last executing test programs: 44.245397037s ago: executing program 1 (id=66): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="9433ddb02192333d0ddf82345dd51f69e790c9aa6b7a2dd9f3d62389ae3f5de6958517ffa2604658020102be1ff80346a75e730a563a3c399a69", 0x3a}, {&(0x7f00000002c0)="d528114f7555af2259f49941fa70efaf87cfeb690e915573a720c22cc7f5d76d2a", 0x21}, {&(0x7f0000000300)="1e7dcf6c7d328f08118be502714b26ffb667cfaa99e9b1d73a76001675d56fd8840bf93f2f35", 0x26}], 0x3}}], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x1aa8}, @val={0x2, 0x1, 0x6, 0xffff, 0x7fff, 0x406}, @arp=@generic={0x325, 0x6007, 0x6, 0x6, 0x9, @local, "9224220b5c2a", @empty, "7d852d7c6eaf4acf4b96abc58681"}}, 0x36) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x29, 0x7fff, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8000, 0x0, 0x0, 0xdf37}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2fdd, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x9f, '\x00', 0x0, r0, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9d97}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r7, r8, r9], &(0x7f00000007c0)=[{0x1, 0x1, 0xe, 0xc}, {0x4, 0x5, 0xd, 0x4}, {0x2, 0x1, 0x5, 0x3}, {0x0, 0x3, 0x8, 0x8}, {0x0, 0x1, 0x3, 0x3}, {0x3, 0x5, 0x9, 0x9}, {0x3, 0x4, 0xf, 0x3}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x1, 0x8, 0x3a, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x80000000, 0x4}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r10, 0x29, 0xf9, 0x5, 0x3, 0x10, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x708, 0x200, 0xfffffff9}}) r12 = socket(0x10, 0x3, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000000180)=0x3) recvmmsg$unix(r13, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 43.609152376s ago: executing program 1 (id=73): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2d, 0x1, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value, @void, @void, r4}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="020000000000000000400000c36979e27bd4179554db76bc621d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$l2tp(0x2, 0x2, 0x73) 42.273270846s ago: executing program 1 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xfffff000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$netlink(0x10, 0x3, 0x2) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@flushsa={0x294, 0x1c, 0x400, 0x70bd25, 0x25dfdbff, {0xff}, [@algo_comp={0xcd, 0x3, {{'deflate\x00'}, 0x428, "4a58c4acd07f3d446d926e54c5668baf28780e890d39ba7eda258c42563bd67762a77eb9ac8dd53ae77398a8d357c8895551877bf0c45cf8282343626da471bca3e5a623857be16a710e897147ccaa43fa9adface2e2d83c5b15166c2e56e2775f2cd80eaf114beec62e9d4e73ec879fefb6aeb2e637f3b5e40209c359b652797dd29f923a"}}, @algo_aead={0xffffffffffffff02, 0x12, {{'rfc7539(lrw(cast6),crc32)\x00'}, 0x270, 0x200, "e88892b40eec2d92a8502db697b4d9774aedcadb00100d4bd6bc281909f4f50460d9e1efacbfa749928d60d92b256fa7848fd1d4a62820381b0286c4b24e7189062c2abd8f36b16e765ac4a9908d"}}, @algo_auth={0xc8, 0x1, {{'sha224-avx\x00'}, 0x400, "a6b1e2a62c5bbaac49315a9984f0fe3958c551824c0720fd76c0f60207d130697f7fb4f316d165f64a4f5e9d1569d8df8f66d19f0373507159108e1ce4ca3ca849a8436c9af7278c875c3435152c8f933424748062bfb447c8426b2ce1dd46fe6a2a0d449465f7bd16590d93665882dc40e16583ef95f5663b6795a6f34c8c6e"}}, @replay_thresh={0x8, 0xb, 0x5}, @user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0xa}}, @policy_type={0xa}, @mark={0xc, 0x15, {0x35075d, 0x7fffffff}}]}, 0x294}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) 41.581592674s ago: executing program 1 (id=88): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x1a, 0x3, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_UID={0x8, 0x19, r2}, @RTA_DPORT={0x6, 0x1d, 0x6}]}, 0x3c}}, 0x8000) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 25.782485513s ago: executing program 1 (id=88): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x1a, 0x3, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_UID={0x8, 0x19, r2}, @RTA_DPORT={0x6, 0x1d, 0x6}]}, 0x3c}}, 0x8000) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 7.790799579s ago: executing program 1 (id=88): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x1a, 0x3, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_UID={0x8, 0x19, r2}, @RTA_DPORT={0x6, 0x1d, 0x6}]}, 0x3c}}, 0x8000) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 4.1811123s ago: executing