last executing test programs: 7m23.803747634s ago: executing program 3 (id=6371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 7m23.638432397s ago: executing program 3 (id=6373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x6, 0xd, 0x3, 0xb5e, 0x4d, @dev={0xfe, 0x80, '\x00', 0x23}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8000, 0x7800, 0x2, 0x3}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x10, 0x803, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmmsg(r1, &(0x7f0000003880)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="104c176460da930400505ff3293a6eb79f267a6cbc66e402", 0x18}, {&(0x7f0000000140)="94fe1c8ecff543e689908c04b1422cf5161c25fecc93afe2e170e3dbbea00372b2e8e4e2c4da42f64fdb8fb0ef354e1dc43c9ca187910f72c885a5bd84ebe82d6e81384e7b1b9c4fc80e7d71bac928bc2afefa8e41086c7081f0fcfc1334dd737a5a1dc98ff01c5d415ab2322473c76a8ab7e4c3c306e85d57dcab0c11e93c38a0e7ec1cea513b4bd572a28c3d5293891c0902009644717838c629c057a0d1c07db79ef292ad83217562b0b0cb2895db93ec41ff7502ae0b9bb38e25e85cee2b5c24bf89c43ef2b13e6f24b68af4e14031bde9715e5a7200f775b539db5307d099e7773ec837b79ec094cd003dfadb1ea35bcb765e024a7fa6", 0xf9}], 0x2, &(0x7f00000002c0)=[{0x38, 0x10e, 0x10000, "0b5c5bccf622806e0f82d27f20ee43a86cabdc97629eb9c4460a234e51bdc5aaaca284a20ec773d6"}, {0x98, 0x10a, 0x3, "802736f4bb1abaa7e48e1b6f84d9b24c9504e693eb7d31acfe2bc71fced1693cb29550b64866f699fbb258bef4725337183b92e948ba34d17db9c0e5926f674d615a77c1baea3457f29f43f26f0c0cdae07c65fbfe1cecd6bb386fc6e176fcf0ec7ab45b7495f5f8c0acc4666c8d97f9f19a220bbb1cb0e43d07d91d853323068c9264"}, {0x98, 0x119, 0x9, "db114aa128633ffbe2ebcb613e21ff04600534759c405bbd074cec75981e4d02d7bb76541e97a7d8893558ae886ada4186d83a11ab012ef306f56dc8ab5dd553c2555c084d750e819f652972da01fa30342bba6fe600a18ed818cdb072ab213826b0f4a10a5ad6ee19f60abcb0d3c23c3bf39df5555dad4e2f4a0c3fe66535d7301c"}, {0x40, 0x103, 0x5, "42eaf195193198909b8c807c4e3acd210a055762f54064d87dac5e831c97c74608a1d6e33713d6dc965bfaa218"}, {0x60, 0x84, 0x3, "90c6df7f27d1f97a3052643792b19765684d296c9e252437530b15aa857a61a743dc179f93f08602b530d6ed7e93f505ce007e3577cdaecdf7f57bc78dd638b1052b69c15f0843f3af3c83d9b7bd56b3"}, {0xf0, 0xff, 0x3, "d3a7c0b3efd4e5d9104eec0bdc90c63b9de437acbf69685541d44b4136eefcb7e989ebdcd4960a86f3366d3dad0be0ef76e381f1a96339ddc325b33718f3ac6fa35070fadae2e1c096023e0ecc1d21309c662e7d5d62a788016d4884e78b60fccfc19d335039ccf28b16839de8b0b47e1a4e7661e92e6f86750786ab21b46bf54df1e527ba11099c024ecd5abb64b372033e8ca3029142f269a66ae8850cb24d7867d9219e506de1cb706d9c0160bedc65cc1e34444be09a260c5f15e9b42c178427b57df954ca5b199c50eb5621dc7fe73710b25d8c420e38"}], 0x2f8}}, {{&(0x7f0000000680)=@ll={0x11, 0xc, r2, 0x1, 0x9, 0x6, @remote}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)="85c62436ecdce1b0f6b35f29113937e16c9e624340c25f54c1e1733c7309da239bec6f6aced5afe8e288a651e896b0bdd7e6c949ea2269b2c0797cf38b6367a548e77af1ab39fc25573eaac147a6ea6ebd37cfed7fb7ee0b56d2d1d990dbb77d5146bc97fa248e3ca88d58d3a5c230b5c0461986d446a9546972f65b793e74289ce8300aebc62ad057e9e762808762386dab1e4a115cccbb361a718e6bb1da133fc076523f3d6f12cbd8da4a56dc414bfda209d97d5b8a97bd6362271d58c12b6766512603fccb58d3b0e248369cf02a944e5935b0fde6e84cd31ada83aff5f627207b45cc9e364a168fffe8099eaf91cb", 0xf1}, {&(0x7f0000000800)="4110fc9170f43281f7275964ccdc853a72fa7c991677ec220a93c1dd9d442f8d8b2db02df12ca15ce1fac222bd41356cca33f9cd926fec532ce9ed5c15454fa94892fa631ffb7c53c08ce621b7b2c8ab098024a7c18d979d2428c99522a649217aada645aa3ec90abd176788a10d709cdf0bcd71a83f838558ab292edf3b752b1e702c15e8ca41c3c9f3b315dd7a572322d79577af25d7a9ce7d7d01cb9e7a72fc546d95b8dcf59a", 0xa8}, {&(0x7f00000008c0)="3c5a0bfb8b2bddcd3957387a306bd17df847830c57ec6549ce27b58c0761da04f6c9f7f6d43496f8da8313853fa6048fd1ddc5f293343b8c6e38945b86735b32bfb3826514e9b6f16d57ff5c80bd989e26a699e091e3e5efded2fdad4978bc36e94d7b2f440cb4960ce9826605c9c0e77cd8da40ee1544cc774a88c00a803f22403654bfb5a5c6ad8c5250e8c27b9e70dd72994c739ad156d990f69fd3466602fa4245ea96cdf1b75d395618d00564a5d3d20d4bb2d9b58bbf041e5d8c7aca194e5c47dc36fd5b5d9cf90a68da44f4f8d4270351b15e3f5f8f521b7cf68f32cfc51a4ea64300cd590f9e8e1b2959", 0xee}, {&(0x7f00000009c0)="fca6c341458b8a56f02b19620c3522c5e8459026abf97ac4d3639d3d419b67ac732af87b4219e8240c29120b0b224fce3f031b077c7ba2f25b808932c99290c43ce27dca1bdeea614d796ffe7e1b2c2cba0dcfdd5a5f0be3571ff6db0dd594a06ad1cc7771b5722788c88ec83197abdde61dec1fcf52f8bbb6ad470425b907348b5654aca0964b53704caa", 0x8b}, {&(0x7f0000000a80)="ec4fe2290143ebe19d9f282dd1f6a7706ab68f908a6fb28baef95f6c2a6b72719597feedde1811d01b6d688fdea871f6f7cd19c9ed2ca6ca8328516bd80ff85ec871b05848bdad554fa136f041681f3ba7b6938bd46864ae884fc99a6649d40617b6165c6f1be4570df1fe3f6fa8e07c8fe40a6af7eed6fa31780a1ae2dbb6409a693ec451cdc26a334ce4", 0x8b}, {&(0x7f0000000b40)="8bd6ca456b32670ad4523f25039c6e5b55a92309b9e4c6d886108b91648faf6ab635512e09b42f3978a8908abc9c4352267da86d3e94059fa2b0559987", 0x3d}], 0x6, &(0x7f0000000c00)=[{0x108, 0x10f, 0xfffffffb, "c4bf4dbaa7d5fc11efab655cf8543eeeca5f03f9f99aaf90f361f374d8851921207143b4a9df2ab0d02b822a88439871ce66f58b5187ed5dca14d4bd367f774fd53383b34552d9301e38f4a47326a4f906f9bcede70310973c31de7fc2fe01aeee6a16d95765a7df4448480dfae03cd76cabb870a1d0e0daa04cf0465e0179cc992af6fbc1a8417cde0a5241792e113bdb9fb15de2e844e3894f62cf09ec3a309de89e12b50ee276d229f500c5e08e586ace22ebe7405c146d7689772a834d29376a41144207a425268c4868646632ef382f6b77b2504e7d4a0c0b952417e69fdeace0853e9d85fa6c7db0f72f07d1b72f19d8c6"}, {0x18, 0x116, 0x5, "46c4a0862f729e"}, {0x70, 0x113, 0x3, "8bfb423da88519a4e09f113d62faf3710e041cea7dcff77dfaf154280c7da0fa767e3b6feeedb3a84d45672efabe48d6f40a6cb41917d8e3b217958b5aa7f52a5fc01be7799aef056b152898cb81cf87851f7fafed7e591dfe4f15f6"}, {0x10, 0x10b, 0x3ff}, {0xb0, 0x85, 0x6, "18f4c6fbeda23213f80c6e94c1f405dd0b9a48ca1ccf547ddce1772d7be1da08a7992dc74684ab06af8f9b1721a79064b7aad6a632e34608cdc4c5be46247fd2ef5f27aba9337eaf5ab9b261b0cd13ef81b8d295b54cb8670493a77c267a7c24d89d1d1c8865ba2c6905d7759ece293949c249fcb47ddc6641476866d098b55d78ebce8ddd11063de32d38a564307e04d18e6596b7e0a56546616adf7c66"}, {0x38, 0xff, 0xa631, "b77299e5b3c91ae34d9cfbe4dd2d81b847eff6bcc781e26a13700589ade44d58afe4df8a5019"}, {0xd0, 0x10e, 0x1000, "5416622b84c88120ce0fa24f71cef6846836162ea8505bf929c13e07eec525384602faf63e44a6c3bb898743918884b3a98f734c777941407c623131001307e798ffe3055635b220dfecb90dc0f7f07ae289f712af061eab2c8b4bf8d8a91101e367d06262474803c420a91ab40b1d489d4c6c1956236d5175fb8d650bf4dbdede4eca21692f789d919cf154f6768613b4acc1c03b30d1974731ff93fad83a7f5c82a318e534e3f4d9f1d3b8d1e09054e5de94e22ce2cfe5b62c647075a10acb"}], 0x358}}, {{&(0x7f0000000f80)=@can={0x1d, r7}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001000)="86db892acdc05e08f72948525b36df970ceeebd77d76f1d04f953b87f5c04ecf621d9c096a8b5e2a4cd06c29e7e25e89698cfaf4f7a3bb9bc85564a7f3dadc77ff166cb506de3789212f1b3c52fe5998f0f1bf6b1618399cb9ec6a70901c0cef3be12feff8a5ea89e603eb3757e14f02b7c8f07222a91bbdf0d15d13a1a3476d7d90414234eebe876ded1d541287c2ea1e7faf9e84218cf112ba9d33f0d5736c54e005aaa08152430803", 0xaa}, {&(0x7f0000001180)="2dec56c7e74e7b5c318badcc712a7969303b02f243463ef52ec586ecf5206e8e787bf9df15edddb28540a1ba2cbb875db5b0477b857d4d3eaeb34e4f11927259dba4ed502475f31f444887af9c25fe09e18502ad81b99fb9753d8de5757e11f3205b8008c9b8858902f101c713c73790d7bc945119046906fd4c3576c09a752f6d92e0e80eb74b1bf5593c9f069d38301db7", 0x92}, {&(0x7f0000001240)="49bd61cb93b170a97b014eb1178e13129f1f64fd613d5acc62ec2058995e46a14732ef53e50d7a674479ef7bb39f6648efd0fc81de8fe003912cad06c6d8c50b19593f5b0fbe18821fa5708d03035d9bdec30ad8eb4a1ceb986cfccc22d56fa668f9d26f81bf276092be5388a6b713e17fb6d7deeb73268e10d434bc068bf5b016dcaa14e75079174435c08ec1fe710a844b2164bb2c2709f31242be372e1b43d93d72a8590ea96b0c323a7a4b023b44fdb9964730f37db10e897e219062b0bc11e52c457b75320dd194661b8abdf37d506cae6aa6cf45e56a0a9efcb61eb29a0959c62abb2e58794e33c1e9b401fc1de43b23df414f35f4a3a1961e18e27ef815876652861be86d77c5f0d4b7950e3f25f214576c016f56025e9e2b5b9d6a9c3c6ce0c3065866a31fbe22fff0a54c3278c5a8e12335a3b6ee39393d4b15bc0251595b5aac2b5f4d2d780f0c903065bfff11fdfaf7d7137c2913804c040219ca51e4a242610d7a3828eb6a566512c62f127e120b0c3aab92d022da6078e29942d0775bc167d27612c668b583bebd54e6223985c6d2d721d72ae5d808fc3f8fb24db83ae0ec281a445d069a05a955adcae15e5eff9a6cc8469ffd07ade69fe240ef9e3be98b39f7819fa0b66b77584afe386d16b8f348e65c863bc5a21d7c0139bb469b74f093c46653f9821af59633a078bcde06cb755b1401ace971313086796a22ead72d9161c866fc7c3a0b6906f4ec35cbaed936b80d6b80a776d76516c7dfde6851e45177ed67f67ff9ab64672222c66fd2c5cd6b2edbaf95de9442be519c7fc2f41799f53d2c1da6cc1e3324734d6d4fb5964b31fc855d96c6eb7d32ae7d61dc90ac67808f7e78c598da1815b9e9b6e1037fbcd9dc24484303b4acb30d6102d1f81986a1f00bc09e8effde2a8813ccf93a5048d5073f746e7c5c84c96d3f62959485ea59417d9a73dc0b5ada6d765891252a0814b3b05ad3bcda19fc15c4b3cee0bfc1cc5b05f286ae64fa8062f7c67c275cb1c70755d35cbcf66d0960dae382fd086d602a9247ca86a08f878585ddaa56a1179cb87996b7b94811d90dddea64371475e168463b2734746c748433016a1acbaa426f51e41d0d9dbb2518d9197a47240b448aa2d29c3133cae267348e490e202a36e2f805f235175eff707be8f12a001d47ba629c9949e0905fa28dc05e04444d8e99dec23cbfaf9c2c39fbb4bfd6d17fb9a9c276324e5cfabd57a091b848921bbd83ee1da3213544b45225ca79e85ce660f99a474833a901de2cd309e4f52dbc3d8f2945fee9a4bbe17ce26f27a565af9502804e80ffadc143c97e3c5c8c6b99678355fee778df25242b51189af332a5413c9e1bb138cea1480e94d7bfda1a6b539c7de052fe90fd3d50d95387e3f9d3c38e700b561b7a4b532c995fa955d52a448a106b4fc6c53042d53ebfbd967fbc5cfabe139b600ff5dcbb6c3beafea4ddbb80654de90ed357ad63226eebf554c22ce20f07509566e7ba5d86f0d16d900a68cac56775b9ad34049eadd0033aa1e5908adb7a1fe8cb4bfe772c5aefbca05c3248674b0eca796609cac577978c95a515f4955bfd4728b590196fc662990c898c252a6aec0ab372c29d3609e29d9a090925796e164f859d67d618959c3fb6c7153ca92f25dc7567537aab95fefb8f22f969add0111c1dc82f2eea3125bef197ac1b6017156c7ce070c02a5bcd08f3ec28e6fc1a96c190f4de0ee1331b1aaf0c816585e21f66e482afa91166cfd961bc5b5f5d1b6e52ddbb86501dd28ed82ccfdb0202df88b39f43b9928e2ef42e402f6cc22584475b20a09eb82dcfe5e89f946f0d5492d0757a0c0aa16f3a1ca9c07039c173ecfc4d0854b9a42a9e9648a71cca81b56cc446026f47944008eedadaf035fb1290ee154934b98a7c5826a4523e9e0920933468faa558db629192043281c478838e808236eeeb3ccc30926237d71466d9b3699a034ece6a32e90e87a550142ef8c69b20d596daf72b801703c7d1ec012b6ca42ead850de3bf09bf9d5dfe8277d94279056dd50ae03a0a9943481dbcd82be98fc0b949022ae3a907f63dab416f92936571663a371051e2a45f24b06f17039f3bcc06454604d85b1c770110051caccd15c867c3ae82b3f55bfc959e4c85a55b05130dbe3868c04478f488c2d25c5083de3574e30c38cfeaba5fc7a7b3c1c00cfc268145ccefd0c8c2178ee0d00e2805ca9e16c21b9e782e153714140db6a1c6ea8d4b45a492f8b2828f1c6aaa3a8d0c873e92559be1f4ea5ec3041f7b46666256b4468b09f74a3aefa661ae385d1dbbf4435dd660c4174c8f36e2ee022ac66c9c53d9e3520dabb825e62563b9246e2948cf82bdab545a04579f910e1bda966d804954d93587c72ebab9e8585bc87c4b547079acfd3a3daec660f98f46e9c3e70df36c77a0cf58d2972ee85e1252332931b876496371f146431480cad16bd97f9d19e428d76e1a34803e692dd6e9861aefc1696e1c5f99759ad33f164cae4cd2aa8b30bb3e5a17b2f0eb1f8f07fa55b77722db3ced2299e5026a8b34de337366ef5b15e4a337939cf3ad4cf08eafdc57ce8d1a6053ae23ece37223104655f0476baf20c66b2c05470776f36f736ad20f18c848d196c165868aae5ff76dad1915bf27814be8290fe8199ef371e1a0caadbe7754e44337c62f238e3ad0bb8cefee316e506777d0ff33f64fa61baf7516c2baa5a893887cac4100cd02efe56f9032704b3eca52ec5d48de3190c7092d6a8483c97e0e64b2e0eed30cf786627c5bb0b34e15d1875fcbcfb2f8e1bd07ca78436a44e157b46dffea34ce06fdc5eb059cc4340644b4965bffcde86494f8c931759f72b0be2003ee3237470f552f01552a489c477751dc685912f7d1c28e25f1c5d817613a9b7965b0f53909db6733e3e577306cde66d0cca1db4015cda470c6d9d756954df5f51a37fb185ebc08914f1823d5d360652c094064e482292cf3220610d373cf481f2161449d1540f518c5d722268681395606dd7a12713154be30f84b340a8e83b814ca48e146a732a2adc7d33fbd20d414ff8947b16f0bdfe492b98c48306b06f0fe146a0a63b4d1503c014f05ea4c25802e2ed11c38ad2a727c187002a1daab46d6bb0ce3510b0e6f8fc038c9548805afeccf9434bb30e480384ff4102576969fac5a0595e6e4e7cd37159744283365602525d15931c02233154e6b46f1b2980e9ab29f5ff6806e8f37b1bef44ce546e731a9eb20a06b1eac4caa9ac14944b18f8a2fb90c8717ab510dfeb9458e020af44bfcdfde981b2d9b5d159eee7acf5057160fb55b0ae7387df064f2bc7f6dbc0f299a76654535a68eab3ed98d43efbffea2a413a4facfd879c5cc92408eb1295fd1124c632d1d3a4acf3df9fe6274a3d33b084706474f65c7241f536018adc61754087895d2d4560ff97b55ed9f11cff700e2fb6ac1b660cf2cfe69ad0e9c970b37068a5e7ad71ea46054c998d7810e8a06b9dd3014a55a44883c3ff24e8904bb2ff059ff5432acd91c4d388dae97bfccde105ecf0577bcd36e69bd44789d4695d3a2aaacb09659fe8ff1ba3fd7b0af11a125f3d4491730b2658599aa10449ef65779e42f2600aed813ba7a3d02b19826d505b5e3a702e7795cfff8b093d1a47c5e3d289bc98ee2249577429a9d436f0adf7fcae6db5d0733372149a4332e65ab57e3f81aef02b06af38fd7a37a9f70aa4261e285bb7536fbb9f4db210494cc2858b49ce46689f5c93f9ee4f37b2a2a8e10c74c553e95501e30476d65ddc9446f7417485dd3ebbf2ba1fc76e9ae0ea2e04f5020d751da66a6271d50284e043ed93865c77e94eea983d63cd2dc7d56bbb96d7ba4a09f6ff0e47b837a501910d7146881cb4e6268638a3cd3704a81d241198677d19fa687d559a0f08df5ae82abbf5625c1cddae45b4f8cfbb2eeaf7f8d45aa3dad0e6081e696ffdff7a58cfc31de4073422b817489accbd6883b85bc8a75b1635d353b356f3e994c84cfc5076084f56a3971138b821fc951101e262a7050d664d20f7fb15b193a2dbc6ace02a39530b0d9fca6fd901c82a3673b56cc3dff5df742ef9a5d91e81bb2832489c086a2532e8182f1d92183a553b62565b524565811c023fc12db03c7f8e473f6851f758aefa5e4716c30ae33ce36e8342d215b7f2a7352440c69af9094b8f5566a1ecc7ac5b5660cf76911e501aa93180e03e07d4b09c24e6c676f50687c618da6b68dcbb9dfd2bdd9bac0217581ddc4bde4131db087139dc73088aa903489f747e99621fe0da373fd96ced5f6de2d077d7aaca2529082843bb4874ef6a8c08a478bc54c359c28e57e2646eac878ce269b8738971ea456d0dcb812e80ac9d6c48977ba650a63b268e80e8c8bd1d9326685d43e9454393fe8d05ef089879588bb6dc043f3811183a5d9afeb0bf46c931b7e1444ba23842213d7b0f6a21c4e787ff5c29479422769ef4936a5a296ef85d521e75ca709122884d8537e839e0349f60a31839480ac8ab2de36707a0a9281b66690fef555d6804178a068cf7d7369179ad8793f78446355f5765c3f68373294c715602d5d4b70db43f32206c122ae28e4375b941a2f704b4335a60e355cf88cb835c754170f1e670ef8eb088fda5ea6092c592b660d5bff5df3d1842079e2979a2838e642d65f7ed9a4bdec251f2c324556b2126ad024712dbe8ac321d226174600f841f1d53b98d663a1c9651991dffeaff0b9636c07bf3466f5e559554aa906a2fe3136a90a393d41af7c19c788b512452a64562213244420ebeb3b75450748b36a81a18f71058b6faecb029af9904c5c54b8fd4e06969d837bcd2b57d3340a6a73f8d678629e5f87cff12765b58d36a6ddc6e17a25b406f81ccf93bc2a74665a08e767902c3c0ef7709e3775608459fbc0aecf517c7ed295220c37b9ca35559a36708267dfc1e7dd920ec38cc0f31b69688faedf3c49fdc79875bce688644c3b8f6d553e2c822646fd9ef2a8527eab2ec0b6f9fc808b97bc2cba3e770f8cc864ac839eb95267690d84653d16d04cb667a3fe9ba8e356e7eb89be96b9373b3525d4fe1c2c1f90d89d0ff2408260cdced4ccb120c39215539684164b42dd4ec311cda040770aceefbc118519e24c92929cc4fc3fda1d08d00c16a55a46cf0530bfe87cf4d9a64ed8cb6fe194fc008c920dff9f1ec975f02bd2597743d1c1941784f4725c541ee24faf6c8696021b5dacc4cf7d5c88e04bacec13a1cb5acc3a61743b31002163f612f781a4651b779734aa4e8af9ea3505ebfa02650bca90de989db6e433f165542fc9373e5aaf39bff8e9137998eb5729f78c8028fe4962e1db771172a1d764159d7b4a377905dc9296cfd0101adff10ab997c10831735eb90eaa23158d7a3df92b008baa2da78fa96441a424c8010e48ddc54cec9c70aa97611794004a0c84264a09f14ae145e21c7291b9ef2e8c7862c67fab444e390f18029528e3c13e2aa00d3e9e13f1aae9e77b1c3d33ad9b7668c2c14132fefc7ae7bacb8306d39e58f7ac8ef83cc48778145ce3d2524d194ad30d638f90b4ba14478d8a4ff1745a624c53cc9cbf90d5b0bf44073d57df631353494494c5dbe1ab2200aaf6062766c21e8c5b682c69530fdf808cd991531345a717fee2bc1aaa22c04b9f2cef196befc1749ac50500045adc3bed56b3323a8802d7ab9663952ee443296be2eaf1fa8ab7b0c67ea78eb3d69887b83df3edc68b6a0db94bddf3a47a43ed9fb737a0461bff022a36f87d92f8b7b4cf59", 0x1000}, {&(0x7f00000010c0)="f9108e4d0cc363f7dde4", 0xa}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="14a231347ecd5ec6ebc72626f6928242d1b75f773235851ad17c0181e0bbb894893f65c3a34b1c0814cd3d9753efd621f2613b34a1fc388e8542e7557439a8b4fb8b6dc44ab324ccb94f903ab1e2ea05c6d02eade7b5eae009f790d217c3a6b44e677488d8023881dad24fd2d196f974862348e483e0de6d6372456c3f76a73d862414f0cbc71a1c2fbdd007047a67dd5f3bae0443643ac7a871d594e17d97414f7602adf2848f94d51ad5554f98fadbf295dbf0ec64", 0xb6}], 0x6, &(0x7f0000003380)=[{0xb8, 0x10f, 0x81, "b0d5d81e44dc4d32dc3c7625438987bbe07b386cae815310b47466778b41e09d2df6c4440664762360589e63617b3d638e50fae654a009e1ff7c484c33086d647502dcbfe9993d5bdfb414d16e907651119703fe50c34fb5da9ea43166e37e94798f91dd3da061fc7b29998f71c8246141b3c773bbd7565db3d854527637e3feb0be870a7e9c83dd5a457b190c3021275df6c048572847b9fefaa02bdecd9bc993e341dffd7a"}, {0x98, 0x111, 0xf73b, "0a5e50ad73982f54b08150c875d9ea34e7998138ce021eba966b3bac554c04601a4a26b17f11014a9b80053fe847ffec4b669f1f1eb224203b0990b538ab5a33c969445ad19c1be449fcc21d15999eed6e3187c7e7988c74ac49caeefb4797c80cb5c4e50bc9aeecd04ce9baf01ba2fd995838f6838807de8856fa90e297fd42bb6cb0215c"}, {0xc8, 0x10e, 0x545, "49e7f6aaa47cb55c6c5df55ee61a1b26377743014339b1f20a00762405b8d30871d83cd4e5d64ef0866273be2380e3b431add4f016405604040fb9c3a292c00fb10ce4bc605f6dd469f28e1d275e890d133f11591d4a40afef8623e2876f7d1fda3b41cb588b55ffd14eadb4bde17e5b45c17cb547f853626249ded0fac2a1b14083948a9090e4234d00045f2c1b3d0dbae083feaa285ab6eed0210553f154fb099c84d8d1794867bb29c951f77d1d7d62c5d3"}, {0x40, 0xff, 0x3, "839b3bdb5346233e2d2d80a2fb82fd1133da71fe6f241eb1899d1491081876549913ba3e4de828ea9bd58f4e"}, {0xe8, 0x118, 0xfffffffd, "7de136497e1f766d171710bb491b374527b5dd86fc89cf8a2866a096eaeddabd76e01a5c0d423613a2c2684d0273ee6845cdc16cd28638e3d2870ce3bce53eb45f26b7ec1e7c27b7c588f60715894c3851917eb993550a9f17439ba10f2e5530f068cdd1496bcf4e06c19be5ecc753e2c7aec092c0868922324abe32f978e073323b0aea7961e08bf25d437bd66e5a0c26101cb4a31611528cd219fe6518d8e700c773e3d40b880eddc99e1a68ff5b9c0adb4a8214e5906a5d7c390efa033cb0b69f1512fb9e6aa84e720727658dce66904aabf0b84f1b"}, {0x90, 0x110, 0xffff, "f5f67be6b7e4aab4123f008ddfb51dc4496ade0c79919ec0c539504e33c46aa0147895f5a50f7a714d5868b2e5128771eb812a79a936815c6a8de5361c8e2477fa9b9528bcf85aee687e827a4f69c0aa085755d9fe2058864e58cc22da3991b77c5dee29357c2bbf036644ec1d3cb62147ceb67a697231381864681b2625"}, {0x108, 0x108, 0x4, "e58805d8f9ada5c53a2f3fcab56821e7d25c2fc9971c79a0cb9237aa8fdb0652300b364dc54a812c914cec1f030bd6127429ab5f714c7d1420c45cd9b3e44ce1ca0b49d538466e9cdcd56228af6c67d6b159795879e74b8a390838c717d9db9b13493bcf943c0c9fe661a853288acdce4ce8e242165ee4ad0d3a971f1601313d14cd43fe122bb8e4cbf6fadb12d221b86ef2c3ff380810d4b31a8ce4606ae699c961be2820ad0cd25b3e41e6ed222df8d3132b693e7ad66803da3bb0a62dd2bc37bdd3087549bca51af61e9239f0d3cbecd7a3a12bd806d43c1170cb2e983312c59b41f40c750f21057115b23c07ab6475912b1c6afe"}], 0x4d8}}], 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44805}, 0x0) 7m22.73013454s ago: executing program 3 (id=6384): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 7m22.270507769s ago: executing program 3 (id=6388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x3, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000700)=0x8f, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) socket$inet6(0xa, 0x3, 0x5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000700)=0x8f, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) 7m22.126368305s ago: executing program 3 (id=6390): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cb97000fadbdf25180000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x44051}, 0x20000014) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x218, 0x30, 0x51b, 0x0, 0x25dfdbfb, {}, [{0x204, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xfffffffffffffffd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x218}}, 0x0) 7m21.943272155s ago: executing program 3 (id=6391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 7m6.909119371s ago: executing program 32 (id=6391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 57.209501541s ago: executing program 2 (id=10240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x6, 0x1, '!