last executing test programs: 1m1.882373165s ago: executing program 0 (id=482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180aaaaaaaaffffffffffff0800450000840000000000019078ac1e0001ac1414aa0b039078030000004a000006fffffff0002ff8ffac14140ae0000101440cb931ac1414bb00000007442c19e1e000000100000088ac1e010100000800ffffffff00000008e000000100000852ac04003700000004000000e00000026401010164010102ac14143b7ffc054f2f219ead65bb2aab00019404000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000000000090002fe73797a30000000001800078008000840000000000c00018008000140e000000005000500020000000500010006000000"], 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='illinois\x00', 0x9) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0xc84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc54, 0x2, [@TCA_BASIC_POLICE={0xc50, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8ab5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d3, 0x1, 0x0, 0x4, 0xe, 0x9, 0x4, 0x81, 0x2545cfe9, 0x401, 0x5, 0x0, 0x2, 0xe, 0x80, 0x2, 0x7fff, 0x60, 0xc, 0x384, 0x47a, 0x10000, 0xb, 0xfa, 0x0, 0x100, 0x0, 0x1000, 0x9, 0x6, 0x813a, 0x5, 0x7, 0x7fffffff, 0xffff, 0xf08, 0x8203, 0x7, 0xff, 0x6, 0x6, 0x2, 0x3, 0x3, 0x5, 0xb, 0x9, 0x7, 0x4, 0x5, 0xfffffffd, 0x9, 0x7, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x9, 0xffffffff, 0x10000, 0xfffffffc, 0x4, 0x4aa3, 0x0, 0x3, 0x6, 0xa000000, 0x10001, 0x7, 0x4, 0xffffffff, 0x58, 0x2, 0x4, 0x7000000, 0xfffffff1, 0x6, 0xb01, 0xc, 0x9, 0x6, 0x9e, 0x4, 0x30, 0x2, 0xd, 0xa2, 0xd, 0xfffffff8, 0x7, 0x400, 0x7, 0xcb05, 0xff, 0x0, 0x4, 0x4, 0x63, 0x10000, 0x200, 0x0, 0xfff, 0x5, 0x5, 0x9, 0x5653, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x9, 0xffff, 0x1, 0x2, 0x9a4, 0x2, 0x5, 0xedc, 0x9, 0x75, 0x5, 0xfd, 0x5, 0x9, 0x9a7, 0x394, 0x5, 0x9, 0xa, 0x0, 0x8000, 0x1000, 0x5, 0x7, 0x13, 0x4, 0x7ac, 0x3, 0xf, 0xc9, 0x3, 0x0, 0x3, 0x4, 0x7, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffffff, 0x5, 0x8, 0x7fff, 0x77, 0x1ff, 0x2c17, 0x116a, 0xfffffffa, 0x10001, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x7, 0xae2b, 0xe42, 0x2, 0x11b2343c, 0x9d, 0x3581, 0xb34, 0x7, 0x8, 0x400, 0x6, 0xfffffff5, 0x3, 0x3, 0x5986, 0x5c0, 0x3, 0x7, 0x1, 0x8f08ac0, 0x10, 0x38, 0x1ff, 0x0, 0xfffffffa, 0x0, 0x8, 0xa98, 0x7ff, 0x3, 0x8, 0x1, 0xd824, 0x6, 0x3, 0x81, 0x9, 0x8, 0xebf7, 0x6368, 0x4, 0x6, 0x1, 0xfffffffb, 0x7ff, 0xfffffff9, 0x3, 0x593, 0x0, 0xffff9db7, 0x5, 0x4, 0x10, 0x0, 0x6e, 0xb4e, 0x39be601a, 0x3, 0x800, 0xfff, 0xde, 0xffffffff, 0xfffffff8, 0x27, 0x9bf7, 0xfffffffe, 0x8, 0x1, 0x7, 0x9, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xff, 0x1, 0x9c7, 0x10001, 0x101, 0xd, 0x5, 0x0, 0x6, 0x4, 0x6, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xffffffdf, 0x5842, 0x1, 0xc672, 0x0, 0x32, 0x2, 0x1, 0x9, 0xd, 0x16c, 0x401, 0x4, 0xffff4972, 0xffffffff, 0x5, 0xb, 0x1ef1, 0x8, 0xfffffffb, 0x8, 0xc52, 0x8, 0x8, 0x2, 0x2, 0x93e, 0x5, 0x80000000, 0x7fffffff, 0x6495, 0xc9, 0x1, 0x8, 0x5, 0x7, 0x3, 0x3, 0xb92, 0x1db7, 0x446, 0xd1, 0x5, 0x7fffffff, 0x45, 0x3, 0x7, 0xc, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x3, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0xb, 0x7, 0x6, 0x57f5, 0x3, 0xa, 0x200, 0x6, 0xc, 0x0, 0x40, 0x80000000, 0x8, 0x7, 0x1, 0xfffffffd, 0x7, 0x4, 0x2, 0xdc11310, 0x40, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x9, 0x10, 0x4, 0x101, 0x10000, 0x7, 0x8, 0x52, 0x2cbe, 0x9, 0xb, 0x7ff, 0x58, 0x7, 0x9, 0x3, 0xf, 0x0, 0x0, 0x1, 0x0, 0xfff, 0xfffff800, 0xffffffff, 0x153a, 0x7, 0x7c39, 0x8, 0x7f, 0x37, 0xd, 0xff, 0x8, 0xffffffff, 0x8, 0x101, 0x9, 0x1, 0x3, 0x8, 0x5, 0x5, 0xffffffff, 0x9, 0xaa000000, 0x3c1, 0xa, 0x4, 0x580, 0x7d4284bb, 0x80000001, 0x3ff, 0x4, 0xc0000, 0xfffffff9, 0x8, 0x9, 0x7af, 0xffffffff, 0x5, 0x8, 0xd, 0x2, 0x5, 0x2, 0x6, 0x6, 0x9, 0x40000, 0xffff, 0xb26, 0x7, 0x4, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x4, 0x4, 0x9, 0x9, 0xffff8001, 0x0, 0x3, 0x7, 0xff, 0x10000, 0x2, 0x6, 0x22, 0x7, 0x5, 0x9, 0x1000, 0x10, 0x7fffffff, 0xfffffff8, 0x8000, 0x9, 0x6, 0x0, 0xfffff126, 0xbb, 0xeb, 0x6, 0x40, 0x9f33, 0x0, 0x6, 0x4, 0x1, 0x3, 0xb4, 0x5, 0x8, 0x8, 0x1, 0x0, 0x0, 0x44, 0x6, 0x10001, 0x0, 0xcbad, 0x7, 0x8, 0x8, 0x8, 0x81, 0x7, 0xff, 0x0, 0xd8f, 0xb9e, 0x4, 0x9, 0x8, 0xaa8, 0x441, 0x100, 0x4, 0xfffffffd, 0x6, 0xb4f, 0x2, 0x7, 0x4, 0x7, 0x487, 0x6, 0x7, 0xfff, 0x1a1e, 0x7, 0xc6, 0x7, 0x5, 0x0, 0x401, 0x4b3, 0x7, 0x8001, 0x10, 0x0, 0xc915, 0x0, 0x2ad1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xfffff90b, 0x1000, 0x1ba9b80c, 0xe552081, 0x6c6, 0x2, 0x5, 0x9, 0x0, 0x0, 0xc, 0xd75, 0x1, 0x2d06, 0x1, 0x40, 0x8, 0x6, 0x8, 0xfff, 0x1, 0x81, 0x10001, 0x5, 0x1, 0x3, 0xfff, 0xd3, 0xcbde, 0xd3, 0x8, 0xb, 0xc000, 0x100, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x3, 0x7, 0x8, 0x3, 0x9, 0xfffffff9, 0xf172, 0xa2, 0x810, 0x8001, 0x39ae, 0xc2b9, 0x9, 0x6, 0x3, 0x5, 0x40, 0x3, 0xec, 0x9, 0x3, 0x0, 0x800, 0x7f, 0x2, 0x1, 0x200, 0xbd, 0x1, 0xd, 0x100, 0xff, 0x3, 0x6, 0x5, 0x7f, 0x6, 0xfdb, 0x18, 0x8, 0x5, 0x60ff, 0x1000, 0xfff, 0x5, 0x0, 0xecf, 0x3ff, 0x8, 0x1, 0x5, 0xfffffffa, 0xf1, 0x4e691, 0x81da, 0x8, 0x7fffffff, 0x8, 0x5, 0xe, 0xffff, 0x3, 0x65a8, 0x3, 0x4, 0x5, 0xf83c, 0x0, 0x2, 0x4, 0x80, 0x1, 0xff, 0x3, 0x4101, 0x1, 0x4, 0x7, 0x3, 0x0, 0x7fffffff, 0xc, 0x0, 0x4, 0xc0000, 0x8, 0xffffffff, 0x7, 0x2, 0xe, 0x2e03, 0x75cf, 0x7, 0x1, 0x8, 0x3, 0xbfa3, 0x6, 0x401, 0x80000001, 0x38e, 0x3, 0x2d69, 0xb8800000, 0x75, 0x380, 0x4, 0x8d60, 0xdef3, 0x4, 0x7e7, 0x6, 0x6, 0x8, 0xfffffffd, 0x32, 0x4, 0x0, 0x0, 0x523, 0x80000001, 0xd, 0x9, 0x10001, 0xfffffffa, 0x40, 0x1, 0x1, 0x2, 0x8001, 0x7, 0xf, 0x8001, 0x0, 0x8, 0x0, 0x9, 0x9, 0x2, 0x9, 0x8d, 0x7, 0x3, 0x5, 0x3, 0x6, 0x8000, 0x0, 0x61, 0x10000, 0x6, 0x80000000, 0xbb18, 0x8, 0x1000, 0xffffffff, 0x1a5ac654, 0x9, 0xfffffffa, 0x80000001, 0x800, 0x3, 0x8e1, 0x6, 0x0, 0x3, 0x1ff, 0x9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfd800000, 0x3, 0x0, 0x6, 0x9, 0x2aa, 0x9, 0xfffffffc, 0x70e, 0x32a, 0x40, 0x0, 0x3, 0x91, 0x1b, 0x78, 0x7, 0x5, 0x101, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4, 0x7, 0x1, 0xa, 0x1ff, 0x200, 0x7, 0xbd5b, 0x6, 0x6, 0x0, 0xe1, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d6800000000}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r10, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="3367c23cd173b3eff3739b557b2d4c6cfab7d435a626d6cece49cdcdaa65f31cef40fb77be8f75322216c56bde28b8c4609a56d884677ba4a4ba36405cbce1e1a8e6459ceaa183454a08948ea207c91a0e5596a4927f2af6d02fa39edd1e4d1a662ea4f783f1411df545fbe2b8a0da959009a869a478d4357e0e05fb85fac876a847df82837f0593290bb17d4d9c403c1bb91e9043a08a8a97bc447769d80b1c53420e36d83b564a1a4a9e4efab4e28bc40e86206d17071327f6b629010047cc3fe0", 0xc2}, {&(0x7f0000000280)="79eb8918f0e6a6d74b1182d130a0ae102c85bac2687832b6087326fac04be68e963aa69f59e0d4a498a6986527974136338915c550204cb1400676b58145aa3e7fd2e2502b5814d2b5336f58", 0x4c}, {&(0x7f0000000600)="8a74c06467569bf91c3afbd588ca9c7baa6f2a3d620b59aad8582a9ea8e0c246fe1248dc217e71d92bb37cc3a9bc2fb4ca985aa57ce61f5dc7015208b68fda8c2757bf8bb1a25e95abe865b389eb1db19a52f324724900031c45eea344272e661b780ee3783e9fcff1c723d95c4e568cff57e8a99eaa60d481f1809dfdcbb8af6c7c10c2b50ee6fd6ab3a5f054b2fe1a6f7d1f1fc628498bb27241f5017503dcbbba113c01750a34beffbf0d861a314ed74310cf7712c671584f81ca264c00828b8db659300bace0a47f3e8b9173141fad3a727bf5ffe9822c037d7d8101bc621e436b65f60696a502124a3894e8a415edd51eba99e80c", 0xf7}, {&(0x7f0000000700)="469cfc7473ab7c784e7858f19717ce004a1834523b1d132202ede82c1db694ee66a530306b95f3b0bf595f00b8bf6603039b56ceec08b5fc9d992d8935cd71875905136959a9f2a2e39e73083cce166bc4857079cbac00da47b2ff4df7dac2f854606b5d20c3d77020c26e4017ab680f62dde43f9fedf590ab30f93eaa7ef7a98c8374b326daf37afb8d63d5ebbc9163d329844267a351efc15aca499c880434cdb345ea5691999a73ef4e69c7", 0xad}], 0x4, 0x9, 0xd9) 51.616448336s ago: executing program 0 (id=482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180aaaaaaaaffffffffffff0800450000840000000000019078ac1e0001ac1414aa0b039078030000004a000006fffffff0002ff8ffac14140ae0000101440cb931ac1414bb00000007442c19e1e000000100000088ac1e010100000800ffffffff00000008e000000100000852ac04003700000004000000e00000026401010164010102ac14143b7ffc054f2f219ead65bb2aab00019404000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000000000090002fe73797a30000000001800078008000840000000000c00018008000140e000000005000500020000000500010006000000"], 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='illinois\x00', 0x9) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0xc84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc54, 0x2, [@TCA_BASIC_POLICE={0xc50, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8ab5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d3, 0x1, 0x0, 0x4, 0xe, 0x9, 0x4, 0x81, 0x2545cfe9, 0x401, 0x5, 0x0, 0x2, 0xe, 0x80, 0x2, 0x7fff, 0x60, 0xc, 0x384, 0x47a, 0x10000, 0xb, 0xfa, 0x0, 0x100, 0x0, 0x1000, 0x9, 0x6, 0x813a, 0x5, 0x7, 0x7fffffff, 0xffff, 0xf08, 0x8203, 0x7, 0xff, 0x6, 0x6, 0x2, 0x3, 0x3, 0x5, 0xb, 0x9, 0x7, 0x4, 0x5, 0xfffffffd, 0x9, 0x7, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x9, 0xffffffff, 0x10000, 0xfffffffc, 0x4, 0x4aa3, 0x0, 0x3, 0x6, 0xa000000, 0x10001, 0x7, 0x4, 0xffffffff, 0x58, 0x2, 0x4, 0x7000000, 0xfffffff1, 0x6, 0xb01, 0xc, 0x9, 0x6, 0x9e, 0x4, 0x30, 0x2, 0xd, 0xa2, 0xd, 0xfffffff8, 0x7, 0x400, 0x7, 0xcb05, 0xff, 0x0, 0x4, 0x4, 0x63, 0x10000, 0x200, 0x0, 0xfff, 0x5, 0x5, 0x9, 0x5653, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x9, 0xffff, 0x1, 0x2, 0x9a4, 0x2, 0x5, 0xedc, 0x9, 0x75, 0x5, 0xfd, 0x5, 0x9, 0x9a7, 0x394, 0x5, 0x9, 0xa, 0x0, 0x8000, 0x1000, 0x5, 0x7, 0x13, 0x4, 0x7ac, 0x3, 0xf, 0xc9, 0x3, 0x0, 0x3, 0x4, 0x7, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffffff, 0x5, 0x8, 0x7fff, 0x77, 0x1ff, 0x2c17, 0x116a, 0xfffffffa, 0x10001, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x7, 0xae2b, 0xe42, 0x2, 0x11b2343c, 0x9d, 0x3581, 0xb34, 0x7, 0x8, 0x400, 0x6, 0xfffffff5, 0x3, 0x3, 0x5986, 0x5c0, 0x3, 0x7, 0x1, 0x8f08ac0, 0x10, 0x38, 0x1ff, 0x0, 0xfffffffa, 0x0, 0x8, 0xa98, 0x7ff, 0x3, 0x8, 0x1, 0xd824, 0x6, 0x3, 0x81, 0x9, 0x8, 0xebf7, 0x6368, 0x4, 0x6, 0x1, 0xfffffffb, 0x7ff, 0xfffffff9, 0x3, 0x593, 0x0, 0xffff9db7, 0x5, 0x4, 0x10, 0x0, 0x6e, 0xb4e, 0x39be601a, 0x3, 0x800, 0xfff, 0xde, 0xffffffff, 0xfffffff8, 0x27, 0x9bf7, 0xfffffffe, 0x8, 0x1, 0x7, 0x9, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xff, 0x1, 0x9c7, 0x10001, 0x101, 0xd, 0x5, 0x0, 0x6, 0x4, 0x6, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xffffffdf, 0x5842, 0x1, 0xc672, 0x0, 0x32, 0x2, 0x1, 0x9, 0xd, 0x16c, 0x401, 0x4, 0xffff4972, 0xffffffff, 0x5, 0xb, 0x1ef1, 0x8, 0xfffffffb, 0x8, 0xc52, 0x8, 0x8, 0x2, 0x2, 0x93e, 0x5, 0x80000000, 0x7fffffff, 0x6495, 0xc9, 0x1, 0x8, 0x5, 0x7, 0x3, 0x3, 0xb92, 0x1db7, 0x446, 0xd1, 0x5, 0x7fffffff, 0x45, 0x3, 0x7, 0xc, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x3, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0xb, 0x7, 0x6, 0x57f5, 0x3, 0xa, 0x200, 0x6, 0xc, 0x0, 0x40, 0x80000000, 0x8, 0x7, 0x1, 0xfffffffd, 0x7, 0x4, 0x2, 0xdc11310, 0x40, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x9, 0x10, 0x4, 0x101, 0x10000, 0x7, 0x8, 0x52, 0x2cbe, 0x9, 0xb, 0x7ff, 0x58, 0x7, 0x9, 0x3, 0xf, 0x0, 0x0, 0x1, 0x0, 0xfff, 0xfffff800, 0xffffffff, 0x153a, 0x7, 0x7c39, 0x8, 0x7f, 0x37, 0xd, 0xff, 0x8, 0xffffffff, 0x8, 0x101, 0x9, 0x1, 0x3, 0x8, 0x5, 0x5, 0xffffffff, 0x9, 0xaa000000, 0x3c1, 0xa, 0x4, 0x580, 0x7d4284bb, 0x80000001, 0x3ff, 0x4, 0xc0000, 0xfffffff9, 0x8, 0x9, 0x7af, 0xffffffff, 0x5, 0x8, 0xd, 0x2, 0x5, 0x2, 0x6, 0x6, 0x9, 0x40000, 0xffff, 0xb26, 0x7, 0x4, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x4, 0x4, 0x9, 0x9, 0xffff8001, 0x0, 0x3, 0x7, 0xff, 0x10000, 0x2, 0x6, 0x22, 0x7, 0x5, 0x9, 0x1000, 0x10, 0x7fffffff, 0xfffffff8, 0x8000, 0x9, 0x6, 0x0, 0xfffff126, 0xbb, 0xeb, 0x6, 0x40, 0x9f33, 0x0, 0x6, 0x4, 0x1, 0x3, 0xb4, 0x5, 0x8, 0x8, 0x1, 0x0, 0x0, 0x44, 0x6, 0x10001, 0x0, 0xcbad, 0x7, 0x8, 0x8, 0x8, 0x81, 0x7, 0xff, 0x0, 0xd8f, 0xb9e, 0x4, 0x9, 0x8, 0xaa8, 0x441, 0x100, 0x4, 0xfffffffd, 0x6, 0xb4f, 0x2, 0x7, 0x4, 0x7, 0x487, 0x6, 0x7, 0xfff, 0x1a1e, 0x7, 0xc6, 0x7, 0x5, 0x0, 0x401, 0x4b3, 0x7, 0x8001, 0x10, 0x0, 0xc915, 0x0, 0x2ad1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xfffff90b, 0x1000, 0x1ba9b80c, 0xe552081, 0x6c6, 0x2, 0x5, 0x9, 0x0, 0x0, 0xc, 0xd75, 0x1, 0x2d06, 0x1, 0x40, 0x8, 0x6, 0x8, 0xfff, 0x1, 0x81, 0x10001, 0x5, 0x1, 0x3, 0xfff, 0xd3, 0xcbde, 0xd3, 0x8, 0xb, 0xc000, 0x100, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x3, 0x7, 0x8, 0x3, 0x9, 0xfffffff9, 0xf172, 0xa2, 0x810, 0x8001, 0x39ae, 0xc2b9, 0x9, 0x6, 0x3, 0x5, 0x40, 0x3, 0xec, 0x9, 0x3, 0x0, 0x800, 0x7f, 0x2, 0x1, 0x200, 0xbd, 0x1, 0xd, 0x100, 0xff, 0x3, 0x6, 0x5, 0x7f, 0x6, 0xfdb, 0x18, 0x8, 0x5, 0x60ff, 0x1000, 0xfff, 0x5, 0x0, 0xecf, 0x3ff, 0x8, 0x1, 0x5, 0xfffffffa, 0xf1, 0x4e691, 0x81da, 0x8, 0x7fffffff, 0x8, 0x5, 0xe, 0xffff, 0x3, 0x65a8, 0x3, 0x4, 0x5, 0xf83c, 0x0, 0x2, 0x4, 0x80, 0x1, 0xff, 0x3, 0x4101, 0x1, 0x4, 0x7, 0x3, 0x0, 0x7fffffff, 0xc, 0x0, 0x4, 0xc0000, 0x8, 0xffffffff, 0x7, 0x2, 0xe, 0x2e03, 0x75cf, 0x7, 0x1, 0x8, 0x3, 0xbfa3, 0x6, 0x401, 0x80000001, 0x38e, 0x3, 0x2d69, 0xb8800000, 0x75, 0x380, 0x4, 0x8d60, 0xdef3, 0x4, 0x7e7, 0x6, 0x6, 0x8, 0xfffffffd, 0x32, 0x4, 0x0, 0x0, 0x523, 0x80000001, 0xd, 0x9, 0x10001, 0xfffffffa, 0x40, 0x1, 0x1, 0x2, 0x8001, 0x7, 0xf, 0x8001, 0x0, 0x8, 0x0, 0x9, 0x9, 0x2, 0x9, 0x8d, 0x7, 0x3, 0x5, 0x3, 0x6, 0x8000, 0x0, 0x61, 0x10000, 0x6, 0x80000000, 0xbb18, 0x8, 0x1000, 0xffffffff, 0x1a5ac654, 0x9, 0xfffffffa, 0x80000001, 0x800, 0x3, 0x8e1, 0x6, 0x0, 0x3, 0x1ff, 0x9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfd800000, 0x3, 0x0, 0x6, 0x9, 0x2aa, 0x9, 0xfffffffc, 0x70e, 0x32a, 0x40, 0x0, 0x3, 0x91, 0x1b, 0x78, 0x7, 0x5, 0x101, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4, 0x7, 0x1, 0xa, 0x1ff, 0x200, 0x7, 0xbd5b, 0x6, 0x6, 0x0, 0xe1, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d6800000000}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r10, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="3367c23cd173b3eff3739b557b2d4c6cfab7d435a626d6cece49cdcdaa65f31cef40fb77be8f75322216c56bde28b8c4609a56d884677ba4a4ba36405cbce1e1a8e6459ceaa183454a08948ea207c91a0e5596a4927f2af6d02fa39edd1e4d1a662ea4f783f1411df545fbe2b8a0da959009a869a478d4357e0e05fb85fac876a847df82837f0593290bb17d4d9c403c1bb91e9043a08a8a97bc447769d80b1c53420e36d83b564a1a4a9e4efab4e28bc40e86206d17071327f6b629010047cc3fe0", 0xc2}, {&(0x7f0000000280)="79eb8918f0e6a6d74b1182d130a0ae102c85bac2687832b6087326fac04be68e963aa69f59e0d4a498a6986527974136338915c550204cb1400676b58145aa3e7fd2e2502b5814d2b5336f58", 0x4c}, {&(0x7f0000000600)="8a74c06467569bf91c3afbd588ca9c7baa6f2a3d620b59aad8582a9ea8e0c246fe1248dc217e71d92bb37cc3a9bc2fb4ca985aa57ce61f5dc7015208b68fda8c2757bf8bb1a25e95abe865b389eb1db19a52f324724900031c45eea344272e661b780ee3783e9fcff1c723d95c4e568cff57e8a99eaa60d481f1809dfdcbb8af6c7c10c2b50ee6fd6ab3a5f054b2fe1a6f7d1f1fc628498bb27241f5017503dcbbba113c01750a34beffbf0d861a314ed74310cf7712c671584f81ca264c00828b8db659300bace0a47f3e8b9173141fad3a727bf5ffe9822c037d7d8101bc621e436b65f60696a502124a3894e8a415edd51eba99e80c", 0xf7}, {&(0x7f0000000700)="469cfc7473ab7c784e7858f19717ce004a1834523b1d132202ede82c1db694ee66a530306b95f3b0bf595f00b8bf6603039b56ceec08b5fc9d992d8935cd71875905136959a9f2a2e39e73083cce166bc4857079cbac00da47b2ff4df7dac2f854606b5d20c3d77020c26e4017ab680f62dde43f9fedf590ab30f93eaa7ef7a98c8374b326daf37afb8d63d5ebbc9163d329844267a351efc15aca499c880434cdb345ea5691999a73ef4e69c7", 0xad}], 0x4, 0x9, 0xd9) 39.826581867s ago: executing program 0 (id=482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180aaaaaaaaffffffffffff0800450000840000000000019078ac1e0001ac1414aa0b039078030000004a000006fffffff0002ff8ffac14140ae0000101440cb931ac1414bb00000007442c19e1e000000100000088ac1e010100000800ffffffff00000008e000000100000852ac04003700000004000000e00000026401010164010102ac14143b7ffc054f2f219ead65bb2aab00019404000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000000000090002fe73797a30000000001800078008000840000000000c00018008000140e000000005000500020000000500010006000000"], 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='illinois\x00', 0x9) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0xc84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc54, 0x2, [@TCA_BASIC_POLICE={0xc50, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8ab5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d3, 0x1, 0x0, 0x4, 0xe, 0x9, 0x4, 0x81, 0x2545cfe9, 0x401, 0x5, 0x0, 0x2, 0xe, 0x80, 0x2, 0x7fff, 0x60, 0xc, 0x384, 0x47a, 0x10000, 0xb, 0xfa, 0x0, 0x100, 0x0, 0x1000, 0x9, 0x6, 0x813a, 0x5, 0x7, 0x7fffffff, 0xffff, 0xf08, 0x8203, 0x7, 0xff, 0x6, 0x6, 0x2, 0x3, 0x3, 0x5, 0xb, 0x9, 0x7, 0x4, 0x5, 0xfffffffd, 0x9, 0x7, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x9, 0xffffffff, 0x10000, 0xfffffffc, 0x4, 0x4aa3, 0x0, 0x3, 0x6, 0xa000000, 0x10001, 0x7, 0x4, 0xffffffff, 0x58, 0x2, 0x4, 0x7000000, 0xfffffff1, 0x6, 0xb01, 0xc, 0x9, 0x6, 0x9e, 0x4, 0x30, 0x2, 0xd, 0xa2, 0xd, 0xfffffff8, 0x7, 0x400, 0x7, 0xcb05, 0xff, 0x0, 0x4, 0x4, 0x63, 0x10000, 0x200, 0x0, 0xfff, 0x5, 0x5, 0x9, 0x5653, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x9, 0xffff, 0x1, 0x2, 0x9a4, 0x2, 0x5, 0xedc, 0x9, 0x75, 0x5, 0xfd, 0x5, 0x9, 0x9a7, 0x394, 0x5, 0x9, 0xa, 0x0, 0x8000, 0x1000, 0x5, 0x7, 0x13, 0x4, 0x7ac, 0x3, 0xf, 0xc9, 0x3, 0x0, 0x3, 0x4, 0x7, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffffff, 0x5, 0x8, 0x7fff, 0x77, 0x1ff, 0x2c17, 0x116a, 0xfffffffa, 0x10001, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x7, 0xae2b, 0xe42, 0x2, 0x11b2343c, 0x9d, 0x3581, 0xb34, 0x7, 0x8, 0x400, 0x6, 0xfffffff5, 0x3, 0x3, 0x5986, 0x5c0, 0x3, 0x7, 0x1, 0x8f08ac0, 0x10, 0x38, 0x1ff, 0x0, 0xfffffffa, 0x0, 0x8, 0xa98, 0x7ff, 0x3, 0x8, 0x1, 0xd824, 0x6, 0x3, 0x81, 0x9, 0x8, 0xebf7, 0x6368, 0x4, 0x6, 0x1, 0xfffffffb, 0x7ff, 0xfffffff9, 0x3, 0x593, 0x0, 0xffff9db7, 0x5, 0x4, 0x10, 0x0, 0x6e, 0xb4e, 0x39be601a, 0x3, 0x800, 0xfff, 0xde, 0xffffffff, 0xfffffff8, 0x27, 0x9bf7, 0xfffffffe, 0x8, 0x1, 0x7, 0x9, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xff, 0x1, 0x9c7, 0x10001, 0x101, 0xd, 0x5, 0x0, 0x6, 0x4, 0x6, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xffffffdf, 0x5842, 0x1, 0xc672, 0x0, 0x32, 0x2, 0x1, 0x9, 0xd, 0x16c, 0x401, 0x4, 0xffff4972, 0xffffffff, 0x5, 0xb, 0x1ef1, 0x8, 0xfffffffb, 0x8, 0xc52, 0x8, 0x8, 0x2, 0x2, 0x93e, 0x5, 0x80000000, 0x7fffffff, 0x6495, 0xc9, 0x1, 0x8, 0x5, 0x7, 0x3, 0x3, 0xb92, 0x1db7, 0x446, 0xd1, 0x5, 0x7fffffff, 0x45, 0x3, 0x7, 0xc, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x3, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0xb, 0x7, 0x6, 0x57f5, 0x3, 0xa, 0x200, 0x6, 0xc, 0x0, 0x40, 0x80000000, 0x8, 0x7, 0x1, 0xfffffffd, 0x7, 0x4, 0x2, 0xdc11310, 0x40, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x9, 0x10, 0x4, 0x101, 0x10000, 0x7, 0x8, 0x52, 0x2cbe, 0x9, 0xb, 0x7ff, 0x58, 0x7, 0x9, 0x3, 0xf, 0x0, 0x0, 0x1, 0x0, 0xfff, 0xfffff800, 0xffffffff, 0x153a, 0x7, 0x7c39, 0x8, 0x7f, 0x37, 0xd, 0xff, 0x8, 0xffffffff, 0x8, 0x101, 0x9, 0x1, 0x3, 0x8, 0x5, 0x5, 0xffffffff, 0x9, 0xaa000000, 0x3c1, 0xa, 0x4, 0x580, 0x7d4284bb, 0x80000001, 0x3ff, 0x4, 0xc0000, 0xfffffff9, 0x8, 0x9, 0x7af, 0xffffffff, 0x5, 0x8, 0xd, 0x2, 0x5, 0x2, 0x6, 0x6, 0x9, 0x40000, 0xffff, 0xb26, 0x7, 0x4, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x4, 0x4, 0x9, 0x9, 0xffff8001, 0x0, 0x3, 0x7, 0xff, 0x10000, 0x2, 0x6, 0x22, 0x7, 0x5, 0x9, 0x1000, 0x10, 0x7fffffff, 0xfffffff8, 0x8000, 0x9, 0x6, 0x0, 0xfffff126, 0xbb, 0xeb, 0x6, 0x40, 0x9f33, 0x0, 0x6, 0x4, 0x1, 0x3, 0xb4, 0x5, 0x8, 0x8, 0x1, 0x0, 0x0, 0x44, 0x6, 0x10001, 0x0, 0xcbad, 0x7, 0x8, 0x8, 0x8, 0x81, 0x7, 0xff, 0x0, 0xd8f, 0xb9e, 0x4, 0x9, 0x8, 0xaa8, 0x441, 0x100, 0x4, 0xfffffffd, 0x6, 0xb4f, 0x2, 0x7, 0x4, 0x7, 0x487, 0x6, 0x7, 0xfff, 0x1a1e, 0x7, 0xc6, 0x7, 0x5, 0x0, 0x401, 0x4b3, 0x7, 0x8001, 0x10, 0x0, 0xc915, 0x0, 0x2ad1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xfffff90b, 0x1000, 0x1ba9b80c, 0xe552081, 0x6c6, 0x2, 0x5, 0x9, 0x0, 0x0, 0xc, 0xd75, 0x1, 0x2d06, 0x1, 0x40, 0x8, 0x6, 0x8, 0xfff, 0x1, 0x81, 0x10001, 0x5, 0x1, 0x3, 0xfff, 0xd3, 0xcbde, 0xd3, 0x8, 0xb, 0xc000, 0x100, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x3, 0x7, 0x8, 0x3, 0x9, 0xfffffff9, 0xf172, 0xa2, 0x810, 0x8001, 0x39ae, 0xc2b9, 0x9, 0x6, 0x3, 0x5, 0x40, 0x3, 0xec, 0x9, 0x3, 0x0, 0x800, 0x7f, 0x2, 0x1, 0x200, 0xbd, 0x1, 0xd, 0x100, 0xff, 0x3, 0x6, 0x5, 0x7f, 0x6, 0xfdb, 0x18, 0x8, 0x5, 0x60ff, 0x1000, 0xfff, 0x5, 0x0, 0xecf, 0x3ff, 0x8, 0x1, 0x5, 0xfffffffa, 0xf1, 0x4e691, 0x81da, 0x8, 0x7fffffff, 0x8, 0x5, 0xe, 0xffff, 0x3, 0x65a8, 0x3, 0x4, 0x5, 0xf83c, 0x0, 0x2, 0x4, 0x80, 0x1, 0xff, 0x3, 0x4101, 0x1, 0x4, 0x7, 0x3, 0x0, 0x7fffffff, 0xc, 0x0, 0x4, 0xc0000, 0x8, 0xffffffff, 0x7, 0x2, 0xe, 0x2e03, 0x75cf, 0x7, 0x1, 0x8, 0x3, 0xbfa3, 0x6, 0x401, 0x80000001, 0x38e, 0x3, 0x2d69, 0xb8800000, 0x75, 0x380, 0x4, 0x8d60, 0xdef3, 0x4, 0x7e7, 0x6, 0x6, 0x8, 0xfffffffd, 0x32, 0x4, 0x0, 0x0, 0x523, 0x80000001, 0xd, 0x9, 0x10001, 0xfffffffa, 0x40, 0x1, 0x1, 0x2, 0x8001, 0x7, 0xf, 0x8001, 0x0, 0x8, 0x0, 0x9, 0x9, 0x2, 0x9, 0x8d, 0x7, 0x3, 0x5, 0x3, 0x6, 0x8000, 0x0, 0x61, 0x10000, 0x6, 0x80000000, 0xbb18, 0x8, 0x1000, 0xffffffff, 0x1a5ac654, 0x9, 0xfffffffa, 0x80000001, 0x800, 0x3, 0x8e1, 0x6, 0x0, 0x3, 0x1ff, 0x9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfd800000, 0x3, 0x0, 0x6, 0x9, 0x2aa, 0x9, 0xfffffffc, 0x70e, 0x32a, 0x40, 0x0, 0x3, 0x91, 0x1b, 0x78, 0x7, 0x5, 0x101, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4, 0x7, 0x1, 0xa, 0x1ff, 0x200, 0x7, 0xbd5b, 0x6, 0x6, 0x0, 0xe1, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d6800000000}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r10, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="3367c23cd173b3eff3739b557b2d4c6cfab7d435a626d6cece49cdcdaa65f31cef40fb77be8f75322216c56bde28b8c4609a56d884677ba4a4ba36405cbce1e1a8e6459ceaa183454a08948ea207c91a0e5596a4927f2af6d02fa39edd1e4d1a662ea4f783f1411df545fbe2b8a0da959009a869a478d4357e0e05fb85fac876a847df82837f0593290bb17d4d9c403c1bb91e9043a08a8a97bc447769d80b1c53420e36d83b564a1a4a9e4efab4e28bc40e86206d17071327f6b629010047cc3fe0", 0xc2}, {&(0x7f0000000280)="79eb8918f0e6a6d74b1182d130a0ae102c85bac2687832b6087326fac04be68e963aa69f59e0d4a498a6986527974136338915c550204cb1400676b58145aa3e7fd2e2502b5814d2b5336f58", 0x4c}, {&(0x7f0000000600)="8a74c06467569bf91c3afbd588ca9c7baa6f2a3d620b59aad8582a9ea8e0c246fe1248dc217e71d92bb37cc3a9bc2fb4ca985aa57ce61f5dc7015208b68fda8c2757bf8bb1a25e95abe865b389eb1db19a52f324724900031c45eea344272e661b780ee3783e9fcff1c723d95c4e568cff57e8a99eaa60d481f1809dfdcbb8af6c7c10c2b50ee6fd6ab3a5f054b2fe1a6f7d1f1fc628498bb27241f5017503dcbbba113c01750a34beffbf0d861a314ed74310cf7712c671584f81ca264c00828b8db659300bace0a47f3e8b9173141fad3a727bf5ffe9822c037d7d8101bc621e436b65f60696a502124a3894e8a415edd51eba99e80c", 0xf7}, {&(0x7f0000000700)="469cfc7473ab7c784e7858f19717ce004a1834523b1d132202ede82c1db694ee66a530306b95f3b0bf595f00b8bf6603039b56ceec08b5fc9d992d8935cd71875905136959a9f2a2e39e73083cce166bc4857079cbac00da47b2ff4df7dac2f854606b5d20c3d77020c26e4017ab680f62dde43f9fedf590ab30f93eaa7ef7a98c8374b326daf37afb8d63d5ebbc9163d329844267a351efc15aca499c880434cdb345ea5691999a73ef4e69c7", 0xad}], 0x4, 0x9, 0xd9) 31.605085806s ago: executing program 0 (id=482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180aaaaaaaaffffffffffff0800450000840000000000019078ac1e0001ac1414aa0b039078030000004a000006fffffff0002ff8ffac14140ae0000101440cb931ac1414bb00000007442c19e1e000000100000088ac1e010100000800ffffffff00000008e000000100000852ac04003700000004000000e00000026401010164010102ac14143b7ffc054f2f219ead65bb2aab00019404000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000000000090002fe73797a30000000001800078008000840000000000c00018008000140e000000005000500020000000500010006000000"], 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='illinois\x00', 0x9) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0xc84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc54, 0x2, [@TCA_BASIC_POLICE={0xc50, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8ab5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d3, 0x1, 0x0, 0x4, 0xe, 0x9, 0x4, 0x81, 0x2545cfe9, 0x401, 0x5, 0x0, 0x2, 0xe, 0x80, 0x2, 0x7fff, 0x60, 0xc, 0x384, 0x47a, 0x10000, 0xb, 0xfa, 0x0, 0x100, 0x0, 0x1000, 0x9, 0x6, 0x813a, 0x5, 0x7, 0x7fffffff, 0xffff, 0xf08, 0x8203, 0x7, 0xff, 0x6, 0x6, 0x2, 0x3, 0x3, 0x5, 0xb, 0x9, 0x7, 0x4, 0x5, 0xfffffffd, 0x9, 0x7, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x9, 0xffffffff, 0x10000, 0xfffffffc, 0x4, 0x4aa3, 0x0, 0x3, 0x6, 0xa000000, 0x10001, 0x7, 0x4, 0xffffffff, 0x58, 0x2, 0x4, 0x7000000, 0xfffffff1, 0x6, 0xb01, 0xc, 0x9, 0x6, 0x9e, 0x4, 0x30, 0x2, 0xd, 0xa2, 0xd, 0xfffffff8, 0x7, 0x400, 0x7, 0xcb05, 0xff, 0x0, 0x4, 0x4, 0x63, 0x10000, 0x200, 0x0, 0xfff, 0x5, 0x5, 0x9, 0x5653, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x9, 0xffff, 0x1, 0x2, 0x9a4, 0x2, 0x5, 0xedc, 0x9, 0x75, 0x5, 0xfd, 0x5, 0x9, 0x9a7, 0x394, 0x5, 0x9, 0xa, 0x0, 0x8000, 0x1000, 0x5, 0x7, 0x13, 0x4, 0x7ac, 0x3, 0xf, 0xc9, 0x3, 0x0, 0x3, 0x4, 0x7, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffffff, 0x5, 0x8, 0x7fff, 0x77, 0x1ff, 0x2c17, 0x116a, 0xfffffffa, 0x10001, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x7, 0xae2b, 0xe42, 0x2, 0x11b2343c, 0x9d, 0x3581, 0xb34, 0x7, 0x8, 0x400, 0x6, 0xfffffff5, 0x3, 0x3, 0x5986, 0x5c0, 0x3, 0x7, 0x1, 0x8f08ac0, 0x10, 0x38, 0x1ff, 0x0, 0xfffffffa, 0x0, 0x8, 0xa98, 0x7ff, 0x3, 0x8, 0x1, 0xd824, 0x6, 0x3, 0x81, 0x9, 0x8, 0xebf7, 0x6368, 0x4, 0x6, 0x1, 0xfffffffb, 0x7ff, 0xfffffff9, 0x3, 0x593, 0x0, 0xffff9db7, 0x5, 0x4, 0x10, 0x0, 0x6e, 0xb4e, 0x39be601a, 0x3, 0x800, 0xfff, 0xde, 0xffffffff, 0xfffffff8, 0x27, 0x9bf7, 0xfffffffe, 0x8, 0x1, 0x7, 0x9, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xff, 0x1, 0x9c7, 0x10001, 0x101, 0xd, 0x5, 0x0, 0x6, 0x4, 0x6, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xffffffdf, 0x5842, 0x1, 0xc672, 0x0, 0x32, 0x2, 0x1, 0x9, 0xd, 0x16c, 0x401, 0x4, 0xffff4972, 0xffffffff, 0x5, 0xb, 0x1ef1, 0x8, 0xfffffffb, 0x8, 0xc52, 0x8, 0x8, 0x2, 0x2, 0x93e, 0x5, 0x80000000, 0x7fffffff, 0x6495, 0xc9, 0x1, 0x8, 0x5, 0x7, 0x3, 0x3, 0xb92, 0x1db7, 0x446, 0xd1, 0x5, 0x7fffffff, 0x45, 0x3, 0x7, 0xc, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x3, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0xb, 0x7, 0x6, 0x57f5, 0x3, 0xa, 0x200, 0x6, 0xc, 0x0, 0x40, 0x80000000, 0x8, 0x7, 0x1, 0xfffffffd, 0x7, 0x4, 0x2, 0xdc11310, 0x40, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x9, 0x10, 0x4, 0x101, 0x10000, 0x7, 0x8, 0x52, 0x2cbe, 0x9, 0xb, 0x7ff, 0x58, 0x7, 0x9, 0x3, 0xf, 0x0, 0x0, 0x1, 0x0, 0xfff, 0xfffff800, 0xffffffff, 0x153a, 0x7, 0x7c39, 0x8, 0x7f, 0x37, 0xd, 0xff, 0x8, 0xffffffff, 0x8, 0x101, 0x9, 0x1, 0x3, 0x8, 0x5, 0x5, 0xffffffff, 0x9, 0xaa000000, 0x3c1, 0xa, 0x4, 0x580, 0x7d4284bb, 0x80000001, 0x3ff, 0x4, 0xc0000, 0xfffffff9, 0x8, 0x9, 0x7af, 0xffffffff, 0x5, 0x8, 0xd, 0x2, 0x5, 0x2, 0x6, 0x6, 0x9, 0x40000, 0xffff, 0xb26, 0x7, 0x4, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x4, 0x4, 0x9, 0x9, 0xffff8001, 0x0, 0x3, 0x7, 0xff, 0x10000, 0x2, 0x6, 0x22, 0x7, 0x5, 0x9, 0x1000, 0x10, 0x7fffffff, 0xfffffff8, 0x8000, 0x9, 0x6, 0x0, 0xfffff126, 0xbb, 0xeb, 0x6, 0x40, 0x9f33, 0x0, 0x6, 0x4, 0x1, 0x3, 0xb4, 0x5, 0x8, 0x8, 0x1, 0x0, 0x0, 0x44, 0x6, 0x10001, 0x0, 0xcbad, 0x7, 0x8, 0x8, 0x8, 0x81, 0x7, 0xff, 0x0, 0xd8f, 0xb9e, 0x4, 0x9, 0x8, 0xaa8, 0x441, 0x100, 0x4, 0xfffffffd, 0x6, 0xb4f, 0x2, 0x7, 0x4, 0x7, 0x487, 0x6, 0x7, 0xfff, 0x1a1e, 0x7, 0xc6, 0x7, 0x5, 0x0, 0x401, 0x4b3, 0x7, 0x8001, 0x10, 0x0, 0xc915, 0x0, 0x2ad1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xfffff90b, 0x1000, 0x1ba9b80c, 0xe552081, 0x6c6, 0x2, 0x5, 0x9, 0x0, 0x0, 0xc, 0xd75, 0x1, 0x2d06, 0x1, 0x40, 0x8, 0x6, 0x8, 0xfff, 0x1, 0x81, 0x10001, 0x5, 0x1, 0x3, 0xfff, 0xd3, 0xcbde, 0xd3, 0x8, 0xb, 0xc000, 0x100, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x3, 0x7, 0x8, 0x3, 0x9, 0xfffffff9, 0xf172, 0xa2, 0x810, 0x8001, 0x39ae, 0xc2b9, 0x9, 0x6, 0x3, 0x5, 0x40, 0x3, 0xec, 0x9, 0x3, 0x0, 0x800, 0x7f, 0x2, 0x1, 0x200, 0xbd, 0x1, 0xd, 0x100, 0xff, 0x3, 0x6, 0x5, 0x7f, 0x6, 0xfdb, 0x18, 0x8, 0x5, 0x60ff, 0x1000, 0xfff, 0x5, 0x0, 0xecf, 0x3ff, 0x8, 0x1, 0x5, 0xfffffffa, 0xf1, 0x4e691, 0x81da, 0x8, 0x7fffffff, 0x8, 0x5, 0xe, 0xffff, 0x3, 0x65a8, 0x3, 0x4, 0x5, 0xf83c, 0x0, 0x2, 0x4, 0x80, 0x1, 0xff, 0x3, 0x4101, 0x1, 0x4, 0x7, 0x3, 0x0, 0x7fffffff, 0xc, 0x0, 0x4, 0xc0000, 0x8, 0xffffffff, 0x7, 0x2, 0xe, 0x2e03, 0x75cf, 0x7, 0x1, 0x8, 0x3, 0xbfa3, 0x6, 0x401, 0x80000001, 0x38e, 0x3, 0x2d69, 0xb8800000, 0x75, 0x380, 0x4, 0x8d60, 0xdef3, 0x4, 0x7e7, 0x6, 0x6, 0x8, 0xfffffffd, 0x32, 0x4, 0x0, 0x0, 0x523, 0x80000001, 0xd, 0x9, 0x10001, 0xfffffffa, 0x40, 0x1, 0x1, 0x2, 0x8001, 0x7, 0xf, 0x8001, 0x0, 0x8, 0x0, 0x9, 0x9, 0x2, 0x9, 0x8d, 0x7, 0x3, 0x5, 0x3, 0x6, 0x8000, 0x0, 0x61, 0x10000, 0x6, 0x80000000, 0xbb18, 0x8, 0x1000, 0xffffffff, 0x1a5ac654, 0x9, 0xfffffffa, 0x80000001, 0x800, 0x3, 0x8e1, 0x6, 0x0, 0x3, 0x1ff, 0x9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfd800000, 0x3, 0x0, 0x6, 0x9, 0x2aa, 0x9, 0xfffffffc, 0x70e, 0x32a, 0x40, 0x0, 0x3, 0x91, 0x1b, 0x78, 0x7, 0x5, 0x101, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4, 0x7, 0x1, 0xa, 0x1ff, 0x200, 0x7, 0xbd5b, 0x6, 0x6, 0x0, 0xe1, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d6800000000}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r10, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="3367c23cd173b3eff3739b557b2d4c6cfab7d435a626d6cece49cdcdaa65f31cef40fb77be8f75322216c56bde28b8c4609a56d884677ba4a4ba36405cbce1e1a8e6459ceaa183454a08948ea207c91a0e5596a4927f2af6d02fa39edd1e4d1a662ea4f783f1411df545fbe2b8a0da959009a869a478d4357e0e05fb85fac876a847df82837f0593290bb17d4d9c403c1bb91e9043a08a8a97bc447769d80b1c53420e36d83b564a1a4a9e4efab4e28bc40e86206d17071327f6b629010047cc3fe0", 0xc2}, {&(0x7f0000000280)="79eb8918f0e6a6d74b1182d130a0ae102c85bac2687832b6087326fac04be68e963aa69f59e0d4a498a6986527974136338915c550204cb1400676b58145aa3e7fd2e2502b5814d2b5336f58", 0x4c}, {&(0x7f0000000600)="8a74c06467569bf91c3afbd588ca9c7baa6f2a3d620b59aad8582a9ea8e0c246fe1248dc217e71d92bb37cc3a9bc2fb4ca985aa57ce61f5dc7015208b68fda8c2757bf8bb1a25e95abe865b389eb1db19a52f324724900031c45eea344272e661b780ee3783e9fcff1c723d95c4e568cff57e8a99eaa60d481f1809dfdcbb8af6c7c10c2b50ee6fd6ab3a5f054b2fe1a6f7d1f1fc628498bb27241f5017503dcbbba113c01750a34beffbf0d861a314ed74310cf7712c671584f81ca264c00828b8db659300bace0a47f3e8b9173141fad3a727bf5ffe9822c037d7d8101bc621e436b65f60696a502124a3894e8a415edd51eba99e80c", 0xf7}, {&(0x7f0000000700)="469cfc7473ab7c784e7858f19717ce004a1834523b1d132202ede82c1db694ee66a530306b95f3b0bf595f00b8bf6603039b56ceec08b5fc9d992d8935cd71875905136959a9f2a2e39e73083cce166bc4857079cbac00da47b2ff4df7dac2f854606b5d20c3d77020c26e4017ab680f62dde43f9fedf590ab30f93eaa7ef7a98c8374b326daf37afb8d63d5ebbc9163d329844267a351efc15aca499c880434cdb345ea5691999a73ef4e69c7", 0xad}], 0x4, 0x9, 0xd9) 20.505496187s ago: executing program 0 (id=482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180aaaaaaaaffffffffffff0800450000840000000000019078ac1e0001ac1414aa0b039078030000004a000006fffffff0002ff8ffac14140ae0000101440cb931ac1414bb00000007442c19e1e000000100000088ac1e010100000800ffffffff00000008e000000100000852ac04003700000004000000e00000026401010164010102ac14143b7ffc054f2f219ead65bb2aab00019404000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000000000090002fe73797a30000000001800078008000840000000000c00018008000140e000000005000500020000000500010006000000"], 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='illinois\x00', 0x9) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0xc84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc54, 0x2, [@TCA_BASIC_POLICE={0xc50, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8ab5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d3, 0x1, 0x0, 0x4, 0xe, 0x9, 0x4, 0x81, 0x2545cfe9, 0x401, 0x5, 0x0, 0x2, 0xe, 0x80, 0x2, 0x7fff, 0x60, 0xc, 0x384, 0x47a, 0x10000, 0xb, 0xfa, 0x0, 0x100, 0x0, 0x1000, 0x9, 0x6, 0x813a, 0x5, 0x7, 0x7fffffff, 0xffff, 0xf08, 0x8203, 0x7, 0xff, 0x6, 0x6, 0x2, 0x3, 0x3, 0x5, 0xb, 0x9, 0x7, 0x4, 0x5, 0xfffffffd, 0x9, 0x7, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x9, 0xffffffff, 0x10000, 0xfffffffc, 0x4, 0x4aa3, 0x0, 0x3, 0x6, 0xa000000, 0x10001, 0x7, 0x4, 0xffffffff, 0x58, 0x2, 0x4, 0x7000000, 0xfffffff1, 0x6, 0xb01, 0xc, 0x9, 0x6, 0x9e, 0x4, 0x30, 0x2, 0xd, 0xa2, 0xd, 0xfffffff8, 0x7, 0x400, 0x7, 0xcb05, 0xff, 0x0, 0x4, 0x4, 0x63, 0x10000, 0x200, 0x0, 0xfff, 0x5, 0x5, 0x9, 0x5653, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x9, 0xffff, 0x1, 0x2, 0x9a4, 0x2, 0x5, 0xedc, 0x9, 0x75, 0x5, 0xfd, 0x5, 0x9, 0x9a7, 0x394, 0x5, 0x9, 0xa, 0x0, 0x8000, 0x1000, 0x5, 0x7, 0x13, 0x4, 0x7ac, 0x3, 0xf, 0xc9, 0x3, 0x0, 0x3, 0x4, 0x7, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffffff, 0x5, 0x8, 0x7fff, 0x77, 0x1ff, 0x2c17, 0x116a, 0xfffffffa, 0x10001, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x7, 0xae2b, 0xe42, 0x2, 0x11b2343c, 0x9d, 0x3581, 0xb34, 0x7, 0x8, 0x400, 0x6, 0xfffffff5, 0x3, 0x3, 0x5986, 0x5c0, 0x3, 0x7, 0x1, 0x8f08ac0, 0x10, 0x38, 0x1ff, 0x0, 0xfffffffa, 0x0, 0x8, 0xa98, 0x7ff, 0x3, 0x8, 0x1, 0xd824, 0x6, 0x3, 0x81, 0x9, 0x8, 0xebf7, 0x6368, 0x4, 0x6, 0x1, 0xfffffffb, 0x7ff, 0xfffffff9, 0x3, 0x593, 0x0, 0xffff9db7, 0x5, 0x4, 0x10, 0x0, 0x6e, 0xb4e, 0x39be601a, 0x3, 0x800, 0xfff, 0xde, 0xffffffff, 0xfffffff8, 0x27, 0x9bf7, 0xfffffffe, 0x8, 0x1, 0x7, 0x9, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xff, 0x1, 0x9c7, 0x10001, 0x101, 0xd, 0x5, 0x0, 0x6, 0x4, 0x6, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xffffffdf, 0x5842, 0x1, 0xc672, 0x0, 0x32, 0x2, 0x1, 0x9, 0xd, 0x16c, 0x401, 0x4, 0xffff4972, 0xffffffff, 0x5, 0xb, 0x1ef1, 0x8, 0xfffffffb, 0x8, 0xc52, 0x8, 0x8, 0x2, 0x2, 0x93e, 0x5, 0x80000000, 0x7fffffff, 0x6495, 0xc9, 0x1, 0x8, 0x5, 0x7, 0x3, 0x3, 0xb92, 0x1db7, 0x446, 0xd1, 0x5, 0x7fffffff, 0x45, 0x3, 0x7, 0xc, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x3, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0xb, 0x7, 0x6, 0x57f5, 0x3, 0xa, 0x200, 0x6, 0xc, 0x0, 0x40, 0x80000000, 0x8, 0x7, 0x1, 0xfffffffd, 0x7, 0x4, 0x2, 0xdc11310, 0x40, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x9, 0x10, 0x4, 0x101, 0x10000, 0x7, 0x8, 0x52, 0x2cbe, 0x9, 0xb, 0x7ff, 0x58, 0x7, 0x9, 0x3, 0xf, 0x0, 0x0, 0x1, 0x0, 0xfff, 0xfffff800, 0xffffffff, 0x153a, 0x7, 0x7c39, 0x8, 0x7f, 0x37, 0xd, 0xff, 0x8, 0xffffffff, 0x8, 0x101, 0x9, 0x1, 0x3, 0x8, 0x5, 0x5, 0xffffffff, 0x9, 0xaa000000, 0x3c1, 0xa, 0x4, 0x580, 0x7d4284bb, 0x80000001, 0x3ff, 0x4, 0xc0000, 0xfffffff9, 0x8, 0x9, 0x7af, 0xffffffff, 0x5, 0x8, 0xd, 0x2, 0x5, 0x2, 0x6, 0x6, 0x9, 0x40000, 0xffff, 0xb26, 0x7, 0x4, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x4, 0x4, 0x9, 0x9, 0xffff8001, 0x0, 0x3, 0x7, 0xff, 0x10000, 0x2, 0x6, 0x22, 0x7, 0x5, 0x9, 0x1000, 0x10, 0x7fffffff, 0xfffffff8, 0x8000, 0x9, 0x6, 0x0, 0xfffff126, 0xbb, 0xeb, 0x6, 0x40, 0x9f33, 0x0, 0x6, 0x4, 0x1, 0x3, 0xb4, 0x5, 0x8, 0x8, 0x1, 0x0, 0x0, 0x44, 0x6, 0x10001, 0x0, 0xcbad, 0x7, 0x8, 0x8, 0x8, 0x81, 0x7, 0xff, 0x0, 0xd8f, 0xb9e, 0x4, 0x9, 0x8, 0xaa8, 0x441, 0x100, 0x4, 0xfffffffd, 0x6, 0xb4f, 0x2, 0x7, 0x4, 0x7, 0x487, 0x6, 0x7, 0xfff, 0x1a1e, 0x7, 0xc6, 0x7, 0x5, 0x0, 0x401, 0x4b3, 0x7, 0x8001, 0x10, 0x0, 0xc915, 0x0, 0x2ad1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xfffff90b, 0x1000, 0x1ba9b80c, 0xe552081, 0x6c6, 0x2, 0x5, 0x9, 0x0, 0x0, 0xc, 0xd75, 0x1, 0x2d06, 0x1, 0x40, 0x8, 0x6, 0x8, 0xfff, 0x1, 0x81, 0x10001, 0x5, 0x1, 0x3, 0xfff, 0xd3, 0xcbde, 0xd3, 0x8, 0xb, 0xc000, 0x100, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x3, 0x7, 0x8, 0x3, 0x9, 0xfffffff9, 0xf172, 0xa2, 0x810, 0x8001, 0x39ae, 0xc2b9, 0x9, 0x6, 0x3, 0x5, 0x40, 0x3, 0xec, 0x9, 0x3, 0x0, 0x800, 0x7f, 0x2, 0x1, 0x200, 0xbd, 0x1, 0xd, 0x100, 0xff, 0x3, 0x6, 0x5, 0x7f, 0x6, 0xfdb, 0x18, 0x8, 0x5, 0x60ff, 0x1000, 0xfff, 0x5, 0x0, 0xecf, 0x3ff, 0x8, 0x1, 0x5, 0xfffffffa, 0xf1, 0x4e691, 0x81da, 0x8, 0x7fffffff, 0x8, 0x5, 0xe, 0xffff, 0x3, 0x65a8, 0x3, 0x4, 0x5, 0xf83c, 0x0, 0x2, 0x4, 0x80, 0x1, 0xff, 0x3, 0x4101, 0x1, 0x4, 0x7, 0x3, 0x0, 0x7fffffff, 0xc, 0x0, 0x4, 0xc0000, 0x8, 0xffffffff, 0x7, 0x2, 0xe, 0x2e03, 0x75cf, 0x7, 0x1, 0x8, 0x3, 0xbfa3, 0x6, 0x401, 0x80000001, 0x38e, 0x3, 0x2d69, 0xb8800000, 0x75, 0x380, 0x4, 0x8d60, 0xdef3, 0x4, 0x7e7, 0x6, 0x6, 0x8, 0xfffffffd, 0x32, 0x4, 0x0, 0x0, 0x523, 0x80000001, 0xd, 0x9, 0x10001, 0xfffffffa, 0x40, 0x1, 0x1, 0x2, 0x8001, 0x7, 0xf, 0x8001, 0x0, 0x8, 0x0, 0x9, 0x9, 0x2, 0x9, 0x8d, 0x7, 0x3, 0x5, 0x3, 0x6, 0x8000, 0x0, 0x61, 0x10000, 0x6, 0x80000000, 0xbb18, 0x8, 0x1000, 0xffffffff, 0x1a5ac654, 0x9, 0xfffffffa, 0x80000001, 0x800, 0x3, 0x8e1, 0x6, 0x0, 0x3, 0x1ff, 0x9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfd800000, 0x3, 0x0, 0x6, 0x9, 0x2aa, 0x9, 0xfffffffc, 0x70e, 0x32a, 0x40, 0x0, 0x3, 0x91, 0x1b, 0x78, 0x7, 0x5, 0x101, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4, 0x7, 0x1, 0xa, 0x1ff, 0x200, 0x7, 0xbd5b, 0x6, 0x6, 0x0, 0xe1, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d6800000000}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r10, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="3367c23cd173b3eff3739b557b2d4c6cfab7d435a626d6cece49cdcdaa65f31cef40fb77be8f75322216c56bde28b8c4609a56d884677ba4a4ba36405cbce1e1a8e6459ceaa183454a08948ea207c91a0e5596a4927f2af6d02fa39edd1e4d1a662ea4f783f1411df545fbe2b8a0da959009a869a478d4357e0e05fb85fac876a847df82837f0593290bb17d4d9c403c1bb91e9043a08a8a97bc447769d80b1c53420e36d83b564a1a4a9e4efab4e28bc40e86206d17071327f6b629010047cc3fe0", 0xc2}, {&(0x7f0000000280)="79eb8918f0e6a6d74b1182d130a0ae102c85bac2687832b6087326fac04be68e963aa69f59e0d4a498a6986527974136338915c550204cb1400676b58145aa3e7fd2e2502b5814d2b5336f58", 0x4c}, {&(0x7f0000000600)="8a74c06467569bf91c3afbd588ca9c7baa6f2a3d620b59aad8582a9ea8e0c246fe1248dc217e71d92bb37cc3a9bc2fb4ca985aa57ce61f5dc7015208b68fda8c2757bf8bb1a25e95abe865b389eb1db19a52f324724900031c45eea344272e661b780ee3783e9fcff1c723d95c4e568cff57e8a99eaa60d481f1809dfdcbb8af6c7c10c2b50ee6fd6ab3a5f054b2fe1a6f7d1f1fc628498bb27241f5017503dcbbba113c01750a34beffbf0d861a314ed74310cf7712c671584f81ca264c00828b8db659300bace0a47f3e8b9173141fad3a727bf5ffe9822c037d7d8101bc621e436b65f60696a502124a3894e8a415edd51eba99e80c", 0xf7}, {&(0x7f0000000700)="469cfc7473ab7c784e7858f19717ce004a1834523b1d132202ede82c1db694ee66a530306b95f3b0bf595f00b8bf6603039b56ceec08b5fc9d992d8935cd71875905136959a9f2a2e39e73083cce166bc4857079cbac00da47b2ff4df7dac2f854606b5d20c3d77020c26e4017ab680f62dde43f9fedf590ab30f93eaa7ef7a98c8374b326daf37afb8d63d5ebbc9163d329844267a351efc15aca499c880434cdb345ea5691999a73ef4e69c7", 0xad}], 0x4, 0x9, 0xd9) 11.269691093s ago: executing program 2 (id=2072): r0 = epoll_create(0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000020c0)={{0x0, 0x4, 0x9, 0x120000000000000, 0x1, 0x9, 0x9, 0x7, 0x5, 0xbf0, 0x9, 0x9519, 0xc3be, 0x0, 0x100000000}, 0x18, [0x0, 0x0, 0x0]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) write(r1, &(0x7f0000002580)="51475f51473d92df62ddf1576a3035bdf1f815cd0cc4efc87c0d2697172898df62172e97f826b7bb4d03cd678221a264a4b6a8a67984662239099332fc931e219ec6e393ee1f2b423eca370f14e4a418ba2553d5951c8f3914564219817204eda7c9e9928816bcba26e8a13982ae201063c09f61aba94dd6525dcf092a2fa1daa6c30b4e3b262f66e84635d7effbb21bce6e6a4c9a3d0c1e29656f347104fb2b45055477ad3aa133ffc3b0bd405e9cc079f1259e04e5937fcc0de8d584094e4ab3b322b3623b548c4a84f49e230824939f6345670a734f82", 0xd8) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800bf100006b889dc76e6c0000080002800400130008004a00", @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000000c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x80, "fd7427d37f8f8f"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000010c0)={{r11, 0xfffffffffffffbff, 0x2, 0x148a, 0x8, 0x1, 0x9, 0xac9, 0x10000, 0x6, 0x9, 0x3487, 0x7fffffffffffffff, 0x9, 0x3ff}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002480)="e6465b24a6a782cf9ba4207b70b162c2327ddd4c886dd5194078ed44fe16e0998f4739d6c2a98909d7f90ace7ffbcdb519be602a214199ce7b4f3ac08eb2d4e808a342c1fd1cbd9646dbb7d3f9587212d0a7ab4cf72007ea3e6ba8a856f7b466093601959286786de3d46c79aa71a90bafad64057369323b1908c0bf380004aabb55f6424f5d7b54a27bb29abbc569f5288b333c010f6e2f5357a2f861c707b7838fba9fb87138fe8cea2c98cd1ce6a0991916cb5421c1605f7798aab5035630630d0f81fb2dde313b25907bfe4392811a18293c7906751aa19f45ca00cef02f64", 0xe1) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) unshare(0x6a040000) r13 = socket(0x8, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r13, 0x113, 0x2, &(0x7f0000002400), &(0x7f0000002440)=0x4) r14 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$l2tp(r14, &(0x7f0000002380)=""/48, 0x30, 0x40000000, &(0x7f00000023c0)={0x2, 0x0, @loopback}, 0x10) write(r4, &(0x7f0000000040)="5510bc4fdddba7a63f45c5a4d10027cadfe471097c669dd5f8c0e7199abf29", 0x1f) ioctl$BTRFS_IOC_QUOTA_RESCAN(r13, 0x61d9, &(0x7f0000000000)={0x700, 0x9, [0xa5a, 0x0, 0x1, 0x3, 0x7]}) 11.088775052s ago: executing program 0 (id=482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180aaaaaaaaffffffffffff0800450000840000000000019078ac1e0001ac1414aa0b039078030000004a000006fffffff0002ff8ffac14140ae0000101440cb931ac1414bb00000007442c19e1e000000100000088ac1e010100000800ffffffff00000008e000000100000852ac04003700000004000000e00000026401010164010102ac14143b7ffc054f2f219ead65bb2aab00019404000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000000000090002fe73797a30000000001800078008000840000000000c00018008000140e000000005000500020000000500010006000000"], 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='illinois\x00', 0x9) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0xc84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc54, 0x2, [@TCA_BASIC_POLICE={0xc50, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8ab5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d3, 0x1, 0x0, 0x4, 0xe, 0x9, 0x4, 0x81, 0x2545cfe9, 0x401, 0x5, 0x0, 0x2, 0xe, 0x80, 0x2, 0x7fff, 0x60, 0xc, 0x384, 0x47a, 0x10000, 0xb, 0xfa, 0x0, 0x100, 0x0, 0x1000, 0x9, 0x6, 0x813a, 0x5, 0x7, 0x7fffffff, 0xffff, 0xf08, 0x8203, 0x7, 0xff, 0x6, 0x6, 0x2, 0x3, 0x3, 0x5, 0xb, 0x9, 0x7, 0x4, 0x5, 0xfffffffd, 0x9, 0x7, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0x3, 0x9, 0xffffffff, 0x10000, 0xfffffffc, 0x4, 0x4aa3, 0x0, 0x3, 0x6, 0xa000000, 0x10001, 0x7, 0x4, 0xffffffff, 0x58, 0x2, 0x4, 0x7000000, 0xfffffff1, 0x6, 0xb01, 0xc, 0x9, 0x6, 0x9e, 0x4, 0x30, 0x2, 0xd, 0xa2, 0xd, 0xfffffff8, 0x7, 0x400, 0x7, 0xcb05, 0xff, 0x0, 0x4, 0x4, 0x63, 0x10000, 0x200, 0x0, 0xfff, 0x5, 0x5, 0x9, 0x5653, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x9, 0xffff, 0x1, 0x2, 0x9a4, 0x2, 0x5, 0xedc, 0x9, 0x75, 0x5, 0xfd, 0x5, 0x9, 0x9a7, 0x394, 0x5, 0x9, 0xa, 0x0, 0x8000, 0x1000, 0x5, 0x7, 0x13, 0x4, 0x7ac, 0x3, 0xf, 0xc9, 0x3, 0x0, 0x3, 0x4, 0x7, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffffff, 0x5, 0x8, 0x7fff, 0x77, 0x1ff, 0x2c17, 0x116a, 0xfffffffa, 0x10001, 0xd, 0xe, 0x6, 0x3, 0x10000, 0x7, 0xae2b, 0xe42, 0x2, 0x11b2343c, 0x9d, 0x3581, 0xb34, 0x7, 0x8, 0x400, 0x6, 0xfffffff5, 0x3, 0x3, 0x5986, 0x5c0, 0x3, 0x7, 0x1, 0x8f08ac0, 0x10, 0x38, 0x1ff, 0x0, 0xfffffffa, 0x0, 0x8, 0xa98, 0x7ff, 0x3, 0x8, 0x1, 0xd824, 0x6, 0x3, 0x81, 0x9, 0x8, 0xebf7, 0x6368, 0x4, 0x6, 0x1, 0xfffffffb, 0x7ff, 0xfffffff9, 0x3, 0x593, 0x0, 0xffff9db7, 0x5, 0x4, 0x10, 0x0, 0x6e, 0xb4e, 0x39be601a, 0x3, 0x800, 0xfff, 0xde, 0xffffffff, 0xfffffff8, 0x27, 0x9bf7, 0xfffffffe, 0x8, 0x1, 0x7, 0x9, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xff, 0x1, 0x9c7, 0x10001, 0x101, 0xd, 0x5, 0x0, 0x6, 0x4, 0x6, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xffffffdf, 0x5842, 0x1, 0xc672, 0x0, 0x32, 0x2, 0x1, 0x9, 0xd, 0x16c, 0x401, 0x4, 0xffff4972, 0xffffffff, 0x5, 0xb, 0x1ef1, 0x8, 0xfffffffb, 0x8, 0xc52, 0x8, 0x8, 0x2, 0x2, 0x93e, 0x5, 0x80000000, 0x7fffffff, 0x6495, 0xc9, 0x1, 0x8, 0x5, 0x7, 0x3, 0x3, 0xb92, 0x1db7, 0x446, 0xd1, 0x5, 0x7fffffff, 0x45, 0x3, 0x7, 0xc, 0x3ff, 0x7f, 0x1, 0x3, 0x2, 0x1, 0x3, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0xb, 0x7, 0x6, 0x57f5, 0x3, 0xa, 0x200, 0x6, 0xc, 0x0, 0x40, 0x80000000, 0x8, 0x7, 0x1, 0xfffffffd, 0x7, 0x4, 0x2, 0xdc11310, 0x40, 0x3, 0xffffffff, 0x3, 0x5, 0x8, 0x9, 0x10, 0x4, 0x101, 0x10000, 0x7, 0x8, 0x52, 0x2cbe, 0x9, 0xb, 0x7ff, 0x58, 0x7, 0x9, 0x3, 0xf, 0x0, 0x0, 0x1, 0x0, 0xfff, 0xfffff800, 0xffffffff, 0x153a, 0x7, 0x7c39, 0x8, 0x7f, 0x37, 0xd, 0xff, 0x8, 0xffffffff, 0x8, 0x101, 0x9, 0x1, 0x3, 0x8, 0x5, 0x5, 0xffffffff, 0x9, 0xaa000000, 0x3c1, 0xa, 0x4, 0x580, 0x7d4284bb, 0x80000001, 0x3ff, 0x4, 0xc0000, 0xfffffff9, 0x8, 0x9, 0x7af, 0xffffffff, 0x5, 0x8, 0xd, 0x2, 0x5, 0x2, 0x6, 0x6, 0x9, 0x40000, 0xffff, 0xb26, 0x7, 0x4, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x4, 0x4, 0x9, 0x9, 0xffff8001, 0x0, 0x3, 0x7, 0xff, 0x10000, 0x2, 0x6, 0x22, 0x7, 0x5, 0x9, 0x1000, 0x10, 0x7fffffff, 0xfffffff8, 0x8000, 0x9, 0x6, 0x0, 0xfffff126, 0xbb, 0xeb, 0x6, 0x40, 0x9f33, 0x0, 0x6, 0x4, 0x1, 0x3, 0xb4, 0x5, 0x8, 0x8, 0x1, 0x0, 0x0, 0x44, 0x6, 0x10001, 0x0, 0xcbad, 0x7, 0x8, 0x8, 0x8, 0x81, 0x7, 0xff, 0x0, 0xd8f, 0xb9e, 0x4, 0x9, 0x8, 0xaa8, 0x441, 0x100, 0x4, 0xfffffffd, 0x6, 0xb4f, 0x2, 0x7, 0x4, 0x7, 0x487, 0x6, 0x7, 0xfff, 0x1a1e, 0x7, 0xc6, 0x7, 0x5, 0x0, 0x401, 0x4b3, 0x7, 0x8001, 0x10, 0x0, 0xc915, 0x0, 0x2ad1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xfffff90b, 0x1000, 0x1ba9b80c, 0xe552081, 0x6c6, 0x2, 0x5, 0x9, 0x0, 0x0, 0xc, 0xd75, 0x1, 0x2d06, 0x1, 0x40, 0x8, 0x6, 0x8, 0xfff, 0x1, 0x81, 0x10001, 0x5, 0x1, 0x3, 0xfff, 0xd3, 0xcbde, 0xd3, 0x8, 0xb, 0xc000, 0x100, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x3, 0x7, 0x8, 0x3, 0x9, 0xfffffff9, 0xf172, 0xa2, 0x810, 0x8001, 0x39ae, 0xc2b9, 0x9, 0x6, 0x3, 0x5, 0x40, 0x3, 0xec, 0x9, 0x3, 0x0, 0x800, 0x7f, 0x2, 0x1, 0x200, 0xbd, 0x1, 0xd, 0x100, 0xff, 0x3, 0x6, 0x5, 0x7f, 0x6, 0xfdb, 0x18, 0x8, 0x5, 0x60ff, 0x1000, 0xfff, 0x5, 0x0, 0xecf, 0x3ff, 0x8, 0x1, 0x5, 0xfffffffa, 0xf1, 0x4e691, 0x81da, 0x8, 0x7fffffff, 0x8, 0x5, 0xe, 0xffff, 0x3, 0x65a8, 0x3, 0x4, 0x5, 0xf83c, 0x0, 0x2, 0x4, 0x80, 0x1, 0xff, 0x3, 0x4101, 0x1, 0x4, 0x7, 0x3, 0x0, 0x7fffffff, 0xc, 0x0, 0x4, 0xc0000, 0x8, 0xffffffff, 0x7, 0x2, 0xe, 0x2e03, 0x75cf, 0x7, 0x1, 0x8, 0x3, 0xbfa3, 0x6, 0x401, 0x80000001, 0x38e, 0x3, 0x2d69, 0xb8800000, 0x75, 0x380, 0x4, 0x8d60, 0xdef3, 0x4, 0x7e7, 0x6, 0x6, 0x8, 0xfffffffd, 0x32, 0x4, 0x0, 0x0, 0x523, 0x80000001, 0xd, 0x9, 0x10001, 0xfffffffa, 0x40, 0x1, 0x1, 0x2, 0x8001, 0x7, 0xf, 0x8001, 0x0, 0x8, 0x0, 0x9, 0x9, 0x2, 0x9, 0x8d, 0x7, 0x3, 0x5, 0x3, 0x6, 0x8000, 0x0, 0x61, 0x10000, 0x6, 0x80000000, 0xbb18, 0x8, 0x1000, 0xffffffff, 0x1a5ac654, 0x9, 0xfffffffa, 0x80000001, 0x800, 0x3, 0x8e1, 0x6, 0x0, 0x3, 0x1ff, 0x9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfd800000, 0x3, 0x0, 0x6, 0x9, 0x2aa, 0x9, 0xfffffffc, 0x70e, 0x32a, 0x40, 0x0, 0x3, 0x91, 0x1b, 0x78, 0x7, 0x5, 0x101, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4, 0x7, 0x1, 0xa, 0x1ff, 0x200, 0x7, 0xbd5b, 0x6, 0x6, 0x0, 