program 2 (id=396): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socketpair(0x25, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x67}, [@NDA_IFINDEX={0x8}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1080}, 0x0) accept$packet(r1, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0xba, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff08ffffff0000000000000800450000ac0000000000019078ac1e0001ac1414bb0c009078002000014400000300000000fc060000e50000027f000001440c1bc1e000000200000007000cee0dd9de36ed4bcc5b4e0707e2ac1e0001890bff0a010100ffffffff444c0001ac1e0801010000007f000001000000000000000000000000ffffffff000002007f000001000000000000000000000000ac1efd0100000000ffffffff07000000ffffffff0000000b44041f000000"], 0x0) 3.861885029s ago: executing program 3 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x0, 0x3e8, 0x3e8, 0x0, 0xf0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@broadcast, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [], [], 'veth1_macvtap\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xfffffff7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 3.294039187s ago: executing program 3 (id=401): mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000080000000000000081003e00000d030000000c0300009a8feb0884f56c3e8f416d635ca2f8ad35ddc4d4f5b73acaeae3c55801b17dc5c412cb566eb3f1bcfe0cf8c13c48ad8c24b402d1fb829ebaccce4c2ea399"], 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x2000}, 0x90) r4 = openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x27) r5 = accept(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000180)=0x80) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0x1, 0x2}, 0x6) 3.140327135s ago: executing program 2 (id=404): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x2061, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x13, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x90}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x3, 0x2, 0x4, 0x5, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x40, 0x60, &(0x7f00000006c0)=""/96, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x0, 0x1, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000880)=[0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x5, 0x4}, {0x5, 0x5, 0x3, 0x9}, {0x4, 0x4, 0x10}, {0x0, 0x2, 0x4, 0xb}], 0x10, 0x7, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1e0, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x19c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x401, 0x4, 0x7, 0x3}, {0x100, 0x2, 0xc7, 0x8}, {0x3, 0x4, 0x2, 0x3}, {0x7, 0x9, 0x2, 0x4}, {0x5eb0, 0x9, 0xa, 0x1}]}}, @TCA_BPF_ACT={0x154, 0x1, [@m_sample={0x150, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x674, 0x20000000, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xc2, 0x6, "9200fd45cfbfaf345fb3a8a997749fefa053a1e631f289e2733a34bfda3a1983d7027974d46e922209e9f418398e634151458aec78c3e590819e1ab74e5f08ce9f128c78176c6afb718af7f892cc43aa236ae8553e2bcb9475712e849a72c8618a556ea37252caba7ed994f095c56da51cd5d78c3a9aeb9b782ad180c98a44e20973f69e8f22bb71a2cc45b0df0fd876caa6827c38ba0bd9731585a5d2054dde461d79f8ad529bef9fe86f8f1d6b990c101919ac92fb4cd6cd1cd38b8ad6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.965566972s ago: executing program 3 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x4000) 2.8672371s ago: executing program 0 (id=407): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0xffffffffffffff9c}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0xffffffffffffff9c}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x4) (async) 2.705863684s ago: executing program 2 (id=408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) listen(r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040), 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYRESHEX=r5, @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4804}, 0x10) 2.549743984s ago: executing program 0 (id=409): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020400) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x2) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) socketpair(0x1, 0x2, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000101420002abd7000fedbdf2508004a0000000000080001000200000008004f0005000000080003000000000008004a0000000000d350738afe3a218c6e72ca7820f2937e58e15783f00096170da25ec6c589fa9409e07350b7ff42c4c7e00295f579c7c92f60c1a3937e99bb0b5494c760a6805488777b1d4b43c8564af7fce91d455aee03002c5454fb072b36c36b0c78a5c1aba8c583098c31ec1c5a32a799ad266e9626bd2e6a50164f40e9049540e7d5a2ca3acb4711b9c17aa5079f31569d55e5f3b453f3e211e8fda4ace5a26a4c94"], 