\x00'}, @NFTA_COMPAT_NAME={0x1a, 0x1, 'notify_peers_interval\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x4f, 0x6, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x20, 0x3, 0x1000}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@initdev, @initdev, 0x0}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={0x3a4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x200, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x50, 0x4, 0x8, 0x4}, {0xff, 0xfe, 0xb, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x3a4}}, 0x48820) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) 56.282744726s ago: executing program 2 (id=10246): socketpair(0x25, 0x80000, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000e9aa766641586e3b38004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c6f6164001400028008000340000000e108000240000000050900010073797a30000000000900020073797a32000000001400000011000100000000"], 0xb0}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000029bd7000fedbdf255e000000080003003aa220761aa363444650ca524e3c2d5bbc766859c10657afe778afd31680cb20de65d9ee79c692e6d7bed09b32ce04e76937af20dcd5bac92e011270b889e0caa624d1eb476b558acc8636d5e18543682b726b73de3aea812107e6424f8bcfb4d013d4a366c36c224f4cc13d5276985097da", @ANYRES32=r6, @ANYBLOB="050018011b0000000800a10004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) 48.999653279s ago: executing program 2 (id=10251): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x300, r1, &(0x7f0000000240)={0x30001010}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000440)=0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$netlink(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r9}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) connect$packet(r0, &(0x7f0000000000)={0x11, 0xec, r10, 0x1, 0x8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4e4ff000000000079100000000000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda6}, 0x1a) 48.42185135s ago: executing program 5 (id=10258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000200), 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'sh\x00', 0x23, 0x6, 0x27}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x1, 0x8, 0xae8, 0x4}}, 0x44) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1a}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="ffffffffffffffff0000050000af3ce562c6924019005b4e44e7443a9875b0f9542c847e619c8620e8978b8ceb40c98857c2519834e8bd54f57445e69b6ccb554f2acb3a26835662703abde8cd14bf8d44c6ca9106de4e09c54eafe63c436a7679605597fbd7def7fcb1abf0521035d9242a5322fb7f279ee2e8c0e1caf961abe9d831b5e5e5b848d514f3b53cdf0916183d83866eb3554e47cb3eb307bca4600884316aa8f0a7794fc50066efa8cfc0eeab23091e5d71628e36de06274d0f529e6be0eeeff363953e1f5f615da6f425a0a748e21a30facf2f5332c2158cf5d5ab0ec54a5df79e756180ac6e93fdfd08821e0ce9c5d200"/262], 0x1c}}, 0x0) 48.258314167s ago: executing program 2 (id=10259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14}, [@NFT_MSG_DELSETELEM={0x3bc, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x33c, 0x3, 0x0, 0x1, [{0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x328, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe}]}}}, {0x25c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf9, 0x3, "4a7ba18c18082fbfecd7b9f31aa9b7fdc514ccc24f132ca087e566a9c24c0d5e9a5ef3fb50366e27afb5f067275cd62b295cfa0d3a83d518634906ccb92acb590785b07dcf6707c15ca1c5902b224f6e7ca01ee20d6f0315287484e762437a98ba7ff4d1845951bf7962ecf7ef19c4dde4686ebb01f83bd5ad34c2050c2eb9215de4c24477176572ff0b94d4faf1a2723e58b7e06960f9ede31be203885c6e0bbd843eea18301808e336817fbc9e3ef5fb727a02452e6db777a1e6de450aa6f45400dcfdaed28419354409dec79d9c8c609661bfa3505b26ac5a59587c9a6f54e902cc16d63dc3dda21356688599d4b215e198ef18"}, @NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x47, 0x3, "3ebcd07dbf32a1b4e3f91edccd71ac0b3abefb9cc949737bbcc2b00f69affe497035420e98bb9beb2378ca620221b630a037bee20493dc75c7e2e2076d9523ef1e22ce"}, @NFTA_MATCH_INFO={0x5d, 0x3, "360c221845587eb32dd6ff286511cb28883d570a3ce105cdef823ff668db8c0a653a8dbc1bd33d59b352ecfa269f9fa9099b7c2d34f9698e4896f1e37c2cfabefb1bea60b5fb737caf71f6877c40f072401440f95f5b2a87dd"}, @NFTA_MATCH_INFO={0x5a, 0x3, "b1f56528582c5927c57ed4de6cf1bd5445de3924c8ea8b8eb8bef373ef11c167d68923209cf0bc16ffade51ab6ed98ee58758af27bfb6102204a3afedc66302124579cb65515e6a3e03874e5fc0361e919ee6ac4339a"}, @NFTA_MATCH_INFO={0x16, 0x3, "f575cb5b221893dae8d775bd6be2f7116d16"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48c}}, 0x4004885) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14}, [@NFT_MSG_DELSETELEM={0x3bc, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x33c, 0x3, 0x0, 0x1, [{0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x328, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe}]}}}, {0x25c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf9, 0x3, "4a7ba18c18082fbfecd7b9f31aa9b7fdc514ccc24f132ca087e566a9c24c0d5e9a5ef3fb50366e27afb5f067275cd62b295cfa0d3a83d518634906ccb92acb590785b07dcf6707c15ca1c5902b224f6e7ca01ee20d6f0315287484e762437a98ba7ff4d1845951bf7962ecf7ef19c4dde4686ebb01f83bd5ad34c2050c2eb9215de4c24477176572ff0b94d4faf1a2723e58b7e06960f9ede31be203885c6e0bbd843eea18301808e336817fbc9e3ef5fb727a02452e6db777a1e6de450aa6f45400dcfdaed28419354409dec79d9c8c609661bfa3505b26ac5a59587c9a6f54e902cc16d63dc3dda21356688599d4b215e198ef18"}, @NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x47, 0x3, "3ebcd07dbf32a1b4e3f91edccd71ac0b3abefb9cc949737bbcc2b00f69affe497035420e98bb9beb2378ca620221b630a037bee20493dc75c7e2e2076d9523ef1e22ce"}, @NFTA_MATCH_INFO={0x5d, 0x3, "360c221845587eb32dd6ff286511cb28883d570a3ce105cdef823ff668db8c0a653a8dbc1bd33d59b352ecfa269f9fa9099b7c2d34f9698e4896f1e37c2cfabefb1bea60b5fb737caf71f6877c40f072401440f95f5b2a87dd"}, @NFTA_MATCH_INFO={0x5a, 0x3, "b1f56528582c5927c57ed4de6cf1bd5445de3924c8ea8b8eb8bef373ef11c167d68923209cf0bc16ffade51ab6ed98ee58758af27bfb6102204a3afedc66302124579cb65515e6a3e03874e5fc0361e919ee6ac4339a"}, @NFTA_MATCH_INFO={0x16, 0x3, "f575cb5b221893dae8d775bd6be2f7116d16"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48c}}, 0x4004885) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) (async) 47.898283275s ago: executing program 5 (id=10262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r7 = socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000440)=""/56, 0x38}], 0x4}, 0x6}, {{&(0x7f00000004c0)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000000740)=""/203, 0xcb}], 0x2, &(0x7f0000000600)=""/128, 0x80}, 0x8}, {{&(0x7f0000000840)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/4, 0x4}], 0x4}, 0x101}, {{&(0x7f0000000a40)=@rc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/34, 0x22}], 0x1, &(0x7f0000000b40)=""/50, 0x32}, 0x6}], 0x4, 0x40000000, &(0x7f0000000c80)) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x40202, 0x804}, [@IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '#+\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bc19a24c1f77053d50d28526f2a800e4"}, @IFLA_PORT_VF={0x8, 0x1, 0xc}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 47.892694173s ago: executing program 2 (id=10263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) close(0x3) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000273797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a00"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a000001000075e1a738a087b75fec5dd7ac33020073797a3100452b"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x360, 0x1b0, 0x1b0, 0x1b0, 0x450, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'macsec0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) recvfrom(r5, 0x0, 0x0, 0x40002062, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x3}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="18b17c000000000000007ffffffff5000000b8"], 0xd0}, 0x480c4) 47.256205766s ago: executing program 2 (id=10268): unshare(0x4a060600) 46.831145147s ago: executing program 5 (id=10273): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="f4fe441a284f097afadb4c637f4c9c2c853c930000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b708000000000008008af8ff00000000bfa200000000000007360000000000000003000008000000b704000000000000850000005900010095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) 46.547593499s ago: executing program 5 (id=10275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x8004, 0x9, 0x5, r3}, &(0x7f00000000c0)=0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4e23, 0x0, 0x4e30, 0x3, 0x2, 0x0, 0x10, 0x3a}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10000e, 0x6, 0x8001, 0x200000008, 0x7f7, 0xaaec, 0x1}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x3}, 0x70bd27, 0x0, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x82000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x40004) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4a1e25ee517c"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x7, 0x0, {0x0, 0x81, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x5}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r4, 0x100}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000003c0)={r9, 0x8}, 0x8) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@iv={0x38, 0x117, 0x2, 0x1d, "d697f1e554beef094f89e13fcc73e08f51eea8a06ff36f847f8a1a06cd"}], 0x38}], 0x1, 0x4000080) recvmsg$unix(r10, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r10) 46.27275567s ago: executing program 5 (id=10277): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) (async) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r2, 0x34de5000) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001300)={0x0, 0x6e2}, &(0x7f0000001340)=0x8) 45.970544882s ago: executing program 5 (id=10279): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket(0x8, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xc}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) 32.181697836s ago: executing program 33 (id=10268): unshare(0x4a060600) 30.677198195s ago: executing program 34 (id=10279): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket(0x8, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xc}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) 1.778246677s ago: executing program 4 (id=10423): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) socketpair(0x3, 0xa, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)="840d45905b5d3ae581641712fa92d3045c4afe5f29699afa0993205271cced7dd2", 0x21}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x9, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r10) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x8000) 1.7775698s ago: executing program 0 (id=10424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r2, 0xc252d000) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="872308", 0x3}], 0x1, 0x0, 0x0, 0x8800}, 0x4008800) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r5, &(0x7f0000000640)="00a8", 0x2, 0x40000d1, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8c0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b040000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0900010069707673000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000acb6c0aa4c99cfba7155c0000000000"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r9 = socket$inet6(0xa, 0x805, 0x8) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in=@multicast1, 0x4e23, 0xfffc, 0x4e23, 0x3cdf, 0x2, 0x80, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xdffffffffffffffd, 0x6, 0x8, 0x4}, {0x9, 0x3, 0x0, 0x8}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0xfffffffb}}, 0xe8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) sendmmsg(r9, &(0x7f0000000480), 0x0, 0xffe0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) 1.490855419s ago: executing program 1 (id=10426): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1402, 0x4, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x30004841}, 0x8c5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 1.461221762s ago: executing program 4 (id=10427): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @local}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xf, 0x1, 0x1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x100}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r12}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@private, @private, 0x0}, &(0x7f0000000580)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xd6, 0x1000, 0x50, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0xd7, 0xa}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'hsr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x0, 0x58, 0x4, 0x6, 0x4, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x9, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000009c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1ac, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000004}, 0x54) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r18, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 1.313813654s ago: executing program 1 (id=10428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000d03a4fbe13ba139d07599325929a84a5b000000000000000cf8056b3d660410e00020400f0010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20004800) 1.170739553s ago: executing program 0 (id=10429): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.006639021s ago: executing program 1 (id=10430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000780)={r8, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {0x3, 0x4}, {0x7, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=ANY=[@ANYBLOB="440000007709030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000b00677265001800028006000300010000000400120006000e0000000000"], 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=ANY=[@ANYBLOB="440000007709030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000b00677265001800028006000300010000000400120006000e0000000000"], 0x44}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4f}}) (async) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4f}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 957.657753ms ago: executing program 0 (id=10431): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 882.50809ms ago: executing program 4 (id=10432): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20}, 0x48) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}}, 0x24) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x480) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 802.657338ms ago: executing program 0 (id=10433): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x8) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 722.882687ms ago: executing program 4 (id=10434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="820000000400002908000000010000008000020052e21496c8464afef3c42c6905ff3504dd303022389cf4c720cc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000004000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000003000000f3ed91efc534e7a8df0e82992bec41bde216cf232a809582e252cf3f4378a615fe63ceb9288c37898d1236b36421938c9956abb9273f6a8bfcfeb649cef12d3e762c2ac760a2c82045ee2b6a54a298abe9e84323f23bb68c9bf420a09f2771e46db2d2237be9fd7cb3eeba9f1e7cbc50e74c7e66751fd27e0b999e7bb6bd3eb2e2dadaaa56222bd68e2292ebbcca2e1144d5c2fa617b9908a4cd703c652636c4d3f581e15f8f75e4ca8b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x75fb3000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="820000000400002908000000010000008000020052e21496c8464afef3c42c6905ff3504dd303022389cf4c720cc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50) (async) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000004000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000003000000f3ed91efc534e7a8df0e82992bec41bde216cf232a809582e252cf3f4378a615fe63ceb9288c37898d1236b36421938c9956abb9273f6a8bfcfeb649cef12d3e762c2ac760a2c82045ee2b6a54a298abe9e84323f23bb68c9bf420a09f2771e46db2d2237be9fd7cb3eeba9f1e7cbc50e74c7e66751fd27e0b999e7bb6bd3eb2e2dadaaa56222bd68e2292ebbcca2e1144d5c2fa617b9908a4cd703c652636c4d3f581e15f8f75e4ca8b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x5) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x75fb3000) (async) 535.613696ms ago: executing program 1 (id=10435): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80600}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf25010000004400068014000400ff010000000000000000000000000001080006000a000000050002000300000014000400fe8000000000370000000000000000aa06000100020000000c000680060005004e2100000800020000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r0 = socket(0x21, 0x4, 0x2) unshare(0x20020400) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000006c0)={{r1, &(0x7f0000000180)='ns/pid_for_children\x00', 0x800, &(0x7f0000000240)={@_ha_fsid={[0xf814, 0x5]}, {0x7, 0x0, 0x6, 0x5}}, 0xd1c, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x5}, 0x3, &(0x7f0000000640)=[{0x0, 0x3, &(0x7f0000000380)='&%\x00', &(0x7f00000003c0)="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", 0xfd, 0x20}, {0x3, 0x3, &(0x7f00000004c0)='codel\x00', &(0x7f0000000500), 0x0, 0x12}, {0x3, 0x6, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="c8ae7d6c8de32ecbe4768a33fc9b1aa3a01943db65ac3cc13537138369022b019fde815a085bd8bf1b56c82a35cf5d66e4d275c06e55a3c58edfd575792adb0509f9a42a2cf1c248e0542d1d520c2ccefda6886635360b9134078b6b14b6083741c23331cf1d5e6ebbea0dd9cb5a5879a5d1eb5859", 0x75, 0x2a}]}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf17}]}}]}, 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe8, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'codel\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'codel\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x1800) 535.081004ms ago: executing program 4 (id=10436): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0528bd7000fedbdf25010000000500040002000010080008007f00000106000a004e"], 0x2c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r9, 0x89e3, &(0x7f0000000040)=0x8) r10 = socket$packet(0x11, 0x2, 0x300) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x8000f27, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000ca000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00000004000000040000000300000000000000", @ANYRES32=r13, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c8e4bc3ce014f500000000000000000000003faa700c094694bc8337e6c1c948456a533625de276c9a9163f7482330ef6f21c4c0b0ff24275c2a614853b655899f8889c0ac5deb7e72594d6b1cca94ac804c69190fe4cd99ecf02b90ef5da859998629b82fe915913f011c9b137f7c4006b52f95445d273f58921110e06203cf3cc5"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r14}, 0x38) sendmsg$NL80211_CMD_SET_BEACON(r12, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="58110000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1158}, 0x1, 0x0, 0x0, 0x20010}, 0x9) setsockopt$packet_int(r10, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 520.969621ms ago: executing program 0 (id=10437): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 385.453347ms ago: executing program 0 (id=10438): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1, 0x6ca, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x8, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000c60a00002f00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000800100000000000020360300004b4415ac4334dbf859d5644739d79ee3b292d9ee47e89fd3347d5b107f16e60e61ac1ff8452e6d7cdf27c6733769e4e8d6b9d0c7c07faf610060ede43a2ab818"], 0x80}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x16c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}, @replay_val={0x10}]}, 0x16c}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020000"], 0x48}, 0x1, 0x0, 0x0, 0x8081}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000040)=""/13, &(0x7f0000000080)=0xd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000680)=r1, 0x4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r7, 0x5, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x48850}, 