last executing test programs: 1m32.076814341s ago: executing program 0 (id=1194): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x20000001, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x24, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) getsockopt(r0, 0x1, 0x1000, &(0x7f0000000200)=""/119, &(0x7f0000000280)=0x77) 1m31.905261793s ago: executing program 0 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m31.657959925s ago: executing program 0 (id=1200): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x80805, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104f0ffffff000500000000fdff", @ANYRES32=r2, @ANYBLOB="00000000da44000024001a8020000a80140007"], 0x58}}, 0x0) r3 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES64=r3], 0x8) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x82, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m31.306202926s ago: executing program 0 (id=1203): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close(r3) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000011"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m31.078069572s ago: executing program 0 (id=1206): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendto$inet(r9, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) close(r9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r12, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="2b000000000000000000000000000085000000bc00000018110000", @ANYRESHEX=0x0, @ANYRES64=r10], &(0x7f0000000180)='GPL\x00', 0x337c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="2b0d6267e43d80ba21cb3b661a9aeb5a6004b689a91b6338a65f4b26c4940f166db7cc89bdf160a802ad9b81445dcb031be759aee60daa996eb5971d73998cea930765300f32207f575afb558136c930ad68ac4789da4ac18be7113cbcc07d3aac0643bfc0dddee048b80c10b3", 0x6d}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="3975d17bf4e37185f788b636c5cca33ddcf83e79cd7d40a8638b81d47f0f4f12a56f92ce650351fd5c65688ce862eda9a66c8f880cb0752cb92321acc9b781b8163fc9d9b52376c6ee70d048f32264a912adfd5c921dbf1bc521737c9a200ed93b9a9211d61d0a4275e7d95b40836b8431b103e7db5bfa8b8613f5b9315fd1854a60a19bcbe9e78eee06c606c5e71f09622e3d8a087b34e7768e99b1fcfd593da3c3a4a7a7fd21c92c85de9d51d6c1f737ed02581ee71145c7843e98ca8325b672264accf7ef31c8f7092102caefc27ca329f6dfbfbb833fba9b4793a10457994d37d766dd75", 0xe6}, {&(0x7f00000003c0)="1009330ba9d7f92a08ada509988638b90c903969dcab00346a8fbd2f90aea77f690c2eabc7ad5d940a53591077bb07d7590ab69eb8f0e1bccce514c66102990dc70bce3ace96c2f19d9c1cdb1d55632f2da857fc0d20cc714f9093b0edf11c13b679ff55e90f867e343d0c4238408c6dc8383a790bc49b8ddba9c49fe16ec016fcc02c005771e009780a461e16c1beadbbc030e81df592383570f9b90a06ca3dcd86f8df2cb26b7fc4ebc3aca1c73e40936a519534f6dcf4ccb60ef256a93f657fe5d8965501843046c5f3a0b283342de402b0fa13d6ed25421f98ab4d70dc4d8a9a777a08a8f3d4790db48a58a55b9194774d0f2d57", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000005c0)="9d72e79361579a3c352f36bad6f7aeec92dfe2972c7357f3a5f19531c55a58187be7f2c8495da3774daccf6a82ede3ce9764eae14fd41eda2f4578fdb857abfbeca48fa52b620e1e8ff88d9be786944965374a87d985342bbd76e44cb0936d6be6fcc193cf63be0d60ac77b85e4d75887d5b20e715a585991d6d3eb190a8f3ff6e684e4f4ecc47010feac364534fa9c0a8abbb95921fda9db6f7fe056d7ae01cd74478979957660b0ed1115bb3ecb9228e9fd3424bcc6d44b6b2a238eb8f5a6e6a9a4b4976685ed039bfe763fee755e0d927afd57ee74b5568", 0xd9}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="11000000000000000000000001000000d80000000000000014000000000000000000000001000000040000000000000011000000000000000000000001000000800000000000000011000000000000000000000001000000070000000000000038000000000000000000000007000000440ca681600000010000000944148d81ac14142000000271ac1e01010000001b83078eac1414aa014d342a7cd716f1ef925c9b0f9ec2de257f5f6ca57109e0ca70bc8f547856290c8067c44286e9ea"], 0x98}}, {{&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000780)="4487d6242ccf2dcc834b7799fd2111339481c04099f6daa9e5934161420ffdc72d9827b66c2451a65ba9fe4b8f94a566c71c8a8f5ba26c7d1207a75319ddf9", 0x3f}, {&(0x7f00000007c0)="e8f9351cd7f9e7b570ba0cfbebddf47503d2229b0f3c899c28b12b31d18e0abca8e88f7b0d2f8232d8ba6ebc6d15153a800b62ccaf9b350908e4b3ae1945949660c3f97de55271b1d92b373aa9f7a8b36dbf1f3c61404c4280d4d5fc9a53e6c5f08db7fd85c9fe27c6f797fc8dcc123bba5e743fc6eb", 0x76}], 0x2, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="92d0265da3bef83827ec8e4103000000000000", 0x13}, {&(0x7f0000000940)="1fd69c7a33f5fd2f7cb0b623e470ca8dc38b9fa8a73b256078d4dee54d82a1763f6db82f1f271e029784c2d2be187c3df455398d1b8649099d3c", 0x3a}, {&(0x7f0000000980)="b4fdc34e26de942b187a778a8aff81ecd4a6b7a23b90920b57c2b5f169c1fb76a0a28fd9ae265f9517fdc27e6a48946fcc02214e7a67d1d9b609d335e0a870e8005487fea0b94fea2ba3be8d14142b9cc0ec696262bc", 0x56}], 0x3, &(0x7f0000001e80)=ANY=[@ANYBLOB="1c0000000000001c0000000000000000516d149f8a8692d7130f174a74563cad10203280830f74bbdb58e778007cdb96001ec98daf573bf034115ecc0821a6b66f9feb2140214ba587d8780b8873deb9409ceb6dfde6bfbee873158ec177ca161ca1b44e840bad941c42de5b7febc6387a5232ff025aca3119df1eac4f2459a6f9dbdf05a78f68a5ad0ce117c0024e1abb09daa1ff445de0ad9a84a2df67cbcb79c8b4a85887dd9cb50b22a17b176d1959c6fa204ff2759b38a73b0223e3f518160c86fe1a616a73ca55d7fe", @ANYRES32=r1, @ANYBLOB="00000000000000010000000000000110000000000000000008000000", @ANYRES32=r11, @ANYBLOB="64010101ac1414aa000000001c000000000000000000000008000000", @ANYRES32=r14, @ANYBLOB="ac141413ac141431000000001c0000000000000000000000070000004409b2ab70fdbc979a0000000000000014000000000000000000000002000000ff01000000000000"], 0x98}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0x44, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xf, 0x17, [@multicast1, @remote, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x5, [{@loopback, 0x6dd}]}, @ssrr={0x89, 0x17, 0xf, [@remote, @remote, @loopback, @broadcast, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x90}}], 0x6, 0x20000080) 1m30.570160937s ago: executing program 0 (id=1213): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x100633, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15e}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 1m30.197962026s ago: executing program 32 (id=1213): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x100633, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15e}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 1m29.596970194s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x94f333c1ee151fd7, 0x0, 0x2, 0xb, 0x3, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000001c0)=""/181, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 1m28.593372181s ago: executing program 4 (id=240): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="88abe7d9c8fe99388ea49cbabba4d002552ba30b8ab3e6c50d37e71515d669e28a98821fe8a5041e9eb8700c64ecfac9ff33") (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000014001280090001007665746800000000040002800800200009000000ed4939bee36c5f1af224cd26799e4ce49adee196cdc19e2ae2582979bf5529b945bdcc09ce4db066"], 0x3c}}, 0x0) 1m17.957713688s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x94f333c1ee151fd7, 0x0, 0x2, 0xb, 0x3, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000001c0)=""/181, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 1m16.54121072s ago: executing program 4 (id=240): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="88abe7d9c8fe99388ea49cbabba4d002552ba30b8ab3e6c50d37e71515d669e28a98821fe8a5041e9eb8700c64ecfac9ff33") (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000014001280090001007665746800000000040002800800200009000000ed4939bee36c5f1af224cd26799e4ce49adee196cdc19e2ae2582979bf5529b945bdcc09ce4db066"], 0x3c}}, 0x0) 1m12.819549762s ago: executing program 3 (id=1317): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m12.638164789s ago: executing program 3 (id=1319): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) poll(&(0x7f0000001300)=[{r2, 0x4502}, {r2}, {r0, 0x1024}, {r1, 0x4010}, {r1, 0x90}, {r2, 0x2202}, {r2, 0x9}, {r3, 0x4004}, {r2, 0x89}], 0x9, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xa1, 0x0, &(0x7f0000001500)="33ea44a89c795ae488d4dce3517dcf295695d194612c6e896920f5438be00415562c421930cf296936705058fc579bb8d84907d07af85f2c7937eadc2c921c3d8f8bb3a7755284b2a631c75dea1c39dd0d89f2ec5945e2071dd35465c22519c899c14d2af9bd56aba5a01ec847f192ce39199ae20eeace2f4421f81cfb56b8da4bd071b270a87d1d9234e46795d34f22aed30cbc3955d42cceeb6595921f1d6358", 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) r12 = openat$cgroup_int(r7, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000080)=0x5, 0x12) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_hci(r13, 0x0, 0x3, &(0x7f0000001380)=""/165, &(0x7f0000001440)=0xa5) tee(r7, r1, 0x5c, 0x6) openat$cgroup_int(r1, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0) pread64(r13, &(0x7f0000000a40)=""/179, 0xb3, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000380)="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", 0xf50}], 0x2) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000002c0)=""/6, &(0x7f0000000300)=0x6) close(r1) close(r10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000009fd31c0b000000000000180100002020702500000000002020207b1af8ff00000541bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m12.4438205s ago: executing program 3 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000040d813e8990a83f553780054a6ae745d000000000000009fdf77a6cf8dea2063e7a6b993257ef7d3292588ab10"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x7ffffffe, @bcast, @bpq0, 0xfffb, 'syz0\x00', @bcast, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) 1m12.392000233s ago: executing program 5 (id=1323): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0) 1m11.029892387s ago: executing program 5 (id=1326): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x1000, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x80) write$cgroup_int(r3, &(0x7f0000000340)=0xfffffffffffffff8, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9c37ef89f4737a3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440}, 0x20000010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-$@&\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xe}, {0xd, 0x5}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20004090) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x15c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x11c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9442c49ddc580adcc669292c094a68ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x62}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd10}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001811}, 0x20044800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = accept4(r10, 0x0, &(0x7f0000001040), 0x80800) recvmsg$can_j1939(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)=""/149, 0x95}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f00000013c0)=""/135, 0x87}], 0x5, &(0x7f0000001500)=""/4096, 0x1000}, 0x10062) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000002540)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x250, 0xd, 0xa, 0x415480d323e604f2, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14c, 0x3, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3579}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "0b470752c0ee9a174837b55d47dd1c2d9d3f205668bd41274bf53858ecdfd46ef150102ee669875d0f86171751b9c091ac526539f660aa52cabe16c9972141529a7e00df6a12fcdf64e19f722ba764f5c9218abd544c6ba82806451b2221de38c26e5471c4d2961fa4535480d5e9d146354b1b996708f6ac4d2f24946fa485b365ad37e3d2705f88c0471f481ff7bd3e"}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x250}}, 0x4044000) 1m0.74106875s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x94f333c1ee151fd7, 0x0, 0x2, 0xb, 0x3, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000001c0)=""/181, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 58.458254147s ago: executing program 4 (id=240): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="88abe7d9c8fe99388ea49cbabba4d002552ba30b8ab3e6c50d37e71515d669e28a98821fe8a5041e9eb8700c64ecfac9ff33") (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000014001280090001007665746800000000040002800800200009000000ed4939bee36c5f1af224cd26799e4ce49adee196cdc19e2ae2582979bf5529b945bdcc09ce4db066"], 0x3c}}, 0x0) 57.917749731s ago: executing program 3 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000040d813e8990a83f553780054a6ae745d000000000000009fdf77a6cf8dea2063e7a6b993257ef7d3292588ab10"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x7ffffffe, @bcast, @bpq0, 0xfffb, 'syz0\x00', @bcast, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) 53.943219082s ago: executing program 5 (id=1326): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x1000, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x80) write$cgroup_int(r3, &(0x7f0000000340)=0xfffffffffffffff8, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9c37ef89f4737a3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440}, 0x20000010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-$@&\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xe}, {0xd, 0x5}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20004090) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x15c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x11c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9442c49ddc580adcc669292c094a68ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x62}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd10}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001811}, 0x20044800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = accept4(r10, 0x0, &(0x7f0000001040), 0x80800) recvmsg$can_j1939(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)=""/149, 0x95}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f00000013c0)=""/135, 0x87}], 0x5, &(0x7f0000001500)=""/4096, 0x1000}, 0x10062) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000002540)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x250, 0xd, 0xa, 0x415480d323e604f2, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14c, 0x3, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3579}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "0b470752c0ee9a174837b55d47dd1c2d9d3f205668bd41274bf53858ecdfd46ef150102ee669875d0f86171751b9c091ac526539f660aa52cabe16c9972141529a7e00df6a12fcdf64e19f722ba764f5c9218abd544c6ba82806451b2221de38c26e5471c4d2961fa4535480d5e9d146354b1b996708f6ac4d2f24946fa485b365ad37e3d2705f88c0471f481ff7bd3e"}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x250}}, 0x4044000) 43.532808197s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x94f333c1ee151fd7, 0x0, 0x2, 0xb, 0x3, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000001c0)=""/181, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 41.868878103s ago: executing program 3 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000040d813e8990a83f553780054a6ae745d000000000000009fdf77a6cf8dea2063e7a6b993257ef7d3292588ab10"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x7ffffffe, @bcast, @bpq0, 0xfffb, 'syz0\x00', @bcast, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) 41.868766673s ago: executing program 4 (id=240): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="88abe7d9c8fe99388ea49cbabba4d002552ba30b8ab3e6c50d37e71515d669e28a98821fe8a5041e9eb8700c64ecfac9ff33") (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000014001280090001007665746800000000040002800800200009000000ed4939bee36c5f1af224cd26799e4ce49adee196cdc19e2ae2582979bf5529b945bdcc09ce4db066"], 0x3c}}, 0x0) 39.438502677s ago: executing program 5 (id=1326): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x1000, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x80) write$cgroup_int(r3, &(0x7f0000000340)=0xfffffffffffffff8, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9c37ef89f4737a3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440}, 0x20000010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-$@&\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xe}, {0xd, 