0xe1, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d6800000000}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r10, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="3367c23cd173b3eff3739b557b2d4c6cfab7d435a626d6cece49cdcdaa65f31cef40fb77be8f75322216c56bde28b8c4609a56d884677ba4a4ba36405cbce1e1a8e6459ceaa183454a08948ea207c91a0e5596a4927f2af6d02fa39edd1e4d1a662ea4f783f1411df545fbe2b8a0da959009a869a478d4357e0e05fb85fac876a847df82837f0593290bb17d4d9c403c1bb91e9043a08a8a97bc447769d80b1c53420e36d83b564a1a4a9e4efab4e28bc40e86206d17071327f6b629010047cc3fe0", 0xc2}, {&(0x7f0000000280)="79eb8918f0e6a6d74b1182d130a0ae102c85bac2687832b6087326fac04be68e963aa69f59e0d4a498a6986527974136338915c550204cb1400676b58145aa3e7fd2e2502b5814d2b5336f58", 0x4c}, {&(0x7f0000000600)="8a74c06467569bf91c3afbd588ca9c7baa6f2a3d620b59aad8582a9ea8e0c246fe1248dc217e71d92bb37cc3a9bc2fb4ca985aa57ce61f5dc7015208b68fda8c2757bf8bb1a25e95abe865b389eb1db19a52f324724900031c45eea344272e661b780ee3783e9fcff1c723d95c4e568cff57e8a99eaa60d481f1809dfdcbb8af6c7c10c2b50ee6fd6ab3a5f054b2fe1a6f7d1f1fc628498bb27241f5017503dcbbba113c01750a34beffbf0d861a314ed74310cf7712c671584f81ca264c00828b8db659300bace0a47f3e8b9173141fad3a727bf5ffe9822c037d7d8101bc621e436b65f60696a502124a3894e8a415edd51eba99e80c", 0xf7}, {&(0x7f0000000700)="469cfc7473ab7c784e7858f19717ce004a1834523b1d132202ede82c1db694ee66a530306b95f3b0bf595f00b8bf6603039b56ceec08b5fc9d992d8935cd71875905136959a9f2a2e39e73083cce166bc4857079cbac00da47b2ff4df7dac2f854606b5d20c3d77020c26e4017ab680f62dde43f9fedf590ab30f93eaa7ef7a98c8374b326daf37afb8d63d5ebbc9163d329844267a351efc15aca499c880434cdb345ea5691999a73ef4e69c7", 0xad}], 0x4, 0x9, 0xd9) 9.218895381s ago: executing program 2 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000043}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd30, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310438bd7000ffffffff1600000018000180140002006e657464657673696d300000000000000500020000000000a593280150be84af2d2f40109e58795792df130ffee785b9181228a3b765973bd09d9c7b1cebeae1459f60667734b265bb01ba0a0e5891db3b971acd8cdc11cbffa1efd66db7fc4390e4e216f75b7dde337655242a28bf6101fafb00be9b06a5ffb3e0db3b41bf9df79422d38c346da23d1f29603557c4097ad938ee8c6a1e2abc"], 0x34}}, 0x8000) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000043}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd30, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310438bd7000ffffffff1600000018000180140002006e657464657673696d300000000000000500020000000000a593280150be84af2d2f40109e58795792df130ffee785b9181228a3b765973bd09d9c7b1cebeae1459f60667734b265bb01ba0a0e5891db3b971acd8cdc11cbffa1efd66db7fc4390e4e216f75b7dde337655242a28bf6101fafb00be9b06a5ffb3e0db3b41bf9df79422d38c346da23d1f29603557c4097ad938ee8c6a1e2abc"], 0x34}}, 0x8000) (async) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) (async) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 9.061082952s ago: executing program 2 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x528, 0x298, 0x298, 0xffffffff, 0x388, 0xf0, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast2, @icmp_id, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0, @private0}}, @common=@ipv6header={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv6=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@mcast1, @empty, [], [], 'bond_slave_1\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4}, 0x8) accept4(r0, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000040)=0x80, 0x80000) 8.749649235s ago: executing program 2 (id=2087): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) sendmsg$tipc(r1, 0x0, 0x24000095) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x9b0, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) 8.423181298s ago: executing program 2 (id=2090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100003050000000040000085d24f5c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 7.512401304s ago: executing program 4 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1, 0x200, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'vxcan1\x00'}}) (async) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000580)={r7, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4002}, 0x0) 7.441581075s ago: executing program 4 (id=2096): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000104010200000000000000000000000108000340000000080a0002000000000300000000050001000200000005000100b6c103d3d28f9c956ea2d5795492e3b872098ccc3bb4f4cf06000000aaef5bb7e3292775075f298ead52c7c7e81d218a2c7417d09ab1debec2430b06008d4ecac8c06314b52125c859be2be7bf1751248fcb"], 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0xc010) 7.109578001s ago: executing program 2 (id=2097): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf382, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, 0x0, 0x0) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e80)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x2, [{}, {}]}, 0x48) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=@newtclass={0x78, 0x28, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0xffff}, {0xfff3, 0x3}, {0x6, 0xfff2}}, [@c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x8, 0x3, 0x19, 0x8, 0x100, 0x5, 0x8, 0x8ec6}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7f}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x4040001) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000001300)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000004e95292550"], &(0x7f0000001440)=0x29) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000140)="61635156b94ff5c2f2453e", &(0x7f0000000180)=""/130}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000467300000000000001040000181100002bddd343f468376a8e4248ca7ea71c716663159b21d948bceb7652397e7619508ee5989c13ef3214e416d3fc780b58a86bbfab5aaaa5237f", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r1, @ANYBLOB="000000000000000062340001000000001800000000e001000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) 6.717414815s ago: executing program 4 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private0, 0x49, r1}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.566482969s ago: executing program 4 (id=2104): socket$kcm(0x2, 0x2, 0x73) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'veth1\x00', {0x2b9}, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 6.360717005s ago: executing program 4 (id=2107): getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x2469b7a6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x4}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x240440, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2100}) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240)) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x80000001, @mcast2, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x3b1ebb05, @ipv4={'\x00', '\xff\xff', @remote}, 0xb}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x7, @local, 0x5}], 0xc0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xcfc3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ed3e264cdd2d8387554699f6c82965cea40f5d9a789ec1fb6fcfdf9c3b30fb48"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6e8f7049da05c5f310137d5840ca31c3"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000001e40)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x2, {0xa, 0x4e24, 0x150d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)="7f22ad4c22b7511bf7056d792f3dd1801c09bb81213af0c3cdc9b046042259cb9dd7a472964b47a4ed3f58d3a8207769457f73b851131f8781978e46b278219e51a6f19c9fa44250e50cbccc42f2d61ebad908fc994003ed34f14a022d83cf78162aa5ca12254f73c85e36b0d6e27c24e305de252140d4791d17763b58b45114b2db45936d66e38209fb397a2788360a52752a88e0799f7feda567a0511bce364c132cca14040388893b38e9515fb42cc1537aef09f13f6218543eefeedb001de3ae87df7401aae143f0", 0xca}, {&(0x7f0000000840)="60d0d3fb0471918f05c13f5b61e0f57cba04c5185495d0d139d57f3346180d626e83f9b419f47ef62a701c3308ef4bc1648090b2c039f84b1f11ebd7e1b1e1312dff980176be928faa8178eb74df140e7fd72195d388f8fe6984ac53a24a5be68c15096323cc251c872cab8773edbd14378a07cdc68db5f033e7c8bfea5da54c095920a7", 0x84}, {&(0x7f0000000900)="30cc40354beeb37855899af423eed4f53ac08de01bb8789f49c67997a17bf849d970bfc811", 0x25}, {&(0x7f0000000940)="7fb67fb755df4de2d0e3194141bd5fe4cbc9fd2b1977cf56a6eabf244d3bbea28c054b20b61c5355fa88ac042a32c3d31004e10aadf669bae0cdded7d349853ad26b55e786c58a3938a484bf6201b4a4583315743b236c805698ee1aba76202023bc747618868e6cb70224cd7e8aadc6544bc4faf3c9c2357db6985d08b22deebd8c167294891646016f70bc226753edd1e4ede03a3f4a4f7e3526830c349c6d216912105cfe", 0xa6}], 0x4, &(0x7f0000000a40)=[{0x78, 0x11, 0x64, "9d9dda0337cfa163f4daf05d52e6f13a475c02605951418487bb6f00251c06c6a2cf951ab73ffcf726246d67a6d4d943558aa4dc82e8383ab968e2b52709b6fede70f5302b835aa9ccfe7dc2a392176f46ee8f942115ad076a5d02c7f71fc437c9979ef6"}, {0xe8, 0x10d, 0xa, "0b146efae93ba43109070194632306f9bf19ec96fd75e1f57535f057e07df73452c07bdf2f40a6360afa5b1d4f9038ec64eaab790d1ea2d6d83c0c59a947c85081b6d9e73a1bf815f4f148a959c7c6eb430e6ee557811273e52bffe22381100e2093d63a803e2299409b7e4e72b8d8c60e781f3741d18910615742c9d101d18ec11ebf5129176a7316aa21cef23d0e15ce905872e1895541706b1aa5c3c88a9af96d6f14d9b602e87b013c5ee04b9a0b2ec5522dd175844a74d37dd481b6cec6009b1ab52ba216dda908569b673ed55001"}, {0x88, 0x117, 0x1, "628d489f8a86d76e5eb4d7d7fdf327e409d8acf53b3b6b0a17c1cc9c20f428713a52feed8bc47e87d2deb92a853676511bb70d0f8d5430453b3b1e8693e4825d8a2f5746f5cdb554ad23de91996e157eb7d1771f732d9c99ec9ff8523090b179119c07e5173946bb8e934e606036bc08d556d4604020"}, {0x90, 0x102, 0x8, "4df5797ee33e9809f7925bab4436b93c03c32d2f0777da73a41858126c1e7b6eeaa3593f9d5147b1c4bc00338ac505af75df463df4fa4275583f43d1e09437cddd42685594a43a485a97af08e0ef37c0656abebb535d2fea25ad37beb5156abec97453df232174c7c29e8d98ec9d62a561c161f00d11501950dcafaf4b"}, {0x80, 0x101, 0x6, "0763493e8a494a048d79d4d3ac3c2761dba62e553bcbd8e38436efc9e73d973ecc6368035124dc6329965658c5905a5a983e12dab151aaa3ddf8f090506417f80cc72373583ffbc7378494e6552565c3e57f317d875d97ebd72149e8e76561bd30ba014cffbd8d92797031603eae"}, {0x1010, 0x112, 0x5, "1af43da6a66b548fd246fe4b8f723bd52ae071fb733dfc2b2e076d7351207927111c80bb6181c7f3b9a3e5bf8e1d667998be7bdb45a388fcc1bee35ed70cc7d25e58bca797beaad329af743758c5d2dde027a5095398a312209fdba922ed0cee19e3e77acddbe6336a6b64cfd0fe5194b830824c1aee9c41ac0894279ef943df2b776393f0b22cd0a142674623c5f59be51cfdbb8d696471e1e8ed9f7ffbb565aa51425e6ea6aa9675b45c313db6cc1442658189d41502ea6c9ed9ed4dc6f75938aa4d251ec52b750fc4e129b75b59003e4536c6e1514c31476ac1f720730d722ac4cd3470dcfdd4229957087b7b847bf4afce3f2322d06cd4f2879e6cf3e5fecccb6f1eeb022c36ab1c6524b45da6b664d1024d33fa9b99ca0d6485df74f5995f5938b8f041f250d851e5fe0cbf35f8dfe294a02e8f1d61df589b37f01ecfe08b34c560f37fea438b540d43be0ec9cfa8b52c1ce7b7960797d00ddd6b2c5b4f2ad6a023ec9230ad0ab2fa87ee58a748f2dd10168244b65ad783c3773cef79c07e5b8ac1ea6b354d066809c8b264fff2540abea087eaf4a128e1853927b7fdc3792784525031a3adcb7997f5806f3275ca140ffeb2cbd695bc22ec1be652208bdeb7b961acf58ac9ac0a2c71d9eb289cbbf90c3e322f1545c5eb739074327283c0ebbdd29afac0539491a84c416b779aecfe987970973dd87a50ef92d3535f09b2e479b57dba619cd03cf5d9c249570e95222334ae465cc575bdf716755e0183ae546252b24af3a860ee81bdc4da3b2d1df43f8edd5604d7d009cf6d5ba3ab0d1a28cb7b05904c4e1ce1a59af57db14851bc94030fa15727ef858334742356e3c4e55cd3883b46684e961b9d50a70186309cd11361e9bd5eb577264ca86880b965739872984a376ffdbc425294a369127efa36cf647268f70ce9c6e0d479365e4b10b2555f32be1e519c19defef994ddeb1e31d8eaf344c44ca723b9e38c5e4c59b28fddda99fe400020f2bc1a38e7d8bc6004d34f493737d24131ca6b1dca54141e8cfcf05fffb7872d3196566acd579fbda74a3bff6ba23c82312847f7d022eb2e5d061f1b2eb38dd7822c49a068a16e336d4dcb7fa5cd3baa29439fb9a38fb9e24842fadabb6b8956e6af71cf5e40c8e51a43a4fe7b3b1322e5a130d24d65f2eb28af6adb2b267127124ae8e01fa0bde868ee9ed5fd2041a480128eda7c7d14c0da80063cd8034455aa38921ad9bab4c63290cd24d51176b31bfb11454061e06854c254533a96af9b76320cdd605f9bfa13c701b6ab17c898f433706383f446435a294e4eb6f44c192d85ee9d49de14772d990df53a55ee5f79840b5a48bfb48b421d6a1ba14f77462e11128bd450296ac9112190f3d6c3c4972fac94f865344621ee3f85963d9fdb09e32e6b101f5ed2bf14e7e50128980d67594e532e477f240ff77cdfac371bd377b1987a6d9b36fb2c10d1f5b0ead579f2697f692b475928951a43564951d8671c032ec8565e89c5207a72101f8156fce65ae1e3521f2b86b7b53e645210ccbb6e270da86c39638a649947a8b3a67760bae59e47e9d184369ee5a90072ce5d377d425be5e912a037f589c662024dc03b6b2096939e880f1719e4dac0cd36fff870e0d54d725e561ff73218592b0ba07e08d1d6b7eb7b88667518584e05c8f96d32e9b121acd4b0db476acba676a579cf4ea1a845800ec4704bb6d5545e88eb0afcc92c0de0795b859fa307287956c69d93d67a93443ac4c2dc615b5900f09306162cd215a676606b158660a77ca32766bbdd5d65ca5b3011271e47a60452c4b1ec6552e2311965b0fcfaeac1a4f8de3f8d5a3df6c6c64dc6d806a9d036b10bc8360ca16642e7a75dfbe4637b8d1b9209328720f91c6a7d16c211da71c7a7af88933cc5ae3bf2dcd3d0f3b5a9078e93fee4b61eddcb5867c19084b4755b417dfa8c038507e95805f28469654ecdae78877a1dfcff75a3f4e87aef6382ce8ba3a7eaddeff5d3676d2a5abde356fbe058e59aa1b223b264497ecf610d44809c33b2c9f1b1f658a864f15514ee556e466c797fc1c42d9fc0958b5b4da6a4a9bbfb2407e1bc810035d5f70018dbaa65d53b07050e0e6c6ec1e2b048f4f642be29f13cd09fb4dbf2df34d789de170770c988873987905609ecbaba9464d5169bc8bd55ecaa7ba743ded35dab351381fcf2b13e36f7c09ba2e5a4a7ce66168c101b3f0c519fe51247f03016d7fa979ca6f975a3f7e2a09acc772dc94b3a69fab82df79ced61f330187b3c3c2baaf6dc9a60b516e1e190f3f5bb16ecca4dd361e023620aaf7c308b78015394d1627a655f31bb70630c6db14e42809a0dc7c0afa0a615948ba9e5525dff681563ecff830325888a02cbc14214ffed25df98223667c89cc70ca74a1e5c16efae17160ac0eaf8fced9867389bc8dcde02d7fe146123cc7deabbdba6ae3f3ff88a1521b0a8f16af666449e745a0a0f4deedcdbd9a8e064cdace7db5b81cbc4e0d9e2614d224d5fa8fa0ea7569f567b45aaf0e12c1dd06a36bb71eaa83c2bbac70125600a4cbc15980bf794f0fcb5084f1e148089710ae8fdae076204a114fe6b444ad68e90e2d7b8d2e3cb32294c0bb20d783353978d39ff8ccfcaf746112ce24350ace2e69ee094b3794bc6bd8c488c645a7251fa2e5f11a17c34c4c10c5b6c13e7b50f775abf62ef65ec72f751c5c82c9a7a32b0166af9f17c0573b099f69f7c7f70424dcb33af471caba202bddb152b263e5ec72ab2ae1cc7c77afc35f1d3be1994422ac5fac6807d2b841576c3d87f32cc8c650267f289f11e6f22f4cece626c3c4de20f9b53f807b8da1c513428727a79a37e349512e143349448c17739a7acbf32d588394a674d99fe0ee61443b03befa5cebe801271ebc09dae47ba6c9bbedf379b633ce3b67c361848fdc046234fcb04b407b7399fecb316f0328bff4f37ef2bef4646ef02bd16cf7362f7aeb33841184db9d414887197a7250981e33beb8f3bc46016c138135f200133cbe777a725c27dae5b35805df5f30a9b5fa6379a6ef44dede09d48993ccf67a7b1033b79fd411f929acbb38f4bffbae782dca0263217d9a98c0df1d41d9f4027c6bfebb7e96bfb7ac2cf9da80fdcba7dfa1740d61d1af827dfc98ffd57bb70b84cdd9d0becf6234d270576fcaeb6fc17ca58a9e2ac31eb97bdd856965ecfbd647568db2a2cebee882430dea1ed0b381bba498c5e7afca7a4bd1f14ac0576a948ae9d1940cff69a9e2400560e98b75a25d5c25bc745b08fc6bb6eaad9245c658b26bd4399d2405a67e1269f9223e45787f54b5b45ff74f61ffe1e7d3e610d20007f7adb2b10970c5414f2d6de19989a3843d09114866366ac62cf222fc836fda04f2bd41d18ac0b2e97d13222bc9c4bbbfacd0cd7b2727f9246672c144ef1a912ea7dbab824e0fe35eb8fa5aa9edee46512f54e11088d24f74b6dae7fc2754cc5998f54d37ac9a413a818ddbbcc63b06d0909109799cf09db0f7549e96ecd68030a5f72b327184857398145c3c219c7cb245fc5521b6351e2af166b636fa508c2dff6f224155c475691ae545b090f69b304f1e84c6d79b621386c4c8a44efc81330e66fcabd42275a52d9e7dc2601ac9a1c6db6ae83f9bb9564a57e8293ad2e1efd55f52753abb3f7b8445fc8484650335a892980e7b450f6bad92e586c40358cb068c5d4e97da88b31df62b2d2aacf973927269b5ee620459e7b4070dc287eaf7bf30b81b95422e7bed4bbe3cd777eb80deaeab354b31048124e4e683a04990c021d1cd8dc677936cbe653e02b3f2334113ab4a9e413264525ee4cbc791240db14c52e8f2a5547f90bd4df4526e77ecda9d57be40f3e2abad4e12b3ddbcd977c5480b1365a167d65118fd33edc7869c7a942f9e0a7750529f5811b829329c078ce5fd9c2943bf6ecae63a6b6622a8d8b9f7f1d253bee06d464828371fa4a362f73f0a8d1b869f479f0d6145c67fe6cc22b71bc8ce4b5690723e2d63e9796b9f878b978a2a5a746e39bdba22c388fc4f877a637a1583f4270cf0edabe9806abc59c36b4566cd53d7526997b1b63a45bf0d53cc640d1902265ab468b67297bf37e355368f691f8844546f58ad827374d5372d7ba5131491bdd5569aedf3f3302a5755084bdf4ae1af26eb2e0724d928c8e575d631b4cd38777544925b5ee4b3fa3aeed66c541f1673b37fccc6654144a84aca5dab5f39002a9c82e04a77c2488cdf97df393911a6dc28c0703e7d927899149615863a8d9a9c4cc3da42130868b544563fb1dc0a6abf1b89a2bb961778ed36e1c71e150b93241595ce3682baeef271af35397eee001afec413e4fd5abb74039848741a0c24403ee39bf832ad00177229e24e4a42d0da28869a699585e62de573d0c9406f689f6f9063e12d24152a3ef69cb4cfea095d41f2469e4ce01baafb7858322cf22f675e17324bf0a2bb88cd645068482f8ea743e9222b268d5160febeb01ebef4d8ee9eac4771d8656564aa867fe0dfce440d322b531f72590675c2e9fd16b7245a5d5cc9c0a4cb3831f3cf61d324c99f55fb857b6fcf760bde379cad588c4ab613706b6786ca98ed3c3c677b826930a1577c07e8311d11ffbdc95b8e3314746a2638010db703eec73338baf663a35ca211075aa201ecf6054ba9d8ffa0ddf30e7ebd0df0557a5cba253a3999dac9b3697b23d1638a20a4faa7c99fc95d862d6199bd690187f191d6c280cc0eabae2581e275693c1789cfc9398abb91b7ecc59aa560223a3ec39c219d7313d3000a1cffce2375aa0bca03c5fcdf1230c8f063a0574f956a296642e04312e9f60563b8bc49be74bf6d08bbe77eee4fe92d2ea39ebff0e5615d1b94922cd8ec9648ea692363029c48cf1b0ad4a4fcdf1e009574c3f5510e2fd73cafdd0560493e2f53d41afbacc6e47b86df10f73f478bd5d03dcbb5b0afee21e2573533b18cc32cc1abd30a67dfb405194e1db26359d320958dc25f3cd2a2c63510521a052e63ca125f66094d132f04ebdd178028ae912818708519965becfd50c1aa0f7698af5bf4ed0982223ccab6babba1626ff4873529f2c39417b6c1ae01f2ed7787517ef28697d43db28dd94005841a7fe716d194e62bc01e2f39337e2a82287e8dd0eb4393f73049b0f9d4f5d4db151ec464eae12505a013e3c943d08e84f2c86e7e576a47de73cb4613b95f26b10e5456bb227a1f7fdd0c88a210a79fa5bc0ee108223777718468e8878fcae2917ab0025ccd5f8949d1c2d2a30029fc4f2ffee3e37bc2c08f8e21374344ce241ccb8800d891604c56037249c3f9207c299a99b493a7f41dffcc7309a9d219587fb89632703ce1ebc684c199142735ed7ea3826cf9d9c40063d1df815825c2389e16c7ecff1b7a8136a9b35606e3d3d0141f0b4f9a71b5e1b7c680af11bbbc735c9fd19c13f13ba6baf089ed99b3855fa7e7edc9eb76f065cb5a4f9c0ff7eecff1a0b6d305948376e0be0c3eb044dd2eccc7433aed8a84e1984cc768d13b20643fddd2477d71b946a275fd57a14f4f529f005f485e3fa4a49e80c3f547536485892cbc5837dbdd97a9782124479baae0fd838f206556c09fa1524265c4b99a7758ef36ba72c00f0d0226e49b22c64367142efdc3e56cc76c791805387caeca3db23bff1114bc6c2670d6ddc6a16cab01046fde6206de051908afc1f7092101ec53a888e9adc0c6a7bcbfbd686b06edadea9c9182c8b9174b1f29876dd1d34240b22390617b0a6f38d45922dda13f626215a377011b2"}, {0xc0, 0x101, 0x4, "2f10b4e52db7051f3bd6d87209d33ae03a890516e6f40b2e789b56859a1aedcd36d6a5b37ad0c1c7e381a87123ec62cff121bb5e536dfa6e2dcf9fb2f6dc520ba464ceff1cc15a2f576b1e31355de9be21e3f446af6c976a65024982a126809faf3f16043df9369a76822a88ac6f5656762f0a41dc72a62757be72abefd87a13f0b6d7aa601fa4cec5fcf818ba932e42c9fd76d17a5c654063d5bd7de60289b2e8c32f352aec681dd0c9"}], 0x13c8}, 0x80) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000001e80)={{0x2, 0x4e22, @empty}, {0x1, @link_local}, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001f00)={0x5, 0x8003, 0x0, 0x4, r1}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={r7, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000002000)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x26, r9}) (async) socket$kcm(0x29, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000002040)={0x2, {{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x3, [{{0x2, 0x4e22, @multicast2}}, {{0x2, 0x7, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}]}, 0x210) (async) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) ppoll(&(0x7f0000002280)=[{r5, 0x48}], 0x1, &(0x7f0000002300)={r10, r11+60000000}, &(0x7f0000002340)={[0x3]}, 0x8) (async) socketpair(0x24, 0x2, 0x527e4f52, &(0x7f0000002380)={0xffffffffffffffff}) setsockopt$RDS_GET_MR(r12, 0x114, 0x2, &(0x7f0000002480)={{&(0x7f00000023c0)=""/68, 0x44}, &(0x7f0000002440), 0x2}, 0x20) (async) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000024c0)=""/4096, &(0x7f00000034c0)=0x1000) 6.080564902s ago: executing program 4 (id=2109): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.863489623s ago: executing program 3 (id=2121): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="cd3f2bbd7000fbdbdf251900000008000300", @ANYRES32=r7, @ANYBLOB="6830f742b006777040b800"/24], 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0xc0) (async) r8 = gettid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000240)=r8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80000) sendmmsg$alg(r10, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$unix(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r11, @ANYBLOB="0854c8b26a3bfa6f24f78fa6fb1bd4b7000200ac1414aa80e745f4071b7d01dedfaf555aa23733fc9ae63b2ab2"], 0x20}}, 0x0) (async, rerun: 32) r12 = socket$inet(0x2, 0x3, 0x5) (rerun: 32) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) writev(r0, &(0x7f0000000240), 0x0) (async) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x400, 0x1300, 0x4, {0x0, 0x0, 0x0, r15, {0xb}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) 3.058932098s ago: executing program 1 (id=2124): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a30"], 0x1ce0}}, 0x40000) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000180)={{'\x00', 0x1}, {0x3}, 0x1, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)="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", 0x144, 0x0, &(0x7f00000004c0)={0x2, 0x131, {0x0, 0xc, 0xfc, "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", 0x28, "c88c56e0826b0dbc8d1ad8405ee7092ac3ab74362b2ef52f74fa60e502a79d786507386126f87a52"}, 0x29, "0e7947a28276051d5b49475268cc5c8b99c22159a921bb963171b4d4d50a21c614c001366f967f8432"}, 0x166}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r2, 0x8) accept4$inet(r2, 0x0, 0x0, 0x80800) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000300)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x8, 0x1, 0xfffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x5b4, 0x1, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CT={0xdc, 0xb, 0x0, 0x1, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x410}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x506}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x12}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}]}, @CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0xdf51}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x82}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x21b}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_EXP={0x290, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x1dc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}]}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, @NFQA_PAYLOAD={0xd3, 0xa, "95d5e1e3697b118f1c0f4837b403b12d8dba4651506f12cc88c92616839eb88644059ee90845c188d895a3a1c4fb0b53f8d6148ae35e237f843f7e3d5a5f74415bc851d6b1cfb38c0cb8d757f25d1d5b7eaa401f087f0277a3a07405a4f574841dbed32c4f3bc1aeba3aafbd04a75873ac14bb0064731d8b2be99d1fe4c382674092a3945aa4b78d528a9a605445c81de297254167060d7ff49dd390278fa9723c7b56a408732a795b3340b956bc52e1752fc3200b1a3c8a778344896268e315ca25f1f240b955692e538da19d1ba5"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CT={0x104, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa7d}]}, @CTA_TUPLE_ORIG={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7eb383a5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf7a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1.465693063s ago: executing program 3 (id=2125): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r2, 0x1) (async) ppoll(&(0x7f0000000100)=[{r2, 0x408}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 1.464374081s ago: executing program 1 (id=2126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) 1.28219866s ago: executing program 3 (id=2127): recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfffc, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) 1.248689401s ago: executing program 1 (id=2128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000950000000000000036e0bce49d7ff709dabfb7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r5}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x5, 0x10}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='\x00', 0x0, 0x10, r1}, 0x18) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x7fff, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x26, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa14, 0x0, 0x0, 0x0, 0x4}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x0, 0xc, 0x7, 0x1, 0xffffffffffffffc0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000340)='GPL\x00', 0x5a5, 0xea, &(0x7f0000000500)=""/234, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe, 0x5, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x1, r7, r8, r9], &(0x7f00000007c0)=[{0x0, 0x1, 0xb, 0x3}, {0x0, 0x2, 0x0, 0xa}, {0x0, 0x4, 0x1, 0x3}], 0x10, 0x2, @void, @value}, 0x94) 1.105601953s ago: executing program 3 (id=2129): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44040) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="100033"], 0x3c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e) 988.646181ms ago: executing program 1 (id=2130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x88}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) (async) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f0000000280)=""/96, 0x60}], 0x2, &(0x7f00000001c0)=""/20, 0x14}, 0x10021) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r4 = getgid() (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={r2, r3, r4}, 0xc) 921.586332ms ago: executing program 3 (id=2131): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) setsockopt$MRT6_TABLE(r4, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x4}]}]}, 0x2c}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0x51b, 0x0, 0x0, {}, [{0x184, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_vlan={0x124, 0x10, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7a0}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0xa, 0x4, 0x200, 0x1}, 0x2}}]}, {0xd4, 0x6, "d69b8857c0ba560e9207e1b093fa99a8e34fbcb9753b038e98b7712cd9a5506729f75e3ec86f4037faa6e949bc2300a6e1d388d2841f0b4365ab3233d2242b8d1b0e60c45b5c1aa0c0f7650e1683e90f021d50710699299f9090eebd79c3873381062880e8563c2e1116869bc7f15c948383fa939eb01f836d76dae05136ec0a9cbecf31300edc9cdbb84acd28acee94979abbe92ec913ded72684a18d033580d28437eab791f8281967afd384bcf80b495424c4bb242770479a29f0674cdff0daad67e98f26746ef660b9b5bc5af716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x198}}, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 749.749744ms ago: executing program 1 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) r2 = socket(0x9, 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000098f0925b262a865fd815aa00008400000001000000fb0400000c00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r5, 0xffffe000) recvmmsg(r4, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @private0, 0x4}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 194.296329ms ago: executing program 1 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000280)=[{{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x1}}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00030000000000000000000800020000000000"], 0x30}}, 0x0) 0s ago: executing program 3 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x54, 0x93d, 0x0, 0x0, {0x7, r8}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000200)={r9, 0x3, 0x6, 0x972}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000280)=0x2, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r12, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) kernel console output (not intermixed with test programs): ][ T9626] gretap1: entered allmulticast mode [ 180.426310][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.454173][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.487519][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.659328][ T9657] xt_socket: unknown flags 0x2 [ 180.770058][ T9450] hsr_slave_0: entered promiscuous mode [ 180.794725][ T9450] hsr_slave_1: entered promiscuous mode [ 180.833372][ T9450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.864931][ T9450] Cannot create hsr debugfs directory [ 181.264395][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 181.289256][ T9687] netlink: 'syz.4.1066': attribute type 30 has an invalid length. [ 181.344888][ T9687] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.353991][ T9687] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.363261][ T9687] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.372477][ T9687] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.389013][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 181.403527][ T9687] netlink: 'syz.4.1066': attribute type 30 has an invalid length. [ 181.702712][ T9704] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 181.722553][ T9705] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.739558][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 181.806639][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 181.815398][ T9710] netlink: 'syz.4.1075': attribute type 83 has an invalid length. [ 182.010813][ T51] Bluetooth: hci2: command tx timeout [ 182.017903][ T9721] openvswitch: netlink: Key type 784 is out of range max 32 [ 182.164069][ T9450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.213668][ T9450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.247595][ T9450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.296968][ T9450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.316508][ T9736] netlink: 'syz.3.1086': attribute type 8 has an invalid length. [ 182.702147][ T9760] team0 (unregistering): Port device team_slave_0 removed [ 182.733305][ T9760] team0 (unregistering): Port device team_slave_1 removed [ 182.841569][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.907552][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.935419][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.942690][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.024826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.032047][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.084466][ T9769] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 183.367860][ T9772]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.402960][ T9772]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.417935][ T9772]  (unregistering): (slave batadv0): Releasing backup interface [ 183.430803][ T9772]  (unregistering): Released all slaves [ 183.454113][ T9774] netem: change failed [ 183.601538][ T59] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 183.633361][ T59] bond0: now running without any active interface! [ 183.919302][ C0] Unknown status report in ack skb [ 184.089129][ T51] Bluetooth: hci2: command tx timeout [ 184.467332][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.635190][ T9450] veth0_vlan: entered promiscuous mode [ 184.682369][ T9450] veth1_vlan: entered promiscuous mode [ 184.748040][ T9824] __nla_validate_parse: 3 callbacks suppressed [ 184.748059][ T9824] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1107'. [ 184.777773][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 184.835559][ T9450] veth0_macvtap: entered promiscuous mode [ 184.871259][ T9450] veth1_macvtap: entered promiscuous mode [ 184.953693][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.003548][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.022950][ T9450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.048304][ T9450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.067648][ T9450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.083620][ T9450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.110286][ T9838] netlink: 'syz.3.1111': attribute type 11 has an invalid length. [ 185.140843][ T9838] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1111'. [ 185.229025][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.252559][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.304551][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.317642][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.394613][ T9848] Driver unsupported XDP return value 0 on prog (id 253) dev N/A, expect packet loss! [ 185.547685][ T9856] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 185.563372][ T9856] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 185.591059][ T9856] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 186.061128][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.195318][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.321233][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.396978][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.495378][ T49] bridge_slave_1: left allmulticast mode [ 186.501433][ T49] bridge_slave_1: left promiscuous mode [ 186.507160][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.519762][ T49] bridge_slave_0: left allmulticast mode [ 186.525446][ T49] bridge_slave_0: left promiscuous mode [ 186.531252][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.851452][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.864016][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.876693][ T49] bond0 (unregistering): Released all slaves [ 187.076953][ T9893] x_tables: duplicate underflow at hook 3 [ 187.088053][ T9892] ip6t_srh: unknown srh match flags 536B [ 187.245114][ T9892] netlink: 'syz.4.1131': attribute type 11 has an invalid length. [ 187.278841][ T9892] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1131'. [ 187.371049][ T9908] netlink: 'syz.2.1136': attribute type 2 has an invalid length. [ 187.388254][ T9908] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1136'. [ 187.399324][ T9908] nbd: must specify a device to reconfigure [ 187.513564][ T9909] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 187.527740][ T9909] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1135'. [ 187.671537][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.684340][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.694969][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.705890][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.739338][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.839809][ T9927] xt_ecn: cannot match TCP bits for non-tcp packets [ 187.898334][ T49] hsr_slave_0: left promiscuous mode [ 187.906665][ T49] hsr_slave_1: left promiscuous mode [ 187.912810][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.920777][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.926228][ T9934] netlink: 'syz.3.1140': attribute type 2 has an invalid length. [ 187.953663][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.972410][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.037521][ T49] veth1_macvtap: left promiscuous mode [ 188.053153][ T49] veth0_macvtap: left promiscuous mode [ 188.064074][ T49] veth1_vlan: left promiscuous mode [ 188.070646][ T49] veth0_vlan: left promiscuous mode [ 188.789519][ T49] team0 (unregistering): Port device team_slave_1 removed [ 188.831120][ T49] team0 (unregistering): Port device team_slave_0 removed [ 189.559702][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 189.640686][ T9989] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 189.701529][ T9987] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1148'. [ 189.792381][ T9996] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1151'. [ 189.848932][ T51] Bluetooth: hci2: command tx timeout [ 189.875301][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 189.879998][ T9999] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1153'. [ 189.946443][T10002] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1156'. [ 190.079248][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 190.183845][T10017] netlink: 'syz.3.1159': attribute type 1 has an invalid length. [ 190.274422][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1160'. [ 190.296102][T10029] xt_bpf: check failed: parse error [ 190.310053][T10017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.332255][T10022] IPVS: Error connecting to the multicast addr [ 190.357795][ T9919] chnl_net:caif_netlink_parms(): no params data found [ 190.462351][T10021] IPVS: Error connecting to the multicast addr [ 190.632094][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.654298][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.672915][ T9919] bridge_slave_0: entered allmulticast mode [ 190.684696][ T9919] bridge_slave_0: entered promiscuous mode [ 190.708696][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.727626][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.748918][ T9919] bridge_slave_1: entered allmulticast mode [ 190.770632][ T9919] bridge_slave_1: entered promiscuous mode [ 190.896640][ T9919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.926693][T10063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1170'. [ 190.931807][ T9919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.041755][T10071] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 191.056874][ T9919] team0: Port device team_slave_0 added [ 191.068960][T10071] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 191.071488][ T9919] team0: Port device team_slave_1 added [ 191.113491][T10076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.216883][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.229064][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.237238][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 191.262786][ T9919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.271117][T10081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1177'. [ 191.286010][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.297506][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.328144][ T9919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.483127][ T9919] hsr_slave_0: entered promiscuous mode [ 191.491763][ T9919] hsr_slave_1: entered promiscuous mode [ 191.498153][ T9919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.506596][ T9919] Cannot create hsr debugfs directory [ 191.792521][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1181'. [ 191.928886][ T51] Bluetooth: hci2: command tx timeout [ 192.110607][T10114] : renamed from hsr0 (while UP) [ 192.478500][ T9919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.533441][ T9919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.590121][ T9919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.618282][ T9919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.955824][ T9919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.033824][ T9919] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.091450][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.098683][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.121414][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.128685][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.356585][T10167] ip6gre2: entered allmulticast mode [ 193.760760][ T9919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.862301][T10187] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 193.897606][ T9919] veth0_vlan: entered promiscuous mode [ 193.958141][ T9919] veth1_vlan: entered promiscuous mode [ 194.009471][ T51] Bluetooth: hci2: command tx timeout [ 194.025564][ T9919] veth0_macvtap: entered promiscuous mode [ 194.040065][ T9919] veth1_macvtap: entered promiscuous mode [ 194.061624][ T9919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.073995][ T9919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.116618][ T9919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.127542][ T9919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.143472][ T9919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.153346][ T9919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.169003][T10198] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 194.184044][T10200] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 194.407735][T10207] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.418767][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.431680][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.497238][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.506646][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.726761][T10226] sctp: [Deprecated]: syz.2.1220 (pid 10226) Use of int in maxseg socket option. [ 194.726761][T10226] Use struct sctp_assoc_value instead [ 194.947225][T10241] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 194.986750][T10245] __nla_validate_parse: 3 callbacks suppressed [ 194.986767][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 195.061595][T10248] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.092914][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.225400][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.268024][T10253] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 195.364889][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.475598][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 195.501670][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.512177][T10276] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1233'. [ 195.535616][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.545263][T10276] gretap0: entered promiscuous mode [ 195.592838][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 195.753549][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.190303][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.151659][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.227834][T10326] tipc: Enabled bearer , priority 10 [ 197.331738][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.371995][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.378600][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.582964][ T59] bridge_slave_1: left allmulticast mode [ 197.592973][ T59] bridge_slave_1: left promiscuous mode [ 197.609504][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.663771][ T59] bridge_slave_0: left allmulticast mode [ 197.685853][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.692824][ T59] bridge_slave_0: left promiscuous mode [ 197.700792][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.710042][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.717710][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.729151][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.738719][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.134535][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.145531][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.156001][ T59] bond0 (unregistering): Released all slaves [ 198.342916][ T9110] tipc: Node number set to 2265229781 [ 198.557529][T10356] bond5: entered promiscuous mode [ 198.575577][T10356] bond5: entered allmulticast mode [ 198.592692][T10356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.789043][T10377] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 198.840792][T10376] pim6reg: entered allmulticast mode [ 199.130062][T10392] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 199.383857][ T59] hsr_slave_0: left promiscuous mode [ 199.407996][ T59] hsr_slave_1: left promiscuous mode [ 199.417928][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.444730][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.471663][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.485805][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.523411][ T59] veth1_macvtap: left promiscuous mode [ 199.536599][ T59] veth0_macvtap: left promiscuous mode [ 199.541334][T10416] netlink: 'syz.3.1269': attribute type 2 has an invalid length. [ 199.544244][ T59] veth1_vlan: left promiscuous mode [ 199.561329][ T59] veth0_vlan: left promiscuous mode [ 199.864013][ T51] Bluetooth: hci2: command tx timeout [ 200.053782][T10428] __nla_validate_parse: 8 callbacks suppressed [ 200.053803][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1273'. [ 200.175004][ T59] team0 (unregistering): Port device team_slave_1 removed [ 200.222214][ T59] team0 (unregistering): Port device team_slave_0 removed [ 200.746647][T10433] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1274'. [ 200.781990][T10433] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1274'. [ 200.810982][T10433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1274'. [ 200.827891][T10338] chnl_net:caif_netlink_parms(): no params data found [ 201.025249][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 201.104414][T10452] team_slave_0: left promiscuous mode [ 201.110934][T10452] team_slave_1: left promiscuous mode [ 201.325478][T10452] team0 (unregistering): Port device team_slave_0 removed [ 201.341296][T10452] team0 (unregistering): Port device team_slave_1 removed [ 201.449176][T10338] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.468831][T10338] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.476080][T10338] bridge_slave_0: entered allmulticast mode [ 201.500549][T10338] bridge_slave_0: entered promiscuous mode [ 201.502333][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 201.517890][T10338] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.535345][T10338] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.545688][T10338] bridge_slave_1: entered allmulticast mode [ 201.557248][T10338] bridge_slave_1: entered promiscuous mode [ 201.696548][T10338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.751238][T10338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.858165][T10481] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 201.902489][T10338] team0: Port device team_slave_0 added [ 201.925631][T10338] team0: Port device team_slave_1 added [ 201.932404][ T51] Bluetooth: hci2: command tx timeout [ 202.087616][T10338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.105924][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.138350][T10338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.152339][T10338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.161674][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.189410][T10338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.345960][T10338] hsr_slave_0: entered promiscuous mode [ 202.353780][T10338] hsr_slave_1: entered promiscuous mode [ 202.362408][T10500] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 202.390285][T10500] batman_adv: batadv0: Adding interface: netdevsim0 [ 202.397222][T10500] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.424924][T10500] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 202.635666][T10509] xt_l2tp: v2 doesn't support IP mode [ 202.854834][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 203.021767][T10514] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1294'. [ 203.098482][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'. [ 203.147244][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'. [ 203.382011][T10544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.678401][T10338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.781710][T10338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.794032][T10563] netlink: 