0xc0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000340)) 270.504314ms ago: executing program 1 (id=10439): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r0, &(0x7f0000000580)="981b40d0349c971f8e89d0811d49f2adb93d8f35cf75bf48b58bc942139475381d457728522fefbcc5cf48ec66bedacd00ab360e8c8fbd2361763a85d1d4c615a9942e0c33fad543e3fb4dd9a21c058782584fabdb20319003c277a62fafb342f088b5309dfe9958bee4213b635f42ee05bdc94582b30df61182dbd8e1e6d66ae50ae4fbb659cd5871e963ca5b6f8249d3", 0x91, 0x4, &(0x7f0000000640)=@in={0x2, 0x4e22, @multicast2}, 0x80) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {0x3}, @device_b, @device_a, @from_mac}, 0x0, @random=0x4, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x5, 0x3}}, @void, @val={0x5, 0x3, {0x0, 0x66, 0x4}}, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008044) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0xf3, "270dbd7b12f9207d20b51ec076a1b6a0b40ce240904ef6c6ae1ab3477a38ba97f56c68230d0033376d553fd626745e74d75788e60e0c2e8b583588c9652d76579be0dca9a906a7708f6dc36d5fe02688d6b0ea41bd6984fd60c768c7f7efa88e29fcbd4105a863becacba341466721b3465f498b9b8e6b330d525290592484537de7185e9cdff04b68fd79139c4a534bb99e93aedc1c2d705be3b4ff98364a3f0e831db3776d59e6facc9fe504bca786b97ab84b7e6c4e79a2b91d540b2e696d78762cb484ca7b06f2219ee377800ad1f4a7ed4857766104272201c586c9ff97b7c8f5045ef4cac162d711830f5988c2791eb3"}, &(0x7f0000000140)=0xfb) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000500)={0x800, 0x0, 0x4, 0x5, 0xfffffff7, 0x5, 0x84, 0x8001, r7}, &(0x7f0000000540)=0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc880) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x128, r2, 0xc6ba5a020656c3e3, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x36, 0x3}, {0x8}, {0xc7}, {0x1, 0x4}], "fe3303ecab21cc04"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x3}, {0x80, 0x4}, {0xc, 0x4}, {0x0, 0x1}], "402f2d48608cafe5"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x27, 0x2}], "4626dae7d476216b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x3}, {0x7f, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x8}, {0x4}, {0x1, 0x2}, {0x9, 0x5}, {0x5, 0x4}, {0x48, 0x6}, {0xed, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0xd, 0x4}], "6b2caa2fc47189a1"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x0, 0x6}, {0xf7}, {0x8, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x5}, {0xa, 0x5}, {0xd7}, {0x1, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {}, {0x1, 0x5}], "d10ed7bfd79045ea"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x6}, {0xaa, 0x3}, {0xed, 0x2}, {0x6, 0x3}, {0xfd, 0x7}, {0x9c, 0x7}, {}, {0x9, 0x5}, {0x8, 0x4}, {0x7}, {0x1, 0x7}, {0x7}, {0x6f, 0x5}], "0e78e6035c059d9d"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x5}, {0xf, 0x3}, {0x9}, {0x32, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0xfe, 0x1}, {0x3, 0x4}, {0x7f, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x15, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0xb8, 0x3}, {0x8}, {0x7f}, {0xda, 0x4}, {0x1, 0x1}], "398cc152d617e02c"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x4, 0x4}, {0xc, 0x1}, {0x82, 0x4}, {0x5, 0x4}, {0xbe, 0x4}, {0xa, 0x7}, {0x9, 0x1}, {0x8, 0x7}, {0xd, 0x4}, {0x4, 0x6}], "d9cd71e7fa51e201"}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8009}, 0x0) 269.033472ms ago: executing program 4 (id=10440): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x1, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000700)={@mcast1, 0x51, r3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ed}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x494}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000002c0)=0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x2, 0x7, "e3d05bf30d70"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 201.861545ms ago: executing program 6 (id=10287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x200, 0x0, @private0}, 0x1c, &(0x7f00000002c0)}}], 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) 0s ago: executing program 1 (id=10441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000002000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x0, 0xff}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @mcast1}}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a010200000000000000000700000a3c000000090a010400000000000000000700000008000a40000000003400020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a1001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003140000001000010000000000000000000084000aae12f1e058df3f243c9c994270"], 0x104}}, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@default, @bcast, @rose, @netrom, @remote, @default, @bcast, @default]}, &(0x7f0000000340)=0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000440)={r8, 0x7f}, &(0x7f0000000480)=0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x483f, 0x200, 0x8, 0xfae5, 0x9, 0x9, 0x8, 0x43, 0x3, 0x1, 0x9de, 0x8de, 0x8000, 0x54, 0x81, 0xd80, 0x9, 0x8, 0x6, 0x8, 0x6e20, 0x2, 0x6, 0xb99, 0x6, 0x3, 0x1, 0xc, 0x9, 0x5, 0x100, 0x3, 0x800, 0xfffffff9, 0x9, 0x8, 0x3, 0x7fff, 0x60000, 0x0, 0x5104, 0x3, 0xcb1, 0x9, 0x10001, 0x5, 0x7932, 0x7, 0x2, 0x8, 0x401, 0x5, 0x800, 0x6, 0x1, 0x3, 0x8, 0x0, 0xf8000000, 0x40, 0xaa1, 0x4, 0x3, 0x4b, 0x1, 0x9, 0x8, 0x2, 0x8, 0xf8, 0x6, 0x2, 0xd1d1, 0x10001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x0, 0x4, 0x389, 0xa, 0x6, 0xdc, 0x10001, 0x2, 0x5b, 0x7, 0x406, 0x10000, 0x0, 0x4, 0x40, 0x58d7, 0x6, 0x7, 0x49c4, 0x1, 0x9, 0xa4c, 0xfffffffc, 0x3, 0x88f, 0x7, 0xfffffdd1, 0x3, 0xc, 0x81, 0x3ff, 0x5, 0x0, 0x7, 0xfd2, 0x0, 0x9, 0x3, 0xf0, 0x7, 0x800, 0x80000001, 0xf383, 0x47db4311, 0x9, 0x2, 0x2, 0x2]}}) kernel console output (not intermixed with test programs): 924.691256][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9500'. [ 924.707773][ T7090] IPVS: stopping master sync thread 1968 ... [ 924.861641][ T8731] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 925.035034][ T8732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 925.036191][ T7087] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 925.076587][ T5147] Bluetooth: hci4: command tx timeout [ 925.125945][ T8579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.165592][ T8579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.192539][ T1152] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 925.288198][ T8757] netlink: 'syz.5.9504': attribute type 4 has an invalid length. [ 925.381873][ T8762] bond4 (unregistering): Released all slaves [ 925.420494][ T8579] team0: Port device team_slave_0 added [ 925.464263][ T8579] team0: Port device team_slave_1 added [ 925.534064][ T8771] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9507'. [ 925.551903][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9507'. [ 925.589926][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.612558][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.648561][ T8579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.682106][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.700673][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.741859][ T8777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.786854][ T8579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.094836][ T8579] hsr_slave_0: entered promiscuous mode [ 926.130250][ T8579] hsr_slave_1: entered promiscuous mode [ 926.155096][ T8579] debugfs: 'hsr0' already exists in 'hsr' [ 926.170809][ T8579] Cannot create hsr debugfs directory [ 926.265745][ T8790] nbd4: detected capacity change from 0 to 63 [ 926.364669][ T5147] block nbd4: Receive control failed (result -104) [ 926.375484][ T5841] block nbd4: Receive control failed (result -32) [ 926.532085][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9517'. [ 926.575901][ T7090] hsr_slave_0: left promiscuous mode [ 926.584604][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9517'. [ 926.597610][ T7090] 0·: left promiscuous mode [ 926.607525][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.627343][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.638037][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.645786][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.655138][ T8824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.667276][ T7090] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 926.683229][ T7090] batman_adv: batadv0: Removing interface: ipvlan0 [ 926.710836][ T7090] veth1_macvtap: left promiscuous mode [ 927.068872][ T7090] team0 (unregistering): Port device team_slave_1 removed [ 927.084324][ T7090] team0 (unregistering): Port device team_slave_0 removed [ 927.162929][ T5841] Bluetooth: hci4: command tx timeout [ 927.201805][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9519'. [ 927.531898][ T8864] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9523'. [ 927.551628][ T8865] netlink: 'syz.5.9525': attribute type 23 has an invalid length. [ 927.785341][ T7090] IPVS: stop unused estimator thread 0... [ 927.826717][ T8875] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 927.879425][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9527'. [ 928.316661][ T8898] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 928.328033][ T8898] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 928.387399][ T7090] veth0_to_bond: left allmulticast mode [ 928.406646][ T7090] veth0_to_bond: left promiscuous mode [ 928.412393][ T7090] bridge0: port 2(veth0_to_bond) entered disabled state [ 928.427580][ T7090] veth11: left allmulticast mode [ 928.436708][ T7090] veth11: left promiscuous mode [ 928.442187][ T7090] bridge0: port 1(veth11) entered disabled state [ 928.537894][ T7090] bond15 (unregistering): (slave ip6gretap0): Releasing active interface [ 928.551454][ T7090] ip6gretap0 (unregistering): left allmulticast mode [ 928.658856][ T7090] bond7 (unregistering): (slave gretap1): Releasing active interface [ 928.681666][ T7090] bond9 (unregistering): (slave gretap2): Releasing active interface [ 928.705120][ T7090] bond12 (unregistering): (slave gretap3): Releasing active interface [ 928.751558][ T7090] dvmrp0 (unregistering): left allmulticast mode [ 928.976629][ T7090] bond0 (unregistering): (slave bridge6): Removing an active aggregator [ 928.986632][ T7090] bond0 (unregistering): (slave bridge6): Releasing backup interface [ 928.999787][ T7090] bond0 (unregistering): (slave bridge6): the permanent HWaddr of slave - ae:63:74:4d:24:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 929.019530][ T7090] bridge6 (unregistering): left promiscuous mode [ 929.026510][ T7090] bridge6 (unregistering): left allmulticast mode [ 929.086027][ T7090] bond0 (unregistering): (slave bridge7): Releasing backup interface [ 929.095244][ T7090] bridge7 (unregistering): left promiscuous mode [ 929.101579][ T7090] bridge7 (unregistering): left allmulticast mode [ 929.126426][ T7090] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 929.134648][ T7090] bridge8 (unregistering): left promiscuous mode [ 929.166912][ T7090] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 929.175899][ T7090] bridge9 (unregistering): left promiscuous mode [ 929.242746][ T5841] Bluetooth: hci4: command tx timeout [ 929.306802][ T7090] bond1 (unregistering): Released all slaves [ 929.320392][ T7090] bond2 (unregistering): Released all slaves [ 929.333271][ T7090] bond3 (unregistering): Released all slaves [ 929.346621][ T7090] bond4 (unregistering): Released all slaves [ 929.365103][ T7090] bond0 (unregistering): Released all slaves [ 929.377987][ T7090] bond5 (unregistering): Released all slaves [ 929.392190][ T7090] bond6 (unregistering): Released all slaves [ 929.415920][ T7090] bond7 (unregistering): Released all slaves [ 929.428508][ T7090] bond8 (unregistering): Released all slaves [ 929.440894][ T7090] bond9 (unregistering): Released all slaves [ 929.458863][ T7090] bond10 (unregistering): Released all slaves [ 929.472147][ T7090] bond11 (unregistering): left allmulticast mode [ 929.479074][ T7090] bond11 (unregistering): left promiscuous mode [ 929.487942][ T7090] team0: Port device macvlan3 removed [ 929.496837][ T7090] bond11 (unregistering): Released all slaves [ 929.512232][ T7090] bond12 (unregistering): Released all slaves [ 929.527980][ T7090] bond13 (unregistering): left allmulticast mode [ 929.535787][ T7090] bond13 (unregistering): left promiscuous mode [ 929.544012][ T7090] team0: Port device macvlan4 removed [ 929.555142][ T7090] bond13 (unregistering): Released all slaves [ 929.567898][ T7090] bond14 (unregistering): Released all slaves [ 929.582177][ T7090] bond15 (unregistering): Released all slaves [ 929.753887][ T7090] tipc: Left network mode [ 929.826815][ T7090] IPVS: stopping backup sync thread 23448 ... [ 929.931532][ T8917] netlink: 'syz.0.9534': attribute type 1 has an invalid length. [ 929.941857][ T8917] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9534'. [ 930.017412][ T8919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 930.024701][ T8919] IPv6: NLM_F_CREATE should be set when creating new route [ 930.043733][ T8919] lo: entered allmulticast mode [ 930.048866][ T8919] tunl0: entered allmulticast mode [ 930.056915][ T8919] gre0: entered allmulticast mode [ 930.067941][ T8919] gretap0: entered allmulticast mode [ 930.078494][ T8919] erspan0: entered allmulticast mode [ 930.087219][ T8919] ip_vti0: entered allmulticast mode [ 930.094418][ T8919] ip6_vti0: entered allmulticast mode [ 930.101627][ T8919] sit0: entered allmulticast mode [ 930.110506][ T8919] ip6tnl0: entered allmulticast mode [ 930.118745][ T8919] ip6gre0: entered allmulticast mode [ 930.127928][ T8919] syz_tun: entered allmulticast mode [ 930.141172][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.148698][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.156461][ T8919] bridge0: entered allmulticast mode [ 930.165843][ T8919] vcan0: entered allmulticast mode [ 930.172020][ T8919] bond0: entered allmulticast mode [ 930.177694][ T8919] bond_slave_0: entered allmulticast mode [ 930.185574][ T8919] bond_slave_1: entered allmulticast mode [ 930.196415][ T8919] team0: entered allmulticast mode [ 930.201536][ T8919] team_slave_0: entered allmulticast mode [ 930.207414][ T8919] team_slave_1: entered allmulticast mode [ 930.215438][ T8919] dummy0: entered allmulticast mode [ 930.223474][ T8919] nlmon0: entered allmulticast mode [ 930.229891][ T8919] caif0: entered allmulticast mode [ 930.235823][ T8919] batadv0: entered allmulticast mode [ 930.244149][ T8919] vxcan0: entered allmulticast mode [ 930.250255][ T8919] vxcan1: entered allmulticast mode [ 930.258384][ T8919] veth0: entered allmulticast mode [ 930.265936][ T8919] veth1: entered allmulticast mode [ 930.274821][ T8919] wg0: entered allmulticast mode [ 930.281562][ T8919] wg1: entered allmulticast mode [ 930.288966][ T8919] wg2: entered allmulticast mode [ 930.295540][ T8919] veth0_to_bridge: entered allmulticast mode [ 930.307162][ T8919] veth1_to_bridge: entered allmulticast mode [ 930.317255][ T8919] veth0_to_bond: entered allmulticast mode [ 930.326578][ T8919] veth1_to_bond: entered allmulticast mode [ 930.335693][ T8919] veth0_to_team: entered allmulticast mode [ 930.347538][ T8919] veth1_to_team: entered allmulticast mode [ 930.356879][ T8919] veth0_to_batadv: entered allmulticast mode [ 930.367542][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.375729][ T8919] batadv_slave_0: entered allmulticast mode [ 930.385744][ T8919] veth1_to_batadv: entered allmulticast mode [ 930.394873][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.402285][ T8919] batadv_slave_1: entered allmulticast mode [ 930.411481][ T8919] xfrm0: entered allmulticast mode [ 930.418825][ T8919] veth0_to_hsr: entered allmulticast mode [ 930.428496][ T8919] hsr_slave_0: entered allmulticast mode [ 930.437436][ T8919] veth1_to_hsr: entered allmulticast mode [ 930.446561][ T8919] hsr_slave_1: entered allmulticast mode [ 930.454482][ T8919] hsr0: entered allmulticast mode [ 930.461216][ T8919] veth1_virt_wifi: entered allmulticast mode [ 930.470194][ T8919] veth0_virt_wifi: entered allmulticast mode [ 930.478348][ T8919] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 930.486494][ T8919] veth1_vlan: entered allmulticast mode [ 930.495096][ T8919] veth0_vlan: entered allmulticast mode [ 930.507056][ T8919] vlan0: entered allmulticast mode [ 930.512277][ T8919] vlan1: entered allmulticast mode [ 930.519908][ T8919] macvlan0: entered allmulticast mode [ 930.530150][ T8919] macvlan1: entered allmulticast mode [ 930.537732][ T8919] ipvlan0: entered allmulticast mode [ 930.543483][ T8919] ipvlan1: entered allmulticast mode [ 930.549936][ T8919] veth1_macvtap: entered allmulticast mode [ 930.559343][ T8919] veth0_macvtap: entered allmulticast mode [ 930.567736][ T8919] macvtap0: entered allmulticast mode [ 930.576031][ T8919] macsec0: entered allmulticast mode [ 930.584412][ T8919] geneve0: entered allmulticast mode [ 930.591903][ T8919] geneve1: entered allmulticast mode [ 930.601658][ T8919] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 930.614190][ T8919] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 930.626156][ T8919] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 930.636216][ T8919] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 930.649351][ T8919] mac80211_hwsim hwsim123 wlan0: entered allmulticast mode [ 930.662158][ T8919] mac80211_hwsim hwsim124 wlan1: entered allmulticast mode [ 930.671093][ T8919] vlan2: left promiscuous mode [ 930.677591][ T8919] ip6gretap0: left promiscuous mode [ 930.683366][ T8919] ipip0: entered allmulticast mode [ 930.710741][ T7089] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.733500][ T7089] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.756255][ T7089] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.777475][ T7089] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.797041][ T8880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.809352][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9526'. [ 930.842290][ T8579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 930.884841][ T8579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 930.938614][ T8579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 930.999759][ T8579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 931.379487][ T8579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.401595][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.417895][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.427967][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 931.476550][ T8579] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.544056][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.551222][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.610489][ T8963] netlink: 'syz.5.9543': attribute type 11 has an invalid length. [ 931.624619][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.631823][ T7089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.851230][ T7090] hsr_slave_0: left promiscuous mode [ 931.883063][ T7090] hsr_slave_1: left promiscuous mode [ 932.013855][ T7090] pim6reg (unregistering): left allmulticast mode [ 932.428357][ T8579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.493930][ T8999] netlink: 'syz.2.9550': attribute type 1 has an invalid length. [ 932.502108][ T8999] netlink: 'syz.2.9550': attribute type 2 has an invalid length. [ 932.511155][ T8999] netlink: 'syz.2.9550': attribute type 1 has an invalid length. [ 932.825773][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9554'. [ 932.847456][ T9020] xt_hashlimit: size too large, truncated to 1048576 [ 932.938935][ T8579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.015078][ T7090] IPVS: stop unused estimator thread 0... [ 933.021511][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9555'. [ 