last executing test programs: 4m16.722961955s ago: executing program 3 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000000806000108000604"], 0x0) 4m16.392384151s ago: executing program 0 (id=1002): sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x80, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8d0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0xb, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r2, 0x0, 0x3ff}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf250f0000001c00028008000900090000000800050004000000080009000700000008000600060000000c00018008000800ffff00"/70], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0xc0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000100)=0xb, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="800002000a0002000180c202006e0000ede8d1f98e079c35616c9bbe84c120f374902bce3fb5e6d710e270804cadef3baac37ce5be212278616ed2bd434c52e96039cfb567dd08f6c47f597cdc30ad83156e7417bddaf075be3e2acc76832cbf7bf57e142a7ff4aaea9cd1fc183c"], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000640)={'tunl0\x00', r7, 0x40, 0x40, 0x7, 0x5, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x67, 0x0, 0xc0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, {[@end, @noop, @noop, @cipso={0x86, 0x5b, 0x1, [{0x2, 0x12, "8ca1e6e0a2d122025bbd6613de764b6a"}, {0x7, 0x10, "df7e461bb7b69135ebce560e4fbe"}, {0x6, 0x2}, {0x0, 0x5, 'Hpd'}, {0x1, 0xd, "80403d38816619297c2cbc"}, {0x0, 0x9, "c475f050932f5c"}, {0x0, 0x2}, {0x1, 0xe, "73971b466eb38b416b5ba11a"}, {0x0, 0x4, "3d92"}, {0x2, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1a, 0xc0, &(0x7f0000000440)={0x11, 0x0, r8}, 0x14) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="00809072460000000000000000000000000000000000000005bf3419b4bc05edcd70c713084520afd898930ef10a932f33918bfe05"]) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r12, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000040)=0x81, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000280)) sendto$inet(r11, &(0x7f0000000500)="ab", 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="b40000000000ecfcff0a00002000000018210000", @ANYRES32=r9, @ANYBLOB="00000000a100000018120000", @ANYRES32=r10, @ANYRESOCT=r6, @ANYRES32=r9, @ANYBLOB="0000004000000000b703000000000000850000000c000000b70020000037dda9fcd38c834fd56cb700000018190000", @ANYRES32=r10, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x19, &(0x7f00000008c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 4m16.383873931s ago: executing program 1 (id=1003): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x3, [@ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x2, 0x3}, {0xf, 0x5}]}, @enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x1ff}, {0x7, 0xff}, {0xc, 0x9}]}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0xfff, [{0x3, 0x4}, {0xf, 0x0, 0xc2}, {0x1, 0x4, 0x2}, {0x6, 0x3, 0xb}, {0x9, 0x1, 0x339}]}]}, {0x0, [0x5f]}}, &(0x7f0000000000)=""/20, 0xe7, 0x14, 0x0, 0x5aa, 0x10000, @value}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x4, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4m16.236419951s ago: executing program 3 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x4020940d, 0x0) socket(0x18, 0x800, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x2000c005) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000001054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xdc}}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 4m16.164294012s ago: executing program 1 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4048b}}, 0x20}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 4m16.139390869s ago: executing program 0 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x8, 0x4, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48010}, 0x40800) 4m16.068718471s ago: executing program 3 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m16.016331127s ago: executing program 1 (id=1010): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) (async) shutdown(r0, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x2d, &(0x7f0000001280)=ANY=[], 0x90) (async) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000940)=""/4070, 0xfe6}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000000)=""/251, 0xfb}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000300)) (async) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x5}], 0x4, 0x10000, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000b0000000018001600140001000100000000000000000010000000200008000400", @ANYRES32=r7, @ANYBLOB="0600150007"], 0x44}}, 0x0) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a'], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x41fd5fcf9cc769be, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x2, 0xfff, 0x8000000000000001, 0x4, 0x8, 0xb7be, 0x3, 0x4, 0x5, 0x1, 0x102, 0x3, 0x7, 0x5, 0x3]}, &(0x7f00000001c0)=0x100) 4m15.951046697s ago: executing program 0 (id=1011): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000003c0)="1a", 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, &(0x7f0000000340)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1008100}}, 0x20}}, 0x8084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000040000002000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r10, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000000f40)=""/85, 0x55}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x80000000}, {0x0}, 0x0}}], 0x90, 0x8004}, 0x1) (async, rerun: 32) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000380)={r9, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r9, 0x1cd3}, 0x8) (async) sendmsg$rds(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/245, 0xf5}], 0x2, &(0x7f0000000d80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001d40)=""/4096, 0x1000}, &(0x7f0000000180), 0x42}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x198}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/252, 0xfc}, &(0x7f0000000700), 0x24}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffb, 0x3}, {&(0x7f0000000740)=""/129, 0x81}, &(0x7f00000008c0)=[{&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000000800)=""/146, 0x92}], 0x2, 0x10, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x8}, &(0x7f0000000900)=0x1, &(0x7f0000000940)=0xe, 0x400, 0x1, 0xb0fb, 0x100000001, 0x26, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0xd, 0x6}, {&(0x7f0000000980)=""/97, 0x61}, &(0x7f0000000d00)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000b00)=""/22, 0x16}, {&(0x7f0000000b40)=""/158, 0x9e}, {&(0x7f0000000c00)=""/13, 0xd}], 0x5, 0x41, 0x2}}], 0x160, 0x20000000}, 0x40000) 4m15.88158358s ago: executing program 3 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1}}], 0x2, 0x10001, 0x0) socket$alg(0x26, 0x5, 0x0) 4m15.873616726s ago: executing program 1 (id=1014): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xfe85}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0xa6}, {&(0x7f0000000240)=""/159, 0x9f}], 0xb}, 0x40002002) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m15.703457847s ago: executing program 0 (id=1017): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r0, &(0x7f0000000240)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6880610cc9cbc2023e11d5c366176385a534033afdf45f59da651586f71d0e", 0x40, 0x4000814, &(0x7f0000000100)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x4, 0x401}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 4m15.646159147s ago: executing program 3 (id=1018): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m15.638182479s ago: executing program 1 (id=1019): socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2901}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x60}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x21, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a159160a275d9fa08000400ff0f00000800040007000000140001"], 0x12c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a159160a275d9fa08000400ff0f00000800040007000000140001"], 0x12c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0xf}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0xf}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x32, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(r0) 4m15.400420463s ago: executing program 0 (id=1020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x8}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x1ff}) 4m15.380310715s ago: executing program 1 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0300001a0001000000000000000000818000000000000500000000"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x15, &(0x7f0000000d80)=ANY=[@ANYBLOB="1f8f72da729c", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000010000001998fcff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018560000040000000000000000000000645604000100000018300000030000000000000000000000181a0000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x5}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000100000005fdffffffffffffff0000010000000000000000"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6860}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x1, 0x6, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000007c0)=[{0x3, 0x4, 0xc, 0xa}, {0x5, 0x4, 0x9, 0x8}, {0x3, 0x2, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x1}, {0x1, 0x4, 0xd, 0x8}], 0x10, 0x5, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd6000000500140600fc000000000000000000000000000000ff10000000000000000000ad5da86002c6b84c00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000001c0)={r13, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000000)=0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000cc0)={0xffffffffffffffff, r11, 0x6, 0xe3, &(0x7f0000000a40)="f26af9c77f2c0ef0613dd9103124e82f6b7848b3a009ab1d5511148cf222456e21beaa9168c5b7add8168649a3368d13c775749b0d9edd474dbde706fc14ad5de87dd52306362c56b9b82391166313520fd34ce23ae4957c91fa0a1a89af8192f6eca82ff6afcfa54afef86d0f65999a96a88ad8efa54d91250d055bc2cd5cf40621fecd0bd7b1304a565e53912c75469f008c58a6707aa11b32f2f0785186dc58b05a3e1d7d94bff34034f18d8af7bbdf9eecfe2d753f14e4208efad5d90ba7e4077f10eb9935e57f14ed4848e5f475c7bebd2ea26d1be7075719cf60adac9945cd73", 0x7f, 0x1d, 0xa, 0x0, 0x2, 0x3, 0x6, 'syz0\x00'}) r15 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r15, 0x84, 0x6, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb010018000000000000009e0000009e0000000a000000000000000000000200000000000000000000000a00000000050000000000000800000000000000000300008500000000080000000100000000000000080000000600000f020000000300000000000000400000000100000006000000280a000002000000ffff0000010000000400000009000000000000000400000002000000fbffffff0200000002000000080000003c940e000000000000070000000000000000000000615f005f00792214fda1d0452910c5fe3c98a8d674d05bb6a84a13f9f01276e779e39dc11be1da22dadbccf3bc21a6a61249a8d672ecf94922addb246b696e55325f5530db36fb688a3c6610790900000000000000b9f502b21e3abe2f858e800779c30bbb27ec855485089da05e432dd51d67cdd72d529fbd88ca5ade2ea822739bb2bca658c9ee4404b06b9be61e05a72206df48ea8d7f5a07442599578b44bd040d35942b251a4bad9cf6b1dfa3f84164bc3e569d5f8ba49ebc5e1d290b88a39334fe0ae9de6f750d3fb2ccc780312e12ecb51a633620b79c4b67cbde0ffb00d0e11de573c4777620132249418a7dfe3b78c096a6a45d583f4f8d19ec3f057db3f1972db30c4777a0cf33288a93f38b983184a82addf00f19c50cfdf1ed498603d9eb5c14f03b9e622f9809e0d8e1a9190a237b354fde03c9a5b26db4c43e38be7941a2149a39c657c7f572a4c515920c82f8c84b5700394f04f4fa202e9f57c91b360be06868584c4cf98bb047d6fa7f0877a80a111af6cf25cda9aecc4222364773fbe135"], &(0x7f0000001400)=""/149, 0xc2, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0004000000dbdf250f00000018000300", @ANYRES32=r14, @ANYBLOB="0800390003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004886}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/174, 0x48, 0xae, 0x0, 0x907d, 0x0, @void, @value}, 0x28) 4m14.937917254s ago: executing program 32 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0300001a0001000000000000000000818000000000000500000000"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x15, &(0x7f0000000d80)=ANY=[@ANYBLOB="1f8f72da729c", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000010000001998fcff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018560000040000000000000000000000645604000100000018300000030000000000000000000000181a0000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x5}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000100000005fdffffffffffffff0000010000000000000000"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6860}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x1, 0x6, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000007c0)=[{0x3, 0x4, 0xc, 0xa}, {0x5, 0x4, 0x9, 0x8}, {0x3, 0x2, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x1}, {0x1, 0x4, 0xd, 0x8}], 0x10, 0x5, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd6000000500140600fc000000000000000000000000000000ff10000000000000000000ad5da86002c6b84c00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000001c0)={r13, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000000)=0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000cc0)={0xffffffffffffffff, r11, 0x6, 0xe3, &(0x7f0000000a40)="f26af9c77f2c0ef0613dd9103124e82f6b7848b3a009ab1d5511148cf222456e21beaa9168c5b7add8168649a3368d13c775749b0d9edd474dbde706fc14ad5de87dd52306362c56b9b82391166313520fd34ce23ae4957c91fa0a1a89af8192f6eca82ff6afcfa54afef86d0f65999a96a88ad8efa54d91250d055bc2cd5cf40621fecd0bd7b1304a565e53912c75469f008c58a6707aa11b32f2f0785186dc58b05a3e1d7d94bff34034f18d8af7bbdf9eecfe2d753f14e4208efad5d90ba7e4077f10eb9935e57f14ed4848e5f475c7bebd2ea26d1be7075719cf60adac9945cd73", 0x7f, 0x1d, 0xa, 0x0, 0x2, 0x3, 0x6, 'syz0\x00'}) r15 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r15, 0x84, 0x6, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)=""/149, 0xc2, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0004000000dbdf250f00000018000300", @ANYRES32=r14, @ANYBLOB="0800390003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004886}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/174, 0x48, 0xae, 0x0, 0x907d, 0x0, @void, @value}, 0x28) 4m14.923363134s ago: executing program 0 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, &(0x7f0000000040)=""/249, 0xf9, 0x40, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x138, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe19, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x9, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x4}}]}]}}}, @IFLA_VFINFO_LIST={0xbc, 0x16, 0x0, 0x1, [{0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8bc0, @random="35855817751a"}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000000, 0x428}}, @IFLA_VF_MAC={0x28, 0x1, {0x3ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0xffffffffffffffff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6848, 0xfffffffb}}]}]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x138}, 0x1, 0xba01, 0x0, 0x1}, 0x810) 4m14.562593287s ago: executing program 33 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, &(0x7f0000000040)=""/249, 0xf9, 0x40, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x138, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe19, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x9, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x4}}]}]}}}, @IFLA_VFINFO_LIST={0xbc, 0x16, 0x0, 0x1, [{0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8bc0, @random="35855817751a"}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000000, 0x428}}, @IFLA_VF_MAC={0x28, 0x1, {0x3ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0xffffffffffffffff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6848, 0xfffffffb}}]}]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x138}, 0x1, 0xba01, 0x0, 0x1}, 0x810) 4m14.538029986s ago: executing program 3 (id=1026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)="2095e81a452445efbd53475bb50513733ed8c45d6b59c4ac45912b562122a63fdd02fabbf0eea98f37ec11b95a91b647a2ef3c7c7b674c1d670f5bfcc32c76209aeac83b4354f80bef290d4f2e7968af32c6005b2ab83393d3ff312c4bbf2e427b27069c343bf479e87ebe70ad19872c4d1d", 0x72}, {&(0x7f00000000c0)="6f363c47dc6f266a6e419c37ed935a7c7077f869aeb3f8f773b25cbb81fc23960bc88bb656b51a0cabf511b5986deb0b32a79aef0215f187", 0x38}, {&(0x7f0000000240)="3a3347fd557f15cee4a95ce970b64990888f544e21139dc23d8c88012313cd8d5ac841039a3e29b31a713a42ad47619a067737a3d451c98a3cb1fe16cbab82f9d2d585602aff533779e6ece885fb1863e1046403cda0f114b57ce099a96a3804506a5ec77ec2b021f78a9db1c9a2a917ea0f0e2e449a77a3ea551b5b270f3fda08ab1b54c1dd9f034af587a7f1ec95bb82a78a4485cd3ee9a8b021eeec31e57ed8911a596e526f61fa7c27b44947985e335a68a3a6c35d156c2ed38127e4ed9a8389d4e00eeacb5dfb64f5b13963e987aedad094d1e9cdf60d0f9d9469fb9e230c230ff7ab436b5a0d01a61facbff571acf41ad899cd677cad46422e5a0c1079a8937c35601b033a456a7028655ee0dc57527db4d57415fe60af6c68fe0981288e2110839c90776fa4a060112a084485b0aa9da81add311b2873ccc4cf7067bb14da2901b091be0571ff3e5b25d924bb294faa27645d721effcdac054613f16c1069a7de3bb6c6f1578b0edd630a4f5c03a873f45a30a35b837be8224b39f04eae7e6b0a66c8116fadc06614e9ab6124e24676e37bff0dfe8be2af21fc38995dd59a25b6c1aba6b9b0ee4c8e9c20a40614c1ac607eb3422db541d7dcb95cbbd637f7b8d3fc6b6fa2a69784f4a3ce23ca9c7d44c5ceb87a034a0c1e5042efaa8b77ea574bfc1d073506690b60c1e01c380ed55f524ca34f5a841a50d599156f2838ac504590cd603b7cde728ded894e8ca1ae30b1705595ebb804da1d42ec8a2dfa83c3b6240bb05ddacfd5d6d63fa6b815217b8cf41388e11e58985884dc640007adcd34b3e269e772de8dd970c4821d5481c63433582bae0887f1c576814c5eee714c00a6792b56c85cb71dbc8fa379fc64b7c8f2d878037ee08d32f03197aa2545ab0d3283e4beccbdbd9669acd3f6c5e521405c30534d21acd731c06ba434f968a7a0e2cf3686e478ca341c159b7a623a9ef257b3bf5b369187f6f9d425f47073882a222ed439b753f2a07f6274a5e54625fc6d740e5af8c2f3ac04e2a82c76b8d106a36ebbc4f8d2b40f3cd8ab2c32012fdc183b07b0e52857f892a65ef4ca292fcda5bb054ad6accf9a1d3173a282a050f708eee2cd694f5f9972da24d115758f3f9b3cb3904faeb613802b743808ca18949ff102bd6c77643ed27563b2dc241927d05f6e95e2c4774518794e10f4218666021b5f162eb40ce8e5813e2ab0d0b727503692711878b05624565ea3b16b252274bc788b0534c4b5273db7329b0ce853586a481ca4dff2b73a35b64855c3edc6ea639f0d3199828c07d068e8d1eee6d2d21a35c44d5f07fc0be526ce83a48f0bfd55ee3654917d10470e81abe40918daa91ea417e7446eeb004931289ce367e35ac58957b4a0753ed970b1222351508cc47fe3bc1a5ed7dd5765078b72ec9c4d06b06c47a6a7f3b147d53580c758b7f087bff5b79e32b7f31836ad73b57689ad81e7e8ba8bad8988f7d807aa993a744d6277918965ee44026796a5c14f5a3b5df7153ffd9d6dfff9032bb7eb235f1615b2a727092778d8251feeae72883b7766ca20b9f2b0339a105a88a286bd456616346357dcf5a042f971340ddfd9e082277ce5224b76f395f243af8459277522492e2419525bdb0a9bf5cdf5cd541699dc67e04b66753c3776949f35bdf522f7a1a8544b12ebbf72f25189eebc6a98231a2afec93d4c3f257e7e5744153fd0a5368429acb6930caf399feb887e109bd10bb3222222f874775f1c98f4576e48f099673e8456157236deeaac6677084592adbd18cd0569f1909848fc9900f3198d7f1c3d3751bf70dc0fc6e35097ba664b0fa4471a2b482628b0c83e2a1de63ea0abdb5521a00d7e4d08eb6b7eedf0bf36e2c170d2894b589a48e510c31b792061deccb2da38cf527d3bd1ae57eaed523c2f50b9570d317f706acc7de3789bb7081c22d06a909f7fcdb742cd2a24270d3c6e051630c02b543ab4d495052354681f1d632f7671fa2c06161eb8e88c243f0ac23b31e286cac01add105980d2f16d3d6a3cd5762d2bec8150f0e2b02ade7b89fabd086b79c6f7a7587390b49e8d21bf7451bd6fe1b6fc9649d5dcfbf68165f21af3fdb5b2ea58c1d677571e238af8ef2975fb3fc601ea2cb194d2e0491a5b0edbfd064bb6ef97ff3eaf53943866ef1764c7f2dd1b6471ee9b7e6fca1da583248ad40b738be33d81241e488f34a0d340f42d485f0270b71129fafa67c7014d21fb7165add54082bc27789d8da13e414cfb61a52dede82335f1aeec9b3508166e678e39fa80e0c203c411062f1f43a543c3ee4570f63fe97389a17af198ee25658a030a8af63d2808c4904978c45f9b5b9fe6969f95af6f57a24b7a56547d8fc61633a32d13dff9250a41d5a40bec3a54bc69623a0afea3e639cbbecb080d68d3088bf6c82761c5fddcd892696d6f4592bd5d14e4601909f1198c806f8d7e0f483b597309e5d54beed9f85935226ba3af213e0d4f108df5f3b6a46d24723924d4560ac161b4033961c051c990d56b12fdb72f48183775628a50c89d0ffed0890942629130295a89ef6cf3c2850aed4bb9a9b481c107979277210fa6c69fd071dff316506b5777e7162dc1ee51d510f1e7893af5bbc3477661a7d3df1495e6d0ee09132faa96df79bb7eed48ed8f4f95958ba4c58abaf1bcd2caa7629ee9868eb4e70b0971b91c689a3bc7cc97d7d78fd140df25ab98758b31f4300e376984957d1c10b820ebee49b83db20e95d075de6e92c90ddbfc655c34f7b999c0915e286aa575c16f6c896f0db2b6ae3767c01685f5d8f58667a62e7c3faa02b7907bacb397d48ed50fb554bdc6ae92a3c4f59e2dac6bcfe50312db610d92e1e659627565ea5221931ad1a7d3040f243f16df778f112c80ef8ca1858951a301f36f50f50dbabf9bc2df2f1dbafde17c3c9d208ffd5affd273e626f0d3c449efb9066fe065aca66933ac5f5969ee782dc95197bf9b54ef55166d42a499ab00a2376c311fcde59086acaa5b46b511fa68187a85fe35b6fcf04a0f07cd1439eeb865931274206a9618516df772e0f11336973ebcc782e2306b0ce1702e9294352e939925f98a42a58dfaeb1b32b2aa91bdaf76aad091dfc23da5090e243a67294d449ee6e446fccbc38ebbbf692146fee8b80336a2ec58ebe5b7af55fcf8af2ca847268c25a1890063ecc490aff30c8922c7162bd64b9a2e7323847f0df6094005e72154bbb4604f98e3c4fc38e6a2e236edd294b731ce4d8c2b92bdb7e09ec3db2d4d7fb3801a07f5a750519e6161e40c6f63b4e2b36acea4fbdbe82036477d500abaac68cb57ce09b8483215cacc1e7e1225a91e01a4b9f67ac1a2520f0d5b9da003766c16a516500a19a6a364ea759177a37f2ed6fd2ea9bd210de5977daf0a67e8048e4098472c1aa598f73a08fc73c253decc1ed4eb571fe9006f94f097d9d667b09cbb99329bc383c8875c53828704a48b0d82c438615142627dd98689a553964799d9a50e6cd38482caa228b016dc93337c6feac1567d7f779233c8a99cd13f91eb89f8625c9ed417ef37c07bc4801fb55d6680aeacfc6250c1a3231ac18c4baca9f35b524f5e12cd384aa817d6d65d00c24e7d6e2a944921312f9f3ba3c74bfbfe5da790bdf8b401cb6a974dfa42ed6404a958108d5d4e7ecede0b649b9dea0f687a87f8a4b3b130a6e7e5d92114ff58da153627b30cca2493225cad05d8759b0e0954c54d104b6975571f319bb37f7b057d432605dcab9e30f408ec6800c8998ce99698f088ec3ec8e278faeba7877802e9406aba1240956cbb83f8b67a32344379c53e1f047e42695d0d1e612b6d274bf0aaef4808052762325df6baf335c358f3124be40cac88178fd4efa11fd8947c4fd596597bdb52970391e016a9ee0853e6050312c375f2578346ff40db8e0614cdb9636f3d0f02a9836def0f5da51840a00c0ea8971794036b35e0ca37361c3d88b599f8586d36089f73f65b75bc4146be1941fce654b242782d87f4a7feede757488c476d4db1fa7a973f9520cf13058daabcfc52edfe71da682e2cb1c9c15b02a9fa1c2833be26af28ebc04369bb0d3b64ce0b7708030a3605929ad76c2ccddd57e0f1e0cd034a141afa5ee93233fb1f8538cd552e490092d8155bccb4ab4cf6b83a93cc710d750f60c904a654f04359b749230244566038da010adb235036e833bbb8e1a6d15276b9aabe65a1da3ef106faf962aea88c4da8ee6e5e7264995521bb0806199120953ede568a2467d5149702b1fe14d28ca00005a36987bb2628d25c22fbc4e486481b20d5a78b2ac1ae005526f306965ffd06f5f3b3e8b39b05d96d5feafa946e89f5da34607ed0f6e396226c7ddb37d9304f8ad2efa838b031806fbf7b5de6e60a21c9593339ea77dfbaa52b1c843de9baf55bc0b4d62d79863b56b85fa2afa195f529ba785d72b4b754f8592ef56b08cfc7ffc11d432b0a8ba98f6354983a32aa72a85ae6d36b8a746d14d9a5e2986de161143d4c4d36dd542f13961cd3fc280bf673b245dc1c25d3ef5cee44fc18f55ae982dd04ff2e057a816a56ee27d878bce6dfda7f76325a8aad80cc044a1b2971a8545e3ee0a75881170bd7a501df9d953911ee36f7fe4e30ee1144f444e174998f2a85de022650167f5215f293818e0f98b67fd59ecb34eb66f260a13e2e4293667c4c43cfd71b6b9e495d2b1b69c9bcf3c1e8297641a6ad50be790b731123427996fa0df5fb20cc7aef9e47cf723b6a116533c1f8fc1fb5349333346eb56a2d0a61a5e83a4eb8314329e33b1f2ec156aa04b965cc17ce8694e4eed0f3a51ad776bf61f1949bfa6a514d51c664fd0b7cc523747e5f89e924cca675b807dbb26031665059d4bac2d201b5822757dc130421f7350d5f53c487102c65831a45d6913923257c07381ecfce0c84210322c81d45aac546c00d696a488ce25ff1310e7d4f81b747ac430fb16b9e619a079530436c073d9171dcc6ddbae56105ee017175ab94dda3e144f5066a81ddb602baf1d56293d1dace45800860a2555a48f4b96811a292a226d4b367a71fd3077390a4fb3e24e2ee1e0dc8226698ab0cd4a8b671aa611f5b8e1097c86959c4939d94a66220cf211e74cb10b7ce2bedb21a5b133b6fb5cfbb7c1e24f112578ff819f4fd854ee0093012fbfcb8866a1cead17e2cc74b9eb8a219671ca7f3f4cfe865612f10b2aa20dfc18a7e918cbdca2cfe3e2e5b0697121db70fbb6a938b22d39feee5d3298b9a89434b9a7c782dd2066440970860e1ab0b3bd9d9ffdec98b0833bcdaccbaf49b82eebcf073c7283a7a8d0bf18f1d07c80972ca9813faace17b9923db8126aa678ab236b87dc64544433375769258aa548bc84e30f6f050013501170c68e95edab9bf0718e46358c6dacef714da573f97d108d4bf0173b6907c32c0b0a047eb2209d5805f61e874231e239c014d509c62c295768fdf2e3d3daceb713df0829998175adc4085daae4e0975122d368da6ad2345c5e18f0ae41d8134a86babf2ef8b6d87b10a8ae373f9cd265b8863029a23d8082e679b01e49637539b3b208934c72ee3c0156d666d0043fa89a4a8a7acb715dbe156f9812b05999f39a840c139590a19d6c5effdc7c09089091bf035cf73d4d7fb7ddea65b68f1352696410d19477822095f6ee3cc9a7fad4e93518b1ce52f1de92641c019ef9f789987b6b2928527935cee64b97065e8564b830de776033b457509b933486c9b1f467a98898db7b4de8cd6412356d41c7bd8a8468b0fdae2f2", 