'syz.3.1309': attribute type 3 has an invalid length. [ 203.826280][T10338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.856205][T10338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.009623][ T51] Bluetooth: hci2: command tx timeout [ 204.066626][T10338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.123813][T10338] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.155375][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.162632][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.194815][T10577] netlink: 'syz.4.1312': attribute type 21 has an invalid length. [ 204.209109][T10577] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.232395][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.239630][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.953264][T10338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.081178][T10338] veth0_vlan: entered promiscuous mode [ 205.114733][T10338] veth1_vlan: entered promiscuous mode [ 205.178419][T10625] netlink: 'syz.1.1324': attribute type 12 has an invalid length. [ 205.207735][T10625] netlink: 'syz.1.1324': attribute type 29 has an invalid length. [ 205.231497][T10625] __nla_validate_parse: 2 callbacks suppressed [ 205.231515][T10625] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1324'. [ 205.248847][T10625] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 205.271313][T10625] netlink: 'syz.1.1324': attribute type 2 has an invalid length. [ 205.283527][T10625] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1324'. [ 205.395347][T10338] veth0_macvtap: entered promiscuous mode [ 205.416290][T10338] veth1_macvtap: entered promiscuous mode [ 205.493652][T10338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.499927][T10643] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 205.542517][T10648] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 205.582840][T10651] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 205.599226][T10651] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1329'. [ 205.645325][T10338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.661319][T10643] syz_tun: entered promiscuous mode [ 205.697662][T10648] bridge0: port 1(team0) entered blocking state [ 205.707142][T10648] bridge0: port 1(team0) entered disabled state [ 205.733156][T10648] team0: entered allmulticast mode [ 205.746402][T10648] team0: left allmulticast mode [ 205.795151][T10338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.806842][T10338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.817651][T10338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.827015][T10338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.851234][T10660] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1335'. [ 205.998519][T10666] warn_alloc: 1 callbacks suppressed [ 206.006023][T10666] syz.4.1337: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.027791][T10666] CPU: 1 UID: 0 PID: 10666 Comm: syz.4.1337 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 206.027816][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.027825][T10666] Call Trace: [ 206.027832][T10666] [ 206.027839][T10666] dump_stack_lvl+0x189/0x250 [ 206.027880][T10666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.027902][T10666] ? __pfx__printk+0x10/0x10 [ 206.027920][T10666] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.027939][T10666] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.027957][T10666] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 206.027976][T10666] warn_alloc+0x214/0x310 [ 206.027994][T10666] ? stack_depot_save_flags+0x40/0x900 [ 206.028025][T10666] ? __pfx_warn_alloc+0x10/0x10 [ 206.028042][T10666] ? kasan_save_track+0x4f/0x80 [ 206.028066][T10666] ? xskq_create+0x56/0x170 [ 206.028087][T10666] ? xsk_init_queue+0xb0/0x110 [ 206.028105][T10666] ? xsk_setsockopt+0x43f/0x710 [ 206.028122][T10666] ? do_sock_setsockopt+0x257/0x3e0 [ 206.028138][T10666] ? __x64_sys_setsockopt+0x18b/0x220 [ 206.028153][T10666] ? do_syscall_64+0xfa/0x3b0 [ 206.028167][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.028189][T10666] __vmalloc_node_range_noprof+0x125/0x12f0 [ 206.028233][T10666] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.028255][T10666] ? __kasan_kmalloc+0x93/0xb0 [ 206.028273][T10666] vmalloc_user_noprof+0xad/0xf0 [ 206.028292][T10666] ? xskq_create+0xbf/0x170 [ 206.028312][T10666] xskq_create+0xbf/0x170 [ 206.028335][T10666] xsk_init_queue+0xb0/0x110 [ 206.028358][T10666] xsk_setsockopt+0x43f/0x710 [ 206.028379][T10666] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.028393][T10666] ? __lock_acquire+0xab9/0xd20 [ 206.028414][T10666] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 206.028426][T10666] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.028440][T10666] do_sock_setsockopt+0x257/0x3e0 [ 206.028453][T10666] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.028467][T10666] ? __fget_files+0x2a/0x420 [ 206.028483][T10666] __x64_sys_setsockopt+0x18b/0x220 [ 206.028498][T10666] do_syscall_64+0xfa/0x3b0 [ 206.028506][T10666] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.028519][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.028528][T10666] ? clear_bhb_loop+0x60/0xb0 [ 206.028545][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.028558][T10666] RIP: 0033:0x7f30b758e929 [ 206.028579][T10666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.028591][T10666] RSP: 002b:00007f30b839b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.028608][T10666] RAX: ffffffffffffffda RBX: 00007f30b77b6080 RCX: 00007f30b758e929 [ 206.028625][T10666] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 206.028634][T10666] RBP: 00007f30b7610b39 R08: 0000000000000004 R09: 0000000000000000 [ 206.028644][T10666] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.028656][T10666] R13: 0000000000000000 R14: 00007f30b77b6080 R15: 00007ffda87ebd38 [ 206.028700][T10666] [ 206.365531][T10666] Mem-Info: [ 206.391215][ T51] Bluetooth: hci2: command tx timeout [ 206.394166][T10666] active_anon:4423 inactive_anon:0 isolated_anon:0 [ 206.394166][T10666] active_file:1428 inactive_file:39890 isolated_file:0 [ 206.394166][T10666] unevictable:768 dirty:127 writeback:0 [ 206.394166][T10666] slab_reclaimable:11006 slab_unreclaimable:115849 [ 206.394166][T10666] mapped:29022 shmem:1366 pagetables:1096 [ 206.394166][T10666] sec_pagetables:0 bounce:0 [ 206.394166][T10666] kernel_misc_reclaimable:0 [ 206.394166][T10666] free:1313496 free_pcp:16528 free_cma:0 [ 206.477062][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.491782][T10666] Node 0 active_anon:17692kB inactive_anon:0kB active_file:5712kB inactive_file:159356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116088kB dirty:508kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13020kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.505518][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.526515][T10666] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.565274][T10666] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.595227][T10666] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 206.601096][T10666] Node 0 DMA32 free:1343880kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17648kB inactive_anon:0kB active_file:5712kB inactive_file:157524kB unevictable:1536kB writepending:504kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:40400kB local_pcp:20520kB free_cma:0kB [ 206.633995][T10666] lowmem_reserve[]: 0 0 1 1 1 [ 206.638836][T10666] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 206.669724][T10666] lowmem_reserve[]: 0 0 0 0 0 [ 206.674473][T10666] Node 1 Normal free:3894088kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25856kB local_pcp:14720kB free_cma:0kB [ 206.715851][T10666] lowmem_reserve[]: 0 0 0 0 0 [ 206.722460][T10680] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 206.766420][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.774596][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.783960][T10666] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.827095][T10666] Node 0 DMA32: 670*4kB (ME) 308*8kB (ME) 203*16kB (M) 86*32kB (UM) 26*64kB (M) 11*128kB (ME) 68*256kB (UM) 65*512kB (UME) 19*1024kB (UM) 5*2048kB (UME) 305*4096kB (M) = 1343880kB [ 206.903274][T10666] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 206.916619][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 206.937867][T10666] Node 1 Normal: 206*4kB (UE) 58*8kB (UME) 44*16kB (UME) 60*32kB (UME) 24*64kB (UME) 6*128kB (UME) 3*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894088kB [ 206.966930][T10666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.981496][T10666] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.995305][T10666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.007831][T10666] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.022412][T10666] 42681 total pagecache pages [ 207.039022][T10666] 0 pages in swap cache [ 207.044020][T10666] Free swap = 124996kB [ 207.048226][T10666] Total swap = 124996kB [ 207.055083][T10666] 2097051 pages RAM [ 207.058958][T10666] 0 pages HighMem/MovableOnly [ 207.063707][T10666] 424690 pages reserved [ 207.073965][T10666] 0 pages cma reserved [ 207.316006][T10704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1350'. [ 207.784404][T10729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.979419][ T1165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.066011][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'. [ 208.263071][T10737] bond0: entered allmulticast mode [ 208.313481][T10738] 8021q: adding VLAN 0 to HW filter on device bond11 [ 208.325928][T10739] bond11: entered promiscuous mode [ 208.402109][ T1165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.505193][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.576144][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.690826][ T1165] bridge_slave_1: left allmulticast mode [ 208.696511][ T1165] bridge_slave_1: left promiscuous mode [ 208.702374][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.713111][ T1165] bridge_slave_0: left allmulticast mode [ 208.719816][ T1165] bridge_slave_0: left promiscuous mode [ 208.725509][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.036640][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.049633][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.061802][ T1165] bond0 (unregistering): Released all slaves [ 209.407240][T10760] netlink: 'syz.3.1367': attribute type 11 has an invalid length. [ 209.688833][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 209.695284][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 209.932785][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.943159][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.958781][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.960496][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 209.991410][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.007538][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.034177][T10783] netlink: 'syz.3.1373': attribute type 8 has an invalid length. [ 210.231780][ T1165] hsr_slave_0: left promiscuous mode [ 210.242824][ T1165] hsr_slave_1: left promiscuous mode [ 210.259291][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.266766][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.294113][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.312093][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.344322][ T1165] veth1_macvtap: left promiscuous mode [ 210.369405][ T1165] veth0_macvtap: left promiscuous mode [ 210.375041][ T1165] veth1_vlan: left promiscuous mode [ 210.380815][ T1165] veth0_vlan: left promiscuous mode [ 210.990875][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 211.043460][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 211.483816][T10796] kthread_run failed with err -4 [ 211.706650][T10814] nbd: socks must be embedded in a SOCK_ITEM attr [ 211.719933][T10814] xt_hashlimit: size too large, truncated to 1048576 [ 211.737873][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1382'. [ 211.817356][T10820] SET target dimension over the limit! [ 211.986120][T10820] : renamed from bridge_slave_0 (while UP) [ 212.133990][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1388'. [ 212.145725][T10782] chnl_net:caif_netlink_parms(): no params data found [ 212.172298][ T51] Bluetooth: hci2: command tx timeout [ 212.431283][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 212.463836][T10854] IPVS: set_ctl: invalid protocol: 49189 224.0.0.2:20003 [ 212.528317][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.548782][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.556068][T10782] bridge_slave_0: entered allmulticast mode [ 212.565958][T10782] bridge_slave_0: entered promiscuous mode [ 212.577204][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.585080][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.593316][T10782] bridge_slave_1: entered allmulticast mode [ 212.603811][T10782] bridge_slave_1: entered promiscuous mode [ 212.672404][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 212.687371][T10860] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 212.701615][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.703863][T10860] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1394'. [ 212.741362][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.826041][T10868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'. [ 212.923673][T10872] netlink: 'syz.3.1396': attribute type 39 has an invalid length. [ 212.997908][T10874] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 213.049991][T10782] team0: Port device team_slave_0 added [ 213.077655][T10782] team0: Port device team_slave_1 added [ 213.192120][T10879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1399'. [ 213.235639][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1399'. [ 213.247137][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.260713][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.344639][T10887] netlink: 'syz.1.1400': attribute type 7 has an invalid length. [ 213.356601][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.513388][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.558722][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.657354][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.808178][T10782] hsr_slave_0: entered promiscuous mode [ 213.828196][T10782] hsr_slave_1: entered promiscuous mode [ 214.249032][ T51] Bluetooth: hci2: command tx timeout [ 214.525999][T10948] sock: sock_timestamping_bind_phc: sock not bind to device [ 214.683041][T10952] SET target dimension over the limit! [ 214.704829][T10782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.721697][T10782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.741354][T10782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.757008][T10782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.926380][T10782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.963124][T10782] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.000283][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.007407][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.024325][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.031565][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.351780][T10981] tipc: Enabled bearer , priority 0 [ 215.427331][T10981] syzkaller0: entered promiscuous mode [ 215.433210][T10981] syzkaller0: entered allmulticast mode [ 215.441068][T10981] tipc: Resetting bearer [ 215.455791][T10984] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.1427'. [ 215.516112][T10986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.535145][T10989] SET target dimension over the limit! [ 215.553676][T10989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1429'. [ 215.635384][T10986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.657194][T10992] netlink: 'syz.3.1430': attribute type 29 has an invalid length. [ 215.666459][T10992] netlink: 'syz.3.1430': attribute type 29 has an invalid length. [ 215.677894][T10979] tipc: Resetting bearer [ 216.328986][ T51] Bluetooth: hci2: command tx timeout [ 217.204249][T10979] tipc: Disabling bearer [ 217.275038][T10986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.325291][T10782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.335166][T10999] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 217.493390][T10782] veth0_vlan: entered promiscuous mode [ 217.526141][T10782] veth1_vlan: entered promiscuous mode [ 217.561977][T10986] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.583268][T11013] pim6reg: entered allmulticast mode [ 217.592893][T11013] pim6reg: left allmulticast mode [ 217.655454][T10986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.681137][T10986] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.727595][T10986] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.752547][T10782] veth0_macvtap: entered promiscuous mode [ 217.783042][T10782] veth1_macvtap: entered promiscuous mode [ 217.863003][T10782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.883152][T11021] netlink: zone id is out of range [ 217.892259][T10782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.902171][T11021] netlink: del zone limit has 4 unknown bytes [ 217.936316][T10782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.949784][T10782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.959321][T10782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.979069][T10782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.018371][T11023] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 218.289722][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.308663][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.391943][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.410206][ T51] Bluetooth: hci2: command tx timeout [ 218.421189][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.836547][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.913354][T11087] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1457'. [ 219.079883][T11092] netlink: 'syz.4.1458': attribute type 3 has an invalid length. [ 219.320017][T11111] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.332064][T11111] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 219.483141][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.530506][T11111] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 219.695767][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.813598][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.176313][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.279254][ T49] bridge_slave_1: left allmulticast mode [ 220.284953][ T49] bridge_slave_1: left promiscuous mode [ 220.292763][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.302768][ T49] bridge_slave_0: left allmulticast mode [ 220.308419][ T49] bridge_slave_0: left promiscuous mode [ 220.314588][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.689719][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.705015][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 220.725392][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.748294][ T49] bond0 (unregistering): Released all slaves [ 220.787137][T11130] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.140595][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1472'. [ 221.225884][T11143] sit0: left promiscuous mode [ 221.231581][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.242140][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.256087][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.296698][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.307570][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.360323][T11141] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1472'. [ 221.619186][ T49] hsr_slave_0: left promiscuous mode [ 221.640076][ T49] hsr_slave_1: left promiscuous mode [ 221.646288][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.678666][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.709164][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.723181][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.778275][ T49] veth1_macvtap: left promiscuous mode [ 221.784524][T11160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1477'. [ 221.803524][ T49] veth0_macvtap: left promiscuous mode [ 221.819124][ T49] veth1_vlan: left promiscuous mode [ 221.828797][ T49] veth0_vlan: left promiscuous mode [ 222.355908][ T49] team0 (unregistering): Port device team_slave_1 removed [ 222.400347][ T49] team0 (unregistering): Port device team_slave_0 removed [ 222.940880][T11167] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 223.369225][ T51] Bluetooth: hci2: command tx timeout [ 223.584177][T11180] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1482'. [ 223.643759][T11146] chnl_net:caif_netlink_parms(): no params data found [ 223.822411][T11205] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 223.850162][T11210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1490'. [ 223.933888][T11206] veth5: entered promiscuous mode [ 223.965202][T11217] xt_CT: No such helper "pptp" [ 224.115663][T11146] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.142029][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.143083][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1495'. [ 224.153590][T11146] bridge_slave_0: entered allmulticast mode [ 224.175974][T11146] bridge_slave_0: entered promiscuous mode [ 224.191270][T11230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1496'. [ 224.204240][T11146] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.212000][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.221458][T11146] bridge_slave_1: entered allmulticast mode [ 224.229483][T11146] bridge_slave_1: entered promiscuous mode [ 224.293376][T11146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.373151][T11146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.396160][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 224.518831][T11241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'. [ 224.696019][T11243] : entered promiscuous mode [ 224.707164][T11146] team0: Port device team_slave_0 added [ 224.742707][T11146] team0: Port device team_slave_1 added [ 224.830969][T11146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.846172][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.873074][T11146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.913511][T11253] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 224.922791][T11253] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 224.934959][T11146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.942567][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.979291][T11146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.084261][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1505'. [ 225.115595][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1505'. [ 225.126662][T11146] hsr_slave_0: entered promiscuous mode [ 225.134612][T11146] hsr_slave_1: entered promiscuous mode [ 225.148154][T11259] gretap0: entered promiscuous mode [ 225.155810][T11259] gretap0: left promiscuous mode [ 225.417464][T11272] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 225.430380][T11272] netlink: 'syz.3.1508': attribute type 2 has an invalid length. [ 225.450139][ T51] Bluetooth: hci2: command tx timeout [ 