933.189086][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9556'. [ 933.218432][ T9035] bridge: RTM_NEWNEIGH with invalid ether address [ 933.335860][ T9044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.418954][ T9052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.501468][ T9057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.587208][ T9062] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9562'. [ 933.612096][ T9062] netlink: 'syz.2.9562': attribute type 9 has an invalid length. [ 933.660484][ T8579] veth0_vlan: entered promiscuous mode [ 933.731016][ T8579] veth1_vlan: entered promiscuous mode [ 933.847423][ T8579] veth0_macvtap: entered promiscuous mode [ 933.915511][ T8579] veth1_macvtap: entered promiscuous mode [ 934.015731][ T8579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.060191][ T8579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.116776][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.163058][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.175546][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.198647][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.522657][ T7810] mac80211_hwsim hwsim77 wlan0: left allmulticast mode [ 936.530367][ T7810] mac80211_hwsim hwsim77 wlan0: left promiscuous mode [ 936.537730][ T7810] bridge0: port 2(wlan0) entered disabled state [ 936.545830][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.562436][ T9062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 936.753038][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 936.761123][ C0] lec:lec_tx_timeout: lec0 [ 936.785727][ T7810] bond10 (unregistering): (slave ip6erspan0): Releasing active interface [ 937.026255][ T7810] bond9 (unregistering): (slave gretap2): Releasing active interface [ 937.331600][ T7810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.343857][ T7810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.355777][ T7810] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 937.368234][ T7810] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 937.379186][ T7810] bond0 (unregistering): Released all slaves [ 937.388841][ T7810] bond1 (unregistering): Released all slaves [ 937.402908][ T7810] bond2 (unregistering): Released all slaves [ 937.416120][ T7810] bond3 (unregistering): Released all slaves [ 937.429153][ T7810] bond4 (unregistering): Released all slaves [ 937.447107][ T7810] bond5 (unregistering): (slave veth3): Releasing active interface [ 937.459342][ T7810] bond5 (unregistering): Released all slaves [ 937.471926][ T7810] bond6 (unregistering): Released all slaves [ 937.489797][ T7810] bond7 (unregistering): Released all slaves [ 937.504319][ T7810] bond8 (unregistering): Released all slaves [ 937.519659][ T7810] bond9 (unregistering): Released all slaves [ 937.536853][ T7810] bond10 (unregistering): Released all slaves [ 937.549676][ T7810] bond11 (unregistering): Released all slaves [ 937.562808][ T7810] bond12 (unregistering): Released all slaves [ 937.577176][ T7810] bond13 (unregistering): Released all slaves [ 937.596881][ T7810] bond14 (unregistering): Released all slaves [ 937.614443][ T7810] bond15 (unregistering): Released all slaves [ 937.627465][ T7810] bond16 (unregistering): (slave lo): Releasing backup interface [ 937.636010][ T7810] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 937.649035][ T7810] bond16 (unregistering): Released all slaves [ 937.802471][T27645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.810326][T27645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.877073][T27638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.892817][T27638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.957126][ T7810] tipc: Left network mode [ 938.159741][ T9169] syzkaller0: entered promiscuous mode [ 938.189321][ T9169] syzkaller0: entered allmulticast mode [ 938.236039][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9458'. [ 938.236125][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9458'. [ 938.291623][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9458'. [ 938.300773][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9458'. [ 938.300803][ T9173] netlink: 'syz.4.9458': attribute type 14 has an invalid length. [ 938.300817][ T9173] netlink: 'syz.4.9458': attribute type 13 has an invalid length. [ 938.344461][ T9172] netlink: 'syz.4.9458': attribute type 14 has an invalid length. [ 938.376498][ T9172] netlink: 'syz.4.9458': attribute type 13 has an invalid length. [ 938.490642][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.503761][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.512402][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.523772][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.539355][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.637721][ T9182] syzkaller1: entered promiscuous mode [ 938.644602][ T9182] syzkaller1: entered allmulticast mode [ 938.747717][ T9180] vxcan1 speed is unknown, defaulting to 1000 [ 939.227526][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9584'. [ 939.279947][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9586'. [ 939.298007][ T9217] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9586'. [ 939.316761][ T9217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9586'. [ 939.353053][ T9213] netlink: 'syz.2.9584': attribute type 1 has an invalid length. [ 939.370767][ T9213] netlink: 'syz.2.9584': attribute type 2 has an invalid length. [ 939.400018][ T9180] virt_wifi0 speed is unknown, defaulting to 1000 [ 939.478045][ T9221] netlink: 'syz.1.9587': attribute type 2 has an invalid length. [ 939.519451][ T9221] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9587'. [ 939.595308][ T9232] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9588'. [ 939.627927][ T9227] tipc: Enabling of bearer rejected, failed to enable media [ 939.656362][ T9233] tipc: Enabling of bearer rejected, failed to enable media [ 939.695540][ T9236] netlink: 'syz.0.9590': attribute type 1 has an invalid length. [ 939.729378][ T9236] netlink: 'syz.0.9590': attribute type 2 has an invalid length. [ 939.739594][ T9236] netlink: 'syz.0.9590': attribute type 2 has an invalid length. [ 939.918507][ T9247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 939.986468][ T9251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 939.996623][ T9251] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 940.009204][ T9251] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 940.084021][ T9247] veth3: entered promiscuous mode [ 940.095537][ T9247] bond4: (slave veth3): Enslaving as an active interface with a down link [ 940.143878][ T9266] vlan2: entered allmulticast mode [ 940.149078][ T9266] bond4: entered allmulticast mode [ 940.383995][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.477128][ T9288] bond4: entered allmulticast mode [ 940.549738][ T9180] chnl_net:caif_netlink_parms(): no params data found [ 940.560306][ T9294] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 940.675620][ T5841] Bluetooth: hci1: command tx timeout [ 940.755672][ T9309] nbd: socks must be embedded in a SOCK_ITEM attr [ 940.854637][ T9316] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 940.901174][ T7810] hsr_slave_0: left promiscuous mode [ 940.907913][ T7810] hsr_slave_1: left promiscuous mode [ 940.916998][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.925117][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.938351][ T7810] veth1_vlan: left allmulticast mode [ 940.944720][ T7810] veth1_macvtap: left promiscuous mode [ 940.950268][ T7810] veth0_macvtap: left promiscuous mode [ 940.955992][ T7810] veth1_vlan: left promiscuous mode [ 940.961301][ T7810] veth0_vlan: left promiscuous mode [ 941.039746][ T7810] pim6reg (unregistering): left allmulticast mode [ 941.277450][ T7810] team0 (unregistering): Port device team_slave_1 removed [ 941.301232][ T7810] team0 (unregistering): Port device team_slave_0 removed [ 941.477287][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.501887][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.540453][ T9180] bridge_slave_0: entered allmulticast mode [ 941.549978][ T9329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 941.556225][ T9180] bridge_slave_0: entered promiscuous mode [ 941.576299][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.584941][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.601947][ T9180] bridge_slave_1: entered allmulticast mode [ 941.626821][ T9180] bridge_slave_1: entered promiscuous mode [ 941.746623][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.777692][ T9345] macvtap0: refused to change device tx_queue_len [ 941.796284][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.956486][ T9180] team0: Port device team_slave_0 added [ 941.984810][ T9180] team0: Port device team_slave_1 added [ 942.007945][ T7810] IPVS: stop unused estimator thread 0... [ 942.053088][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.060942][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.088126][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.109188][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.116748][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.143947][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.189672][ T9180] hsr_slave_0: entered promiscuous mode [ 942.196825][ T9180] hsr_slave_1: entered promiscuous mode [ 942.233410][ T7810] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.245431][ T7810] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 942.355440][ T7810] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.366215][ T7810] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 942.422222][ T7810] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.434305][ T7810] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 942.752833][ T5841] Bluetooth: hci1: command tx timeout [ 942.789751][ T7810] bond13 (unregistering): (slave geneve3): Releasing active interface [ 942.886361][ T7810] bond4 (unregistering): (slave bridge2): Releasing active interface [ 942.946385][ T7810] bond11 (unregistering): (slave bridge3): Releasing active interface [ 943.136268][ T7810] .` (unregistering): Released all slaves [ 943.146949][ T7810] bond1 (unregistering): Released all slaves [ 943.160197][ T7810] bond2 (unregistering): Released all slaves [ 943.172949][ T7810] bond3 (unregistering): Released all slaves [ 943.188392][ T7810] bond0 (unregistering): Released all slaves [ 943.202041][ T7810] bond4 (unregistering): Released all slaves [ 943.218958][ T7810] bond5 (unregistering): Released all slaves [ 943.236465][ T7810] bond6 (unregistering): Released all slaves [ 943.255128][ T7810] bond7 (unregistering): Released all slaves [ 943.275167][ T7810] bond8 (unregistering): Released all slaves [ 943.288960][ T7810] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 943.300162][ T7810] bond9 (unregistering): (slave bond10): Releasing active interface [ 943.309152][ T7810] bond9 (unregistering): Released all slaves [ 943.326213][ T7810] bond10 (unregistering): Released all slaves [ 943.340069][ T7810] bond11 (unregistering): Released all slaves [ 943.355779][ T7810] bond12 (unregistering): Released all slaves [ 943.370151][ T7810] bond13 (unregistering): Released all slaves [ 943.386359][ T7810] bond14 (unregistering): Released all slaves [ 943.399612][ T7810] bond15 (unregistering): Released all slaves [ 943.531911][ T7810] : left promiscuous mode [ 943.614275][ T7810] 9: left promiscuous mode [ 943.682849][ T7810] tipc: Disabling bearer [ 943.696424][ T7810] tipc: Left network mode [ 944.342109][ T7810] pim6reg (unregistering): left allmulticast mode [ 944.577209][ T9339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.624319][ T9180] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 944.674905][ T9180] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 944.711124][ T9180] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 944.767278][ T9180] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 944.817047][ T9368] __nla_validate_parse: 4 callbacks suppressed [ 944.817077][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9622'. [ 944.845571][ T5841] Bluetooth: hci1: command tx timeout [ 945.075050][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.257367][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.319192][T27638] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.326393][T27638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.360336][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.367532][ T7090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.383624][ T9405] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9630'. [ 945.453817][ T7810] IPVS: stop unused estimator thread 0... [ 945.529467][ T9418] ±ÿ: renamed from team_slave_1 (while UP) [ 945.645152][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9634'. [ 945.654258][ T9422] IPv6: NLM_F_CREATE should be specified when creating new route [ 945.759562][ T9430] delete_channel: no stack [ 945.831019][ T9430] syzkaller0: entered promiscuous mode [ 945.849076][ T9430] syzkaller0: entered allmulticast mode [ 946.302086][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.540954][ T9478] tunl0: entered promiscuous mode [ 946.562167][ T9478] validate_nla: 5 callbacks suppressed [ 946.562186][ T9478] netlink: 'syz.1.9644': attribute type 3 has an invalid length. [ 946.588059][ T9480] x_tables: unsorted entry at hook 3 [ 946.626190][ T9483] netlink: 'syz.1.9644': attribute type 10 has an invalid length. [ 946.654315][ T9478] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9644'. [ 946.727795][ T9483] team0: Device vxcan1 is of different type [ 946.901301][ T9180] veth0_vlan: entered promiscuous mode [ 946.916258][ T5841] Bluetooth: hci1: command tx timeout [ 946.920239][ T9180] veth1_vlan: entered promiscuous mode [ 947.001111][ T9180] veth0_macvtap: entered promiscuous mode [ 947.014229][ T9180] veth1_macvtap: entered promiscuous mode [ 947.065086][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.099719][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.118349][ T7089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.137705][ T7089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.147885][ T7089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.159613][ T7089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.316608][T14647] lec:lec_start_xmit: lec0:No lecd attached [ 947.369821][ T9515] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 947.381613][ T9515] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 947.466243][T27645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.483325][T27645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.536486][T27645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.560204][T27645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.751735][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9655'. [ 947.806066][ T9536] netlink: 'syz.4.9655': attribute type 7 has an invalid length. [ 947.816103][ T9536] netlink: 'syz.4.9655': attribute type 8 has an invalid length. [ 947.836230][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9655'. [ 948.055534][ T9557] vxcan1 speed is unknown, defaulting to 1000 [ 948.303917][ T9557] virt_wifi0 speed is unknown, defaulting to 1000 [ 948.810325][ T9566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 948.977804][ T9575] syzkaller0: entered promiscuous mode [ 948.992744][ T5841] Bluetooth: hci1: command tx timeout [ 948.993852][ T9575] syzkaller0: entered allmulticast mode [ 950.583606][ T9528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 950.717141][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9666'. [ 950.775059][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9669'. [ 950.831420][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9669'. [ 950.929815][ T9594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9671'. [ 950.948893][ T9594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9671'. [ 950.958630][ T9594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9671'. [ 951.518631][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 951.557219][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9686'. [ 951.573108][ T9638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.722020][ T9648] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 951.733789][ T9648] team0: Device macvlan2 is already an upper device of the team interface [ 951.830925][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9691'. [ 951.841373][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9691'. [ 952.254946][ T9684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 952.283832][ T9684] syzkaller1: linktype set to 823 [ 952.687462][ T9710] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.704775][ T9711] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.714095][ T9712] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.733033][ T9710] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.741303][ T9710] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.752523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 952.760533][ C0] lec:lec_tx_timeout: lec0 [ 952.785936][ T9710] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.795082][ T9710] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.805892][ T9710] netlink: 'syz.5.9708': attribute type 29 has an invalid length. [ 952.856783][ T9718] syzkaller1: entered promiscuous mode [ 952.886943][ T9718] syzkaller1: entered allmulticast mode [ 952.975743][ T9727] syzkaller1: entered promiscuous mode [ 952.981264][ T9727] syzkaller1: entered allmulticast mode [ 953.209452][ T9746] veth0: entered promiscuous mode [ 953.229530][ T9745] veth0: left promiscuous mode [ 953.461648][ T9757] netlink: 'syz.4.9720': attribute type 10 has an invalid length. [ 953.825373][ T9788] tipc: Started in network mode [ 953.830291][ T9788] tipc: Node identity ae33b1d20ca, cluster identity 4711 [ 953.882571][ T9788] tipc: Enabled bearer , priority 0 [ 953.922042][ T9787] tipc: Enabling of bearer rejected, already enabled [ 953.959663][ T9787] tipc: Disabling bearer [ 954.123853][ T9807] veth3: entered promiscuous mode [ 954.952129][ T9859] netlink: 'syz.4.9747': attribute type 12 has an invalid length. [ 954.997445][ T9870] openvswitch: netlink: IP tunnel dst address not specified [ 955.303534][ T9895] bond0: entered promiscuous mode [ 955.309033][ T9895] bond_slave_0: entered promiscuous mode [ 955.318990][ T9895] bond_slave_1: entered promiscuous mode [ 955.344601][ T9895] gretap0: entered promiscuous mode [ 955.353494][ T9895] erspan0: entered promiscuous mode [ 955.369852][ T9895] debugfs: 'hsr1' already exists in 'hsr' [ 955.391717][ T9895] Cannot create hsr debugfs directory [ 955.408414][ T9895] hsr1: entered promiscuous mode [ 955.581199][ T9915] batman_adv: batadv0: Adding interface: netdevsim0 [ 955.613104][ T9915] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.674779][ T9915] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 955.761241][ T9918] syzkaller0: entered promiscuous mode [ 955.767014][ T9918] syzkaller0: entered allmulticast mode [ 955.803183][ T9903] __nla_validate_parse: 21 callbacks suppressed [ 955.803203][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'. [ 955.821809][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9758'. [ 956.362292][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 956.369610][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 956.377551][ T5710] block nbd4: Dead connection, failed to find a fallback [ 956.386442][ T5710] block nbd4: shutting down sockets [ 956.392216][ T5710] blk_print_req_error: 54 callbacks suppressed [ 956.392233][ T5710] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.410884][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 956.418098][ T25] block nbd4: Connection timed out, retrying (0/2 alive) [ 956.427178][ T5710] buffer_io_error: 54 callbacks suppressed [ 956.427195][ T5710] Buffer I/O error on dev nbd4, logical block 0, async page read [ 956.440941][ T5710] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.450705][ T5710] Buffer I/O error on dev nbd4, logical block 3, async page read [ 956.459198][ T5710] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.468880][ T5710] Buffer I/O error on dev nbd4, logical block 2, async page read [ 956.476730][ T5710] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.486464][ T5710] Buffer I/O error on dev nbd4, logical block 1, async page read [ 956.494382][ T7879] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.504084][ T7879] Buffer I/O error on dev nbd4, logical block 0, async page read [ 956.511882][ T7879] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.522217][ T7879] Buffer I/O error on dev nbd4, logical block 1, async page read [ 956.530103][ T7879] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.539633][ T7879] Buffer I/O error on dev nbd4, logical block 2, async page read [ 956.547504][ T7879] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.557910][ T7879] Buffer I/O error on dev nbd4, logical block 3, async page read [ 956.565913][ T7879] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.575473][ T7879] Buffer I/O error on dev nbd4, logical block 0, async page read [ 956.583456][ T7879] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 956.593104][ T7879] Buffer I/O error on dev nbd4, logical block 1, async page read [ 956.601480][ T7879] ldm_validate_partition_table(): Disk read failed. [ 956.608563][ T7879] Dev nbd4: unable to read RDB block 0 [ 956.616106][ T7879] nbd4: unable to read partition table [ 956.635204][ T7879] ldm_validate_partition_table(): Disk read failed. [ 956.642245][ T7879] Dev nbd4: unable to read RDB block 0 [ 956.656500][ T7879] nbd4: unable to read partition table [ 957.606672][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'. [ 957.609447][ T9931] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9763'. [ 957.615859][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9758'. [ 957.712002][T27638] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.727568][T27638] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.763105][T27638] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.784574][T27638] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.147146][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9773'. [ 958.329708][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9776'. [ 958.469358][ T9981] tipc: Started in network mode [ 958.483006][ T9981] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 958.512302][ T9981] tipc: Enabling of bearer rejected, failed to enable media [ 958.572976][ T9990] validate_nla: 4 callbacks suppressed [ 958.572996][ T9990] netlink: 'syz.2.9781': attribute type 1 has an invalid length. [ 958.620869][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9781'. [ 958.816340][ T9997] tap0: tun_chr_ioctl cmd 2148553947 [ 958.934350][T10010] syzkaller0: entered promiscuous mode [ 958.942988][T10010] syzkaller0: entered allmulticast mode [ 958.979456][T10014] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9788'. [ 959.020577][T10014] netlink: 'syz.4.9788': attribute type 1 has an invalid length. [ 959.029895][T10014] netlink: 'syz.4.9788': attribute type 2 has an invalid length. [ 959.053620][T10014] netlink: 'syz.4.9788': attribute type 1 has an invalid length. [ 959.065042][T10014] netlink: 'syz.4.9788': attribute type 3 has an invalid length. [ 959.095680][T10018] syzkaller0: entered promiscuous mode [ 959.101193][T10018] syzkaller0: entered allmulticast mode [ 959.110562][T10018] tc action pedit offset must be on 32 bit boundaries [ 959.120070][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9788'. [ 959.207628][T10023] block nbd4: NBD_DISCONNECT [ 959.212282][T10023] block nbd4: Send disconnect failed -32 [ 959.285360][T10023] block nbd4: Send disconnect failed -32 [ 959.628554][T10043] sctp: [Deprecated]: syz.1.9798 (pid 10043) Use of int in max_burst socket option. [ 959.628554][T10043] Use struct sctp_assoc_value instead [ 959.721652][T10048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 959.728950][T10048] IPv6: NLM_F_CREATE should be set when creating new route [ 959.805908][ T1240] IPVS: starting estimator thread 0... [ 959.867555][T10066] IPVS: sh: FWM 3 0x00000003 - no destination available [ 959.903411][T10059] IPVS: using max 33 ests per chain, 79200 per kthread [ 960.430685][T10106] netlink: 'syz.0.9811': attribute type 1 has an invalid length. [ 960.519802][T10106] bond2: entered promiscuous mode [ 960.572717][T10106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 960.785540][T10125] syzkaller0: entered promiscuous mode [ 960.794255][T10125] syzkaller0: entered allmulticast mode [ 961.026800][T10144] __nla_validate_parse: 6 callbacks suppressed [ 961.026820][T10144] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9822'. [ 961.099506][T10145] netlink: set zone limit has 4 unknown bytes [ 961.202434][T10154] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 961.261192][T10159] xt_time: unknown flags 0xf4 [ 962.976113][T10179] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 963.045722][T10185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 963.179396][T10193] netlink: 'syz.5.9832': attribute type 1 has an invalid length. [ 963.432184][T10214] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9835'. [ 963.449542][T10215] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.9838'. [ 963.483535][T10218] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.9839'. [ 963.493127][T10218] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 963.604209][T10223] netlink: 'syz.2.9840': attribute type 4 has an invalid length. [ 963.617075][T10222] syzkaller0: entered promiscuous mode [ 963.624930][T10222] syzkaller0: entered allmulticast mode [ 963.894715][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9845'. [ 964.234736][T10174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 964.556338][T10257] netlink: 'syz.4.9852': attribute type 29 has an invalid length. [ 964.564556][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9852'. [ 964.604798][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9856'. [ 964.825051][T10280] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9861'. [ 964.901383][T10284] netlink: 'syz.2.9862': attribute type 1 has an invalid length. [ 964.951488][T10284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 965.021786][T10296] netem: change failed [ 965.085908][T10303] ipvlan2: entered allmulticast mode [ 965.102462][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9867'. [ 965.112006][T10303] batadv_slave_1: entered allmulticast mode [ 965.153907][T10308] netlink: 'syz.4.9867': attribute type 3 has an invalid length. [ 965.154928][T10303] batman_adv: batadv0: Adding interface: ipvlan2 [ 965.187855][T10303] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.217888][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.229502][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.259424][T10303] batman_adv: batadv0: Interface activated: ipvlan2 [ 965.340668][T10310] team0: Device gtp0 is up. Set it down before adding it as a team port [ 965.428091][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.445348][T10323] syz_tun: refused to change device tx_queue_len [ 965.479781][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9874'. [ 965.648029][T10343] sctp: [Deprecated]: syz.0.9875 (pid 10343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 965.648029][T10343] Use struct sctp_sack_info instead [ 966.038050][T10366] __nla_validate_parse: 17 callbacks suppressed [ 966.038069][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.071347][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9890'. [ 966.089669][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.099575][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.110178][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.176016][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.193555][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9890'. [ 966.204388][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.232763][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.251925][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9887'. [ 966.270499][T10378] xt_socket: unknown flags 0x50 [ 966.614060][T10402] netlink: zone id is out of range [ 966.623139][T10402] netlink: zone id is out of range [ 966.628351][T10402] netlink: zone id is out of range [ 966.647141][T10402] netlink: zone id is out of range [ 966.653961][T10402] netlink: zone id is out of range [ 966.659486][T10402] netlink: zone id is out of range [ 966.717349][T10402] netlink: zone id is out of range [ 966.750116][T10402] netlink: zone id is out of range [ 966.773143][T10402] netlink: zone id is out of range [ 967.088555][T10439] bridge0: port 3(veth0_to_bridge) entered blocking state [ 967.100466][T10439] bridge0: port 3(veth0_to_bridge) entered disabled state [ 967.110672][T10439] veth0_to_bridge: entered allmulticast mode [ 967.119098][T10439] veth0_to_bridge: entered promiscuous mode [ 967.130163][T10439] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.175406][T10439] bridge0: port 3(veth0_to_bridge) entered blocking state [ 967.184206][T10439] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 967.434125][T10467] netlink: 'syz.0.9912': attribute type 25 has an invalid length. [ 967.461762][T10467] macsec0: left allmulticast mode [ 967.471835][T10469] netlink: 'syz.1.9913': attribute type 4 has an invalid length. [ 967.946015][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.122579][ T5147] Bluetooth: hci1: command 0x0405 tx timeout [ 984.683183][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 990.273671][ C1] net_ratelimit: 46 callbacks suppressed [ 990.273685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.291557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.303707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.315915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.328154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.340430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.352603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.364863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.377001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 990.389190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.747487][T10564] __nla_validate_parse: 15 callbacks suppressed [ 992.747506][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9931'. [ 992.799822][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9930'. [ 992.848498][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.860127][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 992.908304][T10566] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 993.022794][T10566] bond4 (unregistering): Released all slaves [ 993.135057][T10567] netlink: 'syz.2.9930': attribute type 1 has an invalid length. [ 993.143390][T10567] netlink: 'syz.2.9930': attribute type 2 has an invalid length. [ 993.186350][T10573] geneve2: entered promiscuous mode [ 993.191862][T10573] geneve2: entered allmulticast mode [ 993.568194][ T7087] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.682947][ T7087] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.737795][ T7087] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.787131][ T7087] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.891586][T10601] netlink: 'syz.5.9941': attribute type 12 has an invalid length. [ 993.925029][T10601] netlink: 'syz.5.9941': attribute type 29 has an invalid length. [ 993.949525][T10601] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9941'. [ 994.068373][T10601] netlink: 'syz.5.9941': attribute type 1 has an invalid length. [ 994.095683][T10620] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9940'. [ 994.220551][T10601] netlink: 'syz.5.9941': attribute type 1 has an invalid length. [ 994.309104][T10601] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9941'. [ 995.160471][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9949'. [ 995.282395][ C1] net_ratelimit: 32907 callbacks suppressed [ 995.282415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.300587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.312847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.325143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.337425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.349695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.361954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.374231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.387199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.399482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.105148][T10659] vxcan1 speed is unknown, defaulting to 1000 [ 996.362971][T10670] team0: No ports can be present during mode change [ 996.606717][T10679] netlink: 'syz.0.9959': attribute type 1 has an invalid length. [ 997.000221][T10685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9961'. [ 997.022875][T10659] virt_wifi0 speed is unknown, defaulting to 1000 [ 997.855869][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9968'. [ 997.872587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 997.880728][ C0] lec:lec_tx_timeout: lec0 [ 997.955066][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 999.135134][T10748] netlink: 'syz.4.9982': attribute type 10 has an invalid length. [ 999.186234][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9982'. [ 999.219181][T10748] dummy0: entered promiscuous mode [ 999.267959][T10748] bridge0: port 4(dummy0) entered blocking state [ 999.321873][T10748] bridge0: port 4(dummy0) entered disabled state [ 999.361366][T10748] dummy0: entered allmulticast mode [ 999.414650][T10748] bridge0: port 4(dummy0) entered blocking state [ 999.421173][T10748] bridge0: port 4(dummy0) entered forwarding state [ 999.452770][T10754] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9984'. [ 999.518944][T10759] ip6t_srh: unknown srh match flags 5F28 [ 1000.000696][ T1233] IPVS: starting estimator thread 0... [ 1000.123485][T10779] IPVS: using max 27 ests per chain, 64800 per kthread [ 1000.292520][ C1] net_ratelimit: 22109 callbacks suppressed [ 1000.292538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1000.310870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.323242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1000.335699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.348068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1000.360520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.367324][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9994'. [ 1000.372877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1000.393942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.397794][T10792] netlink: 'syz.1.9995': attribute type 1 has an invalid length. [ 1000.406294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1000.406617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.660250][T10792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1000.746279][T10800] syzkaller0: entered promiscuous mode [ 1000.786705][T10800] syzkaller0: entered allmulticast mode [ 1000.996742][T10815] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1001.094680][T10797] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1001.167275][T10821] netlink: 'syz.1.9995': attribute type 1 has an invalid length. [ 1001.227089][T10821] netlink: 'syz.1.9995': attribute type 2 has an invalid length. [ 1001.249121][T10812] erspan0: entered allmulticast mode [ 1001.518727][T10804] bond5: (slave veth0_to_bond): making interface the new active one [ 1001.560071][T10804] veth0_to_bond: entered promiscuous mode [ 1001.581756][T10804] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1001.638490][T10826] netlink: 'syz.0.10000': attribute type 12 has an invalid length. [ 1001.683883][T10826] netlink: 'syz.0.10000': attribute type 29 has an invalid length. [ 1001.743692][T10826] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10000'. [ 1001.802797][T10826] netlink: 'syz.0.10000': attribute type 1 has an invalid length. [ 1002.057244][T10840] netlink: 'syz.2.10003': attribute type 1 has an invalid length. [ 1002.110427][T10843] netlink: 'syz.5.10004': attribute type 3 has an invalid length. [ 1002.143240][ C1] sched: DL replenish lagged too much [ 1002.165903][T10843] netlink: 'syz.5.10004': attribute type 1 has an invalid length. [ 1002.214616][T10843] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10004'. [ 1002.356375][T10850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10006'. [ 1002.598280][T10840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1002.700168][T10845] bond6: entered allmulticast mode [ 1003.227816][T10866] SET target dimension over the limit! [ 1003.363259][T10867] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1003.597679][T10870] can: request_module (can-proto-0) failed. [ 1003.729486][T10889] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10016'. [ 1003.860852][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10017'. [ 1003.955771][T10894] veth0_macvtap: left promiscuous mode [ 1003.967014][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10017'. [ 1004.134287][T10894] bond5: (slave veth0_to_bond): Releasing active interface [ 1004.188439][T10894] veth0_to_bond: left promiscuous mode [ 1004.407413][T10903] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10021'. [ 1004.873145][ T5841] Bluetooth: hci1: link tx timeout [ 1004.880279][ T5841] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1004.998574][T10922] validate_nla: 2 callbacks suppressed [ 1004.998593][T10922] netlink: 'syz.1.10026': attribute type 4 has an invalid length. [ 1005.144477][T10928] netlink: 'syz.1.10026': attribute type 2 has an invalid length. [ 1005.302339][ C1] net_ratelimit: 15695 callbacks suppressed [ 1005.302366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1005.320717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1005.333065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1005.345515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1005.357856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1005.370318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1005.382703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1005.395144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1005.407560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1005.419998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.116122][T10964] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1006.914250][ T5147] Bluetooth: hci1: command 0x0405 tx timeout [ 1008.752055][T10950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.300866][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10048'. [ 1009.387340][T11001] bridge_slave_1: left allmulticast mode [ 1009.468739][T11001] bridge_slave_1: left promiscuous mode [ 1009.516084][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.570291][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1009.644463][T11001] bridge_slave_0: left allmulticast mode [ 1009.663812][T11001] bridge_slave_0: left promiscuous mode [ 1009.679745][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.138629][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1010.312614][ C1] net_ratelimit: 20210 callbacks suppressed [ 