0x1000}, {&(0x7f0000000100)="f0e87ac9fc97155a841d8657de723e088d551582ae413d0021ff32ce4de532ca00490e2bb353e06e548e2ed49f5b544ac48f432cae5de7e885603c7a5c4fe3aa06b86450c366e78fc95f817c69c5cd41325f3e6575ee107c4e8492b1423a19b2a9b77a6d5dcb57c788e48842e6d050ce33adf16adf0a0de582a98f563f7a887fc62a009ed7a1ecc578c8cb2be1eb9925246fde20f5b27518f591f5d5293ec8d7478cbfd985868f69d03eff86d0d4b40348c2453a7062ede2e0c6bc61e03fb15363b3b4ffe1dd5e45fbabfba6ba9c7ab3ff8b45eddda7f58e4ec5af3c364ec682efdb4304d63c1f", 0xe7}, {&(0x7f0000001240)="ff4787e0f181e6054fd1dbb74fda7a3599f28db88cb40baf5e07d856a4633a2691c89ee2529e0f2b6307d5ee2733614c27f822768539b56fd1aea589c264aa8989e4050563f810448c41a12ae53818a81af623d052459bc6c44443bbc5d046601afb8274344703cd923348d8413fcf6130895029c640f8c3dc7125268e5867708e67", 0x82}], 0x5) sendto$inet6(r0, &(0x7f0000000080)="04", 0x1, 0xe9a7c4c7fc462bdb, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4m14.537183999s ago: executing program 34 (id=1026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)="2095e81a452445efbd53475bb50513733ed8c45d6b59c4ac45912b562122a63fdd02fabbf0eea98f37ec11b95a91b647a2ef3c7c7b674c1d670f5bfcc32c76209aeac83b4354f80bef290d4f2e7968af32c6005b2ab83393d3ff312c4bbf2e427b27069c343bf479e87ebe70ad19872c4d1d", 0x72}, {&(0x7f00000000c0)="6f363c47dc6f266a6e419c37ed935a7c7077f869aeb3f8f773b25cbb81fc23960bc88bb656b51a0cabf511b5986deb0b32a79aef0215f187", 0x38}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="f0e87ac9fc97155a841d8657de723e088d551582ae413d0021ff32ce4de532ca00490e2bb353e06e548e2ed49f5b544ac48f432cae5de7e885603c7a5c4fe3aa06b86450c366e78fc95f817c69c5cd41325f3e6575ee107c4e8492b1423a19b2a9b77a6d5dcb57c788e48842e6d050ce33adf16adf0a0de582a98f563f7a887fc62a009ed7a1ecc578c8cb2be1eb9925246fde20f5b27518f591f5d5293ec8d7478cbfd985868f69d03eff86d0d4b40348c2453a7062ede2e0c6bc61e03fb15363b3b4ffe1dd5e45fbabfba6ba9c7ab3ff8b45eddda7f58e4ec5af3c364ec682efdb4304d63c1f", 0xe7}, {&(0x7f0000001240)="ff4787e0f181e6054fd1dbb74fda7a3599f28db88cb40baf5e07d856a4633a2691c89ee2529e0f2b6307d5ee2733614c27f822768539b56fd1aea589c264aa8989e4050563f810448c41a12ae53818a81af623d052459bc6c44443bbc5d046601afb8274344703cd923348d8413fcf6130895029c640f8c3dc7125268e5867708e67", 0x82}], 0x5) sendto$inet6(r0, &(0x7f0000000080)="04", 0x1, 0xe9a7c4c7fc462bdb, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m11.695447525s ago: executing program 6 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 58.585963681s ago: executing program 6 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 43.465219474s ago: executing program 6 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 28.708794911s ago: executing program 6 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 17.279119103s ago: executing program 2 (id=3323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc6, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf19, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 7) 17.094285724s ago: executing program 2 (id=3325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x21, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x34, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x5}}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="ef"}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}]}, 0x30}}, 0x488c0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x288, 0x288, 0x288, 0x288, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) 16.768072358s ago: executing program 2 (id=3328): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000000100000000000013140000001000010000000000000000000084000a"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x24, '\x00', r0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.712298229s ago: executing program 6 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 14.978332617s ago: executing program 2 (id=3331): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0xd, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 13.863675001s ago: executing program 2 (id=3336): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000914010827bd7002fcdbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x24010851}, 0x40008) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000ddc8f9d188d9745b73fe8a508497eb9b1fecb1e968885813cd59877d3aecd388015417694c85874940817ad626fcc524e0c8521a7432c865f5fe985abb118748c03c588283c64af351d133d5dbf86572db3405720ba9c7d43b3a9"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.648572541s ago: executing program 2 (id=3340): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000300)={'a', ' *:* ', 'rm\x00'}, 0x9) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, &(0x7f0000000180)=0x2c) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000e9ff00000000005e68a9a099511283000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000480)="98083d9628ec6f963aa9bdab398addb86f9ec405b43ecad3dc269594d0192db616c3674e75f5ff58f4f5bce590c890fb66f0b534365ca024037468ef310b1ec9e73fcc9b13a1a98895748b31e6c9283657430d1b28912a297bcc3704d39ecb49a2962c0f4a8729164d1cff84aaa036c7427605c57ffaca", &(0x7f0000000380)=""/37, &(0x7f0000000080)="7f658b026fd5345e3657c24285f0cf7160e9d817ed24158671f19c5dcc4e2fb282116ca6d32543fc097e83e75096519145c34a445354ec371de6e82f37170d03f962acd39ecb7f1ef123dea1efef83015279aadcb31c82eca11aa87829c29ecc9fbc0a38d6722a4cb8e8097869441ee938dff2ca9c3654ec1012036591d296b649a191d1ce7d077cee827dda7229571252d2669a2ae2f50fbe9f43bf34aa520b35b0c443da52eed9d4961d31743f2916a5f3", &(0x7f0000000140)="cd9be3a2467a52b23ee89c832e24c3434ccfd30af6093934dc2ce6f7371556c7755ee5307647e7278b57c40eb54d1cd4f29acf416807971d242dbace420a61172b11c7ba65892aea5aa9c85e1b32d3711de2e3ddae8647dbece5a7848a55d1bb473828077229629875a4dd0327fc65b8ee0567f179f9109851", 0x1ff, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11.776770531s ago: executing program 4 (id=3366): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f00000001c0)="b4979f", 0x3, 0x41, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000"], 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\"\x00', 0xc, 0x11, 0x81, @remote, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x100, @void}}}}}}}}, 0x0) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000005c0)={0xab7, 0x8, 0x3, 0x8, 0x3, 0xffffffff, 0x7, 0x765}, 0x20) 10.860178277s ago: executing program 4 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) close(r0) (async) 10.684090419s ago: executing program 4 (id=3379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x7, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) close(r4) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r10, r12, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000180), &(0x7f0000000280)='%ps \x00'}, 0x20) 10.492519048s ago: executing program 4 (id=3382): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "a8"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x64, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x35}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r7, 0x40107447, 0x0) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 10.267074951s ago: executing program 4 (id=3385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x10000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000000040)=0x200, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)={0x74, 0x7, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x20000041) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = socket$kcm(0x10, 0xa, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r9, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a969586ea8b2e3b31b81b0d1832b8e29d6d37163d387dec6cd571c090b611605599658f3bb509c110f71cf47b31bbf0bccd53101e63257f991a6b093842e13db43df22b858779f124e9d2c7b1745", 0xce}, {&(0x7f0000000580)="76b165c213f88afa4c53688f124937850b1a56eb70", 0x15}, {&(0x7f00000006c0)='d', 0x1}], 0x3) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000c23829a5bdf09f8ad7000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000001fe8000000000000000000000000000aa3c0400000200000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r9}, 0x8) recvfrom(r3, &(0x7f00000002c0)=""/57, 0x39, 0x1, &(0x7f0000000780)=@qipcrtr={0x2a, 0xfffffffc, 0x7ffe}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'cpuset'}, {0x0, 'rlimit'}, {0x2d, 'cpu'}]}, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 7.721071087s ago: executing program 6 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 2.986803764s ago: executing program 4 (id=3385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x10000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000000040)=0x200, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)={0x74, 0x7, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x20000041) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = socket$kcm(0x10, 0xa, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r9, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a969586ea8b2e3b31b81b0d1832b8e29d6d37163d387dec6cd571c090b611605599658f3bb509c110f71cf47b31bbf0bccd53101e63257f991a6b093842e13db43df22b858779f124e9d2c7b1745", 0xce}, {&(0x7f0000000580)="76b165c213f88afa4c53688f124937850b1a56eb70", 0x15}, {&(0x7f00000006c0)='d', 0x1}], 0x3) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000c23829a5bdf09f8ad7000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000001fe8000000000000000000000000000aa3c0400000200000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r9}, 0x8) recvfrom(r3, &(0x7f00000002c0)=""/57, 0x39, 0x1, &(0x7f0000000780)=@qipcrtr={0x2a, 0xfffffffc, 0x7ffe}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'cpuset'}, {0x0, 'rlimit'}, {0x2d, 'cpu'}]}, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 1.308501171s ago: executing program 5 (id=3427): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@broadcast, @broadcast, 0x0}, &(0x7f00000004c0)=0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x32, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x368}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x889c}, @map_val={0x18, 0x1d5e032c0a9bbf81, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2dfa529583695f7d}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x33d8, 0x6c, &(0x7f0000000400)=""/108, 0x40f00, 0x20, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x4, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r11, r12], &(0x7f0000000680)=[{0x0, 0x4, 0x3}, {0x4, 0x4, 0x7, 0x4}, {0x5, 0x2, 0x5, 0x2}, {0x0, 0x3, 0x1, 0x5}], 0x10, 0xc53, @void, @value}, 0x94) 1.208069732s ago: executing program 5 (id=3429): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000540)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRES32=r1], 0x60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x1c15e33101f29d, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2, 0x2, 0x1, 0x9, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_ident={0x2, 0x0, 0x800, 0x0, 0x8}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_ident={0x2, 0xb, 0x484, 0x0, 0x8000000000000001}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bb3, 0x7fff, {0x6, 0x3c, 0x40, 0x0, 0x0, 0xf, 0x0, @in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@empty, 0x25, 0x10, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@rand_addr=0x64010100, 0x5, 0x10, 0x14}, @sadb_x_nat_t_type={0x1, 0x14, 0x60}]}, 0xf0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000280)={r6, 0x0, 0x20, 0x0, 0x9}, &(0x7f00000012c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000280)={r6, 0x0, 0x20, 0x0, 0x9}, &(0x7f00000012c0)=0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7254fd6f62fec638abf292e6c33925b29"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) (async) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) write$ppp(r10, &(0x7f00000004c0)="1e333a545e7b3d2fff5850c637faa1eb11cec26d76a17646c9f54383dccc6f3b2724", 0x22) (async) write$ppp(r10, &(0x7f00000004c0)="1e333a545e7b3d2fff5850c637faa1eb11cec26d76a17646c9f54383dccc6f3b2724", 0x22) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r11) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_batadv\x00', 0x4}, 0x18) 947.819647ms ago: executing program 7 (id=3432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206050000000000000000000200090005000400000000000900020073797a32000000000c0007800800120000000000050005000a00000005000100060000000d000300686173683a6e657400000000"], 0x54}}, 0x40009) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 848.535701ms ago: executing program 7 (id=3433): r0 = socket$inet6(0x10, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0x0, 0xffeffffc}, {0x16}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x1}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x4}]}}, @common=@ipv6header={{0x28}, {0x44, 0x20, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendto$inet6(r1, &(0x7f0000000080)="104c101000f29090a2c8", 0x45, 0x48098, 0x0, 0x0) socket$inet6(0x10, 0x5, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0x0, 0xffeffffc}, {0x16}]}, 0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x1}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x4}]}}, @common=@ipv6header={{0x28}, {0x44, 0x20, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) sendto$inet6(r1, &(0x7f0000000080)="104c101000f29090a2c8", 0x45, 0x48098, 0x0, 0x0) (async) 813.337499ms ago: executing program 7 (id=3434): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x1, 0x8000000000000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x7ca8e000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) writev(r3, &(0x7f0000000080)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 477.788205ms ago: executing program 5 (id=3435): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r2, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x2, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 344.640148ms ago: executing program 7 (id=3436): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@hl={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x6}}, @common=@inet=@dscp={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xe72, 0x10, 0x0, &(0x7f0000000200)="63eced8e46dc3fad77b7b3f7b986edf7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 294.105724ms ago: executing program 5 (id=3437): socket$unix(0x1, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x3aa1}, 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) 233.549189ms ago: executing program 7 (id=3438): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=@delchain={0x1260, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xd, 0x10}, {0x2, 0xc}, {0xfff0, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe94, 0x2, [@TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0xfff3}, {{0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0xb}, {0x6, 0x0, 0x9, 0x4, 0x2, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x7}, {0xfffd, 0x9, 0x1, "d6217d74aed1fcb906"}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0xf, 0x0, 0x200}, "823a777b4ff13a8870708fb51a9ad4f2b24a48b6134dfc63fca6820883aff191b92bfb06fa56fd37c64a36cfd7840b25af520dd76b8b7e62fc74233309f399f9d4e32eb3b89b52a93572c4077fdacacb7d833b9d5d80b7ecd2da9f5c6fa086c5d4b3c45417522984578993"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x13a}, {{0x0, 0x1, 0x0, 0x1}, {0x2}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x100, 0x2, 0xfffa}, {0x9, 0x8, 0x2, "79d96ea1446cdd58"}}}, @TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x100, 0x0, 0x6}, "08478cd0d2e2e16bd6f7c9b6abef9616bf853d4e6a32dafdb4392d791a751ae40e82754df5823c305605d4a5c1e03970de0eb5976424017b4271c6457ea755f880f02372370625df7b3c2b1c452638d053187a364d2c25185d52580349f71316a86132c620f643556193dedd23557d4c1b989ada94478de2ac03a4cc3ff478a93b1305e70ffe76459a7e0f3006937928fa157a4799ea5f824760c7753b838216211997e8e257267d77ed833352f95201fba2654ed38a5ae4a1a942d4a6de395b2a2c6505868817a09a863d981e3acaf730f53afa7200b085ba7cb9f89e47f5df7b6e"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1ff, 0x7, 0x400}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_EMATCHES={0x3fc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x5, 0x9, 0xf241}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x38, 0x5, "8ecd04a840f89f9cd90b094a377a9ad7c332c94fa9812a9ba9416fe77dddd1046d923def513fcee2e390a7958a45a8aa27d4c2a4"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x3ff}, {{0x1, 0x1, 0x1, 0x1}, {0x2}}}}, @TCF_EM_CONTAINER={0xc0, 0x2, 0x0, 0x0, {{0xb8db, 0x0, 0x7}, "641cfe295960109ea8671e283bca492dda581931175f054b3f493b9ae5675241f5680799011d5ebe8949f39753af1c5fd6ad01d6f1ef55c3aa207b21269767b63fb6f75e115f77306e6561950a95821d0687d1876cab590f36f9eb19c96f09dede0db1ee7ff29f50fddea60d4a86be02c572d7505ce37b2ac8df7e641a68c636ed060ce507ff71a813f1384dae5e2bf678912c7ea03e83b177c54ecbaecd60f46546079222d7fc0bed29ce2abb245a5e67"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xd}, {0x10000, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x20}, {0xffffffffffffffff, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff85}}, @TCA_EMATCH_TREE_LIST={0x1ec, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0xc7c0}, {0x7, 0xd8, 0x9, 0x4, 0x3, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7}, {0x401, 0x4, 0x1, "9943d84d"}}}, @TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_DATA={0x41, 0x5, "ee69a8014c39a2b8212f225f2e87f8d570e40030f661673b5176c00df9c3952f0b35668a91d71a39d75f914ca1301afa53d76614974ae3e5374a121478"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x81}, {0x82, 0x10001, 0x81c, 0x3, 0x5, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffd}, {0x0, 0x3, 0x4}}}, @TCF_EM_IPT={0x138, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xf8, 0x5, "24553d0cdad19bac31e55561fcf2ef45b8a7fe42e925f6906ba0865f1211e81299d09b61370b29606a17cfe053a709e46919956eb680301024a7588cf45d1df3e6c7b961c36a111d83c52cf5b1a4fe5d416b6ddb50709e353d908a7c03a1743dbd24e67c312718177d6ddcd35f32e06d2b27c2f71374abc5b5af2d7c3eddf740aed2c6ffee4181fa39c6949092d2c3ab177c2ce2e17f9dd6c1e86f5a6a5323de5376845500644dea6a3f409f6e5818882de7e350f6085396e55ca2e7dee0a1dbd64a13ef902f80f73123d5547bc0fa8e1718d1bbaad5073179c3ed24425e034c38e3f1a69d5b6c4f00fabb62083cf4630b70fd40"}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}]}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x75c6}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="92"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='Ct', @TCF_META_TYPE_INT=0x5]}]}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x6, 