0x5}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20004090) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x15c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x11c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9442c49ddc580adcc669292c094a68ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x62}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd10}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001811}, 0x20044800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = accept4(r10, 0x0, &(0x7f0000001040), 0x80800) recvmsg$can_j1939(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)=""/149, 0x95}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f00000013c0)=""/135, 0x87}], 0x5, &(0x7f0000001500)=""/4096, 0x1000}, 0x10062) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000002540)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x250, 0xd, 0xa, 0x415480d323e604f2, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14c, 0x3, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3579}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "0b470752c0ee9a174837b55d47dd1c2d9d3f205668bd41274bf53858ecdfd46ef150102ee669875d0f86171751b9c091ac526539f660aa52cabe16c9972141529a7e00df6a12fcdf64e19f722ba764f5c9218abd544c6ba82806451b2221de38c26e5471c4d2961fa4535480d5e9d146354b1b996708f6ac4d2f24946fa485b365ad37e3d2705f88c0471f481ff7bd3e"}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x250}}, 0x4044000) 28.033164611s ago: executing program 4 (id=240): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="88abe7d9c8fe99388ea49cbabba4d002552ba30b8ab3e6c50d37e71515d669e28a98821fe8a5041e9eb8700c64ecfac9ff33") (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000014001280090001007665746800000000040002800800200009000000ed4939bee36c5f1af224cd26799e4ce49adee196cdc19e2ae2582979bf5529b945bdcc09ce4db066"], 0x3c}}, 0x0) 27.000315663s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x94f333c1ee151fd7, 0x0, 0x2, 0xb, 0x3, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000001c0)=""/181, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 25.137741945s ago: executing program 3 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000040d813e8990a83f553780054a6ae745d000000000000009fdf77a6cf8dea2063e7a6b993257ef7d3292588ab10"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x7ffffffe, @bcast, @bpq0, 0xfffb, 'syz0\x00', @bcast, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) 23.168352385s ago: executing program 5 (id=1326): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x1000, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x80) write$cgroup_int(r3, &(0x7f0000000340)=0xfffffffffffffff8, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9c37ef89f4737a3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440}, 0x20000010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-$@&\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xe}, {0xd, 0x5}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20004090) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x15c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x11c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9442c49ddc580adcc669292c094a68ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x62}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd10}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001811}, 0x20044800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = accept4(r10, 0x0, &(0x7f0000001040), 0x80800) recvmsg$can_j1939(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)=""/149, 0x95}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f00000013c0)=""/135, 0x87}], 0x5, &(0x7f0000001500)=""/4096, 0x1000}, 0x10062) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000002540)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x250, 0xd, 0xa, 0x415480d323e604f2, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14c, 0x3, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3579}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "0b470752c0ee9a174837b55d47dd1c2d9d3f205668bd41274bf53858ecdfd46ef150102ee669875d0f86171751b9c091ac526539f660aa52cabe16c9972141529a7e00df6a12fcdf64e19f722ba764f5c9218abd544c6ba82806451b2221de38c26e5471c4d2961fa4535480d5e9d146354b1b996708f6ac4d2f24946fa485b365ad37e3d2705f88c0471f481ff7bd3e"}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x250}}, 0x4044000) 11.704978603s ago: executing program 4 (id=240): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="88abe7d9c8fe99388ea49cbabba4d002552ba30b8ab3e6c50d37e71515d669e28a98821fe8a5041e9eb8700c64ecfac9ff33") (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000014001280090001007665746800000000040002800800200009000000ed4939bee36c5f1af224cd26799e4ce49adee196cdc19e2ae2582979bf5529b945bdcc09ce4db066"], 0x3c}}, 0x0) 10.675709475s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x94f333c1ee151fd7, 0x0, 0x2, 0xb, 0x3, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000001c0)=""/181, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xc, 0x9}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 7.103132927s ago: executing program 5 (id=1326): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x1000, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x80) write$cgroup_int(r3, &(0x7f0000000340)=0xfffffffffffffff8, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9c37ef89f4737a3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440}, 0x20000010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-$@&\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtclass={0x24, 0x28, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xe}, {0xd, 0x5}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20004090) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x15c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x11c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9442c49ddc580adcc669292c094a68ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x62}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd10}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001811}, 0x20044800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = accept4(r10, 0x0, &(0x7f0000001040), 0x80800) recvmsg$can_j1939(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)=""/149, 0x95}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f00000013c0)=""/135, 0x87}], 0x5, &(0x7f0000001500)=""/4096, 0x1000}, 0x10062) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000002540)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x250, 0xd, 0xa, 0x415480d323e604f2, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14c, 0x3, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3579}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x94, 0x1, "0b470752c0ee9a174837b55d47dd1c2d9d3f205668bd41274bf53858ecdfd46ef150102ee669875d0f86171751b9c091ac526539f660aa52cabe16c9972141529a7e00df6a12fcdf64e19f722ba764f5c9218abd544c6ba82806451b2221de38c26e5471c4d2961fa4535480d5e9d146354b1b996708f6ac4d2f24946fa485b365ad37e3d2705f88c0471f481ff7bd3e"}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x250}}, 0x4044000) 3.286157407s ago: executing program 1 (id=1514): socket(0x40000000015, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000240)) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r3 = accept$ax25(r2, &(0x7f0000000000)={{0x3, @bcast}, [@default, @rose, @null, @bcast, @remote, @default, @default, @default]}, &(0x7f0000000080)=0x48) recvfrom$ax25(r3, &(0x7f00000000c0)=""/14, 0xe, 0x40012043, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default, @null]}, 0x48) accept4(r2, &(0x7f0000000180)=@qipcrtr, &(0x7f0000000200)=0x80, 0x0) 1.521534479s ago: executing program 1 (id=1515): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002e6f560", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25010000000000000007410000001400180000000469623a636169663000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="de", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000420000000a0001006e657464657673696d0000000f0002006e657464657673696d300000df2372411ef1de8e0f81a4b61148610200000000000000a96b8afba2997e044958fcef832bd611234c7433f895693581e7cc8b30cad266e20a653e0dc8bab5905a89a547444f376456692628cb12cfcb45b7cd4fa3f6d357ec7df82bf52a1052e6c88f3372b188363b0592e229db3ef58acd5b3439606e413d34ce77db18be6806afd5e2d59101031850bd262e0e950a1ad467029efc7e1f77180d0645335cf9570a84871f069e01e0674928b4af6dc8f2bed90e"], 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={r5}) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f00000004c0), &(0x7f0000000700)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="3a9bffd4d74d607700cec4c336b93afb3bf6fc1c3ba8bc5a6b37ddbbd2215010622c89714533025a4a8df5fbdf4dfec4fa2b6441566ceeb0b7cd015b2ab65b545bc4fda6977d498eb4f93f1310fd12b238466fbf457db73cf22f4336de9b86464fdbb5321a651343abdbd8a92cccc99d18b6eb099045b2a197d973a617e97a965e78b13fd271a7717113136ab28d6bea84b2ccb8fe8732392892f14a2dd1557a2038bef1baae3d6401148367b379865f024f9085c928c329935bbc83d5d84707", 0xc0}, {&(0x7f0000000140)}, {&(0x7f0000000900)="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", 0x1000}], 0x3, &(0x7f0000000200)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x800}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="1c00000034000701fffffffffeffffff1d7c000008004b8004004980dc64e2ac2f807e6e7f4a23c79d6d15fa889b738e4bf24d784b46b3ce8a03055b01ae5772907f309ebcd48e3b1df29c92feaf01c3759879e057d128ade547d883f86411fe0e8c898c86dfbdc3d5c69d1071ac87c40f97520700e50c55a8b6c7671f90938574e49222aea2a6be441f514b561dfae5af4adc3cd0dc077d53c2a6b898a5bfed2f6d2f7c77787445f650ba7f68e37e0ed94d03730dc096"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 465.358782ms ago: executing program 1 (id=1516): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) 270.036674ms ago: executing program 1 (id=1517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x1000000000fe, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 188.016942ms ago: executing program 1 (id=1518): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x1c, 0x9, 0x1, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x1}}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033c, 0xc2}, {"b7ccbbf7260f48c2309ab4a164cfcdf15b7483affec87e768673eb3a5cd3a5f2c82f475c8fca0e1cadc5137173cd64a1"}}}}}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x14, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 0s ago: executing program 1 (id=1519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.068353][T10989] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1366'. [ 250.234846][T10991] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 250.250368][T10991] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1367'. [ 250.267591][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1367'. [ 250.277032][T10991] netlink: 872 bytes leftover after parsing attributes in process `syz.1.1367'. [ 250.294175][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.302668][T10991] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 250.310593][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.311318][T10991] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1367'. [ 250.325725][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.336846][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.351394][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.361000][T10833] veth0_vlan: entered promiscuous mode [ 250.391799][ T1144] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 250.439673][T10833] veth1_vlan: entered promiscuous mode [ 250.488058][ T62] bridge_slave_1: left allmulticast mode [ 250.501727][ T62] bridge_slave_1: left promiscuous mode [ 250.507542][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.534650][ T62] bridge_slave_0: left allmulticast mode [ 250.540340][ T62] bridge_slave_0: left promiscuous mode [ 250.562918][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.626890][T10999] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1368'. [ 251.250149][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.265759][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.276918][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.286689][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.295180][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.305369][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.313475][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.317067][ T62] bond0 (unregistering): Released all slaves [ 251.397282][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.406084][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.413868][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.422019][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.430671][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.509307][T10635] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 251.509327][T10635] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.525091][ T2962] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.536749][T10635] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.769837][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 251.859195][T10833] veth0_macvtap: entered promiscuous mode [ 251.874476][ T2962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.900398][ T62] hsr_slave_0: left promiscuous mode [ 251.910622][ T62] hsr_slave_1: left promiscuous mode [ 251.918639][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.921842][ T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.929078][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.945834][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.954017][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.978115][ T62] veth1_macvtap: left promiscuous mode [ 251.984484][ T62] veth0_macvtap: left promiscuous mode [ 251.990158][ T62] veth1_vlan: left promiscuous mode [ 251.995706][ T62] veth0_vlan: left promiscuous mode [ 252.208727][T11033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1374'. [ 252.425722][ T5836] Bluetooth: hci1: command tx timeout [ 252.446283][ T62] team0 (unregistering): Port device team_slave_1 removed [ 252.490865][ T62] team0 (unregistering): Port device team_slave_0 removed [ 252.502930][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.662821][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 252.857082][T10833] veth1_macvtap: entered promiscuous mode [ 252.891449][T11031] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1374'. [ 253.037643][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.048577][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.058908][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.069554][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.081322][T10833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.110053][T11043] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 253.162857][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.191790][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.205968][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.218586][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.234849][T10833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.288735][T10833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.302999][T10833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.313185][T10833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.322004][T10833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.355491][T11008] chnl_net:caif_netlink_parms(): no params data found [ 253.374149][T10994] chnl_net:caif_netlink_parms(): no params data found [ 253.381890][ T5836] Bluetooth: hci2: command tx timeout [ 253.463966][ T5836] Bluetooth: hci4: command tx timeout [ 253.566571][T11006] chnl_net:caif_netlink_parms(): no params data found [ 253.673544][T11066] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 253.770754][T11066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.793235][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 253.802743][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.809915][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.817282][T11008] bridge_slave_0: entered allmulticast mode [ 253.825534][T11008] bridge_slave_0: entered promiscuous mode [ 253.839851][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.848056][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.879067][T11061] ip6erspan0: entered promiscuous mode [ 253.888185][T11061] bond7: (slave ip6erspan0): making interface the new active one [ 253.898060][T11061] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 253.908189][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.918253][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.925670][T11008] bridge_slave_1: entered allmulticast mode [ 253.934252][T11008] bridge_slave_1: entered promiscuous mode [ 253.951532][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.960106][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.967972][T10994] bridge_slave_0: entered allmulticast mode [ 253.976613][T10994] bridge_slave_0: entered promiscuous mode [ 253.986179][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.993965][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.001154][T10994] bridge_slave_1: entered allmulticast mode [ 254.008792][T10994] bridge_slave_1: entered promiscuous mode [ 254.068155][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.159909][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.198917][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.241789][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.251846][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.275497][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.288534][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.317294][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.363016][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.431320][T11006] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.439743][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.447052][T11006] bridge_slave_0: entered allmulticast mode [ 254.455462][T11006] bridge_slave_0: entered promiscuous mode [ 254.488214][T11008] team0: Port device team_slave_0 added [ 254.502883][ T5836] Bluetooth: hci1: command tx timeout [ 254.548897][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.577773][T11006] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.587163][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.594456][T11006] bridge_slave_1: entered allmulticast mode [ 254.602188][T11006] bridge_slave_1: entered promiscuous mode [ 254.632208][T11008] team0: Port device team_slave_1 added [ 254.645382][T10994] team0: Port device team_slave_0 added [ 254.666770][T10994] team0: Port device team_slave_1 added [ 254.708880][T11006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.787841][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.795193][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.823460][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.837843][T11006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.884019][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.891026][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.892672][T10635] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 254.928749][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.989109][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.997608][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.023840][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.089357][T11006] team0: Port device team_slave_0 added [ 255.103957][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.110945][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.138764][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.162941][T11006] team0: Port device team_slave_1 added [ 255.317937][T11006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.326145][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.352430][T11006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.366304][T11006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.373858][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.421673][T11006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.447781][T10994] hsr_slave_0: entered promiscuous mode [ 255.458465][T10994] hsr_slave_1: entered promiscuous mode [ 255.472208][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 255.487531][ T5836] Bluetooth: hci2: command tx timeout [ 255.542164][ T5836] Bluetooth: hci4: command tx timeout [ 255.558207][T11008] hsr_slave_0: entered promiscuous mode [ 255.588865][T11008] hsr_slave_1: entered promiscuous mode [ 255.616423][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.624410][T11008] Cannot create hsr debugfs directory [ 255.624798][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.638587][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.648355][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.667124][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.682352][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.707035][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713799][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.752568][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 255.849593][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.954469][T11006] hsr_slave_0: entered promiscuous mode [ 255.960795][T11006] hsr_slave_1: entered promiscuous mode [ 255.967395][T11006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.977070][T11006] Cannot create hsr debugfs directory [ 256.005839][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.053298][ T2962] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 256.140024][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.268170][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.582429][ T5836] Bluetooth: hci1: command tx timeout [ 256.631319][ T12] bridge_slave_1: left allmulticast mode [ 256.660991][ T12] bridge_slave_1: left promiscuous mode [ 256.668268][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.678146][ T12] bridge_slave_0: left allmulticast mode [ 256.685660][ T12] bridge_slave_0: left promiscuous mode [ 256.694883][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.707643][ T12] bridge_slave_1: left allmulticast mode [ 256.717199][ T12] bridge_slave_1: left promiscuous mode [ 256.724538][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.738373][ T12] bridge_slave_0: left allmulticast mode [ 256.747527][ T12] bridge_slave_0: left promiscuous mode [ 256.756360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.092415][T11124] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 257.165062][ T1144] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 257.178420][T11126] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1394'. [ 257.244111][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 257.254753][T11130] netlink: 'syz.1.1395': attribute type 10 has an invalid length. [ 257.259123][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 257.264173][T11130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1395'. [ 257.281775][T11129] netlink: 'syz.1.1395': attribute type 11 has an invalid length. [ 257.507063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.519321][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.529694][ T12] bond0 (unregistering): Released all slaves [ 257.542940][ T5836] Bluetooth: hci2: command tx timeout [ 257.622592][ T5836] Bluetooth: hci4: command tx timeout [ 257.629936][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.640709][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.654229][ T12] bond0 (unregistering): Released all slaves [ 257.694320][T11130] team0: Port device geneve0 added [ 257.702862][ T5836] Bluetooth: hci0: command tx timeout [ 257.720879][T11099] chnl_net:caif_netlink_parms(): no params data found [ 257.958022][T11099] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.969311][T11099] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.976848][T11099] bridge_slave_0: entered allmulticast mode [ 257.985940][T11099] bridge_slave_0: entered promiscuous mode [ 257.994550][T11099] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.001826][T11099] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.009142][T11099] bridge_slave_1: entered allmulticast mode [ 258.017414][T11099] bridge_slave_1: entered promiscuous mode [ 258.167688][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.188163][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.264179][ T2962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.283071][T11099] team0: Port device team_slave_0 added [ 258.292501][ T2962] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 258.328990][T11099] team0: Port device team_slave_1 added [ 258.444603][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.458183][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.489633][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.512463][ T12] hsr_slave_0: left promiscuous mode [ 258.518328][ T12] hsr_slave_1: left promiscuous mode [ 258.524596][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.532424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.540536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.548675][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.559854][ T12] hsr_slave_0: left promiscuous mode [ 258.567494][ T12] hsr_slave_1: left promiscuous mode [ 258.573452][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.580859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.589217][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.596919][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.627774][ T12] veth1_macvtap: left promiscuous mode [ 258.633350][ T12] veth0_macvtap: left promiscuous mode [ 258.640110][ T12] veth1_vlan: left promiscuous mode [ 258.645589][ T12] veth0_vlan: left promiscuous mode [ 258.658873][ T12] veth1_macvtap: left promiscuous mode [ 258.664499][ T5836] Bluetooth: hci1: command tx timeout [ 258.666568][ T12] veth0_macvtap: left promiscuous mode [ 258.675862][ T12] veth1_vlan: left promiscuous mode [ 258.682190][ T12] veth0_vlan: left promiscuous mode [ 259.140095][ T12] team0 (unregistering): Port device team_slave_1 removed [ 259.175485][ T12] team0 (unregistering): Port device team_slave_0 removed [ 259.435318][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 259.621680][ T5836] Bluetooth: hci2: command tx timeout [ 259.705819][ T5836] Bluetooth: hci4: command tx timeout [ 259.783626][ T5836] Bluetooth: hci0: command tx timeout [ 259.811045][ T12] team0 (unregistering): Port device team_slave_1 removed [ 259.847315][ T12] team0 (unregistering): Port device team_slave_0 removed [ 260.195279][T11151] tipc: Enabled bearer , priority 10 [ 260.209044][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.231924][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.264491][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.305145][T11156] netlink: 'syz.1.1401': attribute type 3 has an invalid length. [ 260.314152][T11156] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1401'. [ 260.370520][T11099] hsr_slave_0: entered promiscuous mode [ 260.377445][T11099] hsr_slave_1: entered promiscuous mode [ 260.386021][T11099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.393734][T11099] Cannot create hsr debugfs directory [ 260.561903][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.618490][T10994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.658910][T10994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.673187][T10994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.690164][T10994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.818863][T11008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.840441][T11008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.857538][T11008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.869292][T11008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.957822][T11006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.000706][T11099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.021628][T11006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.043164][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.050047][T11006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.060477][T11006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.099960][T11099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.135705][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.180074][T11099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.207311][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.214566][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.233809][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.240931][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.265723][T11099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.327275][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.368304][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.394012][ T12] bridge_slave_1: left allmulticast mode [ 261.399722][ T12] bridge_slave_1: left promiscuous mode [ 261.408717][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.428260][ T12] bridge_slave_0: left allmulticast mode [ 261.433994][ T12] bridge_slave_0: left promiscuous mode [ 261.439729][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.672361][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 261.755368][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.766084][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.776950][ T12] bond0 (unregistering): Released all slaves [ 261.794192][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.801325][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.856874][T10994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.876942][ T5836] Bluetooth: hci0: command tx timeout [ 261.898236][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.905460][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.229355][T11099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.294102][T11099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 262.320643][T11099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 262.348898][T11006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.367863][T11099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.391596][ T12] hsr_slave_0: left promiscuous mode [ 262.397512][ T12] hsr_slave_1: left promiscuous mode [ 262.412728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.420293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.442584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.450047][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.487329][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 262.503936][ T12] veth1_macvtap: left promiscuous mode [ 262.509502][ T12] veth0_macvtap: left promiscuous mode [ 262.515444][ T12] veth1_vlan: left promiscuous mode [ 262.520795][ T12] veth0_vlan: left promiscuous mode [ 262.813336][ T1144] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 262.915350][ T12] team0 (unregistering): Port device team_slave_1 removed [ 262.955714][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.303358][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.381799][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 263.424604][T11006] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.487160][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.521349][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.528632][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.570207][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.577452][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.814151][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.836999][T11099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.863917][T10994] veth0_vlan: entered promiscuous mode [ 263.895706][T10994] veth1_vlan: entered promiscuous mode [ 263.943384][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 263.951297][ T5836] Bluetooth: hci0: command tx timeout [ 263.990487][T11099] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.073364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.080568][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.105666][T10994] veth0_macvtap: entered promiscuous mode [ 264.129363][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.136640][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.176221][T10994] veth1_macvtap: entered promiscuous mode [ 264.215464][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 264.249252][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.266590][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 264.292439][T11202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1410'. [ 264.307576][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.340157][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.365995][T10994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.375150][T10994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.386859][T10994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.395749][T10994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.520813][T11008] veth0_vlan: entered promiscuous mode [ 264.558094][T11008] veth1_vlan: entered promiscuous mode [ 264.585711][T11006] veth0_vlan: entered promiscuous mode [ 264.674718][T11006] veth1_vlan: entered promiscuous mode [ 264.710700][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.734826][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.737586][T11008] veth0_macvtap: entered promiscuous mode [ 264.807321][T11008] veth1_macvtap: entered promiscuous mode [ 264.848589][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.862059][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.892370][T11006] veth0_macvtap: entered promiscuous mode [ 264.921136][T11006] veth1_macvtap: entered promiscuous mode [ 264.934655][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.964687][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.977075][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.013008][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.027221][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.044712][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.063513][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 265.081337][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 265.112342][T11099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.177026][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.202194][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.216982][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.228066][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.239316][T11006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.247563][T11008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.257962][T11008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.273241][T11008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.278801][T11225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.282155][T11226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.290284][T11008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.344891][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.381889][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.395800][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.406514][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.426382][T11006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.479824][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.529538][T11006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.545129][T11006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.559070][T11006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.568858][T11006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.619888][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.704270][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.799522][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.817844][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.826301][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.851953][T11099] veth0_vlan: entered promiscuous mode [ 265.870169][T11099] veth1_vlan: entered promiscuous mode [ 265.913081][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.922541][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.961466][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.981181][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.052066][T10931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.070718][T11099] veth0_macvtap: entered promiscuous mode [ 266.073058][T10931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.083381][T11099] veth1_macvtap: entered promiscuous mode [ 266.097908][ T1144] bridge_slave_1: left allmulticast mode [ 266.103686][ T1144] bridge_slave_1: left promiscuous mode [ 266.109412][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.127737][ T1144] bridge_slave_0: left allmulticast mode [ 266.134034][ T1144] bridge_slave_0: left promiscuous mode [ 266.139715][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.231732][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 266.240382][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 266.439887][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.450496][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.462524][ T1144] bond0 (unregistering): Released all slaves [ 266.534028][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.556665][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.566592][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.577063][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.586921][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.597368][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.614044][T11099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.688776][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.711797][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.721762][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.733084][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.744236][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.755024][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.766681][T11099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.814876][T11099] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.830067][T11099] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.839530][T11099] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.848491][T11099] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.991923][T11235] xt_hashlimit: size too large, truncated to 1048576 [ 267.126245][ T1144] hsr_slave_0: left promiscuous mode [ 267.142077][ T1144] hsr_slave_1: left promiscuous mode [ 267.151961][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.171759][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.215114][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.225574][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.300044][ T1144] veth1_macvtap: left promiscuous mode [ 267.310108][ T1144] veth0_macvtap: left promiscuous mode [ 267.332662][ T1144] veth1_vlan: left promiscuous mode [ 267.338178][ T1144] veth0_vlan: left promiscuous mode [ 267.392414][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 267.417033][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 267.628630][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.639245][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.648795][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.657799][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.670941][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.911932][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.926334][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.934483][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.949274][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.958083][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.064636][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.078939][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.089057][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.101467][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.115464][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.175381][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 268.210305][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 268.512277][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.572502][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 268.580340][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 268.732925][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.748208][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.901353][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.910093][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.138271][T11259] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 269.330136][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.378184][T11242] chnl_net:caif_netlink_parms(): no params data found [ 269.418450][T11240] chnl_net:caif_netlink_parms(): no params data found [ 269.578951][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.692674][T10635] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 269.703053][ T5836] Bluetooth: hci1: command tx timeout [ 269.717960][T10635] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 269.808266][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.869044][T11244] chnl_net:caif_netlink_parms(): no params data found [ 269.937112][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.960796][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.969570][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.981876][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.990171][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.998094][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.031708][ T5141] Bluetooth: hci2: command tx timeout [ 270.038658][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.046029][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.055897][T11242] bridge_slave_0: entered allmulticast mode [ 270.063431][T11242] bridge_slave_0: entered promiscuous mode [ 270.086799][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.094250][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.101452][T11240] bridge_slave_0: entered allmulticast mode [ 270.110190][T11240] bridge_slave_0: entered promiscuous mode [ 270.118429][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.125694][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.132952][T11240] bridge_slave_1: entered allmulticast mode [ 270.141661][T11240] bridge_slave_1: entered promiscuous mode [ 270.165997][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.182242][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.182479][ T5141] Bluetooth: hci4: command tx timeout [ 270.189811][T11242] bridge_slave_1: entered allmulticast mode [ 270.205073][T11242] bridge_slave_1: entered promiscuous mode [ 270.259150][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.334203][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.353460][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.366413][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.429145][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 270.487688][T11244] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.509713][T11244] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.521391][T11244] bridge_slave_0: entered allmulticast mode [ 270.535940][T11244] bridge_slave_0: entered promiscuous mode [ 270.563203][T11240] team0: Port device team_slave_0 added [ 270.596568][T11244] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.604028][T11244] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.611207][T11244] bridge_slave_1: entered allmulticast mode [ 270.620283][T11244] bridge_slave_1: entered promiscuous mode [ 270.631445][T11242] team0: Port device team_slave_0 added [ 270.638432][T11286] Bluetooth: MGMT ver 1.23 [ 270.646616][T11240] team0: Port device team_slave_1 added [ 270.698247][T11242] team0: Port device team_slave_1 added [ 270.837357][ T1144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.840318][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 270.869217][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 270.895039][T11244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.908337][T11244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.918156][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.927449][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.953947][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.967346][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.974984][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.002223][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.023259][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.030874][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.057319][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.133274][ T1144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.228862][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.236871][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.264039][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.344416][T11244] team0: Port device team_slave_0 added [ 271.374273][ T1144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.444496][T11240] hsr_slave_0: entered promiscuous mode [ 271.450921][T11240] hsr_slave_1: entered promiscuous mode [ 271.473449][T11244] team0: Port device team_slave_1 added [ 271.517037][ T1144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.646374][T11242] hsr_slave_0: entered promiscuous mode [ 271.657575][T11242] hsr_slave_1: entered promiscuous mode [ 271.664096][T11242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.672626][T11242] Cannot create hsr debugfs directory [ 271.682063][T11244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.689058][T11244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.715905][T11244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.739181][T11244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.749770][T11244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.779941][T11244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.790887][ T5141] Bluetooth: hci1: command tx timeout [ 272.002458][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 272.022267][ T5141] Bluetooth: hci0: command tx timeout [ 272.053599][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 272.061760][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 272.101885][ T5141] Bluetooth: hci2: command tx timeout [ 272.119224][T11244] hsr_slave_0: entered promiscuous mode [ 272.133501][T11244] hsr_slave_1: entered promiscuous mode [ 272.139834][T11244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.160265][T11244] Cannot create hsr debugfs directory [ 272.171471][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 272.239922][T11274] chnl_net:caif_netlink_parms(): no params data found [ 272.260253][ T1144] bridge_slave_1: left allmulticast mode [ 272.271470][ T1144] bridge_slave_1: left promiscuous mode [ 272.277135][ T5141] Bluetooth: hci4: command tx timeout [ 272.284088][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.300916][ T1144] bridge_slave_0: left allmulticast mode [ 272.308509][ T1144] bridge_slave_0: left promiscuous mode [ 272.314429][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.328107][ T1144] bridge_slave_1: left allmulticast mode [ 272.334402][ T1144] bridge_slave_1: left promiscuous mode [ 272.340155][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.356314][ T1144] bridge_slave_0: left allmulticast mode [ 272.362763][ T1144] bridge_slave_0: left promiscuous mode [ 