225.670633][T11287] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1512'. [ 225.685744][T11286] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1512'. [ 225.816514][T11146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.858929][T11146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.881760][T11146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.920148][T11146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.013203][T11303] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 226.163677][T11322] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 226.172555][T11322] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1517'. [ 226.202792][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'. [ 226.304094][T11146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.360481][T11146] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.400436][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.407619][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.476191][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.483441][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.761103][T11343] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.765130][ T5950] IPVS: starting estimator thread 0... [ 226.868787][T11350] IPVS: using max 29 ests per chain, 69600 per kthread [ 227.530239][ T51] Bluetooth: hci2: command tx timeout [ 227.571800][T11146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.681958][T11365] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.688339][T11146] veth0_vlan: entered promiscuous mode [ 227.713412][T11373] netlink: 'syz.4.1530': attribute type 11 has an invalid length. [ 227.753927][T11146] veth1_vlan: entered promiscuous mode [ 227.816801][T11146] veth0_macvtap: entered promiscuous mode [ 227.847585][T11146] veth1_macvtap: entered promiscuous mode [ 227.918001][T11146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.939770][T11381] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.983916][T11146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.025461][T11146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.046976][T11146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.059613][T11146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.068721][T11146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.115380][T11389] tipc: Resetting bearer [ 228.284279][T11403] FAULT_INJECTION: forcing a failure. [ 228.284279][T11403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.301079][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.316262][T11403] CPU: 1 UID: 0 PID: 11403 Comm: syz.3.1542 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 228.316287][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.316298][T11403] Call Trace: [ 228.316307][T11403] [ 228.316315][T11403] dump_stack_lvl+0x189/0x250 [ 228.316346][T11403] ? __pfx____ratelimit+0x10/0x10 [ 228.316370][T11403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.316394][T11403] ? __pfx__printk+0x10/0x10 [ 228.316413][T11403] ? __might_fault+0xb0/0x130 [ 228.316441][T11403] should_fail_ex+0x414/0x560 [ 228.316468][T11403] _copy_from_user+0x2d/0xb0 [ 228.316487][T11403] ___sys_sendmsg+0x158/0x2a0 [ 228.316511][T11403] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.316568][T11403] ? __fget_files+0x2a/0x420 [ 228.316584][T11403] ? __fget_files+0x3a0/0x420 [ 228.316612][T11403] __x64_sys_sendmsg+0x19b/0x260 [ 228.316636][T11403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.316665][T11403] ? __pfx_ksys_write+0x10/0x10 [ 228.316679][T11403] ? rcu_is_watching+0x15/0xb0 [ 228.316725][T11403] ? do_syscall_64+0xbe/0x3b0 [ 228.316745][T11403] do_syscall_64+0xfa/0x3b0 [ 228.316760][T11403] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.316781][T11403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.316798][T11403] ? clear_bhb_loop+0x60/0xb0 [ 228.316818][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.316835][T11403] RIP: 0033:0x7f21c538e929 [ 228.316852][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.316865][T11403] RSP: 002b:00007f21c6264038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.316885][T11403] RAX: ffffffffffffffda RBX: 00007f21c55b5fa0 RCX: 00007f21c538e929 [ 228.316898][T11403] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 228.316910][T11403] RBP: 00007f21c6264090 R08: 0000000000000000 R09: 0000000000000000 [ 228.316921][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.316931][T11403] R13: 0000000000000000 R14: 00007f21c55b5fa0 R15: 00007ffed06e08d8 [ 228.316959][T11403] [ 228.324833][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.597078][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.605701][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.114509][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.134228][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.203518][T11442] __nla_validate_parse: 9 callbacks suppressed [ 229.203536][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 229.409166][T11450] netlink: 'syz.2.1555': attribute type 18 has an invalid length. [ 229.450538][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1555'. [ 229.462086][T11450] tipc: Enabling of bearer rejected, failed to enable media [ 229.487003][T11457] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 229.498434][T11457] netlink: 'syz.1.1559': attribute type 3 has an invalid length. [ 229.512576][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1559'. [ 229.526273][T11457] NCSI netlink: No device for ifindex 131080 [ 229.540116][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 229.622773][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.844403][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.124315][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.266665][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.391109][ T36] bridge_slave_1: left allmulticast mode [ 230.396794][ T36] bridge_slave_1: left promiscuous mode [ 230.403127][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.413659][ T36] bridge_slave_0: left allmulticast mode [ 230.419700][ T36] bridge_slave_0: left promiscuous mode [ 230.425425][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.771275][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.847643][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.901669][ T36] bond0 (unregistering): Released all slaves [ 230.931099][T11475] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1565'. [ 231.121981][T11480] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 231.139361][T11480] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1567'. [ 231.154752][T11480] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 231.163143][T11480] netlink: 'syz.2.1567': attribute type 2 has an invalid length. [ 231.208136][T11484] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 231.229021][T11484] netlink: 'syz.1.1569': attribute type 2 has an invalid length. [ 231.236815][T11484] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 231.272032][T11484] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1569'. [ 231.376250][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 231.423855][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.433848][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.442096][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.455151][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.465062][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.713488][ T36] hsr_slave_0: left promiscuous mode [ 231.731041][ T36] hsr_slave_1: left promiscuous mode [ 231.752001][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.759800][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.792976][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.805791][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.839682][ T36] veth1_macvtap: left promiscuous mode [ 231.848882][ T36] veth0_macvtap: left promiscuous mode [ 231.858084][ T36] veth1_vlan: left promiscuous mode [ 231.874128][ T36] veth0_vlan: left promiscuous mode [ 232.009492][ T49] wlan0: Trigger new scan to find an IBSS to join [ 232.486757][ T36] team0 (unregistering): Port device team_slave_1 removed [ 232.532850][ T36] team0 (unregistering): Port device team_slave_0 removed [ 232.600200][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 232.986360][T11514] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1576'. [ 233.337155][T11528] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 233.425339][T11490] chnl_net:caif_netlink_parms(): no params data found [ 233.535542][ T51] Bluetooth: hci2: command tx timeout [ 233.609868][T11545] x_tables: ip_tables: MASQUERADE target: used from hooks OUTPUT, but only usable from POSTROUTING [ 233.907246][T11564] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 233.910702][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.915513][T11564] NCSI netlink: No device for ifindex 0 [ 233.943130][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.976813][T11490] bridge_slave_0: entered allmulticast mode [ 234.003857][T11490] bridge_slave_0: entered promiscuous mode [ 234.035085][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.047114][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.065465][T11490] bridge_slave_1: entered allmulticast mode [ 234.086237][T11490] bridge_slave_1: entered promiscuous mode [ 234.207788][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.237433][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.404497][T11490] team0: Port device team_slave_0 added [ 234.440902][T11490] team0: Port device team_slave_1 added [ 234.624124][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.642605][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.688898][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.718974][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.741309][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.798432][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.855478][T11618] __nla_validate_parse: 1 callbacks suppressed [ 234.855496][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 234.879931][T11618] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1605'. [ 234.975317][ T1165] wlan0: Trigger new scan to find an IBSS to join [ 234.990282][T11490] hsr_slave_0: entered promiscuous mode [ 235.026754][T11490] hsr_slave_1: entered promiscuous mode [ 235.268877][T11639] xt_l2tp: missing protocol rule (udp|l2tpip) [ 235.471368][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 235.527532][T11657] !€ÿ: renamed from bond_slave_0 (while UP) [ 235.618923][ T51] Bluetooth: hci2: command tx timeout [ 236.040952][T11490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.074697][T11490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.103138][T11490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.115080][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 236.131446][T11490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.180022][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 236.389406][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.455590][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.514389][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.521686][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.567404][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 236.732068][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 236.769494][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 236.860206][T11738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.867467][T11738] IPv6: NLM_F_CREATE should be set when creating new route [ 236.874811][T11738] IPv6: NLM_F_CREATE should be set when creating new route [ 236.882083][T11738] IPv6: NLM_F_CREATE should be set when creating new route [ 236.904337][T11739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.956850][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.964031][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.061537][T11745] tunl0: entered promiscuous mode [ 237.078380][T11745] validate_nla: 1 callbacks suppressed [ 237.078400][T11745] netlink: 'syz.1.1639': attribute type 3 has an invalid length. [ 237.093584][T11745] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1639'. [ 237.118960][T11747] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 237.520765][T11773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 237.535284][T11773] netlink: 'syz.1.1646': attribute type 7 has an invalid length. [ 237.546710][T11773] netlink: 'syz.1.1646': attribute type 8 has an invalid length. [ 237.564944][T11772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.688784][ T51] Bluetooth: hci2: command tx timeout [ 237.699660][T11777] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 238.009104][ T1154] wlan0: Trigger new scan to find an IBSS to join [ 238.061107][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.201350][T11490] veth0_vlan: entered promiscuous mode [ 238.243629][T11490] veth1_vlan: entered promiscuous mode [ 238.256544][T11797] xt_hashlimit: max too large, truncated to 1048576 [ 238.277923][T11799] xt_hashlimit: max too large, truncated to 1048576 [ 238.334829][T11490] veth0_macvtap: entered promiscuous mode [ 238.396469][T11490] veth1_macvtap: entered promiscuous mode [ 238.438859][T11805] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 238.462557][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.480834][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.494837][T11490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.503834][T11490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.518194][T11490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.534201][T11490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.727380][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.742357][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.791555][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.805126][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.921867][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.158141][T11837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 239.923299][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.040287][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.119323][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.236517][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.490672][ T49] bridge_slave_1: left allmulticast mode [ 240.496358][ T49] bridge_slave_1: left promiscuous mode [ 240.502272][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.512520][ T49] bridge_slave_0: left allmulticast mode [ 240.520283][ T49] bridge_slave_0: left promiscuous mode [ 240.526109][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.879161][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.891785][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.901849][ T49] bond0 (unregistering): Released all slaves [ 241.274033][ T49] hsr_slave_0: left promiscuous mode [ 241.281267][ T49] hsr_slave_1: left promiscuous mode [ 241.287478][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.295211][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.303438][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.327035][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.373558][ T49] veth1_macvtap: left promiscuous mode [ 241.380796][T11885] __nla_validate_parse: 8 callbacks suppressed [ 241.380812][T11885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1673'. [ 241.402717][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 241.418811][ T49] veth0_macvtap: left promiscuous mode [ 241.424520][ T49] veth1_vlan: left promiscuous mode [ 241.449090][ T49] veth0_vlan: left promiscuous mode [ 241.458014][T11890] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1672'. [ 241.476823][T11890] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1672'. [ 241.903610][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.913359][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.932891][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.949214][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.958405][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.245118][ T49] team0 (unregistering): Port device team_slave_1 removed [ 242.287125][ T49] team0 (unregistering): Port device team_slave_0 removed [ 242.747030][T11903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 242.837826][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 243.025405][T11918] bridge_slave_0: left allmulticast mode [ 243.049314][T11918] bridge_slave_0: left promiscuous mode [ 243.066211][T11918] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.153660][T11925] x_tables: duplicate underflow at hook 2 [ 243.171273][T11918] bridge_slave_1: left allmulticast mode [ 243.252536][T11918] bridge_slave_1: left promiscuous mode [ 243.308950][T11918] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.435317][T11918] bond0: (slave bond_slave_0): Releasing backup interface [ 243.523129][T11918] bond0: (slave bond_slave_1): Releasing backup interface [ 243.549207][T11918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.557267][T11918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.574588][T11918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.585632][T11918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.614194][T11918] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 243.623412][T11918] batman_adv: batadv0: Removing interface: ipvlan2 [ 243.649404][T11944] vlan0: entered promiscuous mode [ 243.737195][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 244.011001][ T5849] Bluetooth: hci2: command tx timeout [ 244.039561][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 244.227314][T11978] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1692'. [ 244.293914][T11986] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 244.303937][T11905] chnl_net:caif_netlink_parms(): no params data found [ 244.333433][T11989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1692'. [ 245.260461][T11997] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 245.268517][T11998] nbd: illegal input index -8454144 [ 245.416713][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.427934][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.436009][T11905] bridge_slave_0: entered allmulticast mode [ 245.446765][T11905] bridge_slave_0: entered promiscuous mode [ 245.457005][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.476999][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.489128][T11905] bridge_slave_1: entered allmulticast mode [ 245.497070][T11905] bridge_slave_1: entered promiscuous mode [ 245.854134][T11905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.877795][T11905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.088173][T11905] team0: Port device team_slave_0 added [ 246.095113][ T5849] Bluetooth: hci2: command tx timeout [ 246.102029][T12041] geneve0: mtu less than device minimum [ 246.114523][T11905] team0: Port device team_slave_1 added [ 246.198053][T12045] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 246.374082][T12045] 8021q: adding VLAN 0 to HW filter on device bond12 [ 246.415957][T12051] bond0: (slave veth0_to_bond): Releasing active interface [ 246.457863][T12051] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 246.477563][T11905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.485412][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.511972][T11905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.572523][T11905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.598986][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.648885][T11905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.664767][T12062] __nla_validate_parse: 3 callbacks suppressed [ 246.664782][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 246.730885][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 246.794384][T12071] veth0: entered promiscuous mode [ 246.850503][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 246.865124][T11905] hsr_slave_0: entered promiscuous mode [ 246.881382][T11905] hsr_slave_1: entered promiscuous mode [ 247.022424][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 247.054504][T12087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.349755][T12100] netlink: 'syz.3.1721': attribute type 39 has an invalid length. [ 247.405001][T12087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.718436][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 247.738975][T12087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.796466][T12087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.895879][T11905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.939622][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 247.944363][T11905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.973410][T11905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.007472][T11905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.082504][T12136] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 248.137855][T12136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1732'. [ 248.169034][ T5849] Bluetooth: hci2: command tx timeout [ 248.197074][T12136] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 248.255198][T12154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1736'. [ 248.269952][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'. [ 248.292688][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'. [ 248.379173][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.423246][T11905] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.442033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.449476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.511812][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.519056][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.547723][T12156] netlink: 'syz.1.1737': attribute type 21 has an invalid length. [ 248.595548][T11905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.625106][T12156] netlink: 'syz.1.1737': attribute type 6 has an invalid length. [ 248.914345][T12170] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 248.999850][T12170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.080329][T12176] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 249.094935][T12178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.102258][T12178] IPv6: NLM_F_CREATE should be set when creating new route [ 249.152871][T12167] bond6: (slave veth1): Enslaving as an active interface with a down link [ 249.223131][T11905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.416541][T11905] veth0_vlan: entered promiscuous mode [ 249.448147][T11905] veth1_vlan: entered promiscuous mode [ 249.572469][T11905] veth0_macvtap: entered promiscuous mode [ 249.598425][T11905] veth1_macvtap: entered promiscuous mode [ 249.692709][T11905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.731911][T11905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.743287][T12210] netlink: 'syz.2.1751': attribute type 2 has an invalid length. [ 249.828516][T11905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.838146][T11905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.870668][T11905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.888752][T11905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.902948][T12208] netlink: 'syz.4.1752': attribute type 137 has an invalid length. [ 