0x0, 0xd}, "8f4c94"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x7}, {0xffffffffffffffff, 0x6, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0x2}, {0x1, 0x3, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2b9, 0x1, 0x1}, {0x0, 0x10000, 0x3, 0x6, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0x2, 0x3, 0x7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x9}, {0x9, 0x7f, 0x9, 0x3, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x16}}]}, @TCA_CGROUP_ACT={0xd4, 0x1, [@m_skbedit={0xd0, 0x12, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xe}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x18, 0xefe096a2807178e9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x37, 0x8, 0xffffffffffffffff, 0x3, 0xc7d9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd, 0x4, 0x6a9, 0x7}}]}, {0x4b, 0x6, "9d581e7e920a0d6160389e05b7fc5e330ce8ae544862c1151b7c0d2aa390af3fdbad656a40ef326134770a18253e59f5c1ed030c31df3bec90774e0f40053e618b91a1943ac472"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}]}, @TCA_CGROUP_EMATCHES={0x758, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x6}, {0xfffffffa, 0x10000, 0x6, 0x4, 0x3, 0x1}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x4800}, "0fad1d7a5d7781"}}, @TCF_EM_CONTAINER={0xac, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x7}, "89abd18ef34a41e27d61775a508fb003b68f7b83c70aec0be8d5e676f09229daef9450d2fd5ffbd9668f7c22ea02c31aa286d5e6b91993d12e6d0e89a408e9e907aa25908da6c0151fa11e8633061042c59e300cfa085ac1b5006d4ce9b82dca409d494a0c275beaa2b7c4aff8d3fcd69c48d4384d6126431fd926e3044f415eeb55b2fd038e4e44d5dbcc0e7d01f55151b6ef5428643bf8d666b003250fec"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1000, 0x3, 0x80}, {0x7fffffff, 0x61, 0x2, 0xf}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0xa12}, {0x9, 0x1f83, 0x5, 0x4, 0x2, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8004}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9b0}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0xc}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0xfe77}, {0xfffffffd, 0xfffff801, 0x8, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0x1d8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xfff3, 0x2, 0x4}, {0xfffd, 0x3, 0x2, "d4d002"}}}, @TCF_EM_CONTAINER={0x78, 0x1, 0x0, 0x0, {{0x94c, 0x0, 0xcf}, "f208102aed696bdc62d66ee44bfa7fdfffaede5fe5f79cc98872273929f049c4067ea36197ae7d6184aed2195810c7e5b63ed4b55a25fb0c5c13025f65af768ae3708932db6c2f9fb7910a44eb2c735b49b1ab1737f6352aa554fc53f58266e506735bf34329c6e1696f"}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x800, 0x0, 0x4}, "55d0ffc239df6c30a9c4592aa18482612ee08bcaa27e13b065e99e39ca667845840f7e07ceb5237c4a3aaefde2ec1d72ae4f1bbb753799c6ff0f196fb03ed32e57e3980ddd894db9f3ed71e45707e6244912e04fa0028013d5fe07efef599ef1b4f1fd6bb4c2dcb53a37bab5398837a8df7804aef57119d754c194dfd74591c8bcec38e4b7dcb1fd7046385115976b09786f09057b3e1f5b308b3baadc226130e224beca6464bef075a49d395f086e284fcbc4e0a0973817505f6a0facf6ff36"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x81, 0x7, 0xfff}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x1, 0x4, 0xf0}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="2063b0a7d3d5e4a3a6", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="18"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="d6d398", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x86, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9fd4, 0x7, 0x1}, {0x6, 0x2, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x1e0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x2, 0xffffffff, 0xc61, 0x400}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf4d8}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd}, {0x10000, 0x9, 0x4, 0x5, 0x4, 0x1, 0x2}}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0xfffe, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="69b3f1ed", @TCF_META_TYPE_VAR="32fe3a78e028"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="728cc303e5858e213e84", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e00acb", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2a, 0x7, 0x2}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc8, 0x1, 0x8a}, {0x7, 0x1, 0x2, 0x1, 0x8, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xfc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "15e2e0d62f566c3df187034b39f8c3019b81fe56a638dc10edaa02a98e79a83e5c39b8931ae4e0166963ea1de4461d3a540ae2fc41ec30dfbbf9e6f4cc0eabb27e2204f15f070c6adc432d0b18ffe0e644f89fa32ed0423586a33efe89cb627ec95d1e8dadee39f670c7953a51390e822dc2e928706cb311125ae925d892e1298abb0fd1849802eebafc3b77e3e53eb8c394e42fc5b4846f657be480adc47de7d6acbe5f6c1cdb11592d01c15cd65859a0d461469347140aa3d760fa8f573a6f81617672dcbeab18ab20b4e43ee51c0053acd89bb2355a73ee3882ca15fe5d8bc68dfe848eca8a9578b7eb642795"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff8, 0x7, 0x8}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0xb1b8, 0x100, 0x35, 0x800}}}]}, @TCA_EMATCH_TREE_LIST={0x238, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xffff}, "c6ca751fb941d95e6646e752dc61597055e75e1c24120ac15106fab32d47a07037236e189a4598e8f0a9e5228b374047734b0073a1eb49abf1c698d5c5cbccbb1c24a709303abe242ff8ecee19ebd223b4b7e75e52974cdb24090356a784914a4cffa9d5681862505b19fd6b11e091060384617654791bc71138a01975067214e28d"}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}, "7b7fe213c476fb4b678a7c285b6bcd32db77211c7e"}}, @TCF_EM_CONTAINER={0x90, 0x3, 0x0, 0x0, {{0xd, 0x0, 0x952}, "760ecc255cbd487ce7de2adda329d83a261a56248b39651eae147b4f2727dd2bda8edcf564b44826e5950f036f5c5ef6e9d1a532c24c9a59a1b04e8e3cf97b61be63be1ac55ba1eae6b0e85965d77b2e684843293e0c41156a3cdb2a2bcfc488e456f85aba39b27db3642f86187b2cdce18f4c13f3cd6cc7ebb1498a3e036a1209105445"}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xb0, 0x2}, {0x4, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="3bd161f173", @TCF_META_TYPE_VAR="5018cc41", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x80}, {0x2, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x9}, {0x4, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x86, 0xafc8440f44c8ff61}, {0x6, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0x80, 0x6, 0x8, 0x4, 0x7, 0x1}}}, @TCF_EM_CONTAINER={0x84, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x3000}, "9ac74389163d09f0ced043818806f8d1193a1d9c2333ce6bfdbeb33d52ccdbbb01d2faf612de91e808d08f1aa96fb5a111d35290c1cfc962d4fa5fddc343825ba6fb847d53b80ca45ed8010c35f1e9ed805f4e467a07d2ba67ef989e24047c0ee29c6e6a29f27fce2edccfd8786e408598bed2e884"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x280}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0xb37d}, {0x4, 0x6, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x3, 0x5}, {0x8, 0x1, 0x803, 0xffffff7f}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x115}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flow={{0x9}, {0x358, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffff397}, @TCA_FLOW_EMATCHES={0x344, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7fff}, {0x7ff, 0x7, 0x2, "51685d993e8fe7"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf7, 0x8, 0xe}, {0xffffffffffffffff, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x308, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x7}, {0x5, 0x1, 0x5, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4}, {0x80000000, 0x1c00000, 0x5, 0x1, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0xe0, 0x1, 0x0, 0x0, {{0xa}, [@TCA_EM_IPT_MATCH_DATA={0xa1, 0x5, "a9bc30509d1efbe762bd274bf5646db66fe2a116b98ce71985c0188872ae8cb2c2e00b0142b2f5dc6742f203a923f5429484f9f4ed6c7e1afeeed579fe5c2027980a1185cd175192dac64d4aea661e2c70fe5bde6ad87bb5668292b4ea27d4de337bd49054db22acdf224587b86a1b4e5b416efcff27edc8723f49f77ee30df90d6f249246d5d84df3f78ad4a1f7a192d050c89627e6d38f52827986d7"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xfffc}, "c0791968f40f44b4cf7659edd6bd8e76701aea8907bddb22f6c45c3ee08c9d9648f7c4846c38658c3ce068260f7e8bf2e27dbe817188606dfe07fa9b6ba9a1f15e9a953816943b0b7d25970b00a9599f9dcb368b60953dce2c7d47e2b36dcd4d4d2d9cbb16837bf5d0b40a0595da475a34d9ee5ad19961aee5f3aa31ec911acdf1fe64b4a47ce7d8fb7ee9175a5ac10629105a85a0c241a1e3737e893bb61bf706937148c20d9fded3d08bff49af87e7b1667145595a1141902fc165d5af52"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x400}, {0x6, 0x29, 0x0, 0x0, 0xd, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x9}, {0x6, 0xc, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfff, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x1}}}}, @TCF_EM_META={0xc4, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="f78e7d3883aa", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xe, 0x1}, {0x2, 0x2a}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="2d674f7b3de23032aef2", @TCF_META_TYPE_VAR="0fa01b82c0a19bc80d"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d7c5ec6cd96c", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8, 0x2}, {0xf, 0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6}, {0x6, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2}, {0x1, 0x10}}}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_VAR="dadee3da2b", @TCF_META_TYPE_VAR="93020289f73cfd3341", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="44ec050ace4c847f2787", @TCF_META_TYPE_VAR="a0a9b9", @TCF_META_TYPE_VAR="c8c3d841b8", @TCF_META_TYPE_VAR="95ed", @TCF_META_TYPE_VAR="c52f", @TCF_META_TYPE_VAR="88ba0b923e1e", @TCF_META_TYPE_VAR="45d7271a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x27, 0x1, 0x1}, {0x38, 0x26, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x7}, {0x1, 0x4, 0x81, 0x0, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2a1}, @TCA_FLOW_MODE={0x8}]}}]}, 0x1260}, 0x1, 0x0, 0x0, 0x2004}, 0x4010044) (async) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000]}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 100.568769ms ago: executing program 5 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) (async) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r5 = epoll_create1(0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}}, 0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000000c0)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f00000000c0)) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x3, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x801b}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4bd}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1ff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x400c011}, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e30000000000000000000000014000000020a090100000000000000000000000014000000110001"], 0xd0}}, 0x0) 81.563071ms ago: executing program 7 (id=3440): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'vlan1\x00', {}, 0xbf}) (async, rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f00000003c0), &(0x7f00000000c0)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 5 (id=3441): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x8201ad65c48ccfb3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011"], 0x68}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_netdev_private(r5, 0x89fc, &(0x7f0000000000)="ca10c157fb1e816e171d340e09b2718b223c89dd4e70e2b0042c131412c1e82e6d8fc4afc05a038c1409b1e179d6f25a3a5624f30df43a21cf2fd618b466f936bf277c6ef2d0e346ff84923ff4861b887932e80996cfa981aa7670ed012f26967c9200502668026e11613d9bf797") kernel console output (not intermixed with test programs): adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.399545][T15885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.523888][T16060] netlink: 'syz.2.2536': attribute type 4 has an invalid length. [ 295.599551][T16066] netlink: 'syz.2.2536': attribute type 4 has an invalid length. [ 295.618115][T15885] hsr_slave_0: entered promiscuous mode [ 295.633193][T15885] hsr_slave_1: entered promiscuous mode [ 295.651406][T15885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.665804][T15885] Cannot create hsr debugfs directory [ 295.783431][T16074] netlink: 'syz.7.2539': attribute type 25 has an invalid length. [ 295.814027][T16074] netlink: 'syz.7.2539': attribute type 7 has an invalid length. [ 295.870748][T16082] Unsupported ieee802154 address type: 0 [ 295.879073][T16082] vxcan1: tx address claim with dest, not broadcast [ 295.888020][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2539'. [ 295.902708][ T5854] Bluetooth: hci3: command tx timeout [ 295.973689][T16079] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 296.136365][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2544'. [ 296.517472][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'. [ 296.535461][T16105] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2550'. [ 296.896653][T15885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.945030][T16116] team0: Mode changed to "loadbalance" [ 296.951961][T15885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.974041][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2554'. [ 297.022292][T16116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.100577][T16120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.123129][T16120] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 297.168521][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2557'. [ 297.185385][T16120] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 297.246367][T15885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.277206][T15885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.510570][T16136] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2560'. [ 297.611313][T15885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.678522][T16148] x_tables: duplicate underflow at hook 4 [ 297.678645][T16147] x_tables: duplicate underflow at hook 4 [ 297.710694][T15885] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.816196][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.823457][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.839090][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.846346][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.986075][ T5854] Bluetooth: hci3: command tx timeout [ 298.046059][T15885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.111641][T16166] xt_ecn: cannot match TCP bits for non-tcp packets [ 298.144531][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2570'. [ 298.499740][T15885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.004651][T15885] veth0_vlan: entered promiscuous mode [ 299.045414][T15885] veth1_vlan: entered promiscuous mode [ 299.110350][T15885] veth0_macvtap: entered promiscuous mode [ 299.123888][T15885] veth1_macvtap: entered promiscuous mode [ 299.148978][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.159547][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.171828][T15885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.187781][T15885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.198483][T15885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.209881][T15885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.221943][T15885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.231134][T15885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.239967][T15885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.249618][T15885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.350882][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.369038][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.443979][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.459104][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.560444][T16225] __nla_validate_parse: 3 callbacks suppressed [ 299.560466][T16225] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2584'. [ 300.112472][T16252] netlink: 'syz.7.2594': attribute type 23 has an invalid length. [ 300.265878][T16260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2595'. [ 300.380420][T16265] netem: change failed [ 300.536669][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 300.558097][ T2994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.616769][T16270] vlan0: entered promiscuous mode [ 300.622028][T16270] vlan0: entered allmulticast mode [ 300.630675][T16270] hsr_slave_1: entered allmulticast mode [ 300.865583][ T2994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.174137][ T2994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.438022][ T2994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.710124][T16324] netlink: 'syz.7.2604': attribute type 11 has an invalid length. [ 301.753790][T16333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.760823][T16324] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2604'. [ 301.985185][ T2994] bridge_slave_1: left allmulticast mode [ 302.002485][ T2994] bridge_slave_1: left promiscuous mode [ 302.029219][ T2994] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.100498][ T2994] bridge_slave_0: left allmulticast mode [ 302.112969][T16347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2608'. [ 302.128529][T16341] xt_CT: No such helper "syz1" [ 302.137304][ T2994] bridge_slave_0: left promiscuous mode [ 302.158524][ T2994] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.598385][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.613239][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.630661][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.641777][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.657055][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.975263][ T2994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.986267][ T2994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.996112][ T2994] bond0 (unregistering): Released all slaves [ 303.107468][T16378] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.169292][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 303.268528][T16399] sctp: [Deprecated]: syz.7.2618 (pid 16399) Use of int in max_burst socket option. [ 303.268528][T16399] Use struct sctp_assoc_value instead [ 303.517614][T16413] netlink: 'syz.5.2621': attribute type 1 has an invalid length. [ 303.527829][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2621'. [ 303.675739][T16404] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.730796][ T2994] hsr_slave_0: left promiscuous mode [ 303.750613][ T2994] hsr_slave_1: left promiscuous mode [ 303.770550][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.792277][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.814849][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.838280][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.859598][T16434] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2624'. [ 303.900402][ T2994] veth1_macvtap: left promiscuous mode [ 303.906834][ T2994] veth0_macvtap: left promiscuous mode [ 303.916156][ T2994] veth1_vlan: left promiscuous mode [ 303.921523][ T2994] veth0_vlan: left promiscuous mode [ 304.056828][T16441] xt_policy: neither incoming nor outgoing policy selected [ 304.091298][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2626'. [ 304.496424][ T2994] team0 (unregistering): Port device team_slave_1 removed [ 304.536988][ T2994] team0 (unregistering): Port device team_slave_0 removed [ 304.782799][ T5854] Bluetooth: hci3: command tx timeout [ 304.922127][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 305.068891][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 305.100136][T16378] chnl_net:caif_netlink_parms(): no params data found [ 305.146196][T16460] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2629'. [ 305.155669][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 305.270170][T16464] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2629'. [ 305.664560][T16429] infiniband syz2: set down [ 305.669304][T16429] infiniband syz2: added vxcan1 [ 305.679265][T16487] netlink: 'syz.7.2634': attribute type 1 has an invalid length. [ 305.690206][T16429] syz2: rxe_create_cq: returned err = -12 [ 305.717374][T16429] infiniband syz2: Couldn't create ib_mad CQ [ 305.730544][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 305.742740][T16378] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.760257][T16429] infiniband syz2: Couldn't open port 1 [ 305.767246][T16378] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.785013][T16378] bridge_slave_0: entered allmulticast mode [ 305.803183][T16378] bridge_slave_0: entered promiscuous mode [ 305.832285][T16488] netlink: 'syz.7.2634': attribute type 1 has an invalid length. [ 305.864718][T16429] RDS/IB: syz2: added [ 305.869331][T16429] smc: adding ib device syz2 with port count 1 [ 305.900525][T16378] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.911806][T16378] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.921722][T16429] smc: ib device syz2 port 1 has pnetid [ 305.928438][T16378] bridge_slave_1: entered allmulticast mode [ 305.944773][T16378] bridge_slave_1: entered promiscuous mode [ 305.973846][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 306.267343][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'. [ 306.281752][T16378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.311348][ T52] vxcan1 speed is unknown, defaulting to 1000 [ 306.311359][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2637'. [ 306.360531][T16378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.556549][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2640'. [ 