272.369544][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.391858][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.409951][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.422343][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.438330][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.448957][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.478518][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.494623][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 272.983726][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.994672][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.007495][ T1144] bond0 (unregistering): Released all slaves [ 273.100018][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.110492][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.120688][ T1144] bond0 (unregistering): Released all slaves [ 273.192302][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 273.211698][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 273.424395][T11337] netlink: 'syz.1.1435': attribute type 6 has an invalid length. [ 273.572369][T11346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.739546][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.749248][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.761136][T11274] bridge_slave_0: entered allmulticast mode [ 273.779254][T11274] bridge_slave_0: entered promiscuous mode [ 273.791266][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.806050][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.818440][T11274] bridge_slave_1: entered allmulticast mode [ 273.832549][T11274] bridge_slave_1: entered promiscuous mode [ 273.862537][ T5141] Bluetooth: hci1: command tx timeout [ 273.877077][T11356] netlink: 'syz.1.1440': attribute type 11 has an invalid length. [ 274.022507][T11274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.035186][T11274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.087055][ T1144] hsr_slave_0: left promiscuous mode [ 274.100085][ T1144] hsr_slave_1: left promiscuous mode [ 274.101820][ T5141] Bluetooth: hci0: command tx timeout [ 274.106925][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.123301][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.131110][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.139062][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.150832][ T1144] hsr_slave_0: left promiscuous mode [ 274.156881][ T1144] hsr_slave_1: left promiscuous mode [ 274.162873][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.170305][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.179283][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.186924][ T5141] Bluetooth: hci2: command tx timeout [ 274.196378][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.225507][ T1144] veth1_macvtap: left promiscuous mode [ 274.231071][ T1144] veth0_macvtap: left promiscuous mode [ 274.240865][ T1144] veth1_vlan: left promiscuous mode [ 274.246319][ T1144] veth0_vlan: left promiscuous mode [ 274.253077][ T1144] veth1_macvtap: left promiscuous mode [ 274.258598][ T1144] veth0_macvtap: left promiscuous mode [ 274.265053][ T1144] veth1_vlan: left promiscuous mode [ 274.270335][ T1144] veth0_vlan: left promiscuous mode [ 274.272989][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.342727][ T5141] Bluetooth: hci4: command tx timeout [ 274.356987][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 274.373046][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 274.766571][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 274.805025][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 275.436688][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 275.470245][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 275.497340][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 275.507784][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 275.889033][T11274] team0: Port device team_slave_0 added [ 275.907734][T11274] team0: Port device team_slave_1 added [ 275.942708][ T5141] Bluetooth: hci1: command tx timeout [ 275.971092][T11274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.978723][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.013518][T11274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.026449][T11274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.033520][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.060525][T11274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.145800][T11274] hsr_slave_0: entered promiscuous mode [ 276.153844][T11274] hsr_slave_1: entered promiscuous mode [ 276.160121][T11274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.168687][T11274] Cannot create hsr debugfs directory [ 276.182039][ T5141] Bluetooth: hci0: command tx timeout [ 276.261977][ T5141] Bluetooth: hci2: command tx timeout [ 276.421752][ T5141] Bluetooth: hci4: command tx timeout [ 276.506330][T11242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.518302][T11242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.528404][T11242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.539598][T11242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.642149][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.650061][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.666508][T10635] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.702771][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.734956][T10635] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.754706][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.768064][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.775208][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.790229][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.797414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.849135][T10635] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.929477][T10635] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.975233][T11240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.988030][T11240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.012576][T11240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.027809][T11240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.125121][T10635] bridge_slave_1: left allmulticast mode [ 277.130840][T10635] bridge_slave_1: left promiscuous mode [ 277.137393][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.147216][T10635] bridge_slave_0: left allmulticast mode [ 277.153489][T10635] bridge_slave_0: left promiscuous mode [ 277.159222][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.296623][T11384] __nla_validate_parse: 30 callbacks suppressed [ 277.296642][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 277.495277][T10635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.507845][T10635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.518019][T10635] bond0 (unregistering): Released all slaves [ 277.590584][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.783011][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 277.808791][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 277.947867][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.005194][T10635] hsr_slave_0: left promiscuous mode [ 278.023449][T10635] hsr_slave_1: left promiscuous mode [ 278.044094][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.052100][T10635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.066670][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.075618][T10635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.096646][T10635] veth1_macvtap: left promiscuous mode [ 278.106797][T10635] veth0_macvtap: left promiscuous mode [ 278.112921][T10635] veth1_vlan: left promiscuous mode [ 278.118261][T10635] veth0_vlan: left promiscuous mode [ 278.261853][ T5141] Bluetooth: hci0: command tx timeout [ 278.499348][T10635] team0 (unregistering): Port device team_slave_1 removed [ 278.535305][T10635] team0 (unregistering): Port device team_slave_0 removed [ 278.847579][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.867597][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.874816][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.913384][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.920497][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.942621][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 278.950625][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 279.013974][T11408] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1449'. [ 279.027110][T11408] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1449'. [ 279.155205][T11244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.180372][T11244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.199660][T11244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.228531][T11242] veth0_vlan: entered promiscuous mode [ 279.262878][T11244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.310568][T11242] veth1_vlan: entered promiscuous mode [ 279.381905][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 279.424492][T11274] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.444086][T11274] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.465137][T11274] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.516064][T11274] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.579344][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 279.591296][T11242] veth0_macvtap: entered promiscuous mode [ 279.626746][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.644431][T11242] veth1_macvtap: entered promiscuous mode [ 279.678213][T11244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.726827][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.757158][T11244] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.767270][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.789158][T11242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.799950][T11242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.808855][T11242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.818111][T11242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.831643][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.838878][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.883761][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.890929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.917852][T11240] veth0_vlan: entered promiscuous mode [ 279.936243][T11274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.997082][T11240] veth1_vlan: entered promiscuous mode [ 280.023490][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.031339][T11274] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.066389][T11244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.080715][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.087877][T10635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.091866][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.104071][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 280.113402][T10931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 280.127878][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.143317][T11240] veth0_macvtap: entered promiscuous mode [ 280.160988][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.168154][T10635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.187619][T10931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.212187][T11240] veth1_macvtap: entered promiscuous mode [ 280.223709][T10931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.274983][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.289700][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.303732][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.364284][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.378200][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.390969][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.436595][T11240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.471835][T11240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.482195][T11240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.501738][T11240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.699050][T11244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.776137][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.806591][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.839900][T10635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.940883][T11274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.006692][T10635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.054405][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.064685][T11244] veth0_vlan: entered promiscuous mode [ 281.072677][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.126408][T10635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.169722][T11244] veth1_vlan: entered promiscuous mode [ 281.213717][T10635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.236119][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.244186][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.328788][T11244] veth0_macvtap: entered promiscuous mode [ 281.349054][T11244] veth1_macvtap: entered promiscuous mode [ 281.407983][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.418702][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.428905][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.439661][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.450792][T11244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.478470][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.489441][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.500902][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.511697][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.523665][T11244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.535864][T11244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.545400][T11244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.556441][T11244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.565662][T11244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.598723][T10635] bridge_slave_1: left allmulticast mode [ 281.615227][T10635] bridge_slave_1: left promiscuous mode [ 281.621012][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.653525][T10635] bridge_slave_0: left allmulticast mode [ 281.659224][T10635] bridge_slave_0: left promiscuous mode [ 281.668234][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.110647][T10635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.123010][T10635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.136132][T10635] bond0 (unregistering): Released all slaves [ 282.175999][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.185220][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.194668][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.203180][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.211485][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.335067][T11274] veth0_vlan: entered promiscuous mode [ 282.345548][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.354510][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 282.367085][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 282.372108][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.442771][T11274] veth1_vlan: entered promiscuous mode [ 282.470616][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.479789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.518013][T10635] hsr_slave_0: left promiscuous mode [ 282.527176][T10635] hsr_slave_1: left promiscuous mode [ 282.535903][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.546333][T10635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.555320][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.567247][T10635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.593254][T10635] veth1_macvtap: left promiscuous mode [ 282.599945][T10635] veth0_macvtap: left promiscuous mode [ 282.606144][T10635] veth1_vlan: left promiscuous mode [ 282.611491][T10635] veth0_vlan: left promiscuous mode [ 282.996037][T10635] team0 (unregistering): Port device team_slave_1 removed [ 283.030909][T10635] team0 (unregistering): Port device team_slave_0 removed [ 