1010.312634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1010.331043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1010.343421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1010.355870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1010.368219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1010.380657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1010.392998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1010.405440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1010.417795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1010.430238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1010.909218][T14647] lec:lec_start_xmit: lec0:No lecd attached [ 1011.013669][T11054] ieee802154 phy1 wpan1: encryption failed: -22 [ 1011.064569][T11037] syzkaller0: entered promiscuous mode [ 1011.077563][T11037] syzkaller0: entered allmulticast mode [ 1011.599764][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10063'. [ 1011.609850][T11069] netlink: 'syz.0.10062': attribute type 1 has an invalid length. [ 1015.322660][ C1] net_ratelimit: 19123 callbacks suppressed [ 1015.322681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.340902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.353174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1015.365525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1015.377821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.390083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.402410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1015.414592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1015.426929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.439125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.923917][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1015.931952][ C0] lec:lec_tx_timeout: lec0 [ 1016.732755][T11069] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1017.279708][T11094] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10067'. [ 1017.549528][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10071'. [ 1018.053826][T11137] IPVS: Scheduler module ip_vs_sip not found [ 1018.159067][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1018.168484][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1018.178142][T11146] netlink: 'syz.2.10080': attribute type 15 has an invalid length. [ 1018.198451][ T7089] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1018.208861][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1018.221346][ T7089] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1018.242028][ T7089] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1018.254004][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1018.265043][ T7089] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1018.281961][T11146] netlink: 'syz.2.10080': attribute type 15 has an invalid length. [ 1018.366691][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10081'. [ 1019.129505][T11163] netlink: 'syz.0.10085': attribute type 1 has an invalid length. [ 1019.194290][ T1323] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.236781][ T1323] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.297730][ T1323] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.351785][ T1323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.542061][T11177] pim6reg: entered allmulticast mode [ 1019.556709][ T5841] Bluetooth: hci0: command tx timeout [ 1019.803981][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10092'. [ 1020.307818][T11199] netlink: 'syz.5.10095': attribute type 10 has an invalid length. [ 1020.332464][ C1] net_ratelimit: 15656 callbacks suppressed [ 1020.332484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1020.351154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1020.363949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1020.376657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1020.389441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1020.402169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1020.414976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1020.427693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1020.440486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1020.453185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1020.648330][T11204] tipc: Enabling of bearer rejected, failed to enable media [ 1020.957493][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10099'. [ 1023.864314][T11276] syzkaller0: entered promiscuous mode [ 1023.985717][T11301] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10118'. [ 1024.010696][T11301] netlink: 'syz.4.10118': attribute type 18 has an invalid length. [ 1025.342478][ C1] net_ratelimit: 14380 callbacks suppressed [ 1025.342498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1025.360754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1025.373014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1025.385372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1025.397657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1025.409912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1025.422170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1025.434460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1025.446727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1025.459055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.194138][T11305] netlink: 'syz.5.10120': attribute type 7 has an invalid length. [ 1029.559439][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10120'. [ 1029.648642][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10120'. [ 1029.690689][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10120'. [ 1029.831768][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1030.352595][ C1] net_ratelimit: 18816 callbacks suppressed [ 1030.352617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.371049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1030.383264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1030.395724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.407942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.420385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1030.432752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1030.445174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.457525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.469981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1030.479370][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10131'. [ 1033.364712][T11343] IPVS: Unknown mcast interface: pimreg [ 1033.652661][T11354] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10133'. [ 1034.063504][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10137'. [ 1034.351265][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1034.389499][T11376] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1034.413723][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1034.640478][T11385] netlink: 'syz.2.10141': attribute type 1 has an invalid length. [ 1034.811666][T11393] netlink: 'syz.5.10145': attribute type 3 has an invalid length. [ 1034.960304][T11395] SET target dimension over the limit! [ 1035.285644][T11406] __nla_validate_parse: 4 callbacks suppressed [ 1035.285664][T11406] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10149'. [ 1035.362334][ C1] net_ratelimit: 20382 callbacks suppressed [ 1035.362355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.380645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.391187][T11409] syzkaller0: entered promiscuous mode [ 1035.393077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1035.393458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1035.393774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.400008][T11406] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10149'. [ 1035.411385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.411724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1035.465221][T11409] syzkaller0: entered allmulticast mode [ 1035.468960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1035.486447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.498825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.601036][T11416] netlink: 'syz.0.10152': attribute type 3 has an invalid length. [ 1036.167489][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10158'. [ 1036.357108][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10159'. [ 1036.452547][T11441] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1036.607726][T11452] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.10161'. [ 1036.625419][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10160'. [ 1037.197022][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10167'. [ 1037.559849][T11482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10173'. [ 1037.764621][T11492] syzkaller0: entered promiscuous mode [ 1037.770267][T11492] syzkaller0: entered allmulticast mode [ 1037.981527][T11500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10179'. [ 1038.097160][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10180'. [ 1038.776598][T11532] netlink: 'syz.2.10187': attribute type 1 has an invalid length. [ 1038.788261][T11533] netlink: 'syz.2.10187': attribute type 1 has an invalid length. [ 1039.428603][T11548] netlink: 'syz.0.10191': attribute type 10 has an invalid length. [ 1039.461804][T11548] dummy0: entered promiscuous mode [ 1039.490129][T11548] dummy0: left allmulticast mode [ 1039.508496][T11548] bridge0: port 3(dummy0) entered blocking state [ 1039.523998][T11548] bridge0: port 3(dummy0) entered disabled state [ 1039.542116][T11548] dummy0: entered allmulticast mode [ 1039.568526][T11552] syzkaller0: entered allmulticast mode [ 1040.372631][ C1] net_ratelimit: 15332 callbacks suppressed [ 1040.372657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1040.391092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1040.403715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1040.416128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1040.429948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1040.446198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1040.458955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1040.472722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1040.487444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1040.500606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1040.545662][T11587] netlink: 'syz.2.10202': attribute type 1 has an invalid length. [ 1040.997382][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 1045.382371][ C1] net_ratelimit: 24798 callbacks suppressed [ 1045.382393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1045.401072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1045.413457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1045.425806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1045.439050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1045.452012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1045.464299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1045.477100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1045.489703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1045.502534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.112495][T10985] Bluetooth: hci4: command 0x0406 tx timeout [ 1050.392428][ C1] net_ratelimit: 25694 callbacks suppressed [ 1050.392451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1050.410920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1050.423456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1050.436727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1050.449080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1050.461448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1050.473729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1050.486271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1050.498789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1050.511334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.214199][T11593] __nla_validate_parse: 8 callbacks suppressed [ 1054.214220][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10203'. [ 1054.232191][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10203'. [ 1054.283473][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.292867][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1054.349927][T11597] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1054.855352][T11597] bond5 (unregistering): Released all slaves [ 1055.247273][T11632] IPv6: sit1: Disabled Multicast RS [ 1055.259482][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10210'. [ 1055.356835][T11634] vlan3: entered allmulticast mode [ 1055.369537][T11634] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10214'. [ 1055.385581][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10214'. [ 1055.402497][ C1] net_ratelimit: 22923 callbacks suppressed [ 1055.402520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1055.422577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1055.435487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1055.448454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1055.461875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1055.475384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1055.488468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1055.501436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1055.514195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1055.527055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.184663][T11634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.219038][T11634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.238197][T11634] bond0 (unregistering): Released all slaves [ 1056.347504][T11612] vcan0: entered allmulticast mode [ 1058.004349][T11696] netlink: 'syz.4.10232': attribute type 21 has an invalid length. [ 1058.726561][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10234'. [ 1059.119976][T11729] syz_tun: entered allmulticast mode [ 1059.712387][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 1059.720907][ C0] lec:lec_tx_timeout: lec0 [ 1059.972523][T11720] syz_tun: left allmulticast mode [ 1060.412400][ C1] net_ratelimit: 16870 callbacks suppressed [ 1060.412425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1060.432213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.443286][T11680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.445081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.469370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1060.483156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1060.496359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1060.509966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.523034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.535583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1060.549497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1060.771106][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1060.894754][T11734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.006289][T11737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.024036][T11737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.067873][T11737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.083984][T11737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.116909][T11737] batman_adv: batadv0: Removing interface: netdevsim0 [ 1061.551255][T11756] ±ÿ: renamed from team_slave_1 (while UP) [ 1061.950677][T11763] syzkaller0: entered promiscuous mode [ 1061.960425][T11763] syzkaller0: entered allmulticast mode [ 1061.990527][T11779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10246'. [ 1062.078269][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10246'. [ 1065.422667][ C1] net_ratelimit: 16146 callbacks suppressed [ 1065.422692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.442140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1065.455503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1065.471179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1065.485523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.498325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.511665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1065.524988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1065.537630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1065.552005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.783986][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10246'. [ 1069.087771][T11792] bridge0: left allmulticast mode [ 1069.149786][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10253'. [ 1069.543735][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10255'. [ 1070.125376][T11828] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.197954][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1070.295394][T11836] netlink: 576 bytes leftover after parsing attributes in process `syz.5.10262'. [ 1070.320031][T11835] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1070.432365][ C1] net_ratelimit: 16368 callbacks suppressed [ 1070.432389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1070.451561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1070.465402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.478213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.491676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1070.505172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1070.517968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1070.530898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.544186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.557548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1070.569693][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10267'. [ 1070.899353][T11848] vxcan1 speed is unknown, defaulting to 1000 [ 1070.922846][T11850] syzkaller0: entered promiscuous mode [ 1070.928548][T11850] syzkaller0: entered allmulticast mode [ 1071.229892][T11856] syzkaller0: entered promiscuous mode [ 1071.251939][T11856] syzkaller0: entered allmulticast mode [ 1071.601126][T11868] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1071.724859][T10985] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.899818][T11875] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1072.373211][T11894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10278'. [ 1074.772944][T14647] lec:lec_start_xmit: lec0:No lecd attached [ 1075.442474][ C1] net_ratelimit: 19942 callbacks suppressed [ 1075.442495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1075.461754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1075.474665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.489263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.503529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1075.516609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1075.530370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1075.544118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1075.557330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1075.570781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1075.706502][T11848] virt_wifi0 speed is unknown, defaulting to 1000 [ 1079.782322][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1079.790875][ C0] lec:lec_tx_timeout: lec0 [ 1080.078553][T11922] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10284'. [ 1080.452340][ C1] net_ratelimit: 22995 callbacks suppressed [ 1080.452361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1080.471967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1080.484508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1080.496903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1080.510979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1080.524506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1080.538593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1080.552154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1080.565060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1080.577379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1085.415043][T11880] vxcan1 