306.630255][T16378] team0: Port device team_slave_0 added [ 306.658405][T16530] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2642'. [ 306.703574][T16378] team0: Port device team_slave_1 added [ 306.852408][ T5854] Bluetooth: hci3: command tx timeout [ 306.888542][T16527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.902936][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 306.948658][T16533] netlink: 'syz.2.2642': attribute type 24 has an invalid length. [ 306.964528][T16378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.971525][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.997964][T16378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.088021][T16378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.095345][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.125715][T16378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.329824][T16378] hsr_slave_0: entered promiscuous mode [ 307.346724][T16378] hsr_slave_1: entered promiscuous mode [ 307.363880][T16378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.371486][T16378] Cannot create hsr debugfs directory [ 307.412872][T16554] tipc: Enabling of bearer rejected, media not registered [ 307.504548][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 307.671505][T16569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.747114][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2651'. [ 307.949588][T16579] tipc: Enabled bearer , priority 0 [ 308.011880][T16579] syzkaller0: entered promiscuous mode [ 308.023187][T16579] syzkaller0: entered allmulticast mode [ 308.029455][T16579] tipc: Resetting bearer [ 308.116690][ T1320] tipc: Resetting bearer [ 308.123287][T16577] tipc: Resetting bearer [ 308.470257][T16583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2653'. [ 308.942567][ T5854] Bluetooth: hci3: command tx timeout [ 308.972348][ T10] tipc: Node number set to 4269801491 [ 309.533573][T16577] tipc: Disabling bearer [ 309.548162][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 309.847540][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 310.145843][T16521] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 310.444399][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2662'. [ 310.606533][T16637] tipc: Enabling of bearer rejected, failed to enable media [ 310.954503][T16658] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 311.022582][ T5854] Bluetooth: hci3: command tx timeout [ 311.078363][T16653] vlan2: entered allmulticast mode [ 311.105641][T16653] batadv0: entered allmulticast mode [ 311.304670][T16378] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.361631][T16378] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 311.426365][T16378] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 311.484972][T16378] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 311.541118][T16693] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.626211][T16694] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 311.653114][T16694] dccp_invalid_packet: invalid packet type [ 311.759573][T16694] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.893726][T16378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.986471][ T9] syz1: Port: 1 Link DOWN [ 312.004630][T16378] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.011655][T16720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 312.040766][T16718] netlink: 'syz.5.2684': attribute type 2 has an invalid length. [ 312.069481][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.076715][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.115924][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.123153][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.157739][T16718] netlink: 212404 bytes leftover after parsing attributes in process `syz.5.2684'. [ 312.467321][T16748] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 312.497348][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 312.787498][T16378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.873521][T16769] netlink: 'syz.7.2695': attribute type 10 has an invalid length. [ 312.891145][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 312.909338][T16774] netlink: 'syz.7.2695': attribute type 10 has an invalid length. [ 312.918515][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 313.009541][T16781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2697'. [ 313.736931][T16378] veth0_vlan: entered promiscuous mode [ 313.769619][T16378] veth1_vlan: entered promiscuous mode [ 313.836813][T16378] veth0_macvtap: entered promiscuous mode [ 313.868302][T16378] veth1_macvtap: entered promiscuous mode [ 313.895827][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.909843][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.935882][T16378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.966373][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.980642][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.994036][T16378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.008717][T16378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.018484][T16378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.030574][T16378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.040810][T16378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.125623][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.146620][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.185748][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.196004][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.617590][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2710'. [ 314.745916][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2711'. [ 314.821226][T16872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2709'. [ 315.187563][ T2994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.343960][ T2994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.468050][ T2994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.552241][ T2994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.770795][ T2994] bridge_slave_1: left allmulticast mode [ 315.777105][ T2994] bridge_slave_1: left promiscuous mode [ 315.783695][ T2994] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.793667][ T2994] bridge_slave_0: left allmulticast mode [ 315.799331][ T2994] bridge_slave_0: left promiscuous mode [ 315.805191][ T2994] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.107868][ T2994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.118654][ T2994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.128908][ T2994] bond0 (unregistering): Released all slaves [ 316.454256][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2719'. [ 316.581277][T16935] veth0: entered promiscuous mode [ 316.910368][ T5950] syz1: Port: 1 Link ACTIVE [ 317.001818][T16954] netlink: 'syz.5.2726': attribute type 11 has an invalid length. [ 317.017880][ T2994] hsr_slave_0: left promiscuous mode [ 317.024967][ T2994] hsr_slave_1: left promiscuous mode [ 317.031795][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.043017][T16954] netlink: 'syz.5.2726': attribute type 11 has an invalid length. [ 317.050862][T16954] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2726'. [ 317.061538][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.071593][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.081158][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.138126][ T2994] veth1_macvtap: left promiscuous mode [ 317.157762][ T2994] veth0_macvtap: left promiscuous mode [ 317.164093][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.166740][ T2994] veth1_vlan: left promiscuous mode [ 317.183138][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.189717][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.197120][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2727'. [ 317.197637][ T2994] veth0_vlan: left promiscuous mode [ 317.208863][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.218511][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.230305][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.239301][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.720067][ T2994] team0 (unregistering): Port device team_slave_1 removed [ 317.767828][ T2994] team0 (unregistering): Port device team_slave_0 removed [ 318.151840][T16924] veth0: left promiscuous mode [ 318.220898][ T9] syz1: Port: 1 Link DOWN [ 318.381297][T16958] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.403628][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2731'. [ 318.467238][T16958] vxcan1 speed is unknown, defaulting to 1000 [ 318.560965][T16976] netlink: 'syz.7.2731': attribute type 12 has an invalid length. [ 318.573773][T16982] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.735753][T16996] netlink: 'syz.4.2736': attribute type 2 has an invalid length. [ 318.746580][T16996] netlink: 'syz.4.2736': attribute type 8 has an invalid length. [ 318.769176][T16996] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2736'. [ 319.209026][T17017] ip6t_srh: unknown srh invflags 5F00 [ 319.338437][ T5853] Bluetooth: hci3: command tx timeout [ 319.380781][T16982] vxcan1 speed is unknown, defaulting to 1000 [ 319.698532][T17041] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2749'. [ 319.707948][T17041] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2749'. [ 319.745639][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2749'. [ 319.900139][T16958] chnl_net:caif_netlink_parms(): no params data found [ 319.908862][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2751'. [ 319.980034][T17050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2752'. [ 320.392826][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.400142][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.429756][T16958] bridge_slave_0: entered allmulticast mode [ 320.446004][T16958] bridge_slave_0: entered promiscuous mode [ 320.458317][T17073] netlink: 'syz.7.2755': attribute type 11 has an invalid length. [ 320.462043][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.478049][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.486997][T17073] netlink: 'syz.7.2755': attribute type 11 has an invalid length. [ 320.487252][T16958] bridge_slave_1: entered allmulticast mode [ 320.508884][T16958] bridge_slave_1: entered promiscuous mode [ 320.528647][T17077] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 320.729517][T16958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.827372][T16958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.038532][T17103] sctp: [Deprecated]: syz.4.2761 (pid 17103) Use of int in max_burst socket option. [ 321.038532][T17103] Use struct sctp_assoc_value instead [ 321.144295][T16958] team0: Port device team_slave_0 added [ 321.160290][T16958] team0: Port device team_slave_1 added [ 321.308402][T16958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.326303][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.378781][T16958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.413491][ T5853] Bluetooth: hci3: command tx timeout [ 321.456748][T16958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.465804][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.492529][T16958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.562992][T17121] netlink: zone id is out of range [ 321.580321][T17121] netlink: zone id is out of range [ 321.598691][T17121] netlink: zone id is out of range [ 321.619383][T17121] netlink: zone id is out of range [ 321.669570][T16958] hsr_slave_0: entered promiscuous mode [ 321.708855][T16958] hsr_slave_1: entered promiscuous mode [ 321.727202][T16958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.736737][T16958] Cannot create hsr debugfs directory [ 321.755514][T17126] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 321.988895][T17138] netlink: 'syz.7.2769': attribute type 10 has an invalid length. [ 322.018394][T17140] __nla_validate_parse: 6 callbacks suppressed [ 322.018412][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 322.043335][T17138] syz_tun: entered promiscuous mode [ 322.056479][T17143] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2770'. [ 322.103946][T17138] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 322.297267][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2771'. [ 322.382488][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2772'. [ 322.397222][T17148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.480175][T17165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2774'. [ 322.493348][T17159] vlan1: entered allmulticast mode [ 322.498582][T17159] veth0_to_hsr: entered allmulticast mode [ 322.537266][T17168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2774'. [ 322.653015][T17172] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2775'. [ 322.906132][T17187] xt_CT: No such helper "pptp" [ 323.049177][T17200] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2782'. [ 323.061706][T17201] netlink: 'syz.7.2780': attribute type 10 has an invalid length. [ 323.070300][T17201] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.106186][T17201] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.113468][T17201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.146012][T17201] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 323.155605][T16958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.171813][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'. [ 323.198100][T16958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.215337][T16958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.231126][T17205] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2783'. [ 323.247470][T16958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.493457][ T5853] Bluetooth: hci3: command tx timeout [ 323.576469][T16958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.605049][T17226] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 323.639765][T16958] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.675664][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.682888][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.730284][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.737503][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.099622][T17249] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 324.130726][T17249] netlink: 'syz.2.2792': attribute type 3 has an invalid length. [ 324.213698][T16958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.341256][T17261] netlink: 'syz.5.2797': attribute type 13 has an invalid length. [ 324.384658][T17261] macvtap0: refused to change device tx_queue_len [ 324.618358][T17278] netlink: 'syz.5.2800': attribute type 11 has an invalid length. [ 324.640438][T17271] netlink: 'syz.2.2798': attribute type 7 has an invalid length. [ 324.662929][T17278] netlink: 'syz.5.2800': attribute type 11 has an invalid length. [ 324.768705][T17288] SET target dimension over the limit! [ 324.774986][T17287] SET target dimension over the limit! [ 324.835009][T17290] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 324.843361][T17290] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 324.851955][T17290] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 324.885065][T17290] netlink: 'syz.5.2804': attribute type 2 has an invalid length. [ 325.086741][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.097441][T17308] netlink: 'syz.5.2807': attribute type 1 has an invalid length. [ 325.118147][T16958] veth0_vlan: entered promiscuous mode [ 325.155771][T16958] veth1_vlan: entered promiscuous mode [ 325.188775][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.276914][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.298018][T16958] veth0_macvtap: entered promiscuous mode [ 325.335440][T16958] veth1_macvtap: entered promiscuous mode [ 325.396294][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.410569][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.428229][T16958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.459066][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.477983][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.491765][T16958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.517460][T17320] tipc: Enabling of bearer rejected, failed to enable media [ 325.538102][T16958] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.549724][T16958] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.560371][T16958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.573081][ T5853] Bluetooth: hci3: command tx timeout [ 325.586173][T16958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.706632][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.730955][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.794531][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.843875][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.134684][T17338] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.155005][T17338] vxcan1 speed is unknown, defaulting to 1000 [ 326.701562][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.040353][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.204502][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.479406][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.903185][ T53] bridge_slave_1: left allmulticast mode [ 327.908876][ T53] bridge_slave_1: left promiscuous mode [ 327.916120][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.933382][ T53] bridge_slave_0: left allmulticast mode [ 327.939115][ T53] bridge_slave_0: left promiscuous mode [ 327.950979][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.159250][T17391] netlink: 'syz.5.2824': attribute type 2 has an invalid length. [ 328.568520][T17406] __nla_validate_parse: 9 callbacks suppressed [ 328.568539][T17406] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2828'. [ 328.644590][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2829'. [ 328.682484][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2829'. [ 328.740392][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.760853][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.770142][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.791163][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.824089][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.020657][T17430] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2831'. [ 329.130001][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.145710][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.161293][ T53] bond0 (unregistering): Released all slaves [ 329.317216][T17416] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.334820][T17442] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 329.351660][T17416] vxcan1 speed is unknown, defaulting to 1000 [ 329.513520][T17450] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 329.527569][T17450] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 329.535942][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 329.602545][T17450] tipc: Enabling of bearer rejected, failed to enable media [ 329.608885][T17456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2836'. [ 329.753648][T17464] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2837'. [ 329.896520][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2837'. [ 329.978239][ T52] syz1: Port: 1 Link ACTIVE [ 330.088784][ T5845] syz1: Port: 1 Link DOWN [ 330.537023][T17497] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2843'. [ 330.591127][ T53] hsr_slave_0: left promiscuous mode [ 330.608805][ T53] hsr_slave_1: left promiscuous mode [ 330.620639][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.628476][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.638386][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.646625][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.702561][ T53] veth1_macvtap: left promiscuous mode [ 330.713382][ T53] veth0_macvtap: left promiscuous mode [ 330.727692][ T53] veth1_vlan: left promiscuous mode [ 330.733230][ T53] veth0_vlan: left promiscuous mode [ 330.932528][ T5853] Bluetooth: hci3: command tx timeout [ 331.132012][T17525] netlink: 'syz.2.2850': attribute type 39 has an invalid length. [ 331.446152][ T53] team0 (unregistering): Port device team_slave_1 removed [ 331.484586][ T53] team0 (unregistering): Port device team_slave_0 removed [ 332.120507][T17416] chnl_net:caif_netlink_parms(): no params data found [ 332.149257][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2855'. [ 332.600819][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.626596][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.634813][T17569] xt_bpf: check failed: parse error [ 332.652964][T17416] bridge_slave_0: entered allmulticast mode [ 332.690704][T17416] bridge_slave_0: entered promiscuous mode [ 332.746908][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.781299][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.799274][T17416] bridge_slave_1: entered allmulticast mode [ 332.859589][T17416] bridge_slave_1: entered promiscuous mode [ 333.022765][ T5853] Bluetooth: hci3: command tx timeout [ 333.087959][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.144865][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.353872][T17416] team0: Port device team_slave_0 added [ 333.375384][T17416] team0: Port device team_slave_1 added [ 