249.918284][T12208] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 249.943394][T12208] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 250.137416][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.159037][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.205501][T12231] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 250.249174][ T5849] Bluetooth: hci2: command tx timeout [ 250.290448][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.298336][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.527386][T12248] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 250.643859][T12249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 250.932576][T12273] delete_channel: no stack [ 251.277705][T12291] batman_adv: batadv0: Removing interface: netdevsim0 [ 251.573392][T12307] x_tables: duplicate underflow at hook 1 [ 251.710888][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.998435][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.186115][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.246101][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.339017][ T12] bridge_slave_1: left allmulticast mode [ 252.344699][ T12] bridge_slave_1: left promiscuous mode [ 252.350666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.360831][ T12] bridge_slave_0: left allmulticast mode [ 252.366489][ T12] bridge_slave_0: left promiscuous mode [ 252.372702][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.708451][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.720748][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.733545][ T12] bond0 (unregistering): Released all slaves [ 253.077236][ T12] hsr_slave_0: left promiscuous mode [ 253.083174][ T12] hsr_slave_1: left promiscuous mode [ 253.094097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.101967][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.114957][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.122520][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.142994][ T12] veth1_macvtap: left promiscuous mode [ 253.149673][ T12] veth0_macvtap: left promiscuous mode [ 253.155272][ T12] veth1_vlan: left promiscuous mode [ 253.160891][ T12] veth0_vlan: left promiscuous mode [ 253.555106][T12342] __nla_validate_parse: 15 callbacks suppressed [ 253.555128][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1786'. [ 253.602216][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.614063][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.627527][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.646491][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.656269][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.935703][ T12] team0 (unregistering): Port device team_slave_1 removed [ 253.980301][ T12] team0 (unregistering): Port device team_slave_0 removed [ 254.374947][T12332] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1784'. [ 254.670727][T12360] validate_nla: 2 callbacks suppressed [ 254.670746][T12360] netlink: 'syz.4.1791': attribute type 8 has an invalid length. [ 254.754147][T12365] netlink: 'syz.2.1792': attribute type 27 has an invalid length. [ 255.096939][T12384] openvswitch: netlink: Missing key (keys=40, expected=100) [ 255.168481][T12389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1799'. [ 255.208031][T12389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1799'. [ 255.328870][T12399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.345997][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1801'. [ 255.467219][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 255.655444][T12345] chnl_net:caif_netlink_parms(): no params data found [ 255.688878][ T51] Bluetooth: hci2: command tx timeout [ 255.790318][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.797686][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.805649][T12345] bridge_slave_0: entered allmulticast mode [ 255.814477][T12345] bridge_slave_0: entered promiscuous mode [ 255.830470][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.837959][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.845708][T12345] bridge_slave_1: entered allmulticast mode [ 255.854434][T12345] bridge_slave_1: entered promiscuous mode [ 255.907855][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.923200][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.990983][T12345] team0: Port device team_slave_0 added [ 256.014959][T12345] team0: Port device team_slave_1 added [ 256.081236][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 256.091914][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.099774][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.118647][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 256.128251][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.156149][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.188641][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.226348][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.333056][T12455] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 256.404200][T12455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.413763][T12455] bond5: (slave bond6): making interface the new active one [ 256.422391][T12455] bond5: (slave bond6): Enslaving as an active interface with an up link [ 256.484971][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1818'. [ 256.520152][T12345] hsr_slave_0: entered promiscuous mode [ 256.539189][T12345] hsr_slave_1: entered promiscuous mode [ 256.564947][T12456] bond5: (slave gretap3): Enslaving as a backup interface with an up link [ 256.589630][T12455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.666435][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 256.757722][T12487] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 256.889432][T12494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.319407][T12345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.334635][T12345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.345497][T12345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.371231][T12345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.638966][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.667601][T12528] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 257.712202][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.735755][T12528] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.767134][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.769203][ T51] Bluetooth: hci2: command tx timeout [ 257.813269][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.820490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.879245][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.886508][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.911401][T12544] netlink: 'syz.2.1843': attribute type 23 has an invalid length. [ 258.202826][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.253115][T12345] veth0_vlan: entered promiscuous mode [ 258.267926][T12345] veth1_vlan: entered promiscuous mode [ 258.306450][T12345] veth0_macvtap: entered promiscuous mode [ 258.321162][T12345] veth1_macvtap: entered promiscuous mode [ 258.356680][T12345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.377902][T12345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.395440][T12345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.404935][T12345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.415031][T12345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.428215][T12345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.548897][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.563713][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.638281][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.673175][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.777539][T12579] netlink: 'syz.3.1850': attribute type 16 has an invalid length. [ 258.786336][T12579] netlink: 'syz.3.1850': attribute type 3 has an invalid length. [ 258.795517][T12579] __nla_validate_parse: 6 callbacks suppressed [ 258.795532][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1850'. [ 258.816005][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.816547][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.012410][T12590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1853'. [ 259.561174][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 259.610888][T12629] netlink: 'syz.4.1867': attribute type 3 has an invalid length. [ 259.818369][T12644] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 259.933806][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.946537][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.394167][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.518095][T12669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.540645][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.829585][T12681] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.980790][ T59] bridge_slave_1: left allmulticast mode [ 261.986493][ T59] bridge_slave_1: left promiscuous mode [ 262.015581][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.050516][ T59] bridge_slave_0: left allmulticast mode [ 262.077750][ T59] bridge_slave_0: left promiscuous mode [ 262.086858][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.142716][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.152974][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.164401][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.173801][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.182604][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.216278][T12707] Bluetooth: MGMT ver 1.23 [ 262.552384][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.563429][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.578022][ T59] bond0 (unregistering): Released all slaves [ 262.599871][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 262.618815][T12707] tc_dump_action: action bad kind [ 262.795989][T12716] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1893'. [ 263.220510][T12737] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 263.396098][ T59] hsr_slave_0: left promiscuous mode [ 263.404184][ T59] hsr_slave_1: left promiscuous mode [ 263.412362][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.420767][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.423433][T12739] openvswitch: netlink: Multiple metadata blocks provided [ 263.436279][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.443993][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.469102][ T59] veth1_macvtap: left promiscuous mode [ 263.474840][ T59] veth0_macvtap: left promiscuous mode [ 263.481119][ T59] veth1_vlan: left promiscuous mode [ 263.487079][ T59] veth0_vlan: left promiscuous mode [ 263.702262][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1902'. [ 263.810736][T12752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.112309][ T59] team0 (unregistering): Port device team_slave_1 removed [ 264.174040][ T59] team0 (unregistering): Port device team_slave_0 removed [ 264.254539][ T51] Bluetooth: hci2: command tx timeout [ 265.033962][T12701] chnl_net:caif_netlink_parms(): no params data found [ 265.058425][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 265.069735][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 265.353813][T12799] netlink: 'syz.2.1918': attribute type 4 has an invalid length. [ 265.405809][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.419880][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.427369][T12701] bridge_slave_0: entered allmulticast mode [ 265.436394][T12701] bridge_slave_0: entered promiscuous mode [ 265.460131][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.467468][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.485235][T12701] bridge_slave_1: entered allmulticast mode [ 265.501207][T12701] bridge_slave_1: entered promiscuous mode [ 265.560881][T12806] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1919'. [ 265.589444][T12810] netlink: 'syz.1.1921': attribute type 39 has an invalid length. [ 265.641277][T12701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.665185][T12701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.729908][T12818] netlink: 'syz.2.1925': attribute type 11 has an invalid length. [ 265.737894][T12818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1925'. [ 265.821952][T12824] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 265.825511][T12701] team0: Port device team_slave_0 added [ 265.864268][T12701] team0: Port device team_slave_1 added [ 265.972634][T12701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.982990][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.012888][T12701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.069338][T12701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.085665][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.129829][T12701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.228327][T12844] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1931'. [ 266.322626][T12701] hsr_slave_0: entered promiscuous mode [ 266.329809][ T51] Bluetooth: hci2: command tx timeout [ 266.357481][T12701] hsr_slave_1: entered promiscuous mode [ 266.399845][T12850] xt_cgroup: xt_cgroup: no path or classid specified [ 266.425831][T12851] xt_cgroup: xt_cgroup: no path or classid specified [ 266.455723][T12851] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 266.489634][T12850] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 267.220262][T12887] syzkaller1: entered promiscuous mode [ 267.225797][T12887] syzkaller1: entered allmulticast mode [ 267.253892][T12887] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 267.737315][T12701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.792643][T12701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.834078][T12701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.862330][T12701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.137707][T12701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.194176][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.216286][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.223453][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.257657][T12946] veth0: entered promiscuous mode [ 268.267949][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.275233][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.296940][T12946] veth0: left promiscuous mode [ 268.378495][T12701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.409086][ T51] Bluetooth: hci2: command tx timeout [ 268.762029][T12964] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1962'. [ 268.846961][T12971] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 268.881511][T12971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.014018][T12974] netlink: 'syz.2.1965': attribute type 11 has an invalid length. [ 269.016455][T12701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.032791][T12974] netlink: 'syz.2.1965': attribute type 11 has an invalid length. [ 269.050901][T12977] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1966'. [ 269.073486][T12977] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 269.078899][T12974] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1965'. [ 269.088638][T12977] openvswitch: netlink: Duplicate key (type 0). [ 269.180187][T12701] veth0_vlan: entered promiscuous mode [ 269.206937][T12977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1966'. [ 269.222646][T12701] veth1_vlan: entered promiscuous mode [ 269.475613][T12701] veth0_macvtap: entered promiscuous mode [ 269.502554][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 269.547353][T12701] veth1_macvtap: entered promiscuous mode [ 269.613909][T12701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.697332][T12701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.743555][T13011] xt_cgroup: invalid path, errno=-2 [ 269.751554][T13003] openvswitch: netlink: Flow actions attr not present in new flow. [ 269.753291][T12701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.795866][T12701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.824696][T12701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.834232][T12701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.875313][T13018] netlink: 'syz.1.1976': attribute type 29 has an invalid length. [ 270.093994][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.116752][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.188836][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.196791][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.340758][T13043] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 270.590127][T13057] __nla_validate_parse: 1 callbacks suppressed [ 270.590147][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 270.594865][T13058] netlink: 'syz.1.1985': attribute type 1 has an invalid length. [ 270.632217][T13058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.639548][T13058] IPv6: NLM_F_CREATE should be set when creating new route [ 270.706826][T13064] netlink: 'syz.1.1988': attribute type 3 has an invalid length. [ 270.827645][T13071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1991'. [ 270.837710][T13072] ipvlan0: entered promiscuous mode [ 270.846622][T13072] ipvlan0: entered allmulticast mode [ 270.852456][T13072] veth0_vlan: entered allmulticast mode [ 270.984214][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.230105][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.553982][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.678077][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.773159][ T14] bridge_slave_1: left allmulticast mode [ 271.779019][ T14] bridge_slave_1: left promiscuous mode [ 271.784732][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.794961][ T14] bridge_slave_0: left allmulticast mode [ 271.801344][ T14] bridge_slave_0: left promiscuous mode [ 271.807085][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.120503][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.132440][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.142614][ T14] bond0 (unregistering): Released all slaves [ 272.483827][ T14] hsr_slave_0: left promiscuous mode [ 272.508857][ T14] hsr_slave_1: left promiscuous mode [ 272.525319][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.535160][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.543520][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.551032][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.637707][ T14] veth1_macvtap: left promiscuous mode [ 272.655513][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 272.665560][ T14] veth0_macvtap: left promiscuous mode [ 272.679168][ T14] veth1_vlan: left promiscuous mode [ 272.696296][ T14] veth0_vlan: left promiscuous mode [ 273.002254][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.015639][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.025430][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.045701][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.053840][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.401500][ T14] team0 (unregistering): Port device team_slave_1 removed [ 273.457357][ T14] team0 (unregistering): Port device team_slave_0 removed [ 274.689365][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 274.736622][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 275.071699][T13152] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 275.085377][T13149] batadv0: entered promiscuous mode [ 275.092780][T13149] macvlan2: entered allmulticast mode [ 275.098203][T13149] bond0: entered allmulticast mode [ 275.107312][T13149] batadv0: entered allmulticast mode [ 275.114428][T13149] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.125366][T13149] bond0: left allmulticast mode [ 275.132962][ T51] Bluetooth: hci2: command tx timeout [ 275.140454][T13149] batadv0: left allmulticast mode [ 275.145706][T13149] batadv0: left promiscuous mode [ 275.182511][T13100] chnl_net:caif_netlink_parms(): no params data found [ 275.414390][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 275.424062][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 275.465559][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.476416][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.485755][T13100] bridge_slave_0: entered allmulticast mode [ 275.500490][T13100] bridge_slave_0: entered promiscuous mode [ 275.514866][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.525063][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.538232][T13100] bridge_slave_1: entered allmulticast mode [ 275.553842][T13100] bridge_slave_1: entered promiscuous mode [ 275.565833][T13180] pimreg3: entered allmulticast mode [ 275.585257][T13178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.633448][T13178] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.667629][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.696199][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.813405][T13191] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2021'. [ 275.843906][T13100] team0: Port device team_slave_0 added [ 275.850571][T13188] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 275.867754][T13100] team0: Port device team_slave_1 added [ 275.874504][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 275.978213][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.991245][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.021142][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.059617][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.069351][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.096239][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.130133][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 276.217905][T13100] hsr_slave_0: entered promiscuous mode [ 276.231064][T13100] hsr_slave_1: entered promiscuous mode [ 276.253542][T13197] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 276.274283][T13197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2023'. [ 276.313160][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 276.371968][T13207] tipc: Trying to set illegal importance in message [ 276.456855][T13207] netlink: 'syz.1.2027': attribute type 10 has an invalid length. [ 276.500150][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2027'. [ 276.592573][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 276.602904][T13207] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.643264][T13218] 0ªî{X¹¦: left promiscuous mode [ 276.645481][T13213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'. [ 276.716586][T13222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.740255][ T51] block nbd0: Receive control failed (result -32) [ 276.751249][T13222] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 277.085170][T13231] x_tables: duplicate underflow at hook 2 [ 277.208953][ T51] Bluetooth: hci2: command tx timeout [ 277.241581][T13100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.268762][T13100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.295033][T13100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.323121][T13100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.455580][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.510199][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.536578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.543829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.593127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.600421][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.639660][T13256] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 