283.499227][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.513404][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.600610][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.624737][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.636654][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.644744][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.652585][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.673796][T11456] bond0 (unregistering): (slave ip6gretap2): Releasing active interface [ 283.695908][T11456] bond0 (unregistering): Released all slaves [ 283.916595][T11274] veth0_macvtap: entered promiscuous mode [ 283.981460][T11274] veth1_macvtap: entered promiscuous mode [ 284.009198][T11448] chnl_net:caif_netlink_parms(): no params data found [ 284.086329][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.097244][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.107496][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.118307][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.129371][T11274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.185792][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.197070][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.206966][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.217423][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.228624][T11274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.240252][T11448] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.248484][T11448] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.255748][T11448] bridge_slave_0: entered allmulticast mode [ 284.262209][ T5141] Bluetooth: hci1: command tx timeout [ 284.272821][T11448] bridge_slave_0: entered promiscuous mode [ 284.282716][T11448] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.289838][T11448] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.297064][T11448] bridge_slave_1: entered allmulticast mode [ 284.304868][T11448] bridge_slave_1: entered promiscuous mode [ 284.313557][T11274] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.322604][T11274] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.331301][T11274] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.340913][T11274] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.383362][T11448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.447184][T11448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.527549][T11448] team0: Port device team_slave_0 added [ 284.537956][T11448] team0: Port device team_slave_1 added [ 284.677154][T10635] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.719630][T11448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.734098][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.766080][T11448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.774735][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.778725][T11448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.789394][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.790653][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.799576][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.832612][T11448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.846220][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.854683][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.918853][T10635] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.983834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.992277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.012309][T11448] hsr_slave_0: entered promiscuous mode [ 285.018806][T11448] hsr_slave_1: entered promiscuous mode [ 285.025342][T11448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.033683][T11448] Cannot create hsr debugfs directory [ 285.040337][T11458] chnl_net:caif_netlink_parms(): no params data found [ 285.110056][T10635] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.144695][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.174594][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.183297][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.400235][T10635] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.454906][T11479] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1459'. [ 285.531080][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.545267][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.553794][T11458] bridge_slave_0: entered allmulticast mode [ 285.565793][T11458] bridge_slave_0: entered promiscuous mode [ 285.590672][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.604873][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.618500][T11458] bridge_slave_1: entered allmulticast mode [ 285.630416][T11458] bridge_slave_1: entered promiscuous mode [ 285.702732][ T5141] Bluetooth: hci2: command tx timeout [ 285.806757][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.853493][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.936673][T11458] team0: Port device team_slave_0 added [ 285.974675][T11458] team0: Port device team_slave_1 added [ 286.025969][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.035875][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.065184][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.097012][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.104985][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.131385][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.176456][T10635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.294116][T11458] hsr_slave_0: entered promiscuous mode [ 286.300827][T11458] hsr_slave_1: entered promiscuous mode [ 286.327466][T11458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.343047][ T5141] Bluetooth: hci1: command tx timeout [ 286.357710][T11458] Cannot create hsr debugfs directory [ 286.409938][T10635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.484764][T11471] chnl_net:caif_netlink_parms(): no params data found [ 286.549189][T10635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.613077][T11502] 8021q: VLANs not supported on dvmrp0 [ 286.714322][T10635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.759248][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.768905][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.778538][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.793459][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.802645][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.827665][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 286.901834][ T5836] Bluetooth: hci4: command tx timeout [ 286.930259][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 287.016129][T11471] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.023424][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.030719][T11471] bridge_slave_0: entered allmulticast mode [ 287.038499][T11471] bridge_slave_0: entered promiscuous mode [ 287.046051][T11448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.078821][T11471] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.087105][T11471] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.094611][T11471] bridge_slave_1: entered allmulticast mode [ 287.101853][T11471] bridge_slave_1: entered promiscuous mode [ 287.111124][T11448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.179617][T11471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.189268][T11448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.204829][T10635] bridge_slave_1: left allmulticast mode [ 287.211448][T10635] bridge_slave_1: left promiscuous mode [ 287.217278][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.230186][T10635] bridge_slave_0: left allmulticast mode [ 287.236164][T10635] bridge_slave_0: left promiscuous mode [ 287.242180][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.254170][T10635] bridge_slave_1: left allmulticast mode [ 287.259903][T10635] bridge_slave_1: left promiscuous mode [ 287.266214][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.276873][T10635] bridge_slave_0: left allmulticast mode [ 287.284454][T10635] bridge_slave_0: left promiscuous mode [ 287.290113][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.670023][T11514] IPVS: Scheduler module ip_vs_sip not found [ 287.701442][T11514] netlink: 'syz.1.1463': attribute type 20 has an invalid length. [ 287.781696][ T5836] Bluetooth: hci2: command tx timeout [ 287.854783][T10635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.869384][T10635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.879206][T10635] bond0 (unregistering): Released all slaves [ 287.975367][T10635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.988765][T10635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.999400][T10635] bond0 (unregistering): Released all slaves [ 288.035277][T11471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.089677][T11448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.177554][T11471] team0: Port device team_slave_0 added [ 288.241512][T11520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1465'. [ 288.250627][T11471] team0: Port device team_slave_1 added [ 288.422619][T11471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.423724][ T5836] Bluetooth: hci1: command tx timeout [ 288.429588][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.472396][T11471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.527181][T11471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.542909][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.575043][T11471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.728882][T11471] hsr_slave_0: entered promiscuous mode [ 288.736813][T11471] hsr_slave_1: entered promiscuous mode [ 288.767123][T11471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.775163][T11471] Cannot create hsr debugfs directory [ 288.821710][ T5836] Bluetooth: hci0: command tx timeout [ 288.981754][ T5836] Bluetooth: hci4: command tx timeout [ 288.991318][T10635] hsr_slave_0: left promiscuous mode [ 289.002008][T10635] hsr_slave_1: left promiscuous mode [ 289.007991][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.020436][T10635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.030352][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.040722][T10635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.053339][T10635] hsr_slave_0: left promiscuous mode [ 289.060177][T10635] hsr_slave_1: left promiscuous mode [ 289.071981][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.079418][T10635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.089362][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.096891][T10635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.131249][T10635] veth1_macvtap: left promiscuous mode [ 289.137079][T10635] veth0_macvtap: left promiscuous mode [ 289.143075][T10635] veth1_vlan: left promiscuous mode [ 289.148417][T10635] veth0_vlan: left promiscuous mode [ 289.158769][T10635] veth1_macvtap: left promiscuous mode [ 289.165948][T10635] veth0_macvtap: left promiscuous mode [ 289.175021][T10635] veth1_vlan: left promiscuous mode [ 289.181034][T10635] veth0_vlan: left promiscuous mode [ 289.330334][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'. [ 289.658211][T10635] team0 (unregistering): Port device team_slave_1 removed [ 289.694673][T10635] team0 (unregistering): Port device team_slave_0 removed [ 289.862018][ T5836] Bluetooth: hci2: command tx timeout [ 290.306848][T10635] team0 (unregistering): Port device team_slave_1 removed [ 290.341452][T10635] team0 (unregistering): Port device team_slave_0 removed [ 290.501708][ T5836] Bluetooth: hci1: command tx timeout [ 290.735061][T11508] chnl_net:caif_netlink_parms(): no params data found [ 290.751690][T11540] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 290.902602][ T2962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.903063][ T5141] Bluetooth: hci0: command tx timeout [ 290.949829][T11458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.007109][T11458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.026853][T11458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.061757][ T5141] Bluetooth: hci4: command tx timeout [ 291.088656][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.094253][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 291.095990][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.111909][T11508] bridge_slave_0: entered allmulticast mode [ 291.119250][T11508] bridge_slave_0: entered promiscuous mode [ 291.156164][T11458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.167304][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.179500][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.189750][T11508] bridge_slave_1: entered allmulticast mode [ 291.207544][T11508] bridge_slave_1: entered promiscuous mode [ 291.331298][T11448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.343839][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.388567][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.501292][T11448] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.528334][T11508] team0: Port device team_slave_0 added [ 291.568011][T11508] team0: Port device team_slave_1 added [ 291.574149][T11562] syz.1.1475: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.589902][T11562] CPU: 1 UID: 0 PID: 11562 Comm: syz.1.1475 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 291.589931][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 291.589948][T11562] Call Trace: [ 291.589959][T11562] [ 291.589968][T11562] dump_stack_lvl+0x189/0x250 [ 291.590009][T11562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.590038][T11562] ? __pfx__printk+0x10/0x10 [ 291.590058][T11562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.590090][T11562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.590123][T11562] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.590157][T11562] warn_alloc+0x214/0x310 [ 291.590184][T11562] ? __pfx___schedule+0x10/0x10 [ 291.590217][T11562] ? __pfx_warn_alloc+0x10/0x10 [ 291.590243][T11562] ? kasan_save_track+0x4f/0x80 [ 291.590264][T11562] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 291.590287][T11562] ? xskq_create+0x56/0x170 [ 291.590316][T11562] ? __x64_sys_setsockopt+0x18b/0x220 [ 291.590334][T11562] ? do_syscall_64+0xf6/0x210 [ 291.590352][T11562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.590384][T11562] __vmalloc_node_range_noprof+0x125/0x12c0 [ 291.590443][T11562] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.590474][T11562] ? __kasan_kmalloc+0x93/0xb0 [ 291.590503][T11562] vmalloc_user_noprof+0x74/0x80 [ 291.590529][T11562] ? xskq_create+0xbf/0x170 [ 291.590556][T11562] xskq_create+0xbf/0x170 [ 291.590588][T11562] xsk_init_queue+0xb0/0x110 [ 291.590620][T11562] xsk_setsockopt+0x43f/0x710 [ 291.590651][T11562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.590691][T11562] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.590712][T11562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.590741][T11562] do_sock_setsockopt+0x257/0x3e0 [ 291.590763][T11562] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 291.590780][T11562] ? __fget_files+0x2a/0x420 [ 291.590811][T11562] ? __fget_files+0x3a0/0x420 [ 291.590839][T11562] ? __fget_files+0x2a/0x420 [ 291.590873][T11562] __x64_sys_setsockopt+0x18b/0x220 [ 291.590900][T11562] do_syscall_64+0xf6/0x210 [ 291.590919][T11562] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.590938][T11562] ? clear_bhb_loop+0x45/0xa0 [ 291.590962][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.590980][T11562] RIP: 0033:0x7ff42858e969 [ 291.591016][T11562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.591034][T11562] RSP: 002b:00007ff42944c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.591055][T11562] RAX: ffffffffffffffda RBX: 00007ff4287b5fa0 RCX: 00007ff42858e969 [ 291.591070][T11562] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 291.591082][T11562] RBP: 00007ff428610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 291.591095][T11562] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.591107][T11562] R13: 0000000000000000 