333.525316][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.536605][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.565772][T17633] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 333.574134][T17633] __nla_validate_parse: 3 callbacks suppressed [ 333.574150][T17633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2877'. [ 333.582403][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.650562][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.669256][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.700824][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.747755][T17636] netlink: 'syz.4.2878': attribute type 21 has an invalid length. [ 333.901655][T17416] hsr_slave_0: entered promiscuous mode [ 333.930156][T17416] hsr_slave_1: entered promiscuous mode [ 333.962989][T17416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.970605][T17416] Cannot create hsr debugfs directory [ 334.117278][T17652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2881'. [ 334.524933][T17663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2885'. [ 335.092316][ T5853] Bluetooth: hci3: command tx timeout [ 335.164567][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'. [ 335.440825][T17706] veth0: entered promiscuous mode [ 335.461271][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2891'. [ 335.470448][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2891'. [ 335.586538][T17716] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2895'. [ 335.677198][T17705] veth0: left promiscuous mode [ 335.844013][T17725] batadv_slave_0: entered promiscuous mode [ 335.849878][T17725] batadv_slave_0: entered allmulticast mode [ 335.977481][T17416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.012055][T17416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.069066][T17416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.111160][T17416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.380126][T17754] dvmrp1: entered allmulticast mode [ 336.407273][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.463978][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 336.510328][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.553856][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.561068][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.687848][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.695090][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.856910][T17778] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2911'. [ 337.081691][T17790] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 337.095867][T17790] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2918'. [ 337.174816][ T5853] Bluetooth: hci3: command tx timeout [ 337.420950][T17814] nbd: illegal input index -8454144 [ 337.507867][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.798764][T17834] netlink: 'syz.7.2925': attribute type 10 has an invalid length. [ 337.996607][T17416] veth0_vlan: entered promiscuous mode [ 338.017149][T17416] veth1_vlan: entered promiscuous mode [ 338.088587][T17416] veth0_macvtap: entered promiscuous mode [ 338.101374][T17416] veth1_macvtap: entered promiscuous mode [ 338.151987][T17416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.166046][T17416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.184077][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.229408][T17416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.250064][T17416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.280441][T17858] netlink: 'syz.7.2928': attribute type 21 has an invalid length. [ 338.294971][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.339574][T17416] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.389252][T17416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.429045][T17416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.469497][T17416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.815410][T17884] batadv_slave_0: left allmulticast mode [ 338.838654][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.872898][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.031473][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.053168][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.050489][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.295750][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.460311][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.471440][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.487394][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.507548][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.516986][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.526799][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.628441][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.650152][T17946] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.668279][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 340.825783][ T12] bridge_slave_1: left allmulticast mode [ 340.831471][ T12] bridge_slave_1: left promiscuous mode [ 340.838526][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.850089][ T12] bridge_slave_0: left allmulticast mode [ 340.856495][ T12] bridge_slave_0: left promiscuous mode [ 340.862865][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.216514][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.228755][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.240337][ T12] bond0 (unregistering): Released all slaves [ 341.839158][T17946] chnl_net:caif_netlink_parms(): no params data found [ 341.991350][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.003084][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.015658][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.026155][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.037498][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.038189][T17994] __nla_validate_parse: 4 callbacks suppressed [ 342.038205][T17994] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2955'. [ 342.264754][T18004] netlink: 'syz.5.2956': attribute type 58 has an invalid length. [ 342.286813][T18004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2956'. [ 342.531396][T17993] virt_wifi0 speed is unknown, defaulting to 1000 [ 342.573207][ T12] hsr_slave_0: left promiscuous mode [ 342.580911][ T12] hsr_slave_1: left promiscuous mode [ 342.594438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.602002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.615274][ T5853] Bluetooth: hci3: command tx timeout [ 342.628214][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.637686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.673481][ T12] veth1_macvtap: left promiscuous mode [ 342.679882][ T12] veth0_macvtap: left promiscuous mode [ 342.685774][ T12] veth1_vlan: left promiscuous mode [ 342.691211][ T12] veth0_vlan: left promiscuous mode [ 343.133072][ T12] team0 (unregistering): Port device team_slave_1 removed [ 343.175029][ T12] team0 (unregistering): Port device team_slave_0 removed [ 343.617787][T17993] vxcan1 speed is unknown, defaulting to 1000 [ 343.797787][T18021] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20002 [ 343.875051][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.887390][T17946] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.913822][T17946] bridge_slave_0: entered allmulticast mode [ 343.941994][T17946] bridge_slave_0: entered promiscuous mode [ 343.970334][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.996879][T17946] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.007065][T17946] bridge_slave_1: entered allmulticast mode [ 344.015318][T17946] bridge_slave_1: entered promiscuous mode [ 344.098148][T17946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.133204][ T5853] Bluetooth: hci4: command tx timeout [ 344.145956][T17946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.158700][T18031] netlink: 'syz.5.2963': attribute type 8 has an invalid length. [ 344.159211][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 344.304530][T17946] team0: Port device team_slave_0 added [ 344.367881][T17946] team0: Port device team_slave_1 added [ 344.541157][T18048] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2969'. [ 344.587678][T17946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.607109][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.692411][ T5853] Bluetooth: hci3: command tx timeout [ 344.713856][T17946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.728251][T17946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.735487][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.762153][T17946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.817915][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 344.840818][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 345.116254][T17946] hsr_slave_0: entered promiscuous mode [ 345.138911][T17946] hsr_slave_1: entered promiscuous mode [ 345.158887][T17946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.173624][T17946] Cannot create hsr debugfs directory [ 345.200091][T18076] bond0: left allmulticast mode [ 345.216315][T18076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.225599][T18076] team0: Device bond0 failed to register rx_handler [ 345.270838][T17993] chnl_net:caif_netlink_parms(): no params data found [ 345.422806][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 345.611349][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2980'. [ 345.653246][T17993] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.660549][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.668383][T17993] bridge_slave_0: entered allmulticast mode [ 345.677638][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2979'. [ 345.681221][T17993] bridge_slave_0: entered promiscuous mode [ 345.692215][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2979'. [ 345.708992][T17993] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.713056][T18106] xt_nfacct: accounting object `syz1' does not exists [ 345.720293][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.730931][T17993] bridge_slave_1: entered allmulticast mode [ 345.739538][T17993] bridge_slave_1: entered promiscuous mode [ 345.925499][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.007945][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.073430][T18125] netlink: 'syz.7.2985': attribute type 1 has an invalid length. [ 346.214438][ T5853] Bluetooth: hci4: command tx timeout [ 346.265153][T17993] team0: Port device team_slave_0 added [ 346.311615][T17946] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.424171][T17993] team0: Port device team_slave_1 added [ 346.503114][T17946] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.636237][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.647886][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.710118][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.710173][T18158] netlink: 'syz.2.2993': attribute type 5 has an invalid length. [ 346.737176][T17946] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.772376][ T5853] Bluetooth: hci3: command tx timeout [ 346.815742][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.825085][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.870164][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.915908][T17946] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.992372][T18169] netlink: 'syz.2.2995': attribute type 58 has an invalid length. [ 347.117332][T17993] hsr_slave_0: entered promiscuous mode [ 347.126133][T17993] hsr_slave_1: entered promiscuous mode [ 347.143532][T17993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.151453][T17993] Cannot create hsr debugfs directory [ 347.323570][T18185] __nla_validate_parse: 3 callbacks suppressed [ 347.323590][T18185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3000'. [ 347.418875][T18185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.450104][T18191] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3000'. [ 347.630423][T17946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.697053][T17946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.735557][T17946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.784340][T18202] bond0: (slave dummy0): Releasing backup interface [ 347.829801][T18202] batman_adv: batadv0: Adding interface: dummy0 [ 347.859945][T18202] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.916096][T18202] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 347.990101][T17946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.306980][ T5854] Bluetooth: hci4: command tx timeout [ 348.438298][T18226] netlink: 'syz.2.3007': attribute type 1 has an invalid length. [ 348.600303][T18226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 348.805948][T17946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.855951][ T5854] Bluetooth: hci3: command tx timeout [ 348.908070][T17946] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.958907][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.966140][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.064386][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.071611][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.096196][T18261] netlink: 'syz.7.3017': attribute type 30 has an invalid length. [ 349.152832][T18262] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3017'. [ 349.227973][T17946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.238634][T17946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.269366][T18265] netlink: 'syz.2.3018': attribute type 2 has an invalid length. [ 349.432584][T18270] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.463278][T17993] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.516385][T17993] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.537904][T17993] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.567647][T18270] vxcan1 speed is unknown, defaulting to 1000 [ 349.570608][T17993] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.587019][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3021'. [ 349.609080][T18281] xt_bpf: check failed: parse error [ 349.972721][ T5854] Bluetooth: hci2: command 0x0405 tx timeout [ 350.041056][T17946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.106376][T17993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.198950][T17993] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.337183][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.344457][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.371026][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.378269][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.386510][ T5853] Bluetooth: hci4: command tx timeout [ 350.529954][T18273] No such timeout policy "syz0" [ 350.592453][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 350.621742][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 350.623480][T18316] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3028'. [ 350.946888][T18304] virt_wifi0 speed is unknown, defaulting to 1000 [ 351.030765][T18304] vxcan1 speed is unknown, defaulting to 1000 [ 351.104044][T18334] netlink: ct family unspecified [ 351.137667][T17946] veth0_vlan: entered promiscuous mode [ 351.145534][T18334] openvswitch: netlink: Actions may not be safe on all matching packets [ 351.206148][T17946] veth1_vlan: entered promiscuous mode [ 351.290487][T17946] veth0_macvtap: entered promiscuous mode [ 351.315600][T17946] veth1_macvtap: entered promiscuous mode [ 351.406032][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.448579][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.484035][T17946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.544803][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.576216][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.603970][T17946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.671332][T17946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.710773][T17946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.736024][T17946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.762174][T17946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.966860][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.191982][T18371] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 352.362536][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.385926][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.699398][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.732634][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.980313][T17993] veth0_vlan: entered promiscuous mode [ 353.080154][T17993] veth1_vlan: entered promiscuous mode [ 353.250043][T18398] netlink: 'syz.7.3039': attribute type 32 has an invalid length. [ 353.269949][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3039'. [ 353.281489][T18402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.320589][T18398] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 353.385638][T17993] veth0_macvtap: entered promiscuous mode [ 353.415049][T17993] veth1_macvtap: entered promiscuous mode [ 353.469190][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.481180][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.520947][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.533087][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.545407][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.577689][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.621660][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.636254][T18413] netlink: 300 bytes leftover after parsing attributes in process `syz.7.3042'. [ 353.647308][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.666329][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.680578][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.731067][T17993] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.732238][T18414] ieee802154 phy0 wpan0: encryption failed: -90 [ 353.748163][T17993] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.768811][T17993] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.793128][T17993] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.126035][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 354.141485][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.163439][T18427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3044'. [ 354.167629][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.270400][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.288421][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.361010][T18446] netlink: 'syz.5.3052': attribute type 1 has an invalid length. [ 354.406910][T18446] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3052'. [ 354.879687][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.082012][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.344748][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.566729][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.701949][ T36] bridge_slave_1: left allmulticast mode [ 355.708683][ T36] bridge_slave_1: left promiscuous mode [ 355.715458][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.725945][ T36] bridge_slave_0: left allmulticast mode [ 355.731604][ T36] bridge_slave_0: left promiscuous mode [ 355.737982][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.036262][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.047998][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.061825][ T36] bond0 (unregistering): Released all slaves [ 356.790305][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'. [ 357.072656][ T36] hsr_slave_0: left promiscuous mode [ 357.087856][ T36] hsr_slave_1: left promiscuous mode [ 357.098478][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.118691][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.130229][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 357.189270][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3068'. [ 357.215321][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.224170][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.315933][ T36] veth1_macvtap: left promiscuous mode [ 357.326364][ T36] veth0_macvtap: left promiscuous mode [ 357.343101][ T36] veth1_vlan: left promiscuous mode [ 357.351176][ T36] veth0_vlan: left promiscuous mode [ 357.393973][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.403958][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.411978][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.429703][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.439067][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.250228][ T36] team0 (unregistering): Port device team_slave_1 removed [ 358.294217][ T36] team0 (unregistering): Port device team_slave_0 removed [ 358.908934][T18580] xt_l2tp: v2 doesn't support IP mode [ 359.011421][T18558] virt_wifi0 speed is unknown, defaulting to 1000 [ 359.049731][T18558] vxcan1 speed is unknown, defaulting to 1000 [ 359.124370][ T10] syz1: Port: 1 Link ACTIVE [ 359.235186][T18587] bond8: entered promiscuous mode [ 359.240298][T18587] bond8: entered allmulticast mode [ 359.260609][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3079'. [ 359.289841][T18587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.492747][ T5853] Bluetooth: hci4: command tx timeout [ 359.687139][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'. [ 359.700623][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'. [ 359.869822][ T978] syz1: Port: 1 Link DOWN [ 360.056764][T18634] lo: entered allmulticast mode [ 360.095285][T18634] lo: left allmulticast mode [ 360.130422][T18634] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3090'. [ 360.141068][T18639] netlink: 'syz.5.3088': attribute type 1 has an invalid length. [ 360.171107][T18634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.460894][T18659] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3096'. [ 360.470728][T18659] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3096'. [ 360.491267][T18659] netlink: 'syz.7.3096': attribute type 6 has an invalid length. [ 360.521164][T18659] netlink: 'syz.7.3096': attribute type 5 has an invalid length. [ 360.558776][T18659] netlink: 'syz.7.3096': attribute type 4 has an invalid length. [ 360.576428][T18558] chnl_net:caif_netlink_parms(): no params data found [ 360.586839][T18659] netlink: 'syz.7.3096': attribute type 6 has an invalid length. [ 360.602321][T18659] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3096'. [ 360.884812][T18684] netlink: 'syz.7.3103': attribute type 1 has an invalid length. [ 360.892819][T18684] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3103'. [ 360.924952][T18558] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.945933][T18558] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.972974][T18558] bridge_slave_0: entered allmulticast mode [ 361.006099][T18558] bridge_slave_0: entered promiscuous mode [ 361.035391][T18558] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.062798][T18558] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.084822][T18558] bridge_slave_1: entered allmulticast mode [ 361.121858][T18558] bridge_slave_1: entered promiscuous mode [ 361.223488][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3107'. [ 361.294697][T18558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.321394][T18708] netlink: 'syz.2.3108': attribute type 4 has an invalid length. [ 361.330443][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 361.417787][T18558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.579369][ T5853] Bluetooth: hci4: command tx timeout [ 361.695101][T18558] team0: Port device team_slave_0 added [ 361.769341][T18558] team0: Port device team_slave_1 added [ 361.871034][T18741] netlink: 'syz.4.3119': attribute type 4 has an invalid length. [ 361.893947][T18740] netlink: 'syz.7.3118': attribute type 1 has an invalid length. [ 361.907181][T18558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.907875][T18741] netlink: 'syz.4.3119': attribute type 4 has an invalid length. [ 361.922183][T18558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.956923][T18558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.018511][T18743] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 362.028183][T18743] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 362.037716][T18743] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 362.046863][T18743] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 362.060421][T18743] bond6: (slave geneve3): making interface the new active one [ 362.069368][T18743] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 362.095688][T18558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.120258][T18558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.181440][T18558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.212030][T18740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.500491][T18558] hsr_slave_0: entered promiscuous mode [ 362.528000][T18558] hsr_slave_1: entered promiscuous mode [ 362.553485][T18558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.586358][T18558] Cannot create hsr debugfs directory [ 362.847661][T18787] xt_hashlimit: size too large, truncated to 1048576 [ 363.064218][ T63] bond0: (slave batadv0): link status definitely down, disabling slave [ 363.655831][ T5853] Bluetooth: hci4: command tx timeout [ 364.364513][T18862] __nla_validate_parse: 5 callbacks suppressed [ 364.364535][T18862] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3151'. [ 364.426471][T18868] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3152'. [ 364.469113][T18868] netlink: zone id is out of range [ 364.505175][T18863] veth1_virt_wifi: left allmulticast mode [ 364.512930][T18868] netlink: zone id is out of range [ 364.518085][T18868] netlink: zone id is out of range [ 364.541864][T18868] netlink: zone id is out of range [ 364.549308][T18868] netlink: zone id is out of range [ 364.557062][T18868] netlink: zone id is out of range [ 364.562971][T18868] netlink: zone id is out of range [ 364.568151][T18868] netlink: zone id is out of range [ 364.573922][T18868] netlink: get zone limit has 8 unknown bytes [ 364.743653][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 365.030538][T18905] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3159'. [ 365.057289][T18558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.162691][ T978] syz1: Port: 1 Link ACTIVE [ 365.167926][T18558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.220060][T18558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.300433][T18558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.362687][ T10] syz1: Port: 1 Link DOWN [ 365.629972][T18558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.686426][T18940] validate_nla: 2 callbacks suppressed [ 365.686444][T18940] netlink: 'syz.7.3167': attribute type 3 has an invalid length. [ 365.696894][T18558] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.718204][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3168'. [ 365.733788][ T5853] Bluetooth: hci4: command tx timeout [ 365.764926][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.772135][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.856100][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.863324][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.031536][T18957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3172'. [ 366.060552][T18957] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3172'. [ 366.220842][T18968] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3175'. [ 366.333376][ T24] IPVS: starting estimator thread 0... [ 366.432842][T18974] IPVS: using max 31 ests per chain, 74400 per kthread [ 366.677830][T18558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.829639][T19005] netlink: 'syz.7.3182': attribute type 12 has an invalid length. [ 366.857798][T19005] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3182'. [ 366.884997][T19009] netlink: 'syz.4.3183': attribute type 11 has an invalid length. [ 366.908703][T19009] netlink: 'syz.4.3183': attribute type 11 has an invalid length. [ 366.941275][T19009] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3183'. [ 367.198150][T19025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.357973][T19034] netlink: 'syz.7.3186': attribute type 2 has an invalid length. [ 367.378412][T19035] netlink: 'syz.7.3186': attribute type 2 has an invalid length. [ 367.614792][T18558] veth0_vlan: entered promiscuous mode [ 367.712479][T18558] veth1_vlan: entered promiscuous mode [ 367.818398][T18558] veth0_macvtap: entered promiscuous mode [ 367.879085][T18558] veth1_macvtap: entered promiscuous mode [ 367.996475][T18558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.030143][T18558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.058612][T18558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.085643][T19067] netlink: 'syz.5.3193': attribute type 1 has an invalid length. [ 368.097953][T18558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.120913][T18558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.160731][T18558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.192280][T18558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.209654][T18558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.242123][T18558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.255548][T18558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.277453][T18558] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.305493][T18558] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.330462][T18558] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.355976][T18558] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.649278][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.724006][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.865226][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.908548][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.024783][T19109] netlink: 'syz.5.3202': attribute type 1 has an invalid length. [ 369.220743][T19121] net_ratelimit: 1 callbacks suppressed [ 369.220761][T19121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.401152][T19125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.408456][T19125] IPv6: NLM_F_CREATE should be set when creating new route [ 369.607899][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.660006][T19129] netlink: 'syz.5.3209': attribute type 3 has an invalid length. [ 369.681248][T19129] __nla_validate_parse: 11 callbacks suppressed [ 369.681269][T19129] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3209'. [ 369.804516][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.913281][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.108604][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.313798][ T63] bridge_slave_1: left allmulticast mode [ 370.319494][ T63] bridge_slave_1: left promiscuous mode [ 370.326768][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.337179][ T63] bridge_slave_0: left allmulticast mode [ 370.343907][ T63] bridge_slave_0: left promiscuous mode [ 370.349954][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.658922][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.670007][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.680772][ T63] bond0 (unregistering): Released all slaves [ 370.999515][ T63] hsr_slave_0: left promiscuous mode [ 371.005954][ T63] hsr_slave_1: left promiscuous mode [ 371.011746][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.020353][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.034901][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.042572][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.065636][ T63] veth1_macvtap: left promiscuous mode [ 371.071160][ T63] veth0_macvtap: left promiscuous mode [ 371.077140][ T63] veth1_vlan: left promiscuous mode [ 371.082564][ T63] veth0_vlan: left promiscuous mode [ 371.878246][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.894020][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.911474][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.932420][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.951292][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.992306][ T63] team0 (unregistering): Port device team_slave_1 removed [ 372.033290][ T63] team0 (unregistering): Port device team_slave_0 removed [ 372.467709][T19145] bridge0: port 3(vlan1) entered blocking state [ 372.478413][T19145] bridge0: port 3(vlan1) entered disabled state [ 372.485557][T19145] vlan1: entered allmulticast mode [ 372.490843][T19145] bridge0: entered allmulticast mode [ 372.497765][T19145] vlan1: left allmulticast mode [ 372.505432][T19145] bridge0: left allmulticast mode [ 372.531920][T19148] veth0: entered promiscuous mode [ 372.559107][T19153] veth0: left promiscuous mode [ 372.606800][T19163] virt_wifi0 speed is unknown, defaulting to 1000 [ 372.624485][T19163] vxcan1 speed is unknown, defaulting to 1000 [ 372.831665][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'. [ 373.080418][T19187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3226'. [ 373.092162][T19187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3226'. [ 373.120959][T19174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3222'. [ 373.142627][T19174] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3222'. [ 373.176368][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 373.397943][T19196] virt_wifi0 speed is unknown, defaulting to 1000 [ 373.461656][T19196] vxcan1 speed is unknown, defaulting to 1000 [ 373.630900][T19163] chnl_net:caif_netlink_parms(): no params data found [ 373.870181][T19223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3237'. [ 374.028730][T19163] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.036089][T19163] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.043584][T19163] bridge_slave_0: entered allmulticast mode [ 374.051442][T19163] bridge_slave_0: entered promiscuous mode [ 374.057430][ T5853] Bluetooth: hci4: command tx timeout [ 374.066360][T19163] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.073696][T19163] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.080944][T19163] bridge_slave_1: entered allmulticast mode [ 374.099076][T19163] bridge_slave_1: entered promiscuous mode [ 374.197673][T19237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3240'. [ 374.208063][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3241'. [ 374.239975][T19237] FAULT_INJECTION: forcing a failure. [ 374.239975][T19237] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 374.259005][T19237] CPU: 1 UID: 0 PID: 19237 Comm: syz.5.3240 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 374.259032][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 374.259047][T19237] Call Trace: [ 374.259054][T19237] [ 374.259062][T19237] dump_stack_lvl+0x241/0x360 [ 374.259093][T19237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.259115][T19237] ? __pfx__printk+0x10/0x10 [ 374.259150][T19237] should_fail_ex+0x424/0x570 [ 374.259179][T19237] _copy_from_user+0x2d/0xb0 [ 374.259202][T19237] copy_msghdr_from_user+0xb3/0x580 [ 374.259228][T19237] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 374.259244][T19237] ? __fget_files+0x2a/0x420 [ 374.259264][T19237] ? __fget_files+0x2a/0x420 [ 374.259288][T19237] __sys_sendmsg+0x20a/0x360 [ 374.259309][T19237] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.259380][T19237] ? do_syscall_64+0xb6/0x210 [ 374.259401][T19237] do_syscall_64+0xf3/0x210 [ 374.259418][T19237] ? clear_bhb_loop+0x45/0xa0 [ 374.259438][T19237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.259454][T19237] RIP: 0033:0x7f56bc58e169 [ 374.259468][T19237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.259480][T19237] RSP: 002b:00007f56bd3a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.259497][T19237] RAX: ffffffffffffffda RBX: 00007f56bc7b5fa0 RCX: 00007f56bc58e169 [ 374.259508][T19237] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 374.259518][T19237] RBP: 00007f56bd3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 374.259527][T19237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.259535][T19237] R13: 0000000000000000 R14: 00007f56bc7b5fa0 R15: 00007ffe9a521088 [ 374.259561][T19237] [ 374.444507][T19163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.500548][T19163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.708549][T19163] team0: Port device team_slave_0 added [ 374.737601][T19163] team0: Port device team_slave_1 added [ 374.758032][T19257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.075927][T19163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.107756][T19163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.176975][T19163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.209162][T19163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.221260][T19163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.255060][T19163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.328297][T19285] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3253'. [ 375.414455][T19288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3254'. [ 375.418133][T19283] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 375.431749][T19283] team0: Device macvtap1 is already an upper device of the team interface [ 375.442018][T19289] FAULT_INJECTION: forcing a failure. [ 375.442018][T19289] name failslab, interval 1, probability 0, space 0, times 1 [ 375.455716][T19289] CPU: 1 UID: 0 PID: 19289 Comm: syz.7.3253 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 375.455741][T19289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.455750][T19289] Call Trace: [ 375.455756][T19289] [ 375.455763][T19289] dump_stack_lvl+0x241/0x360 [ 375.455794][T19289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.455817][T19289] ? __pfx__printk+0x10/0x10 [ 375.455843][T19289] ? __pfx___might_resched+0x10/0x10 [ 375.455863][T19289] should_fail_ex+0x424/0x570 [ 375.455891][T19289] should_failslab+0xac/0x100 [ 375.455911][T19289] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 375.455927][T19289] ? __alloc_skb+0x1c2/0x480 [ 375.455950][T19289] __alloc_skb+0x1c2/0x480 [ 375.455991][T19289] ? __pfx___alloc_skb+0x10/0x10 [ 375.456014][T19289] ? netlink_autobind+0xd6/0x2f0 [ 375.456032][T19289] ? netlink_autobind+0x2b0/0x2f0 [ 375.456056][T19289] netlink_sendmsg+0x638/0xcd0 [ 375.456088][T19289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.456110][T19289] ? aa_sock_msg_perm+0x91/0x160 [ 375.456134][T19289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.456152][T19289] __sock_sendmsg+0x221/0x270 [ 375.456173][T19289] ____sys_sendmsg+0x523/0x860 [ 375.456203][T19289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.456219][T19289] ? __fget_files+0x2a/0x420 [ 375.456235][T19289] ? __fget_files+0x2a/0x420 [ 375.456257][T19289] __sys_sendmsg+0x271/0x360 [ 375.456278][T19289] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.456338][T19289] ? do_syscall_64+0xb6/0x210 [ 375.456357][T19289] do_syscall_64+0xf3/0x210 [ 375.456373][T19289] ? clear_bhb_loop+0x45/0xa0 [ 375.456392][T19289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.456406][T19289] RIP: 0033:0x7f0d2778e169 [ 375.456422][T19289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.456435][T19289] RSP: 002b:00007f0d28685038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.456453][T19289] RAX: ffffffffffffffda RBX: 00007f0d279b6160 RCX: 00007f0d2778e169 [ 375.456465][T19289] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 375.456474][T19289] RBP: 00007f0d28685090 R08: 0000000000000000 R09: 0000000000000000 [ 375.456481][T19289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.456487][T19289] R13: 0000000000000001 R14: 00007f0d279b6160 R15: 00007ffcbed6d488 [ 375.456503][T19289] [ 375.724555][T19163] hsr_slave_0: entered promiscuous mode [ 375.731238][T19163] hsr_slave_1: entered promiscuous mode [ 375.738521][T19163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.746649][T19163] Cannot create hsr debugfs directory [ 375.807879][T19293] netlink: 'syz.7.3255': attribute type 9 has an invalid length. [ 375.937400][T19301] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 375.950758][T19303] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 376.132779][ T5853] Bluetooth: hci4: command tx timeout [ 376.391953][T19323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3265'. [ 376.703766][T19343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.110232][T19163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.143937][T19163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.175832][T19163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.207604][T19163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.220953][T19369] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3280'. [ 377.238303][T19370] netlink: 'syz.4.3279': attribute type 29 has an invalid length. [ 377.268375][T19369] FAULT_INJECTION: forcing a failure. [ 377.268375][T19369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.286426][T19371] netlink: 'syz.4.3279': attribute type 29 has an invalid length. [ 377.297131][T19369] CPU: 0 UID: 0 PID: 19369 Comm: syz.7.3280 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 377.297157][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.297166][T19369] Call Trace: [ 377.297174][T19369] [ 377.297181][T19369] dump_stack_lvl+0x241/0x360 [ 377.297212][T19369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.297235][T19369] ? __pfx__printk+0x10/0x10 [ 377.297272][T19369] should_fail_ex+0x424/0x570 [ 377.297301][T19369] _copy_from_iter+0x211/0x1c70 [ 377.297328][T19369] ? __build_skb_around+0x247/0x3d0 [ 377.297355][T19369] ? __alloc_skb+0x298/0x480 [ 377.297376][T19369] ? __pfx__copy_from_iter+0x10/0x10 [ 377.297398][T19369] ? __pfx___alloc_skb+0x10/0x10 [ 377.297423][T19369] ? skb_put+0x114/0x1f0 [ 377.297450][T19369] netlink_sendmsg+0x73c/0xcd0 [ 377.297484][T19369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.297517][T19369] ? aa_sock_msg_perm+0x91/0x160 [ 377.297544][T19369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.297562][T19369] __sock_sendmsg+0x221/0x270 [ 377.297585][T19369] ____sys_sendmsg+0x523/0x860 [ 377.297619][T19369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.297640][T19369] ? __fget_files+0x2a/0x420 [ 377.297660][T19369] ? __fget_files+0x2a/0x420 [ 377.297685][T19369] __sys_sendmsg+0x271/0x360 [ 377.297707][T19369] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.297779][T19369] ? do_syscall_64+0xb6/0x210 [ 377.297800][T19369] do_syscall_64+0xf3/0x210 [ 377.297817][T19369] ? clear_bhb_loop+0x45/0xa0 [ 377.297837][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.297852][T19369] RIP: 0033:0x7f0d2778e169 [ 377.297867][T19369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.297881][T19369] RSP: 