ 280.184184][ T30] ? __pfx__printk+0x10/0x10 [ 280.188802][ T30] ? __wake_up_klogd+0xcc/0x110 [ 280.193728][ T30] ? __pfx__printk+0x10/0x10 [ 280.198341][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 280.203396][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.209413][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 280.215429][ T30] watchdog+0xff4/0x1040 [ 280.219719][ T30] ? watchdog+0x1ea/0x1040 [ 280.224178][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.228886][ T30] kthread+0x2f0/0x390 [ 280.232973][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.237663][ T30] ? __pfx_kthread+0x10/0x10 [ 280.242258][ T30] ret_from_fork+0x4b/0x80 [ 280.246680][ T30] ? __pfx_kthread+0x10/0x10 [ 280.251272][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.256048][ T30] [ 280.261005][ T30] Sending NMI from CPU 0 to CPUs 1: [ 280.267214][ C1] NMI backtrace for cpu 1 [ 280.267229][ C1] CPU: 1 UID: 0 PID: 79 Comm: kworker/1:1 Not tainted 6.12.0-rc5-syzkaller-00179-gb2183187c5fd #0 [ 280.267249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.267261][ C1] Workqueue: events drain_vmap_area_work [ 280.267285][ C1] RIP: 0010:debug_check_no_obj_freed+0x2be/0x580 [ 280.267305][ C1] Code: ff c7 48 8b 44 24 38 48 85 c0 0f 84 a4 02 00 00 49 89 c4 49 89 c5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 <74> 08 4c 89 e7 e8 38 ed 3a fd 49 8b 04 24 48 89 44 24 38 49 8d 5c [ 280.267325][ C1] RSP: 0018:ffffc900022bf660 EFLAGS: 00000046 [ 280.267339][ C1] RAX: dffffc0000000000 RBX: 1ffffffff34d3ba3 RCX: 0000000000000001 [ 280.267357][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900022bf540 [ 280.267369][ C1] RBP: ffffc900022bf7b0 R08: 0000000000000003 R09: fffff52000457ea8 [ 280.267381][ C1] R10: dffffc0000000000 R11: fffff52000457ea8 R12: ffff888077b5fce8 [ 280.267394][ C1] R13: 1ffff1100ef6bf9d R14: 0000000000000000 R15: 0000000000000000 [ 280.267405][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 280.267419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.267431][ C1] CR2: 00007fc70357c440 CR3: 000000000e734000 CR4: 00000000003526f0 [ 280.267446][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.267457][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.267468][ C1] Call Trace: [ 280.267474][ C1] [ 280.267482][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 280.267506][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 280.267531][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 280.267553][ C1] ? nmi_handle+0x2a/0x5a0 [ 280.267579][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 280.267599][ C1] ? nmi_handle+0x14f/0x5a0 [ 280.267616][ C1] ? nmi_handle+0x2a/0x5a0 [ 280.267633][ C1] ? debug_check_no_obj_freed+0x2be/0x580 [ 280.267649][ C1] ? default_do_nmi+0x63/0x160 [ 280.267672][ C1] ? exc_nmi+0x123/0x1f0 [ 280.267693][ C1] ? end_repeat_nmi+0xf/0x53 [ 280.267718][ C1] ? debug_check_no_obj_freed+0x2be/0x580 [ 280.267735][ C1] ? debug_check_no_obj_freed+0x2be/0x580 [ 280.267753][ C1] ? debug_check_no_obj_freed+0x2be/0x580 [ 280.267770][ C1] [ 280.267775][ C1] [ 280.267788][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 280.267806][ C1] ? page_ext_get+0x20/0x2a0 [ 280.267825][ C1] ? page_ext_get+0x1d6/0x2a0 [ 280.267847][ C1] free_unref_page+0x41b/0xf20 [ 280.267876][ C1] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 280.267893][ C1] __apply_to_page_range+0x806/0xde0 [ 280.267919][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 280.267939][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 280.267964][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.267984][ C1] ? on_each_cpu_cond_mask+0x62/0x80 [ 280.268002][ C1] kasan_release_vmalloc+0x9a/0xb0 [ 280.268018][ C1] purge_vmap_node+0x417/0x810 [ 280.268043][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 280.268061][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.268081][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 280.268099][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 280.268119][ C1] __purge_vmap_area_lazy+0x708/0xae0 [ 280.268141][ C1] ? process_scheduled_works+0x976/0x1850 [ 280.268163][ C1] drain_vmap_area_work+0x27/0x40 [ 280.268180][ C1] process_scheduled_works+0xa63/0x1850 [ 280.268215][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.268242][ C1] ? assign_work+0x364/0x3d0 [ 280.268265][ C1] worker_thread+0x870/0xd30 [ 280.268294][ C1] ? __kthread_parkme+0x169/0x1d0 [ 280.268318][ C1] ? __pfx_worker_thread+0x10/0x10 [ 280.268340][ C1] kthread+0x2f0/0x390 [ 280.268361][ C1] ? __pfx_worker_thread+0x10/0x10 [ 280.268382][ C1] ? __pfx_kthread+0x10/0x10 [ 280.268397][ C1] ret_from_fork+0x4b/0x80 [ 280.268419][ C1] ? __pfx_kthread+0x10/0x10 [ 280.268435][ C1] ret_from_fork_asm+0x1a/0x30 [ 280.268464][ C1] [ 280.704779][ T5858] Bluetooth: hci4: command tx timeout [ 280.741132][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 280.748032][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00179-gb2183187c5fd #0 [ 280.758552][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.768625][ T30] Call Trace: [ 280.771903][ T30] [ 280.774871][ T30] dump_stack_lvl+0x241/0x360 [ 280.779549][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.784740][ T30] ? __pfx__printk+0x10/0x10 [ 280.789346][ T30] ? vscnprintf+0x5d/0x90 [ 280.793689][ T30] panic+0x349/0x880 [ 280.797594][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 280.803747][ T30] ? __pfx_panic+0x10/0x10 [ 280.808155][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 280.813521][ T30] ? __irq_work_queue_local+0x137/0x410 [ 280.819063][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 280.824430][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 280.830667][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 280.836823][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 280.842977][ T30] watchdog+0x1033/0x1040 [ 280.847304][ T30] ? watchdog+0x1ea/0x1040 [ 280.851726][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.856398][ T30] kthread+0x2f0/0x390 [ 280.860461][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.865135][ T30] ? __pfx_kthread+0x10/0x10 [ 280.869716][ T30] ret_from_fork+0x4b/0x80 [ 280.874151][ T30] ? __pfx_kthread+0x10/0x10 [ 280.878749][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.883537][ T30] [ 280.886701][ T30] Kernel Offset: disabled [ 280.891016][ T30] Rebooting in 86400 seconds..