R14: 00007ff4287b5fa0 R15: 00007ffed14272f8 [ 291.591139][T11562] [ 291.591152][T11562] Mem-Info: [ 291.891466][T11562] active_anon:3437 inactive_anon:0 isolated_anon:0 [ 291.891466][T11562] active_file:1355 inactive_file:38464 isolated_file:0 [ 291.891466][T11562] unevictable:768 dirty:46 writeback:0 [ 291.891466][T11562] slab_reclaimable:10745 slab_unreclaimable:100133 [ 291.891466][T11562] mapped:28210 shmem:1431 pagetables:586 [ 291.891466][T11562] sec_pagetables:0 bounce:0 [ 291.891466][T11562] kernel_misc_reclaimable:0 [ 291.891466][T11562] free:1347710 free_pcp:227 free_cma:0 [ 291.937828][T11562] Node 0 active_anon:13748kB inactive_anon:0kB active_file:5420kB inactive_file:153784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112840kB dirty:180kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.971253][ T5141] Bluetooth: hci2: command 0x0419 tx timeout [ 291.978076][T11562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.009412][T11562] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.042944][T11562] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 292.048823][T11562] Node 0 DMA32 free:1465564kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:13732kB inactive_anon:0kB active_file:5420kB inactive_file:153692kB unevictable:1536kB writepending:176kB present:3129332kB managed:2564200kB mlocked:0kB bounce:0kB free_pcp:924kB local_pcp:896kB free_cma:0kB [ 292.080905][T11562] lowmem_reserve[]: 0 0 0 0 0 [ 292.083206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.086218][T11562] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.092825][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.122993][T11562] lowmem_reserve[]: 0 0 0 0 0 [ 292.131371][T11562] Node 1 Normal free:3909788kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 292.135980][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.162135][T11562] lowmem_reserve[]: 0 0 0 0 0 [ 292.167270][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.173680][T11562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.196896][T11562] Node 0 DMA32: 119*4kB (UM) 118*8kB (UME) 132*16kB (UME) 190*32kB (UME) 83*64kB (UME) 35*128kB (UME) 32*256kB (UME) 33*512kB (UM) 52*1024kB (UM) 12*2048kB (UM) 328*4096kB (UM) = 1465804kB [ 292.215990][T11562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.227883][T11562] Node 1 Normal: 205*4kB (UME) 49*8kB (UME) 38*16kB (UME) 220*32kB (UME) 82*64kB (UME) 31*128kB (UME) 16*256kB (UME) 9*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3909788kB [ 292.230253][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.253663][T11562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.258234][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.264314][T11562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.299287][T11562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.309081][T11562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.314393][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.318533][T11562] 41250 total pagecache pages [ 292.334249][T11562] 0 pages in swap cache [ 292.339252][T11562] Free swap = 124996kB [ 292.343757][T11562] Total swap = 124996kB [ 292.348022][T11562] 2097051 pages RAM [ 292.355711][T11562] 0 pages HighMem/MovableOnly [ 292.360517][T11562] 424343 pages reserved [ 292.364817][T11562] 0 pages cma reserved [ 292.364929][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.381189][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.414313][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.511346][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 292.547829][T11508] hsr_slave_0: entered promiscuous mode [ 292.554423][T11508] hsr_slave_1: entered promiscuous mode [ 292.595594][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.675657][T11471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.729943][ T2962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.747739][T11471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.775460][T11471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.795344][T11471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.854416][ T2962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.916301][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.991663][ T5141] Bluetooth: hci0: command tx timeout [ 293.028281][ T2962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.060625][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.067854][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.105099][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.112317][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.156657][ T5141] Bluetooth: hci4: command tx timeout [ 293.158519][ T2962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.195911][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 293.240242][T11448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.572189][ T2962] bridge_slave_1: left allmulticast mode [ 293.580379][ T2962] bridge_slave_1: left promiscuous mode [ 293.600085][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.609784][ T2962] bridge_slave_0: left allmulticast mode [ 293.617155][ T2962] bridge_slave_0: left promiscuous mode [ 293.623362][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.916970][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.928442][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.938566][ T2962] bond0 (unregistering): Released all slaves [ 294.023232][ T5141] Bluetooth: hci2: command 0x0419 tx timeout [ 294.033250][T11471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.210402][T11471] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.306755][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.313953][T10635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.368748][ T2962] hsr_slave_0: left promiscuous mode [ 294.385313][ T2962] hsr_slave_1: left promiscuous mode [ 294.391445][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.399483][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.410428][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.417968][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.447678][ T2962] veth1_macvtap: left promiscuous mode [ 294.453387][ T2962] veth0_macvtap: left promiscuous mode [ 294.459067][ T2962] veth1_vlan: left promiscuous mode [ 294.464999][ T2962] veth0_vlan: left promiscuous mode [ 294.930960][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 294.965945][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 295.071896][ T5141] Bluetooth: hci0: command tx timeout [ 295.354031][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.361285][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.421028][T11448] veth0_vlan: entered promiscuous mode [ 295.433394][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.576214][T11448] veth1_vlan: entered promiscuous mode [ 295.602557][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1487'. [ 295.615298][T11508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.653942][T11508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.669505][T11508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.698457][T11508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.782800][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.824925][T11448] veth0_macvtap: entered promiscuous mode [ 295.844882][T11458] veth0_vlan: entered promiscuous mode [ 295.864383][T11448] veth1_macvtap: entered promiscuous mode [ 295.893035][T11458] veth1_vlan: entered promiscuous mode [ 295.926512][T11471] veth0_vlan: entered promiscuous mode [ 295.948445][T11448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.973294][T11448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.985067][T11471] veth1_vlan: entered promiscuous mode [ 295.997029][T11448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.006421][T11448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.016611][T11448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.025527][T11448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.065273][T11508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.106082][T11458] veth0_macvtap: entered promiscuous mode [ 296.130750][T11458] veth1_macvtap: entered promiscuous mode [ 296.139633][T11508] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.159148][T11471] veth0_macvtap: entered promiscuous mode [ 296.184189][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.191334][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.212027][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.219898][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.230470][T11471] veth1_macvtap: entered promiscuous mode [ 296.240565][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.247733][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.285867][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.304150][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.316625][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.358559][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.374428][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.386843][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.446717][T11458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.458059][T11458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.468726][T11458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.480843][T11458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.497950][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.504706][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.516634][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.531577][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.542301][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.553207][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.565141][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.619242][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.630776][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.641173][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.651883][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.663617][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.665034][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.704863][T11508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.768044][T11471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.773609][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'. [ 296.799645][T11471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.817959][T11471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.827976][T11471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.003146][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.010995][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.215788][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.315929][T10931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.340191][T11508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.348445][T10931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.389958][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.430488][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.463150][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.550430][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.588724][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.611097][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.667406][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.825698][ T13] bridge_slave_1: left allmulticast mode [ 297.837145][ T13] bridge_slave_1: left promiscuous mode [ 297.844388][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.877935][ T13] bridge_slave_0: left allmulticast mode [ 297.884318][ T13] bridge_slave_0: left promiscuous mode [ 297.890121][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.341285][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.356076][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.366762][ T13] bond0 (unregistering): Released all slaves [ 298.486430][T11508] veth0_vlan: entered promiscuous mode [ 298.555442][T11508] veth1_vlan: entered promiscuous mode [ 298.556687][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.575352][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.583623][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.592416][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.600412][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.749720][T11508] veth0_macvtap: entered promiscuous mode [ 298.777193][T11508] veth1_macvtap: entered promiscuous mode [ 298.789547][ T13] hsr_slave_0: left promiscuous mode [ 298.795853][ T13] hsr_slave_1: left promiscuous mode [ 298.802281][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.809716][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.821232][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.829179][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.849028][ T13] veth1_macvtap: left promiscuous mode [ 298.855316][ T13] veth0_macvtap: left promiscuous mode [ 298.861020][ T13] veth1_vlan: left promiscuous mode [ 298.867620][ T13] veth0_vlan: left promiscuous mode [ 299.302669][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.316270][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.324880][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.333377][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.349031][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.474705][ T13] team0 (unregistering): Port device team_slave_1 removed [ 299.524805][ T13] team0 (unregistering): Port device team_slave_0 removed [ 299.735430][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.745276][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.758785][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.769254][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.777822][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.088800][T11508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.107665][T11508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.119216][T11508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.130702][T11508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.148981][T11508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.163265][T11508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.174326][T11508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.184961][T11508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.195971][T11508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.206986][T11508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.269801][T11508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.285385][T11508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.294934][T11508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.304282][T11508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.391251][T11682] bond0: entered promiscuous mode [ 300.396476][T11682] bond0: entered allmulticast mode [ 300.402426][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.617585][T11673] chnl_net:caif_netlink_parms(): no params data found [ 300.671769][ T5141] Bluetooth: hci1: command tx timeout [ 300.683278][T11664] chnl_net:caif_netlink_parms(): no params data found [ 300.761957][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.773794][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.881860][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.889006][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.898313][T11673] bridge_slave_0: entered allmulticast mode [ 300.905629][T11673] bridge_slave_0: entered promiscuous mode [ 300.914050][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.921160][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.929169][T11673] bridge_slave_1: entered allmulticast mode [ 300.936944][T11673] bridge_slave_1: entered promiscuous mode [ 300.953536][T11670] chnl_net:caif_netlink_parms(): no params data found [ 