278.032502][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.134824][T13100] veth0_vlan: entered promiscuous mode [ 278.143345][T13274] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 278.166364][T13100] veth1_vlan: entered promiscuous mode [ 278.192535][T13276] vlan2: entered promiscuous mode [ 278.278152][T13100] veth0_macvtap: entered promiscuous mode [ 278.301756][T13100] veth1_macvtap: entered promiscuous mode [ 278.340316][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.377969][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.407180][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 278.407630][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 278.439908][T13100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.452916][T13100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.453495][T13291] SET target dimension over the limit! [ 278.474936][T13100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.504726][T13100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.556109][T13290] dummy0: entered promiscuous mode [ 278.565443][T13290] dummy0: left promiscuous mode [ 278.744424][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.771327][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.838461][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.847998][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.128198][T13316] netlink: 'syz.2.2055': attribute type 18 has an invalid length. [ 279.646321][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.833239][T13357] delete_channel: no stack [ 279.943269][T13365] tipc: Enabled bearer , priority 0 [ 279.962464][T13365] syzkaller0: MTU too low for tipc bearer [ 279.977085][T13365] tipc: Disabling bearer [ 280.114603][T13376] openvswitch: netlink: Missing key (keys=40, expected=100) [ 280.483439][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.367448][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.466352][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.548400][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.658338][ T14] bridge_slave_1: left allmulticast mode [ 281.665152][ T14] bridge_slave_1: left promiscuous mode [ 281.671246][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.681482][ T14] bridge_slave_0: left allmulticast mode [ 281.687150][ T14] bridge_slave_0: left promiscuous mode [ 281.694215][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.025670][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.036529][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.046763][ T14] bond0 (unregistering): Released all slaves [ 282.733248][T13431] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 282.829429][T13423] bridge2: entered promiscuous mode [ 282.840443][T13423] bridge2: entered allmulticast mode [ 282.906000][T13432] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 282.946974][T13432] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 282.994579][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.007524][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.016717][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.032146][ T14] hsr_slave_0: left promiscuous mode [ 283.035039][T13439] __nla_validate_parse: 8 callbacks suppressed [ 283.035055][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2089'. [ 283.047254][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.060952][ T14] hsr_slave_1: left promiscuous mode [ 283.066859][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.076164][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.085629][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.097818][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.109398][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.136324][ T14] veth1_macvtap: left promiscuous mode [ 283.143398][ T14] veth0_macvtap: left promiscuous mode [ 283.149989][ T14] veth1_vlan: left promiscuous mode [ 283.155305][ T14] veth0_vlan: left promiscuous mode [ 283.616766][ T14] team0 (unregistering): Port device team_slave_1 removed [ 283.666794][ T14] team0 (unregistering): Port device team_slave_0 removed [ 284.274890][T13454] syzkaller1: entered promiscuous mode [ 284.284896][T13454] syzkaller1: entered allmulticast mode [ 284.736613][T13464] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 284.748853][T13468] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.129175][ T5849] Bluetooth: hci2: command tx timeout [ 285.210814][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.228222][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.249496][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.269209][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.282825][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.292213][T13481] lo: entered allmulticast mode [ 285.311757][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 285.320813][T13475] nbd: nbd0 already in use [ 285.376579][T13474] lo: left allmulticast mode [ 285.739777][T13491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2110'. [ 285.937950][T13436] chnl_net:caif_netlink_parms(): no params data found [ 286.103100][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.138727][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.192156][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.203274][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.211742][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.238232][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.247648][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.276948][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.287547][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.396338][T13502] xt_CT: No such helper "syz0" [ 286.405230][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.416500][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.474858][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.483656][T13436] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.491565][T13436] bridge_slave_0: entered allmulticast mode [ 286.503987][T13436] bridge_slave_0: entered promiscuous mode [ 286.512008][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.519993][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.527259][T13436] bridge_slave_1: entered allmulticast mode [ 286.534816][T13436] bridge_slave_1: entered promiscuous mode [ 286.579294][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.590942][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.661921][T13436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.710254][T13436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.864569][T13515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2116'. [ 286.875214][T13516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.882497][T13516] IPv6: NLM_F_CREATE should be set when creating new route [ 286.886220][T13436] team0: Port device team_slave_0 added [ 286.889827][T13516] IPv6: NLM_F_CREATE should be set when creating new route [ 286.889957][T13516] IPv6: NLM_F_CREATE should be set when creating new route [ 286.914046][T13436] team0: Port device team_slave_1 added [ 286.934506][T13518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2116'. [ 286.955445][T13518] netlink: 'syz.3.2116': attribute type 7 has an invalid length. [ 286.973985][T13518] netlink: 'syz.3.2116': attribute type 8 has an invalid length. [ 286.981915][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 287.046746][T13436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.054107][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.081138][T13436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.139455][T13436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.146775][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.181545][T13436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.210075][ T51] Bluetooth: hci2: command tx timeout [ 287.325456][T13483] chnl_net:caif_netlink_parms(): no params data found [ 287.357912][T13436] hsr_slave_0: entered promiscuous mode [ 287.364763][T13436] hsr_slave_1: entered promiscuous mode [ 287.370512][ T51] Bluetooth: hci0: command tx timeout [ 287.405534][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'. [ 287.418169][T13527] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2119'. [ 287.453311][ T14] bridge_slave_1: left allmulticast mode [ 287.459202][ T14] bridge_slave_1: left promiscuous mode [ 287.465154][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.487078][ T14] bridge_slave_0: left allmulticast mode [ 287.493836][ T14] bridge_slave_0: left promiscuous mode [ 287.500424][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.345318][ T51] Bluetooth: hci4: command tx timeout [ 288.760638][ T14] bond3 (unregistering): (slave gretap2): Releasing active interface [ 288.786857][ T14] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 289.197914][ T14] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 289.206352][ T14] !€ÿ: left promiscuous mode [ 289.214136][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.223233][ T14] bond_slave_1: left promiscuous mode [ 289.231247][ T14] bond0 (unregistering): Released all slaves [ 289.245321][ T14] bond1 (unregistering): (slave bond2): Releasing backup interface [ 289.254114][ T14] bond1 (unregistering): Released all slaves [ 289.298806][ T51] Bluetooth: hci2: command tx timeout [ 289.365030][ T14] bond2 (unregistering): Released all slaves [ 289.378231][ T14] bond3 (unregistering): Released all slaves [ 289.458891][ T51] Bluetooth: hci0: command tx timeout [ 289.494864][ T14] bond4 (unregistering): Released all slaves [ 289.617072][ T14] bond5 (unregistering): (slave bond6): Releasing backup interface [ 289.625867][ T14] bond5 (unregistering): Released all slaves [ 289.730174][ T14] bond6 (unregistering): Released all slaves [ 289.833623][ T14] bond7 (unregistering): Released all slaves [ 290.017379][ T14] : left promiscuous mode [ 290.034334][T13559] netlink: 'syz.1.2126': attribute type 24 has an invalid length. [ 290.193664][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.203335][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.212728][T13483] bridge_slave_0: entered allmulticast mode [ 290.224387][T13483] bridge_slave_0: entered promiscuous mode [ 290.340248][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.348521][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.360849][T13483] bridge_slave_1: entered allmulticast mode [ 290.378892][T13568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2129'. [ 290.381047][T13483] bridge_slave_1: entered promiscuous mode [ 290.408987][ T51] Bluetooth: hci4: command tx timeout [ 290.512452][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.535293][T13570] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 290.580283][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.755867][T13483] team0: Port device team_slave_0 added [ 290.857700][T13483] team0: Port device team_slave_1 added [ 290.901967][ T14] hsr_slave_0: left promiscuous mode [ 290.907886][ T14] hsr_slave_1: left promiscuous mode [ 290.914668][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.922640][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.931349][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.941724][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.960253][ T14] veth1_macvtap: left promiscuous mode [ 290.965796][ T14] veth0_macvtap: left promiscuous mode [ 290.972070][ T14] veth1_vlan: left promiscuous mode [ 290.977457][ T14] veth0_vlan: left promiscuous mode [ 291.082715][ T14] pim6reg (unregistering): left allmulticast mode [ 291.189535][ T1117] smc: removing ib device syz0 [ 291.276917][T13582] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 291.369433][ T51] Bluetooth: hci2: command tx timeout [ 291.444198][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 291.484051][T13588] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2134'. [ 291.534363][ T51] Bluetooth: hci0: command tx timeout [ 291.573451][ T14] team0 (unregistering): Port device team_slave_1 removed [ 291.622447][ T14] team0 (unregistering): Port device team_slave_0 removed [ 291.964886][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.972376][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.003528][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.018506][ T9115] ================================================================== [ 292.026592][ T9115] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 292.035382][ T9115] Read of size 8 at addr ffff88806a0a62e8 by task kworker/0:22/9115 [ 292.043375][ T9115] [ 292.045705][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: kworker/0:22 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 292.045719][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.045726][ T9115] Workqueue: events smc_ib_port_event_work [ 292.045755][ T9115] Call Trace: [ 292.045764][ T9115] [ 292.045770][ T9115] dump_stack_lvl+0x189/0x250 [ 292.045794][ T9115] ? __virt_addr_valid+0x1c8/0x5c0 [ 292.045804][ T9115] ? rcu_is_watching+0x15/0xb0 [ 292.045820][ T9115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.045833][ T9115] ? rcu_is_watching+0x15/0xb0 [ 292.045846][ T9115] ? lock_release+0x4b/0x3e0 [ 292.045861][ T9115] ? __virt_addr_valid+0x1c8/0x5c0 [ 292.045870][ T9115] ? __virt_addr_valid+0x4a5/0x5c0 [ 292.045879][ T9115] print_report+0xd2/0x2b0 [ 292.045892][ T9115] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 292.045906][ T9115] kasan_report+0x118/0x150 [ 292.045919][ T9115] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 292.045933][ T9115] __ethtool_get_link_ksettings+0x6e/0x190 [ 292.045951][ T9115] ib_get_eth_speed+0x15e/0x7b0 [ 292.045966][ T9115] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 292.045979][ T9115] ? do_raw_spin_unlock+0x122/0x240 [ 292.045992][ T9115] rxe_query_port+0x93/0x3b0 [ 292.046003][ T9115] ib_query_port+0x170/0x830 [ 292.046016][ T9115] smc_ib_port_event_work+0x15a/0x940 [ 292.046032][ T9115] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.046047][ T9115] ? process_scheduled_works+0x9ef/0x17b0 [ 292.046061][ T9115] ? process_scheduled_works+0x9ef/0x17b0 [ 292.046074][ T9115] process_scheduled_works+0xae1/0x17b0 [ 292.046094][ T9115] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.046111][ T9115] worker_thread+0x8a0/0xda0 [ 292.046124][ T9115] kthread+0x70e/0x8a0 [ 292.046135][ T9115] ? __pfx_worker_thread+0x10/0x10 [ 292.046148][ T9115] ? __pfx_kthread+0x10/0x10 [ 292.046158][ T9115] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.046170][ T9115] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.046183][ T9115] ? __pfx_kthread+0x10/0x10 [ 292.046195][ T9115] ret_from_fork+0x3f9/0x770 [ 292.046210][ T9115] ? __pfx_ret_from_fork+0x10/0x10 [ 292.046223][ T9115] ? __switch_to_asm+0x39/0x70 [ 292.046232][ T9115] ? __switch_to_asm+0x33/0x70 [ 292.046241][ T9115] ? __pfx_kthread+0x10/0x10 [ 292.046251][ T9115] ret_from_fork_asm+0x1a/0x30 [ 292.046264][ T9115] [ 292.046268][ T9115] [ 292.271567][ T9115] Allocated by task 5837: [ 292.275896][ T9115] kasan_save_track+0x3e/0x80 [ 292.280574][ T9115] __kasan_kmalloc+0x93/0xb0 [ 292.285147][ T9115] __kvmalloc_node_noprof+0x30d/0x5f0 [ 292.290504][ T9115] alloc_netdev_mqs+0xa6/0x11e0 [ 292.295542][ T9115] rtnl_create_link+0x31f/0xd10 [ 292.300379][ T9115] rtnl_newlink_create+0x25c/0xb00 [ 292.305480][ T9115] rtnl_newlink+0x16d6/0x1c70 [ 292.310141][ T9115] rtnetlink_rcv_msg+0x7cf/0xb70 [ 292.315177][ T9115] netlink_rcv_skb+0x205/0x470 [ 292.319934][ T9115] netlink_unicast+0x758/0x8d0 [ 292.324680][ T9115] netlink_sendmsg+0x805/0xb30 [ 292.329427][ T9115] __sock_sendmsg+0x219/0x270 [ 292.334094][ T9115] __sys_sendto+0x3bd/0x520 [ 292.338584][ T9115] __x64_sys_sendto+0xde/0x100 [ 292.343347][ T9115] do_syscall_64+0xfa/0x3b0 [ 292.347862][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.353751][ T9115] [ 292.356063][ T9115] Freed by task 14: [ 292.359855][ T9115] kasan_save_track+0x3e/0x80 [ 292.364527][ T9115] kasan_save_free_info+0x46/0x50 [ 292.369538][ T9115] __kasan_slab_free+0x62/0x70 [ 292.374295][ T9115] kfree+0x18e/0x440 [ 292.378198][ T9115] device_release+0x9c/0x1c0 [ 292.382782][ T9115] kobject_put+0x22b/0x480 [ 292.387198][ T9115] netdev_run_todo+0xd2e/0xea0 [ 292.391956][ T9115] default_device_exit_batch+0x81e/0x890 [ 292.397586][ T9115] ops_undo_list+0x525/0x990 [ 292.402162][ T9115] cleanup_net+0x4c5/0x800 [ 292.406567][ T9115] process_scheduled_works+0xae1/0x17b0 [ 292.412101][ T9115] worker_thread+0x8a0/0xda0 [ 292.416845][ T9115] kthread+0x70e/0x8a0 [ 292.420909][ T9115] ret_from_fork+0x3f9/0x770 [ 292.425491][ T9115] ret_from_fork_asm+0x1a/0x30 [ 292.430245][ T9115] [ 292.432560][ T9115] The buggy address belongs to the object at ffff88806a0a6000 [ 292.432560][ T9115] which belongs to the cache kmalloc-cg-4k of size 4096 [ 292.446868][ T9115] The buggy address is located 744 bytes inside of [ 292.446868][ T9115] freed 4096-byte region [ffff88806a0a6000, ffff88806a0a7000) [ 292.460741][ T9115] [ 292.463098][ T9115] The buggy address belongs to the physical page: [ 292.469502][ T9115] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a0a0 [ 292.478603][ T9115] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.487097][ T9115] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 292.494708][ T9115] page_type: f5(slab) [ 292.498672][ T9115] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 292.507241][ T9115] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 292.515807][ T9115] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 292.524462][ T9115] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 292.533118][ T9115] head: 00fff00000000003 ffffea0001a82801 00000000ffffffff 00000000ffffffff [ 292.541778][ T9115] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 292.550432][ T9115] page dumped because: kasan: bad access detected [ 292.556842][ T9115] page_owner tracks the page as allocated [ 292.562554][ T9115] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5851, tgid 5851 (syz-executor), ts 87475660568, free_ts 87360526330 [ 292.583905][ T9115] post_alloc_hook+0x240/0x2a0 [ 292.588661][ T9115] get_page_from_freelist+0x21e4/0x22c0 [ 292.594195][ T9115] __alloc_frozen_pages_noprof+0x181/0x370 [ 292.600000][ T9115] alloc_pages_mpol+0x232/0x4a0 [ 292.604835][ T9115] allocate_slab+0x8a/0x3b0 [ 292.609324][ T9115] ___slab_alloc+0xbfc/0x1480 [ 292.613988][ T9115] __kmalloc_cache_noprof+0x296/0x3d0 [ 292.619357][ T9115] ipv6_add_dev+0x6ca/0x1370 [ 292.623935][ T9115] addrconf_notify+0x794/0x1010 [ 292.628772][ T9115] notifier_call_chain+0x1b3/0x3e0 [ 292.633876][ T9115] register_netdevice+0x1608/0x1ae0 [ 292.639074][ T9115] veth_newlink+0x5cc/0xa50 [ 292.643562][ T9115] rtnl_newlink_create+0x310/0xb00 [ 292.648657][ T9115] rtnl_newlink+0x16d6/0x1c70 [ 292.653323][ T9115] rtnetlink_rcv_msg+0x7cf/0xb70 [ 292.658242][ T9115] netlink_rcv_skb+0x205/0x470 [ 292.663014][ T9115] page last free pid 5841 tgid 5841 stack trace: [ 292.669326][ T9115] __free_frozen_pages+0xc71/0xe70 [ 292.674534][ T9115] __put_partials+0x161/0x1c0 [ 292.679194][ T9115] put_cpu_partial+0x17c/0x250 [ 292.683949][ T9115] __slab_free+0x2f7/0x400 [ 292.688358][ T9115] qlist_free_all+0x97/0x140 [ 292.692937][ T9115] kasan_quarantine_reduce+0x148/0x160 [ 292.698383][ T9115] __kasan_slab_alloc+0x22/0x80 [ 292.703219][ T9115] __kmalloc_cache_noprof+0x1be/0x3d0 [ 292.708573][ T9115] netdevice_event+0x3a1/0x8a0 [ 292.713322][ T9115] notifier_call_chain+0x1b3/0x3e0 [ 292.718422][ T9115] __netdev_upper_dev_link+0x3c3/0x590 [ 292.723875][ T9115] netdev_master_upper_dev_link+0xb0/0x100 [ 292.729670][ T9115] batadv_hardif_enable_interface+0x24b/0xa30 [ 292.735727][ T9115] batadv_meshif_slave_add+0x79/0x100 [ 292.741079][ T9115] do_set_master+0x533/0x6d0 [ 292.745661][ T9115] do_setlink+0xcf0/0x41c0 [ 292.750059][ T9115] [ 292.752379][ T9115] Memory state around the buggy address: [ 292.757998][ T9115] ffff88806a0a6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.766047][ T9115] ffff88806a0a6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.774095][ T9115] >ffff88806a0a6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.782146][ T9115] ^ [ 292.789580][ T9115] ffff88806a0a6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.797627][ T9115] ffff88806a0a6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.805673][ T9115] ================================================================== [ 292.819357][ T51] Bluetooth: hci4: command tx timeout [ 292.825172][ T9115] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.832409][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: kworker/0:22 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 292.844572][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.854627][ T9115] Workqueue: events smc_ib_port_event_work [ 292.860439][ T9115] Call Trace: [ 292.863708][ T9115] [ 292.866630][ T9115] dump_stack_lvl+0x99/0x250 [ 292.871228][ T9115] ? __asan_memcpy+0x40/0x70 [ 292.875814][ T9115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.881003][ T9115] ? __pfx__printk+0x10/0x10 [ 292.885582][ T9115] panic+0x2db/0x790 [ 292.889472][ T9115] ? __pfx_panic+0x10/0x10 [ 292.893898][ T9115] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 292.899810][ T9115] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.906129][ T9115] ? print_memory_metadata+0x314/0x400 [ 292.911587][ T9115] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 292.917592][ T9115] check_panic_on_warn+0x89/0xb0 [ 292.922549][ T9115] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 292.928525][ T9115] end_report+0x78/0x160 [ 292.932764][ T9115] kasan_report+0x129/0x150 [ 292.937256][ T9115] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 292.943233][ T9115] __ethtool_get_link_ksettings+0x6e/0x190 [ 292.949032][ T9115] ib_get_eth_speed+0x15e/0x7b0 [ 292.953872][ T9115] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 292.959238][ T9115] ? do_raw_spin_unlock+0x122/0x240 [ 292.964466][ T9115] rxe_query_port+0x93/0x3b0 [ 292.969059][ T9115] ib_query_port+0x170/0x830 [ 292.973641][ T9115] smc_ib_port_event_work+0x15a/0x940 [ 292.979011][ T9115] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.984226][ T9115] ? process_scheduled_works+0x9ef/0x17b0 [ 292.989954][ T9115] ? process_scheduled_works+0x9ef/0x17b0 [ 292.995668][ T9115] process_scheduled_works+0xae1/0x17b0 [ 293.001219][ T9115] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.007201][ T9115] worker_thread+0x8a0/0xda0 [ 293.011791][ T9115] kthread+0x70e/0x8a0 [ 293.015882][ T9115] ? __pfx_worker_thread+0x10/0x10 [ 293.020984][ T9115] ? __pfx_kthread+0x10/0x10 [ 293.025560][ T9115] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.030835][ T9115] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.036024][ T9115] ? __pfx_kthread+0x10/0x10 [ 293.040600][ T9115] ret_from_fork+0x3f9/0x770 [ 293.045186][ T9115] ? __pfx_ret_from_fork+0x10/0x10 [ 293.050290][ T9115] ? __switch_to_asm+0x39/0x70 [ 293.055041][ T9115] ? __switch_to_asm+0x33/0x70 [ 293.059790][ T9115] ? __pfx_kthread+0x10/0x10 [ 293.064367][ T9115] ret_from_fork_asm+0x1a/0x30 [ 293.069131][ T9115] [ 293.072282][ T9115] Kernel Offset: disabled [ 293.076599][ T9115] Rebooting in 86400 seconds..