002b:00007f0d286c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.297900][T19369] RAX: ffffffffffffffda RBX: 00007f0d279b5fa0 RCX: 00007f0d2778e169 [ 377.297912][T19369] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 377.297923][T19369] RBP: 00007f0d286c7090 R08: 0000000000000000 R09: 0000000000000000 [ 377.297933][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.297943][T19369] R13: 0000000000000000 R14: 00007f0d279b5fa0 R15: 00007ffcbed6d488 [ 377.297972][T19369] [ 377.531260][T19370] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3279'. [ 377.541985][T19370] netlink: 'syz.4.3279': attribute type 1 has an invalid length. [ 377.549795][T19370] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3279'. [ 377.559789][T19370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3279'. [ 377.570418][T19370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3279'. [ 377.594671][T19370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 377.669810][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3282'. [ 377.683490][T19378] nbd: nbd0 already in use [ 377.844925][T19163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.920066][T19163] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.945989][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.953204][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.016052][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.023250][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.218507][ T5853] Bluetooth: hci4: command tx timeout [ 378.227162][T19402] netlink: 'syz.4.3291': attribute type 7 has an invalid length. [ 378.310121][T19409] FAULT_INJECTION: forcing a failure. [ 378.310121][T19409] name failslab, interval 1, probability 0, space 0, times 0 [ 378.345606][T19409] CPU: 0 UID: 0 PID: 19409 Comm: syz.5.3292 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 378.345635][T19409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.345645][T19409] Call Trace: [ 378.345652][T19409] [ 378.345660][T19409] dump_stack_lvl+0x241/0x360 [ 378.345692][T19409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.345715][T19409] ? __pfx__printk+0x10/0x10 [ 378.345743][T19409] ? __pfx___might_resched+0x10/0x10 [ 378.345765][T19409] should_fail_ex+0x424/0x570 [ 378.345795][T19409] should_failslab+0xac/0x100 [ 378.345814][T19409] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 378.345833][T19409] ? __alloc_skb+0x1c2/0x480 [ 378.345860][T19409] __alloc_skb+0x1c2/0x480 [ 378.345888][T19409] ? __pfx___alloc_skb+0x10/0x10 [ 378.345921][T19409] netlink_dump+0x237/0xeb0 [ 378.345942][T19409] ? trace_contention_end+0x3c/0x120 [ 378.345960][T19409] ? __mutex_lock+0x380/0x10c0 [ 378.345984][T19409] ? __pfx_netlink_dump+0x10/0x10 [ 378.346001][T19409] ? __netlink_lookup+0x894/0x980 [ 378.346041][T19409] ? netlink_lookup+0x31/0x200 [ 378.346070][T19409] __netlink_dump_start+0x5a2/0x790 [ 378.346101][T19409] rtnetlink_rcv_msg+0xbba/0xd70 [ 378.346129][T19409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 378.346147][T19409] ? __lock_acquire+0xad5/0xd80 [ 378.346166][T19409] ? __pfx_rtnl_dumpit+0x10/0x10 [ 378.346186][T19409] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 378.346223][T19409] netlink_rcv_skb+0x208/0x480 [ 378.346244][T19409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 378.346266][T19409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.346307][T19409] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.346330][T19409] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.346353][T19409] netlink_unicast+0x7f8/0x9a0 [ 378.346381][T19409] ? __pfx_netlink_unicast+0x10/0x10 [ 378.346402][T19409] ? skb_put+0x114/0x1f0 [ 378.346430][T19409] netlink_sendmsg+0x8c3/0xcd0 [ 378.346464][T19409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.346495][T19409] ? aa_sock_msg_perm+0x91/0x160 [ 378.346522][T19409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.346539][T19409] __sock_sendmsg+0x221/0x270 [ 378.346563][T19409] ____sys_sendmsg+0x523/0x860 [ 378.346597][T19409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.346618][T19409] ? __fget_files+0x2a/0x420 [ 378.346638][T19409] ? __fget_files+0x2a/0x420 [ 378.346664][T19409] __sys_sendmsg+0x271/0x360 [ 378.346687][T19409] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.346762][T19409] ? do_syscall_64+0xb6/0x210 [ 378.346783][T19409] do_syscall_64+0xf3/0x210 [ 378.346801][T19409] ? clear_bhb_loop+0x45/0xa0 [ 378.346821][T19409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.346837][T19409] RIP: 0033:0x7f56bc58e169 [ 378.346852][T19409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.346866][T19409] RSP: 002b:00007f56bd3a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.346884][T19409] RAX: ffffffffffffffda RBX: 00007f56bc7b5fa0 RCX: 00007f56bc58e169 [ 378.346896][T19409] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 378.346907][T19409] RBP: 00007f56bd3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 378.346917][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.346927][T19409] R13: 0000000000000000 R14: 00007f56bc7b5fa0 R15: 00007ffe9a521088 [ 378.346957][T19409] [ 378.759434][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.773335][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.009412][T19163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.117682][T19441] xfrm1: entered allmulticast mode [ 379.593824][T19470] x_tables: duplicate underflow at hook 2 [ 379.716062][T19476] FAULT_INJECTION: forcing a failure. [ 379.716062][T19476] name failslab, interval 1, probability 0, space 0, times 0 [ 379.727677][T19163] veth0_vlan: entered promiscuous mode [ 379.755604][T19476] CPU: 1 UID: 0 PID: 19476 Comm: syz.7.3309 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 379.755632][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.755642][T19476] Call Trace: [ 379.755649][T19476] [ 379.755656][T19476] dump_stack_lvl+0x241/0x360 [ 379.755687][T19476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.755710][T19476] ? __pfx__printk+0x10/0x10 [ 379.755738][T19476] ? __pfx___might_resched+0x10/0x10 [ 379.755759][T19476] should_fail_ex+0x424/0x570 [ 379.755787][T19476] should_failslab+0xac/0x100 [ 379.755806][T19476] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 379.755824][T19476] ? __alloc_skb+0x1c2/0x480 [ 379.755850][T19476] __alloc_skb+0x1c2/0x480 [ 379.755874][T19476] ? __pfx___alloc_skb+0x10/0x10 [ 379.755903][T19476] netlink_dump+0x237/0xeb0 [ 379.755921][T19476] ? trace_contention_end+0x3c/0x120 [ 379.755938][T19476] ? __mutex_lock+0x380/0x10c0 [ 379.755959][T19476] ? __pfx_netlink_dump+0x10/0x10 [ 379.755974][T19476] ? __netlink_lookup+0x894/0x980 [ 379.756013][T19476] ? netlink_lookup+0x31/0x200 [ 379.756040][T19476] __netlink_dump_start+0x5a2/0x790 [ 379.756071][T19476] rtnetlink_rcv_msg+0xbba/0xd70 [ 379.756098][T19476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.756117][T19476] ? __pfx_rtnl_dumpit+0x10/0x10 [ 379.756135][T19476] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 379.756160][T19476] ? ref_tracker_free+0x63e/0x7e0 [ 379.756184][T19476] netlink_rcv_skb+0x208/0x480 [ 379.756205][T19476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.756228][T19476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.756268][T19476] ? netlink_deliver_tap+0x2e/0x1b0 [ 379.756290][T19476] ? netlink_deliver_tap+0x2e/0x1b0 [ 379.756310][T19476] netlink_unicast+0x7f8/0x9a0 [ 379.756344][T19476] ? __pfx_netlink_unicast+0x10/0x10 [ 379.756365][T19476] ? skb_put+0x114/0x1f0 [ 379.756391][T19476] netlink_sendmsg+0x8c3/0xcd0 [ 379.756423][T19476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.756448][T19476] ? aa_sock_msg_perm+0x91/0x160 [ 379.756474][T19476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.756492][T19476] __sock_sendmsg+0x221/0x270 [ 379.756517][T19476] ____sys_sendmsg+0x523/0x860 [ 379.756551][T19476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.756572][T19476] ? __fget_files+0x2a/0x420 [ 379.756590][T19476] ? __fget_files+0x2a/0x420 [ 379.756616][T19476] __sys_sendmsg+0x271/0x360 [ 379.756638][T19476] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.756712][T19476] ? do_syscall_64+0xb6/0x210 [ 379.756732][T19476] do_syscall_64+0xf3/0x210 [ 379.756749][T19476] ? clear_bhb_loop+0x45/0xa0 [ 379.756769][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.756784][T19476] RIP: 0033:0x7f0d2778e169 [ 379.756800][T19476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.756814][T19476] RSP: 002b:00007f0d286c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.756833][T19476] RAX: ffffffffffffffda RBX: 00007f0d279b5fa0 RCX: 00007f0d2778e169 [ 379.756845][T19476] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 379.756855][T19476] RBP: 00007f0d286c7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.756865][T19476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.756875][T19476] R13: 0000000000000000 R14: 00007f0d279b5fa0 R15: 00007ffcbed6d488 [ 379.756901][T19476] [ 380.148675][T19482] netlink: 'syz.5.3311': attribute type 5 has an invalid length. [ 380.171210][T19163] veth1_vlan: entered promiscuous mode [ 380.204145][T19163] veth0_macvtap: entered promiscuous mode [ 380.214886][T19163] veth1_macvtap: entered promiscuous mode [ 380.235226][T19163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.246229][T19163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.256645][T19163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.267618][T19163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.279541][T19163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.291293][T19163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.302468][T19163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.312830][T19163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.323821][T19163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.335652][T19163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.345617][ T5853] Bluetooth: hci4: command tx timeout [ 380.370522][T19163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.384711][T19163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.393957][T19163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.403452][T19163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.480493][T19490] __nla_validate_parse: 6 callbacks suppressed [ 380.480513][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3314'. [ 380.635847][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3318'. [ 380.697399][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 380.980289][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3321'. [ 380.994370][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.007150][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.062020][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3323'. [ 381.107411][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.122941][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.345730][T19526] ipt_ECN: cannot use operation on non-tcp rule [ 381.377205][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3326'. [ 381.397381][T19526] ip6gre2: entered allmulticast mode [ 381.502853][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'. [ 381.622021][ T3012] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.692396][ T3012] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.781593][ T3012] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.909851][ T3012] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.126938][ T3012] bridge_slave_1: left allmulticast mode [ 382.134512][ T3012] bridge_slave_1: left promiscuous mode [ 382.143547][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.158558][ T3012] bridge_slave_0: left allmulticast mode [ 382.164857][ T3012] bridge_slave_0: left promiscuous mode [ 382.170547][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.491887][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.506087][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.516500][ T3012] bond0 (unregistering): Released all slaves [ 382.824654][ T3012] hsr_slave_0: left promiscuous mode [ 382.830469][ T3012] hsr_slave_1: left promiscuous mode [ 382.836934][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.844458][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.855934][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.866374][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.888979][ T3012] veth1_macvtap: left promiscuous mode [ 382.894993][ T3012] veth0_macvtap: left promiscuous mode [ 382.900573][ T3012] veth1_vlan: left promiscuous mode [ 382.906392][ T3012] veth0_vlan: left promiscuous mode [ 383.324349][T19545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3330'. [ 383.458159][T19553] Unknown options in mask 1f4 [ 383.563311][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 383.645109][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3335'. [ 383.705773][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.724279][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.734990][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.746229][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.754019][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.763733][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 384.209042][T19547] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.216579][T19547] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.308185][T19561] virt_wifi0 speed is unknown, defaulting to 1000 [ 384.330592][T19561] vxcan1 speed is unknown, defaulting to 1000 [ 384.435322][T19570] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 384.468901][T19567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3339'. [ 385.082023][T19601] xt_bpf: check failed: parse error [ 385.157886][T19561] chnl_net:caif_netlink_parms(): no params data found [ 385.209625][T19605] veth0_virt_wifi: entered promiscuous mode [ 385.217087][T19605] veth0_virt_wifi: left promiscuous mode [ 385.411403][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.432539][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.439887][T19561] bridge_slave_0: entered allmulticast mode [ 385.447850][T19561] bridge_slave_0: entered promiscuous mode [ 385.462991][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.470316][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.477645][T19561] bridge_slave_1: entered allmulticast mode [ 385.485546][T19561] bridge_slave_1: entered promiscuous mode [ 385.544849][T19561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.558085][T19561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.670149][T19561] team0: Port device team_slave_0 added [ 385.689675][T19561] team0: Port device team_slave_1 added [ 385.746085][T19638] netlink: 'syz.4.3357': attribute type 16 has an invalid length. [ 385.772967][T19638] netlink: 'syz.4.3357': attribute type 17 has an invalid length. [ 385.799765][T19641] xt_l2tp: unknown flags: 18 [ 385.812471][ T5840] Bluetooth: hci4: command tx timeout [ 385.884279][T19561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.891260][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.924268][T19561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.937524][T19561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.944550][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.988019][T19561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.038304][T19648] pim6reg527: entered allmulticast mode [ 386.113317][T19561] hsr_slave_0: entered promiscuous mode [ 386.121203][T19561] hsr_slave_1: entered promiscuous mode [ 386.133974][T19561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.141689][T19561] Cannot create hsr debugfs directory [ 386.180854][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.185290][T19656] ip6t_srh: unknown srh match flags 536B [ 386.257996][T19653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.269419][T19659] __nla_validate_parse: 4 callbacks suppressed [ 386.269436][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3365'. [ 386.305268][T19657] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 386.320456][T19661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3365'. [ 386.347619][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'. [ 386.552864][T19665] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 386.753540][T19646] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.004699][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'. [ 387.008498][T19561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.034581][T19561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.046625][T19561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 387.075766][T19561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.103977][T19680] nbd2: detected capacity change from 0 to 4096 [ 387.124427][ T5840] block nbd2: Receive control failed (result -104) [ 387.135572][T19679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.255901][T19689] netlink: 'syz.5.3375': attribute type 1 has an invalid length. [ 387.269236][T19561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.296774][T19561] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.327979][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.335209][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.365245][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.372458][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.749206][T19561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.892857][ T5840] Bluetooth: hci4: command tx timeout [ 387.919103][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3381'. [ 387.972358][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 388.168521][T19561] veth0_vlan: entered promiscuous mode [ 388.191911][T19561] veth1_vlan: entered promiscuous mode [ 388.257129][T19561] veth0_macvtap: entered promiscuous mode [ 388.271106][T19561] veth1_macvtap: entered promiscuous mode [ 388.314212][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.325867][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.367365][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.402167][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.419410][T19561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.460459][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.480858][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.493582][T19561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.509839][T19561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.521287][T19561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.530656][T19561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.541088][T19561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.620540][T19744] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3393'. [ 388.766228][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.806877][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.905580][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.924050][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.996952][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.011348][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.029523][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.044407][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.053856][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.225795][T19755] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.240095][T19755] vxcan1 speed is unknown, defaulting to 1000 [ 389.655419][T19755] chnl_net:caif_netlink_parms(): no params data found [ 389.780298][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3399'. [ 389.865222][T19776] 8021q: VLANs not supported on vxcan1 [ 389.896587][T19755] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.905253][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.913132][T19755] bridge_slave_0: entered allmulticast mode [ 389.922350][T19755] bridge_slave_0: entered promiscuous mode [ 389.932026][T19755] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.940947][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.948427][T19755] bridge_slave_1: entered allmulticast mode [ 389.963274][T19755] bridge_slave_1: entered promiscuous mode [ 390.003894][T19755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.018453][T19755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.072923][T19755] team0: Port device team_slave_0 added [ 390.086046][T19755] team0: Port device team_slave_1 added [ 390.118869][T19755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.126442][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.153082][T19755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.166283][T19755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.174145][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.200681][T19755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.252514][T19755] hsr_slave_0: entered promiscuous mode [ 390.258970][T19755] hsr_slave_1: entered promiscuous mode [ 390.268425][T19755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.276088][T19755] Cannot create hsr debugfs directory [ 390.427784][T19755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.519801][T19755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.664228][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.746154][T19755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.847505][T19755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.989814][T19755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 