speed is unknown, defaulting to 1000 [ 1085.462358][ C1] net_ratelimit: 17287 callbacks suppressed [ 1085.462379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1085.483491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1085.500158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.517294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.532390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1085.546411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1085.559217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.573901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.586471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1085.600170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1085.970628][T11929] netlink: 21 bytes leftover after parsing attributes in process `syz.1.10288'. [ 1086.248749][T11931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10289'. [ 1086.466807][T10985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1086.480342][T10985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1086.495108][T10985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1086.506791][T11880] virt_wifi0 speed is unknown, defaulting to 1000 [ 1086.524187][T10985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1086.536754][T10985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1087.095922][T11953] block nbd0: NBD_DISCONNECT [ 1087.397467][T11961] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 1087.639223][T11939] vxcan1 speed is unknown, defaulting to 1000 [ 1088.201257][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1088.218239][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1088.227731][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1088.260921][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1088.281964][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1088.594413][ T5841] Bluetooth: hci3: command tx timeout [ 1089.301464][T11964] 8021q: VLANs not supported on tunl0 [ 1089.873312][T11939] virt_wifi0 speed is unknown, defaulting to 1000 [ 1090.265023][T11982] tap0: tun_chr_ioctl cmd 1074025678 [ 1090.271531][T11982] tap0: group set to 0 [ 1090.352653][ T5841] Bluetooth: hci6: command tx timeout [ 1090.380747][T11988] netlink: 'syz.4.10300': attribute type 24 has an invalid length. [ 1090.472541][ C1] net_ratelimit: 14969 callbacks suppressed [ 1090.472562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.493273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1090.507480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1090.521774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.536923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.549625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1090.564453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1090.581955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.597928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.613358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1090.677438][ T5841] Bluetooth: hci3: command tx timeout [ 1091.017776][T11972] vxcan1 speed is unknown, defaulting to 1000 [ 1091.073794][T11997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10302'. [ 1091.393367][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10304'. [ 1091.501169][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10303'. [ 1091.586395][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10303'. [ 1091.756162][T12004] hsr_slave_0 (unregistering): left promiscuous mode [ 1091.950910][T12011] gretap0: entered promiscuous mode [ 1092.015248][T12011] gretap0: left promiscuous mode [ 1092.194270][T12018] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10306'. [ 1092.433474][ T5841] Bluetooth: hci6: command tx timeout [ 1092.535195][ T1323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.571313][ T1323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1092.603321][ T1323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.704077][T11972] virt_wifi0 speed is unknown, defaulting to 1000 [ 1092.753318][ T5841] Bluetooth: hci3: command tx timeout [ 1093.217582][ T1323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.235568][ T1323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1093.248815][T12042] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10312'. [ 1093.272605][ T1323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.368806][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1093.435434][T12033] netlink: 'syz.4.10310': attribute type 12 has an invalid length. [ 1093.457865][T12045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1093.480086][T12033] netlink: 'syz.4.10310': attribute type 29 has an invalid length. [ 1093.511322][T12033] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10310'. [ 1093.541529][T12033] netlink: 59 bytes leftover after parsing attributes in process `syz.4.10310'. [ 1093.889654][ T1323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.909792][ T1323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1093.926376][ T1323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.035761][T11939] chnl_net:caif_netlink_parms(): no params data found [ 1094.399627][T12068] netlink: 'syz.4.10319': attribute type 21 has an invalid length. [ 1094.512493][ T5841] Bluetooth: hci6: command tx timeout [ 1094.843412][ T5841] Bluetooth: hci3: command tx timeout [ 1094.927910][ T1323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.971776][ T1323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1094.999221][ T1323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.075489][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.084105][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.092059][T11939] bridge_slave_0: entered allmulticast mode [ 1095.101098][T11939] bridge_slave_0: entered promiscuous mode [ 1095.124088][T11939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.131361][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.139936][T11939] bridge_slave_1: entered allmulticast mode [ 1095.149096][T11939] bridge_slave_1: entered promiscuous mode [ 1095.327422][T11972] chnl_net:caif_netlink_parms(): no params data found [ 1095.424861][T11939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.468748][T11939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.482796][ C1] net_ratelimit: 15073 callbacks suppressed [ 1095.482816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.501139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.513609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1095.526099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1095.538689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.551109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.563725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1095.576053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1095.588477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.601195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.723456][ T7810] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.754567][T11939] team0: Port device team_slave_0 added [ 1095.841088][T11939] team0: Port device team_slave_1 added [ 1095.851082][ T7810] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.070163][T12113] syzkaller1: entered promiscuous mode [ 1096.079142][T12113] syzkaller1: entered allmulticast mode [ 1096.093500][ T7089] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.294639][ T7089] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.551171][ T1323] bridge_slave_1: left allmulticast mode [ 1096.592481][ T5841] Bluetooth: hci6: command tx timeout [ 1096.603250][ T1323] bridge_slave_1: left promiscuous mode [ 1096.627839][ T1323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.705641][ T1323] bridge_slave_0: left allmulticast mode [ 1096.711338][ T1323] bridge_slave_0: left promiscuous mode [ 1096.744309][ T1323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.254442][T12128] __nla_validate_parse: 8 callbacks suppressed [ 1097.254463][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10332'. [ 1098.029174][ T1323] bond3 (unregistering): (slave bridge2): Removing an active aggregator [ 1098.041912][ T1323] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1098.181890][ T1323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.207901][ T1323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.230920][ T1323] bond0 (unregistering): Released all slaves [ 1098.245295][ T1323] bond1 (unregistering): Released all slaves [ 1098.311778][ T1323] bond2 (unregistering): Released all slaves [ 1098.331053][ T1323] bond3 (unregistering): Released all slaves [ 1098.365387][ T1323] bond4 (unregistering): Released all slaves [ 1098.389359][ T1323] bond5 (unregistering): Released all slaves [ 1098.407439][ T1323] bond6 (unregistering): Released all slaves [ 1098.437048][T11939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.449671][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.482095][T11939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.687126][T11939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.750957][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.787401][T11939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.799314][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.809581][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.817321][T11972] bridge_slave_0: entered allmulticast mode [ 1098.825964][T11972] bridge_slave_0: entered promiscuous mode [ 1098.866858][ T1323] tipc: Left network mode [ 1099.120039][T12160] netlink: 'syz.4.10339': attribute type 1 has an invalid length. [ 1099.157226][T11972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.180812][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.188814][T12160] netlink: 'syz.4.10339': attribute type 2 has an invalid length. [ 1099.235767][T11972] bridge_slave_1: entered allmulticast mode [ 1099.296846][T11972] bridge_slave_1: entered promiscuous mode [ 1099.320311][T12156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10338'. [ 1099.520139][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10340'. [ 1099.561458][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10340'. [ 1099.575550][T11939] hsr_slave_0: entered promiscuous mode [ 1099.595530][T11939] hsr_slave_1: entered promiscuous mode [ 1099.614518][T12171] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10340'. [ 1099.624701][T11939] debugfs: 'hsr0' already exists in 'hsr' [ 1099.630458][T11939] Cannot create hsr debugfs directory [ 1100.043785][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10345'. [ 1100.258877][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.492573][ C1] net_ratelimit: 15739 callbacks suppressed [ 1100.492593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.510954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.523401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1100.535752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1100.548113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.560487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.572922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1100.585401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1100.597856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.610229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.823120][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.928740][T12198] kthread_run failed with err -4 [ 1101.040072][T11972] team0: Port device team_slave_0 added [ 1101.061439][T11972] team0: Port device team_slave_1 added [ 1101.079106][T12211] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1101.109517][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1101.141505][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1101.898378][T12216] syzkaller1: entered promiscuous mode [ 1101.904090][T12216] syzkaller1: entered allmulticast mode [ 1101.911183][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10352'. [ 1101.964299][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.971702][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.045131][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.221038][T12239] netlink: 'syz.1.10355': attribute type 83 has an invalid length. [ 1102.299175][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.306536][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.337063][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.608807][T12239] tipc: Enabled bearer , priority 10 [ 1103.188458][T11972] hsr_slave_0: entered promiscuous mode [ 1103.214593][T11972] hsr_slave_1: entered promiscuous mode [ 1103.240855][T11972] debugfs: 'hsr0' already exists in 'hsr' [ 1103.255488][T11972] Cannot create hsr debugfs directory [ 1103.311593][T12255] syzkaller1: entered promiscuous mode [ 1103.328756][T12255] syzkaller1: entered allmulticast mode [ 1104.151869][T12275] xt_CT: No such helper "snmp_trap" [ 1104.802734][ T1323] hsr_slave_0: left promiscuous mode [ 1104.815334][ T1323] hsr_slave_1: left promiscuous mode [ 1104.843301][ T1323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.868175][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.891894][ T1323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.924519][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.982253][ T1323] veth1_macvtap: left promiscuous mode [ 1104.988224][ T1323] veth0_macvtap: left promiscuous mode [ 1104.994380][ T1323] veth1_vlan: left promiscuous mode [ 1104.999874][ T1323] veth0_vlan: left promiscuous mode [ 1105.447197][ T1323] team0 (unregistering): Port device 26±ÿ removed [ 1105.502399][ C1] net_ratelimit: 16797 callbacks suppressed [ 1105.502420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1105.504417][ T1323] team0 (unregistering): Port device team_slave_0 removed [ 1105.508732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1105.540019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.552387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.564835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1105.577184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1105.589576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.601929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.614571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1105.626977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1106.328415][T11939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1106.536133][T12305] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1106.619650][T12305] bond0 (unregistering): Released all slaves [ 1106.748926][T11939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1106.955585][T11939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1107.084480][T11939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.181504][T11972] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1108.243693][T11972] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1108.305974][ T1323] IPVS: stop unused estimator thread 0... [ 1108.353998][T11972] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1108.459736][T11972] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1108.740601][T12368] netlink: 'syz.4.10377': attribute type 10 has an invalid length. [ 1108.784722][T12368] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10377'. [ 1109.061181][T12368] syzkaller0: entered allmulticast mode [ 1109.353431][ T1323] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.437741][T12404] netlink: 'syz.1.10381': attribute type 9 has an invalid length. [ 1109.463684][T12367] syzkaller0: left allmulticast mode [ 1109.469218][T12404] netlink: 'syz.1.10381': attribute type 11 has an invalid length. [ 1109.494690][T12404] netlink: 'syz.1.10381': attribute type 12 has an invalid length. [ 1109.551602][T12404] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.10381'. [ 1109.576129][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10381'. [ 1109.825327][ T1323] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.044802][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10384'. [ 1110.317411][ T1323] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.427705][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10386'. [ 1110.512467][ C1] net_ratelimit: 16341 callbacks suppressed [ 1110.512485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.530822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1110.543299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1110.555743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.568092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.580525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1110.592758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1110.605083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.617444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.629931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:7e:d3:ed:41:b7, vlan:0) [ 1110.862113][T12436] syzkaller0: entered promiscuous mode [ 1110.904062][T12436] syzkaller0: entered allmulticast mode [ 1111.025603][ T1323] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.064455][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10389'. [ 1111.094878][T11939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.306952][T12447] Bluetooth: MGMT ver 1.23 [ 1111.430735][T11939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.595064][T27638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.602388][T27638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.925108][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.934354][ T7089] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.051084][T12463] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1112.145963][T12463] netlink: 320 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1112.224917][T12457] bridge0: port 4(dummy0) entered disabled state [ 1112.231529][T12457] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1112.238893][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.356183][T12457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.397207][T12457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.476291][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10394'. [ 1112.524942][T12457] geneve2: left promiscuous mode [ 1112.533456][T12457] geneve2: left allmulticast mode [ 1112.567733][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.574948][ T7090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.627803][ T7810] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.646503][ T7810] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1112.677541][ T7810] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.694888][ T7810] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1112.726965][T12486] dummy0 (unregistering): left allmulticast mode [ 1112.734833][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10395'. [ 1112.737955][T12486] bridge0: port 3(dummy0) entered disabled state [ 1112.814189][ T7810] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.834938][ T7810] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1112.861357][ T7810] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.873866][ T7810] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1112.927288][ T7810] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.951289][T11972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.962846][ T7810] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.980409][T27638] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.092152][T27638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.099378][T27638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.111638][T27638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.118843][T27638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.338358][ T1323] gretap0 (unregistering): left promiscuous mode [ 1113.411242][ T1323] bond0 (unregistering): left promiscuous mode [ 1113.418710][ T1323] bond_slave_0: left promiscuous mode [ 1113.424526][ T1323] bond_slave_1: left promiscuous mode [ 1113.435534][ T1323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.446691][ T1323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.456734][ T1323] bond0 (unregistering): Released all slaves [ 1113.556386][T12524] sctp: [Deprecated]: syz.4.10404 (pid 12524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1113.556386][T12524] Use struct sctp_sack_info instead [ 1113.798431][T12531] __nla_validate_parse: 3 callbacks suppressed [ 1113.798449][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10407'. [ 1113.818224][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10407'. [ 1113.831039][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10407'. [ 1114.281020][T12556] netlink: 'syz.1.10413': attribute type 1 has an invalid length. [ 1114.535515][T11939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.639976][T12571] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10415'. [ 1114.660269][T12569] syzkaller0: entered promiscuous mode [ 1114.684086][T12569] syzkaller0: entered allmulticast mode [ 1114.799700][ T1323] hsr_slave_0: left promiscuous mode [ 1114.810686][ T1323] hsr_slave_1: left promiscuous mode [ 1114.826887][ T1323] veth1_macvtap: left promiscuous mode [ 1114.834551][ T1323] veth0_macvtap: left promiscuous mode [ 1114.840541][ T1323] veth1_vlan: left promiscuous mode [ 1114.859882][ T1323] veth0_vlan: left promiscuous mode [ 1115.127173][T12601] netlink: 'syz.1.10419': attribute type 1 has an invalid length. [ 1115.137426][T12601] netlink: 'syz.1.10419': attribute type 4 has an invalid length. [ 1115.147379][T12601] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.10419'. [ 1115.165795][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10419'. [ 1115.594085][ T1323] team0 (unregistering): Port device team_slave_1 removed [ 1115.624332][ T1323] team0 (unregistering): Port device team_slave_0 removed [ 1115.719270][ T1302] net_ratelimit: 5314 callbacks suppressed [ 1115.719291][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.736042][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.744996][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1115.987770][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10422'. [ 1116.017989][T12613] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10422'. [ 1116.021692][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.043058][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10422'. [ 1116.408968][T11939] veth0_vlan: entered promiscuous mode [ 1116.465745][T11939] veth1_vlan: entered promiscuous mode [ 1116.669223][T11939] veth0_macvtap: entered promiscuous mode [ 1116.711127][T11939] veth1_macvtap: entered promiscuous mode [ 1116.798817][T11939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.827771][T11939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.876120][T27645] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.942389][T27645] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.951239][T27645] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.998561][T12662] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1117.033917][T27645] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.068379][T12660] veth0: entered promiscuous mode [ 1117.078326][T12663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.087587][T12660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.164093][T12668] veth0: left promiscuous mode [ 1117.267432][T11972] veth0_vlan: entered promiscuous mode [ 1117.294706][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.317193][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.368034][T11972] veth1_vlan: entered promiscuous mode [ 1117.456002][ T7812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.465252][ T7812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.511656][T11972] veth0_macvtap: entered promiscuous mode [ 1117.534426][T11972] veth1_macvtap: entered promiscuous mode [ 1117.641593][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.685678][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.754108][ T7810] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.785963][ T7810] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.837110][ C1] ------------[ cut here ]------------ [ 1117.842660][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1117.852548][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: modprobe/12701 [ 1117.863250][ C1] Modules linked in: [ 1117.867178][ C1] CPU: 1 UID: 0 PID: 12701 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 1117.876434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.886573][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1117.892869][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1117.912552][ C1] RSP: 0000:ffffc90000a08618 EFLAGS: 00010246 [ 1117.918649][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1117.926867][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022ed90 [ 1117.934904][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1117.942947][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88806a3f0a28 [ 1117.950936][ C1] R13: 0000000000000000 R14: ffffffff9022ed90 R15: ffff88809658b138 [ 1117.958967][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 1117.967962][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.974619][ C1] CR2: 00007facb45106c8 CR3: 0000000025fc6000 CR4: 00000000003526f0 [ 1117.982641][ C1] Call Trace: [ 1117.984446][T12708] IPv6: NLM_F_CREATE should be specified when creating new route [ 1117.985935][ C1] [ 1117.985968][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1118.001969][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1118.007378][ C1] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 1118.013399][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1118.019764][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 1118.025929][ C1] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 1118.031697][ C1] ieee80211_beacon_get_ap+0x196a/0x2040 [ 1118.037439][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1118.043592][ C1] ? kasan_save_track+0x4f/0x80 [ 1118.048522][ C1] ? lock_acquire+0xf0/0x2e0 [ 1118.053210][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1118.058782][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 1118.064417][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1118.070016][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1118.073720][ T7810] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.075552][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1118.090277][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 1118.096075][ C1] ? lock_acquire+0xf0/0x2e0 [ 1118.100675][ C1] __iterate_interfaces+0x2ab/0x590 [ 1118.105994][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1118.112081][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1118.119324][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1118.125441][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1118.132530][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1118.137855][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1118.143716][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 1118.148954][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1118.154729][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1118.160829][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 1118.165990][ C1] handle_softirqs+0x22a/0x870 [ 1118.170772][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1118.175580][ C1] __irq_exit_rcu+0x5f/0x150 [ 1118.180190][ C1] irq_exit_rcu+0x9/0x30 [ 1118.184506][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1118.190154][ C1] [ 1118.193116][ C1] [ 1118.196056][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1118.202030][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 1118.207354][ C1] Code: e9 30 ff ff ff e8 75 f6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 dc 0f 0a cc 48 8d 3d 2e 6b 73 [ 1118.227094][ C1] RSP: 0000:ffffc90005257620 EFLAGS: 00000292 [ 1118.233201][ C1] RAX: 30bf3c8e24aa4d00 RBX: 0000000000000246 RCX: 0000000000000046 [ 1118.241192][ C1] RDX: 0000000084637640 RSI: ffffffff8e16803f RDI: ffffffff8c27c200 [ 1118.249239][ C1] RBP: 0000000000000000 R08: ffffffff81af371d R09: ffffffff8e75e520 [ 1118.257248][ C1] R10: ffffc90005257738 R11: ffffffff81b0c260 R12: 0000000000000002 [ 1118.265256][ C1] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 1118.273288][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1118.279466][ C1] ? is_module_text_address+0x1d/0x1e0 [ 1118.285033][ C1] ? is_module_text_address+0x1d/0x1e0 [ 1118.290510][ C1] is_module_text_address+0x39/0x1e0 [ 1118.295836][ C1] ? is_module_text_address+0x1d/0x1e0 [ 1118.301307][ C1] kernel_text_address+0x94/0xe0 [ 1118.306288][ C1] __kernel_text_address+0xd/0x30 [ 1118.311327][ C1] unwind_get_return_address+0x4d/0x90 [ 1118.316856][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1118.323056][ C1] arch_stack_walk+0xfb/0x150 [ 1118.327774][ C1] ? __anon_vma_prepare+0x117/0x4a0 [ 1118.333031][ C1] stack_trace_save+0xa9/0x100 [ 1118.337809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1118.343228][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1118.348753][ C1] ? __anon_vma_prepare+0xcb/0x4a0 [ 1118.353902][ C1] kasan_save_track+0x3e/0x80 [ 1118.358597][ C1] ? kasan_save_track+0x3e/0x80 [ 1118.363503][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1118.368544][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1118.374210][ C1] ? __anon_vma_prepare+0x117/0x4a0 [ 1118.379425][ C1] ? do_pte_missing+0x2ec4/0x3490 [ 1118.384496][ C1] ? handle_mm_fault+0x1bec/0x3310 [ 1118.389626][ C1] ? do_user_addr_fault+0xa73/0x1340 [ 1118.394951][ C1] ? exc_page_fault+0x6a/0xc0 [ 1118.399653][ C1] ? asm_exc_page_fault+0x26/0x30 [ 1118.404798][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1118.409667][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1118.415163][ C1] ? __anon_vma_prepare+0x117/0x4a0 [ 1118.420377][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1118.426051][ C1] __anon_vma_prepare+0x117/0x4a0 [ 1118.431100][ C1] do_pte_missing+0x2ec4/0x3490 [ 1118.436020][ C1] ? handle_mm_fault+0xee/0x3310 [ 1118.440978][ C1] handle_mm_fault+0x1bec/0x3310 [ 1118.445971][ C1] ? handle_mm_fault+0xee/0x3310 [ 1118.450931][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1118.456257][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 1118.461483][ C1] ? __fget_files+0x2a/0x420 [ 1118.466126][ C1] do_user_addr_fault+0xa73/0x1340 [ 1118.471257][ C1] ? rcu_is_watching+0x15/0xb0 [ 1118.476073][ C1] ? trace_page_fault_user+0x84/0x210 [ 1118.481492][ C1] exc_page_fault+0x6a/0xc0 [ 1118.486077][ C1] asm_exc_page_fault+0x26/0x30 [ 1118.490962][ C1] RIP: 0033:0x7facb460cff2 [ 1118.495513][ C1] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 1118.515173][ C1] RSP: 002b:00007ffdbcf44d18 EFLAGS: 00010206 [ 1118.521268][ C1] RAX: 00007facb45106c8 RBX: 0000000000000004 RCX: 00007facb451de98 [ 1118.529329][ C1] RDX: 0000000000000938 RSI: 0000000000000000 RDI: 00007facb45106c8 [ 1118.537354][ C1] RBP: 00007ffdbcf454a0 R08: 00007facb45106c8 R09: 0000000000000003 [ 1118.545405][ C1] R10: 0000000000000812 R11: 00007ffdbcf45030 R12: 00007ffdbcf44dc8 [ 1118.553415][ C1] R13: 00007facb45e05f0 R14: 00007ffdbcf45540 R15: 00007facb4511000 [ 1118.561400][ C1] [ 1118.564471][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1118.571762][ C1] CPU: 1 UID: 0 PID: 12701 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 1118.580943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1118.590990][ C1] Call Trace: [ 1118.594270][ C1] [ 1118.597101][ C1] vpanic+0x56c/0xa60 [ 1118.601081][ C1] ? __pfx__printk+0x10/0x10 [ 1118.605670][ C1] ? __pfx_vpanic+0x10/0x10 [ 1118.610172][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1118.615448][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1118.620657][ C1] panic+0xc5/0xd0 [ 1118.624383][ C1] ? __pfx_panic+0x10/0x10 [ 1118.628827][ C1] __warn+0x315/0x4f0 [ 1118.632802][ C1] ? __rate_control_send_low+0x524/0x800 [ 1118.638431][ C1] ? __rate_control_send_low+0x524/0x800 [ 1118.644052][ C1] __report_bug+0x29a/0x540 [ 1118.648689][ C1] ? kernel_text_address+0xa5/0xe0 [ 1118.653797][ C1] ? __rate_control_send_low+0x524/0x800 [ 1118.659444][ C1] ? __pfx___report_bug+0x10/0x10 [ 1118.664463][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1118.670267][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1118.675500][ C1] report_bug_entry+0x19a/0x290 [ 1118.680356][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 1118.685977][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 1118.691599][ C1] handle_bug+0xce/0x200 [ 1118.695853][ C1] exc_invalid_op+0x1a/0x50 [ 1118.700379][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1118.705226][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1118.711462][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1118.731068][ C1] RSP: 0000:ffffc90000a08618 EFLAGS: 00010246 [ 1118.737152][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1118.745113][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022ed90 [ 1118.753083][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.761053][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88806a3f0a28 [ 1118.769036][ C1] R13: 0000000000000000 R14: ffffffff9022ed90 R15: ffff88809658b138 [ 1118.777027][ C1] ? __rate_control_send_low+0x58d/0x800 [ 1118.782691][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1118.787976][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1118.793257][ C1] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 1118.799060][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1118.805386][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 1118.811450][ C1] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 1118.817170][ C1] ieee80211_beacon_get_ap+0x196a/0x2040 [ 1118.822814][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1118.828831][ C1] ? kasan_save_track+0x4f/0x80 [ 1118.833686][ C1] ? lock_acquire+0xf0/0x2e0 [ 1118.838283][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1118.843840][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 1118.849380][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1118.854919][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1118.860404][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1118.866468][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 1118.872019][ C1] ? lock_acquire+0xf0/0x2e0 [ 1118.876610][ C1] __iterate_interfaces+0x2ab/0x590 [ 1118.881806][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1118.887862][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1118.895053][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1118.901119][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1118.908150][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1118.913350][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1118.919155][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 1118.924368][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1118.930113][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1118.936179][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 1118.941286][ C1] handle_softirqs+0x22a/0x870 [ 1118.946043][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1118.950800][ C1] __irq_exit_rcu+0x5f/0x150 [ 1118.955385][ C1] irq_exit_rcu+0x9/0x30 [ 1118.959635][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1118.965256][ C1] [ 1118.968181][ C1] [ 1118.971098][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1118.977065][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 1118.982349][ C1] Code: e9 30 ff ff ff e8 75 f6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 dc 0f 0a cc 48 8d 3d 2e 6b 73 [ 1119.001944][ C1] RSP: 0000:ffffc90005257620 EFLAGS: 00000292 [ 1119.008002][ C1] RAX: 30bf3c8e24aa4d00 RBX: 0000000000000246 RCX: 0000000000000046 [ 1119.015959][ C1] RDX: 0000000084637640 RSI: ffffffff8e16803f RDI: ffffffff8c27c200 [ 1119.023937][ C1] RBP: 0000000000000000 R08: ffffffff81af371d R09: ffffffff8e75e520 [ 1119.031929][ C1] R10: ffffc90005257738 R11: ffffffff81b0c260 R12: 0000000000000002 [ 1119.039928][ C1] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 1119.047902][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1119.054053][ C1] ? is_module_text_address+0x1d/0x1e0 [ 1119.059543][ C1] ? is_module_text_address+0x1d/0x1e0 [ 1119.064994][ C1] is_module_text_address+0x39/0x1e0 [ 1119.070269][ C1] ? is_module_text_address+0x1d/0x1e0 [ 1119.075734][ C1] kernel_text_address+0x94/0xe0 [ 1119.080690][ C1] __kernel_text_address+0xd/0x30 [ 1119.085708][ C1] unwind_get_return_address+0x4d/0x90 [ 1119.091163][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1119.097312][ C1] arch_stack_walk+0xfb/0x150 [ 1119.102007][ C1] ? __anon_vma_prepare+0x117/0x4a0 [ 1119.107194][ C1] stack_trace_save+0xa9/0x100 [ 1119.111954][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1119.117311][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1119.122768][ C1] ? __anon_vma_prepare+0xcb/0x4a0 [ 1119.127891][ C1] kasan_save_track+0x3e/0x80 [ 1119.132570][ C1] ? kasan_save_track+0x3e/0x80 [ 1119.137415][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1119.142430][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1119.148076][ C1] ? __anon_vma_prepare+0x117/0x4a0 [ 1119.153292][ C1] ? do_pte_missing+0x2ec4/0x3490 [ 1119.158312][ C1] ? handle_mm_fault+0x1bec/0x3310 [ 1119.163420][ C1] ? do_user_addr_fault+0xa73/0x1340 [ 1119.168701][ C1] ? exc_page_fault+0x6a/0xc0 [ 1119.173392][ C1] ? asm_exc_page_fault+0x26/0x30 [ 1119.178449][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1119.183307][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1119.188753][ C1] ? __anon_vma_prepare+0x117/0x4a0 [ 1119.193944][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1119.199577][ C1] __anon_vma_prepare+0x117/0x4a0 [ 1119.204601][ C1] do_pte_missing+0x2ec4/0x3490 [ 1119.209471][ C1] ? handle_mm_fault+0xee/0x3310 [ 1119.214408][ C1] handle_mm_fault+0x1bec/0x3310 [ 1119.219345][ C1] ? handle_mm_fault+0xee/0x3310 [ 1119.224300][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1119.229606][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 1119.234813][ C1] ? __fget_files+0x2a/0x420 [ 1119.239425][ C1] do_user_addr_fault+0xa73/0x1340 [ 1119.244540][ C1] ? rcu_is_watching+0x15/0xb0 [ 1119.249318][ C1] ? trace_page_fault_user+0x84/0x210 [ 1119.254684][ C1] exc_page_fault+0x6a/0xc0 [ 1119.259190][ C1] asm_exc_page_fault+0x26/0x30 [ 1119.264037][ C1] RIP: 0033:0x7facb460cff2 [ 1119.268443][ C1] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 1119.288040][ C1] RSP: 002b:00007ffdbcf44d18 EFLAGS: 00010206 [ 1119.294099][ C1] RAX: 00007facb45106c8 RBX: 0000000000000004 RCX: 00007facb451de98 [ 1119.302068][ C1] RDX: 0000000000000938 RSI: 0000000000000000 RDI: 00007facb45106c8 [ 1119.310025][ C1] RBP: 00007ffdbcf454a0 R08: 00007facb45106c8 R09: 0000000000000003 [ 1119.318003][ C1] R10: 0000000000000812 R11: 00007ffdbcf45030 R12: 00007ffdbcf44dc8 [ 1119.325969][ C1] R13: 00007facb45e05f0 R14: 00007ffdbcf45540 R15: 00007facb4511000 [ 1119.333942][ C1] [ 1119.337263][ C1] Kernel Offset: disabled [ 1119.341619][ C1] Rebooting in 86400 seconds..