301.051244][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.105951][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.113708][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.121168][T11664] bridge_slave_0: entered allmulticast mode [ 301.130904][T11664] bridge_slave_0: entered promiscuous mode [ 301.140179][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.149542][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.156823][T11664] bridge_slave_1: entered allmulticast mode [ 301.164397][T11664] bridge_slave_1: entered promiscuous mode [ 301.171503][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.186855][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.203693][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.216423][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.245262][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.326129][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.382656][ T5141] Bluetooth: hci2: command tx timeout [ 301.403435][T11705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.423841][T11673] team0: Port device team_slave_0 added [ 301.438636][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.480948][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.488301][T11670] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.495638][T11670] bridge_slave_0: entered allmulticast mode [ 301.503626][T11670] bridge_slave_0: entered promiscuous mode [ 301.526492][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.565186][T11673] team0: Port device team_slave_1 added [ 301.597510][T11664] team0: Port device team_slave_0 added [ 301.604224][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.611371][T11670] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.619183][T11670] bridge_slave_1: entered allmulticast mode [ 301.629491][T11670] bridge_slave_1: entered promiscuous mode [ 301.665754][T11664] team0: Port device team_slave_1 added [ 301.803829][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.854445][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.861431][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.862009][ T5141] Bluetooth: hci4: command tx timeout [ 301.909739][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.924087][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.931050][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.958487][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.000217][T11670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.028258][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.046690][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.074152][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.088121][T11670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.130942][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.138347][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.165558][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.203983][T11670] team0: Port device team_slave_0 added [ 302.238547][T11670] team0: Port device team_slave_1 added [ 302.267115][T11673] hsr_slave_0: entered promiscuous mode [ 302.276392][T11673] hsr_slave_1: entered promiscuous mode [ 302.282856][T11673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.290432][T11673] Cannot create hsr debugfs directory [ 302.346937][T11664] hsr_slave_0: entered promiscuous mode [ 302.354094][T11664] hsr_slave_1: entered promiscuous mode [ 302.360210][T11664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.369485][T11664] Cannot create hsr debugfs directory [ 302.390759][T11670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.397760][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.424909][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.436235][T11670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.483859][T11670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.490855][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.519755][T11670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.680127][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.742692][ T5141] Bluetooth: hci1: command tx timeout [ 302.803337][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 302.860042][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.034187][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.072490][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.083351][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.096105][T11670] hsr_slave_0: entered promiscuous mode [ 303.102608][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.106971][T11670] hsr_slave_1: entered promiscuous mode [ 303.116326][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.116551][T11670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.131047][T11670] Cannot create hsr debugfs directory [ 303.140922][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.195616][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.340008][T11726] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.467594][ T5839] Bluetooth: hci2: command tx timeout [ 303.578150][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 303.648444][ T13] bridge_slave_1: left allmulticast mode [ 303.654828][ T13] bridge_slave_1: left promiscuous mode [ 303.660636][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.676631][ T13] bridge_slave_0: left allmulticast mode [ 303.682863][ T13] bridge_slave_0: left promiscuous mode [ 303.688602][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.701332][ T13] bridge_slave_1: left allmulticast mode [ 303.708017][ T13] bridge_slave_1: left promiscuous mode [ 303.714007][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.724166][ T13] bridge_slave_0: left allmulticast mode [ 303.726390][T11735] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1508'. [ 303.729819][ T13] bridge_slave_0: left promiscuous mode [ 303.745898][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.748745][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 303.801340][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 303.810603][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1508'. [ 303.951781][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 304.358175][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.368999][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.379136][ T13] bond0 (unregistering): Released all slaves [ 304.480729][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.491741][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.502444][ T13] bond0 (unregistering): Released all slaves [ 304.529143][T11736] geneve3: entered promiscuous mode [ 304.538545][T11736] geneve3: entered allmulticast mode [ 304.779655][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 304.810231][T11721] chnl_net:caif_netlink_parms(): no params data found [ 304.821831][ T5836] Bluetooth: hci1: command tx timeout [ 304.914014][T11664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.928101][T11664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.991190][T11664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.007674][T11664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.177006][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.192057][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.205293][T11721] bridge_slave_0: entered allmulticast mode [ 305.216012][T11721] bridge_slave_0: entered promiscuous mode [ 305.222193][ T5836] Bluetooth: hci0: command tx timeout [ 305.268007][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.276460][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.283851][T11721] bridge_slave_1: entered allmulticast mode [ 305.291152][T11721] bridge_slave_1: entered promiscuous mode [ 305.299093][T11762] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1513'. [ 305.375143][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.412595][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.482173][ T13] hsr_slave_0: left promiscuous mode [ 305.496666][ T13] hsr_slave_1: left promiscuous mode [ 305.506980][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.519521][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.528097][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.539443][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.546663][ T5836] Bluetooth: hci2: command tx timeout [ 305.557241][ T13] hsr_slave_0: left promiscuous mode [ 305.563116][ T13] hsr_slave_1: left promiscuous mode [ 305.568851][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.576448][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.584501][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.592679][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.628399][ T13] veth1_macvtap: left promiscuous mode [ 305.634047][ T13] veth0_macvtap: left promiscuous mode [ 305.639635][ T13] veth1_vlan: left promiscuous mode [ 305.645768][ T13] veth0_vlan: left promiscuous mode [ 305.652965][ T13] veth1_macvtap: left promiscuous mode [ 305.658491][ T13] veth0_macvtap: left promiscuous mode [ 305.664250][ T13] veth1_vlan: left promiscuous mode [ 305.669574][ T13] veth0_vlan: left promiscuous mode [ 306.021757][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 306.150309][ T13] team0 (unregistering): Port device team_slave_1 removed [ 306.186683][ T13] team0 (unregistering): Port device team_slave_0 removed [ 306.835178][ T13] team0 (unregistering): Port device team_slave_1 removed [ 306.877160][ T13] team0 (unregistering): Port device team_slave_0 removed [ 306.904129][ T5836] Bluetooth: hci1: command tx timeout [ 307.246876][T11721] team0: Port device team_slave_0 added [ 307.259235][T11721] team0: Port device team_slave_1 added [ 307.301844][ T5836] Bluetooth: hci0: command tx timeout [ 307.373279][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.380286][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.408140][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.438844][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.445994][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.525209][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.621913][ T5836] Bluetooth: hci2: command tx timeout [ 307.709550][T11721] hsr_slave_0: entered promiscuous mode [ 307.734372][T11721] hsr_slave_1: entered promiscuous mode [ 307.740781][T11721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.756167][T11721] Cannot create hsr debugfs directory [ 307.957160][T11673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.979632][T11664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.001497][T11673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.017734][T11673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.062311][T11673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.101809][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 308.154539][T11664] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.185854][T11670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.192227][T10931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.218742][T11670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.252763][T11670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.266888][T11670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.310392][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.317624][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.327976][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.335191][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.378861][T11721] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.531160][T11721] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.650615][T11721] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.701052][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.743951][T11721] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.791071][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.834564][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.841780][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.904186][ T62] wlan0: Trigger new scan to find an IBSS to join [ 308.910407][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.910726][ T62] ------------[ cut here ]------------ [ 308.917779][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.948109][ T13] bridge_slave_1: left allmulticast mode [ 308.951608][ T62] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 308.961898][ T62] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 308.965494][ T13] bridge_slave_1: left promiscuous mode [ 308.975446][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 308.975473][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 308.975487][ T62] Workqueue: events_unbound cfg80211_wiphy_work [ 308.975515][ T62] Call Trace: [ 308.975523][ T62] [ 308.975532][ T62] dump_stack_lvl+0x189/0x250 [ 308.975567][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.975595][ T62] ? __pfx__printk+0x10/0x10 [ 308.975630][ T62] ubsan_epilogue+0xa/0x40 [ 308.975649][ T62] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 308.975686][ T62] ieee80211_request_ibss_scan+0x600/0x8b0 [ 308.975740][ T62] ieee80211_ibss_work+0xde7/0x1060 [ 308.975784][ T62] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 308.975844][ T62] ? ieee80211_iface_work+0xf39/0xfe0 [ 308.975867][ T62] ? rcu_is_watching+0x15/0xb0 [ 308.975905][ T62] cfg80211_wiphy_work+0x2dc/0x460 [ 308.975930][ T62] ? process_scheduled_works+0x9ec/0x17a0 [ 308.975973][ T62] process_scheduled_works+0xadb/0x17a0 [ 308.976039][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 308.976091][ T62] worker_thread+0x8a0/0xda0 [ 308.976142][ T62] kthread+0x70e/0x8a0 [ 308.976171][ T62] ? __pfx_worker_thread+0x10/0x10 [ 308.976190][ T62] ? __pfx_kthread+0x10/0x10 [ 308.976216][ T62] ? __pfx_kthread+0x10/0x10 [ 308.976237][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.976267][ T62] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.976300][ T62] ? __pfx_kthread+0x10/0x10 [ 308.976325][ T62] ret_from_fork+0x4b/0x80 [ 308.976345][ T62] ? __pfx_kthread+0x10/0x10 [ 308.976368][ T62] ret_from_fork_asm+0x1a/0x30 [ 308.976407][ T62] [ 308.976414][ T62] ---[ end trace ]--- [ 308.986253][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.993854][ T62] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 308.993874][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 308.993901][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 308.993917][ T62] Workqueue: events_unbound cfg80211_wiphy_work [ 308.993958][ T62] Call Trace: [ 308.993967][ T62] [ 308.993978][ T62] dump_stack_lvl+0x99/0x250 [ 308.994013][ T62] ? __asan_memcpy+0x40/0x70 [ 308.994036][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.994068][ T62] ? __pfx__printk+0x10/0x10 [ 308.994107][ T62] panic+0x2db/0x790 [ 308.994145][ T62] ? __pfx_panic+0x10/0x10 [ 308.994172][ T62] ? _printk+0xcf/0x120 [ 308.994201][ T62] ? __pfx__printk+0x10/0x10 [ 308.994233][ T62] check_panic_on_warn+0x89/0xb0 [ 308.994265][ T62] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 308.994300][ T62] ieee80211_request_ibss_scan+0x600/0x8b0 [ 308.994352][ T62] ieee80211_ibss_work+0xde7/0x1060 [ 308.994422][ T62] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 308.994467][ T62] ? ieee80211_iface_work+0xf39/0xfe0 [ 308.994491][ T62] ? rcu_is_watching+0x15/0xb0 [ 308.994529][ T62] cfg80211_wiphy_work+0x2dc/0x460 [ 308.994555][ T62] ? process_scheduled_works+0x9ec/0x17a0 [ 308.994591][ T62] process_scheduled_works+0xadb/0x17a0 [ 308.994680][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 308.994736][ T62] worker_thread+0x8a0/0xda0 [ 308.994790][ T62] kthread+0x70e/0x8a0 [ 308.994820][ T62] ? __pfx_worker_thread+0x10/0x10 [ 308.994841][ T62] ? __pfx_kthread+0x10/0x10 [ 308.994868][ T62] ? __pfx_kthread+0x10/0x10 [ 308.994892][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.994924][ T62] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.994965][ T62] ? __pfx_kthread+0x10/0x10 [ 308.994990][ T62] ret_from_fork+0x4b/0x80 [ 308.995011][ T62] ? __pfx_kthread+0x10/0x10 [ 308.995036][ T62] ret_from_fork_asm+0x1a/0x30 [ 308.995077][ T62] [ 309.003677][ T62] Kernel Offset: disabled