391.000467][T19755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 391.010237][T19755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 391.020870][T19755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 391.092678][ T5853] Bluetooth: hci3: command tx timeout [ 391.106699][T19755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.128877][T19755] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.144018][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.151166][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.168324][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.175521][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.236952][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.331590][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.391842][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.430059][T19755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.578413][ T63] bridge_slave_1: left allmulticast mode [ 391.590295][ T63] bridge_slave_1: left promiscuous mode [ 391.596439][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.614423][ T63] bridge_slave_0: left allmulticast mode [ 391.620105][ T63] bridge_slave_0: left promiscuous mode [ 391.626758][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.946169][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.958588][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.970645][ T63] bond0 (unregistering): Released all slaves [ 392.115263][T19755] veth0_vlan: entered promiscuous mode [ 392.128900][T19755] veth1_vlan: entered promiscuous mode [ 392.194757][T19755] veth0_macvtap: entered promiscuous mode [ 392.208663][T19755] veth1_macvtap: entered promiscuous mode [ 392.236100][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.246921][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.257595][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.268702][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.278784][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.289456][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.318527][T19755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.350964][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.392283][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.412179][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.428444][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.435709][T19798] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3404'. [ 392.437232][T19755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.501997][T19799] netlink: 'syz.5.3405': attribute type 23 has an invalid length. [ 392.609755][T19755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.648334][T19755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.666014][T19755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.687879][T19755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.811332][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'. [ 392.831448][ T63] hsr_slave_0: left promiscuous mode [ 392.858562][ T63] hsr_slave_1: left promiscuous mode [ 392.864881][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.882262][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.905183][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.928601][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.941806][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'. [ 392.981322][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.988474][ T63] veth1_macvtap: left promiscuous mode [ 392.991425][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.994753][ T63] veth0_macvtap: left promiscuous mode [ 393.007160][ T63] veth1_vlan: left promiscuous mode [ 393.009348][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.013988][ T63] veth0_vlan: left promiscuous mode [ 393.023685][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.034236][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.176496][ T5854] Bluetooth: hci3: command 0x041b tx timeout [ 393.500277][ T63] team0 (unregistering): Port device team_slave_1 removed [ 393.549402][ T63] team0 (unregistering): Port device team_slave_0 removed [ 393.943350][T19808] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3409'. [ 393.997841][ T13] smc: removing ib device syz2 [ 394.133548][ T6025] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.173490][ T6025] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.268771][T19811] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.315380][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.368493][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.386317][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.407786][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.460928][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.543401][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.559385][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.576582][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.584911][ T5949] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 395.101581][ T5840] Bluetooth: hci4: command tx timeout [ 395.242377][ T5949] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 395.295903][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3416'. [ 395.385314][T19811] chnl_net:caif_netlink_parms(): no params data found [ 395.495036][ T3012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.777856][ T3012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.871982][ T5949] syz1: Port: 1 Link ACTIVE [ 395.905108][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3417'. [ 395.939092][T19846] netlink: 'syz.7.3417': attribute type 5 has an invalid length. [ 395.951793][T19811] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.954396][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3417'. [ 395.968856][T19811] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.998712][T19811] bridge_slave_0: entered allmulticast mode [ 396.008825][T19811] bridge_slave_0: entered promiscuous mode [ 396.029857][T19811] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.047299][T19811] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.077483][T19811] bridge_slave_1: entered allmulticast mode [ 396.085977][T19811] bridge_slave_1: entered promiscuous mode [ 396.123679][ T5949] syz1: Port: 1 Link DOWN [ 396.209915][ T3012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.280384][T19811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.336253][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.339143][T19811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.374911][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.385059][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.397359][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.407345][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.470333][ T3012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.477210][T19863] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3421'. [ 396.568665][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3422'. [ 396.584566][T19811] team0: Port device team_slave_0 added [ 396.591435][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3420'. [ 396.613378][T19811] team0: Port device team_slave_1 added [ 396.704757][T19853] virt_wifi0 speed is unknown, defaulting to 1000 [ 396.732162][T19811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.753091][T19811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.787801][T19811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.820456][T19811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.829718][T19811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.869536][T19811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.088710][T19811] hsr_slave_0: entered promiscuous mode [ 397.098159][T19811] hsr_slave_1: entered promiscuous mode [ 397.109347][T19811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.119494][T19811] Cannot create hsr debugfs directory [ 397.174477][ T3012] bridge_slave_1: left allmulticast mode [ 397.176208][ T5854] Bluetooth: hci4: command tx timeout [ 397.181031][ T3012] bridge_slave_1: left promiscuous mode [ 397.203935][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.227905][ T3012] bridge_slave_0: left allmulticast mode [ 397.235505][ T3012] bridge_slave_0: left promiscuous mode [ 397.241329][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.678468][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.690178][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.700592][ T3012] bond0 (unregistering): Released all slaves [ 398.200064][ T3012] hsr_slave_0: left promiscuous mode [ 398.219103][ T3012] hsr_slave_1: left promiscuous mode [ 398.234094][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.241558][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.249085][T19937] ================================================================== [ 398.249101][T19937] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 398.249127][T19937] Read of size 4 at addr ffff88814274f5c0 by task syz.5.3441/19937 [ 398.249141][T19937] [ 398.249151][T19937] CPU: 0 UID: 0 PID: 19937 Comm: syz.5.3441 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 398.249169][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.249179][T19937] Call Trace: [ 398.249184][T19937] [ 398.249191][T19937] dump_stack_lvl+0x241/0x360 [ 398.249214][T19937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.249232][T19937] ? rcu_is_watching+0x15/0xb0 [ 398.249247][T19937] ? __virt_addr_valid+0x183/0x530 [ 398.249265][T19937] ? lock_release+0x4e/0x3e0 [ 398.249289][T19937] ? __virt_addr_valid+0x183/0x530 [ 398.249307][T19937] ? __virt_addr_valid+0x183/0x530 [ 398.249326][T19937] print_report+0x16e/0x5b0 [ 398.249340][T19937] ? __virt_addr_valid+0x183/0x530 [ 398.249358][T19937] ? __virt_addr_valid+0x183/0x530 [ 398.249375][T19937] ? __virt_addr_valid+0x45f/0x530 [ 398.249393][T19937] ? __phys_addr+0xba/0x170 [ 398.249411][T19937] ? hci_sock_get_cookie+0x49/0x50 [ 398.249426][T19937] kasan_report+0x143/0x180 [ 398.249441][T19937] ? hci_sock_get_cookie+0x49/0x50 [ 398.249460][T19937] hci_sock_get_cookie+0x49/0x50 [ 398.249475][T19937] mgmt_cmd_status+0x1be/0x4d0 [ 398.249494][T19937] cmd_complete_rsp+0x114/0x180 [ 398.249511][T19937] mgmt_pending_foreach+0xd1/0x130 [ 398.249526][T19937] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 398.249544][T19937] __mgmt_power_off+0x18b/0x440 [ 398.249561][T19937] ? __pfx___mgmt_power_off+0x10/0x10 [ 398.249580][T19937] ? __lock_acquire+0xad5/0xd80 [ 398.249600][T19937] ? __mutex_trylock_common+0x184/0x2e0 [ 398.249618][T19937] ? __pfx___mutex_trylock_common+0x10/0x10 [ 398.249636][T19937] ? rcu_is_watching+0x15/0xb0 [ 398.249651][T19937] ? trace_contention_end+0x3c/0x120 [ 398.249667][T19937] ? __mutex_lock+0x380/0x10c0 [ 398.249686][T19937] ? __mutex_unlock_slowpath+0x229/0x800 [ 398.249703][T19937] ? hci_dev_close_sync+0x60f/0x1260 [ 398.249725][T19937] ? __pfx___mutex_lock+0x10/0x10 [ 398.249741][T19937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.249760][T19937] ? _raw_spin_unlock_irq+0x2e/0x50 [ 398.249781][T19937] ? drain_workqueue+0x2d3/0x3a0 [ 398.249797][T19937] ? hci_discovery_set_state+0x57/0x180 [ 398.249813][T19937] hci_dev_close_sync+0x701/0x1260 [ 398.249836][T19937] ? __pfx_enable_work+0x10/0x10 [ 398.249854][T19937] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 398.249874][T19937] ? hci_dev_get+0xdc/0x1a0 [ 398.249893][T19937] hci_dev_close+0x112/0x210 [ 398.249909][T19937] sock_do_ioctl+0x152/0x400 [ 398.249927][T19937] ? __pfx_sock_do_ioctl+0x10/0x10 [ 398.249946][T19937] ? __lock_acquire+0xad5/0xd80 [ 398.249971][T19937] sock_ioctl+0x644/0x900 [ 398.249987][T19937] ? __pfx_sock_ioctl+0x10/0x10 [ 398.250001][T19937] ? __fget_files+0x2a/0x420 [ 398.250022][T19937] ? __fget_files+0x2a/0x420 [ 398.250037][T19937] ? __fget_files+0x2a/0x420 [ 398.250053][T19937] ? __pfx_sock_ioctl+0x10/0x10 [ 398.250070][T19937] __se_sys_ioctl+0xf1/0x160 [ 398.250090][T19937] do_syscall_64+0xf3/0x210 [ 398.250105][T19937] ? clear_bhb_loop+0x45/0xa0 [ 398.250122][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.250137][T19937] RIP: 0033:0x7f56bc58e169 [ 398.250151][T19937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.250164][T19937] RSP: 002b:00007f56bd3a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.250181][T19937] RAX: ffffffffffffffda RBX: 00007f56bc7b5fa0 RCX: 00007f56bc58e169 [ 398.250193][T19937] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 398.250204][T19937] RBP: 00007f56bc610a68 R08: 0000000000000000 R09: 0000000000000000 [ 398.250214][T19937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.250223][T19937] R13: 0000000000000000 R14: 00007f56bc7b5fa0 R15: 00007ffe9a521088 [ 398.250243][T19937] [ 398.250249][T19937] [ 398.643400][T19937] Allocated by task 11689: [ 398.647789][T19937] kasan_save_track+0x3f/0x80 [ 398.652454][T19937] __kasan_kmalloc+0x9d/0xb0 [ 398.657041][T19937] __kmalloc_noprof+0x28e/0x4d0 [ 398.661867][T19937] sk_prot_alloc+0xe0/0x210 [ 398.666350][T19937] sk_alloc+0x3e/0x370 [ 398.670398][T19937] bt_sock_alloc+0x3c/0x340 [ 398.674884][T19937] hci_sock_create+0xa1/0x190 [ 398.679537][T19937] bt_sock_create+0x161/0x230 [ 398.684190][T19937] __sock_create+0x4c0/0xa30 [ 398.688758][T19937] __sys_socket+0x14d/0x3c0 [ 398.693241][T19937] __x64_sys_socket+0x7a/0x90 [ 398.697900][T19937] do_syscall_64+0xf3/0x210 [ 398.702392][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.708275][T19937] [ 398.710575][T19937] Freed by task 19938: [ 398.714620][T19937] kasan_save_track+0x3f/0x80 [ 398.719280][T19937] kasan_save_free_info+0x40/0x50 [ 398.724283][T19937] __kasan_slab_free+0x59/0x70 [ 398.729028][T19937] kfree+0x198/0x430 [ 398.732902][T19937] __sk_destruct+0x4ce/0x650 [ 398.737474][T19937] mgmt_pending_remove+0x13e/0x1a0 [ 398.742567][T19937] mgmt_pending_foreach+0xd1/0x130 [ 398.747665][T19937] mgmt_index_removed+0x135/0x3a0 [ 398.752666][T19937] hci_sock_bind+0xd74/0x12d0 [ 398.757320][T19937] __sys_bind+0x1de/0x290 [ 398.761627][T19937] __x64_sys_bind+0x7a/0x90 [ 398.766110][T19937] do_syscall_64+0xf3/0x210 [ 398.770590][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.776464][T19937] [ 398.778768][T19937] The buggy address belongs to the object at ffff88814274f000 [ 398.778768][T19937] which belongs to the cache kmalloc-2k of size 2048 [ 398.792807][T19937] The buggy address is located 1472 bytes inside of [ 398.792807][T19937] freed 2048-byte region [ffff88814274f000, ffff88814274f800) [ 398.806760][T19937] [ 398.809066][T19937] The buggy address belongs to the physical page: [ 398.815475][T19937] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88814274e000 pfn:0x142748 [ 398.825623][T19937] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 398.834100][T19937] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 398.842679][T19937] page_type: f5(slab) [ 398.846643][T19937] raw: 057ff00000000240 ffff88801b042000 ffffea000510b810 ffffea000510a410 [ 398.855218][T19937] raw: ffff88814274e000 0000000000080006 00000000f5000000 0000000000000000 [ 398.863796][T19937] head: 057ff00000000240 ffff88801b042000 ffffea000510b810 ffffea000510a410 [ 398.872453][T19937] head: ffff88814274e000 0000000000080006 00000000f5000000 0000000000000000 [ 398.881118][T19937] head: 057ff00000000003 ffffea000509d201 00000000ffffffff 00000000ffffffff [ 398.889770][T19937] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 398.898421][T19937] page dumped because: kasan: bad access detected [ 398.904824][T19937] page_owner tracks the page as allocated [ 398.910514][T19937] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6237931894, free_ts 0 [ 398.930140][T19937] post_alloc_hook+0x1f4/0x240 [ 398.934897][T19937] get_page_from_freelist+0x360a/0x37a0 [ 398.940424][T19937] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 398.946211][T19937] alloc_pages_mpol+0x339/0x690 [ 398.951037][T19937] allocate_slab+0x8f/0x3b0 [ 398.955522][T19937] ___slab_alloc+0xc3b/0x1500 [ 398.960177][T19937] __slab_alloc+0x58/0xa0 [ 398.964488][T19937] __kmalloc_cache_noprof+0x26a/0x370 [ 398.969835][T19937] acpi_ds_create_walk_state+0x105/0x2a0 [ 398.975445][T19937] acpi_ds_call_control_method+0x143/0x7e0 [ 398.981228][T19937] acpi_ps_parse_aml+0x2df/0x960 [ 398.986148][T19937] acpi_ps_execute_method+0x74d/0x880 [ 398.991495][T19937] acpi_ns_evaluate+0x5df/0xa40 [ 398.996324][T19937] acpi_evaluate_object+0x59d/0xaf0 [ 399.001503][T19937] acpi_evaluate_integer+0x115/0x2f0 [ 399.006767][T19937] acpi_bus_get_status+0x1ad/0x470 [ 399.011860][T19937] page_owner free stack trace missing [ 399.017204][T19937] [ 399.019508][T19937] Memory state around the buggy address: [ 399.025114][T19937] ffff88814274f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.033155][T19937] ffff88814274f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.041190][T19937] >ffff88814274f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 399.049228][T19937] ^ [ 399.055359][T19937] ffff88814274f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.063399][T19937] ffff88814274f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.071435][T19937] ================================================================== [ 399.083718][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.093012][ T5854] Bluetooth: hci3: command tx timeout [ 399.100546][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.108336][T19937] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.115538][T19937] CPU: 1 UID: 0 PID: 19937 Comm: syz.5.3441 Not tainted 6.15.0-rc2-syzkaller-00258-g750d0ac001e8 #0 PREEMPT(full) [ 399.127585][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.137627][T19937] Call Trace: [ 399.140892][T19937] [ 399.143811][T19937] dump_stack_lvl+0x241/0x360 [ 399.148485][T19937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.153671][T19937] ? __pfx__printk+0x10/0x10 [ 399.158256][T19937] ? vscnprintf+0x5d/0x90 [ 399.162576][T19937] panic+0x349/0x880 [ 399.166460][T19937] ? check_panic_on_warn+0x21/0xb0 [ 399.171577][T19937] ? __pfx_panic+0x10/0x10 [ 399.176014][T19937] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 399.181998][T19937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 399.188313][T19937] ? print_report+0x519/0x5b0 [ 399.192983][T19937] check_panic_on_warn+0x86/0xb0 [ 399.197910][T19937] ? hci_sock_get_cookie+0x49/0x50 [ 399.203005][T19937] end_report+0x77/0x160 [ 399.207233][T19937] kasan_report+0x154/0x180 [ 399.211720][T19937] ? hci_sock_get_cookie+0x49/0x50 [ 399.216830][T19937] hci_sock_get_cookie+0x49/0x50 [ 399.221755][T19937] mgmt_cmd_status+0x1be/0x4d0 [ 399.226508][T19937] cmd_complete_rsp+0x114/0x180 [ 399.231345][T19937] mgmt_pending_foreach+0xd1/0x130 [ 399.236441][T19937] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 399.241799][T19937] __mgmt_power_off+0x18b/0x440 [ 399.246635][T19937] ? __pfx___mgmt_power_off+0x10/0x10 [ 399.251991][T19937] ? __lock_acquire+0xad5/0xd80 [ 399.256834][T19937] ? __mutex_trylock_common+0x184/0x2e0 [ 399.262381][T19937] ? __pfx___mutex_trylock_common+0x10/0x10 [ 399.268288][T19937] ? rcu_is_watching+0x15/0xb0 [ 399.273050][T19937] ? trace_contention_end+0x3c/0x120 [ 399.278325][T19937] ? __mutex_lock+0x380/0x10c0 [ 399.283083][T19937] ? __mutex_unlock_slowpath+0x229/0x800 [ 399.288703][T19937] ? hci_dev_close_sync+0x60f/0x1260 [ 399.293982][T19937] ? __pfx___mutex_lock+0x10/0x10 [ 399.298993][T19937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.304988][T19937] ? _raw_spin_unlock_irq+0x2e/0x50 [ 399.310194][T19937] ? drain_workqueue+0x2d3/0x3a0 [ 399.315128][T19937] ? hci_discovery_set_state+0x57/0x180 [ 399.320663][T19937] hci_dev_close_sync+0x701/0x1260 [ 399.325771][T19937] ? __pfx_enable_work+0x10/0x10 [ 399.330694][T19937] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 399.336229][T19937] ? hci_dev_get+0xdc/0x1a0 [ 399.340718][T19937] hci_dev_close+0x112/0x210 [ 399.345295][T19937] sock_do_ioctl+0x152/0x400 [ 399.349875][T19937] ? __pfx_sock_do_ioctl+0x10/0x10 [ 399.354976][T19937] ? __lock_acquire+0xad5/0xd80 [ 399.359821][T19937] sock_ioctl+0x644/0x900 [ 399.364138][T19937] ? __pfx_sock_ioctl+0x10/0x10 [ 399.368975][T19937] ? __fget_files+0x2a/0x420 [ 399.373548][T19937] ? __fget_files+0x2a/0x420 [ 399.378125][T19937] ? __fget_files+0x2a/0x420 [ 399.382700][T19937] ? __pfx_sock_ioctl+0x10/0x10 [ 399.387536][T19937] __se_sys_ioctl+0xf1/0x160 [ 399.392114][T19937] do_syscall_64+0xf3/0x210 [ 399.396603][T19937] ? clear_bhb_loop+0x45/0xa0 [ 399.401265][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.407143][T19937] RIP: 0033:0x7f56bc58e169 [ 399.411544][T19937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.431138][T19937] RSP: 002b:00007f56bd3a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.439543][T19937] RAX: ffffffffffffffda RBX: 00007f56bc7b5fa0 RCX: 00007f56bc58e169 [ 399.447500][T19937] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 399.455475][T19937] RBP: 00007f56bc610a68 R08: 0000000000000000 R09: 0000000000000000 [ 399.463449][T19937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.471411][T19937] R13: 0000000000000000 R14: 00007f56bc7b5fa0 R15: 00007ffe9a521088 [ 399.479377][T19937] [ 399.482637][T19937] Kernel Offset: disabled [ 399.486951][T19937] Rebooting in 86400 seconds..