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300)={0x0, 0xe000}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000380)={r7, 0x5, "1c4d1eb60b"}, &(0x7f00000003c0)=0xd) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) 2.44964873s ago: executing program 3 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000bc106f371ef227b20000000000000007"], 0x14}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32=r4, @ANYBLOB="05000700010000000500030000000000050007"], 0x60}}, 0x0) 2.425442785s ago: executing program 4 (id=411): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4096) 1.153505204s ago: executing program 2 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x33) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x3ff, 0x8000, 0x5, 0x2, r6, 0x8, '\x00', r8, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x100}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r10 = socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000080)=0x5000, 0x4) 1.153119098s ago: executing program 4 (id=413): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000193c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0xffffffffffffff83}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000cc0)=""/219, 0xdb}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000c40)=""/79, 0x4f}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000080)=""/118, 0x76}], 0xb, 0x0, 0x0, 0xb00}}], 0x2, 0x100, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003e000701fcfffffffd9bdf25037c0000040038800c0001800800030004009d"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) bind$can_raw(r4, &(0x7f0000000080), 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0xd, 0x101, &(0x7f0000000380)=""/102386, &(0x7f0000000000)=0x19049) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000019380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x4001) 1.151064506s ago: executing program 0 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) (async) 1.105308029s ago: executing program 3 (id=415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r1, &(0x7f0000000180)="9e627cb8651778765e05d6f8657bb510a7b42258a7e4e7b98f7aea6af598bb75748f23812af2db0b26551cc51fd3d8a6f584157c81f914a2c6996da8e43d3eff349027c126e036a3f534c22373cc391730e1e1e412651e2d4e42c52dc3dae7b35b6df00a2f7157c4313c5ba372e88f17c24693653ea5", 0x76, 0x48000, &(0x7f0000000200)={0xa, 0x4e1f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async) sendto$inet6(r1, &(0x7f0000000180)="9e627cb8651778765e05d6f8657bb510a7b42258a7e4e7b98f7aea6af598bb75748f23812af2db0b26551cc51fd3d8a6f584157c81f914a2c6996da8e43d3eff349027c126e036a3f534c22373cc391730e1e1e412651e2d4e42c52dc3dae7b35b6df00a2f7157c4313c5ba372e88f17c24693653ea5", 0x76, 0x48000, &(0x7f0000000200)={0xa, 0x4e1f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) (async) 985.53887ms ago: executing program 0 (id=416): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x3a}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0d"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)}}], 0x2, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000300)={r8, 0x5}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001200)=ANY=[@ANYBLOB="ff000000000000000a004e2000010001fe8000000000000000000000000000bb020000000000000000000000000000000000000000000000000000000000deffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e2200000004ff010000000000000000000000000001d9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000001ff01000000000000000000000000000180ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000002fc02000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20fffffffdfe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000020000000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001fc00000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000ffff010000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a299b4bfa66cc382419a333357231ed7f7754d875287973e5bdaad6c1acbc513d4a12567346758bdfaa6b8746995c670015f85de0b7919ce73c0f85bf41ca61b3c11dadd77e29b2c95521299379f44012896b2ac99eab8372a1d4175713631d3043686abe57c3d627daa648e5ad92ac5735d9923c12ee7c21e02380a95d354434cfcdbe9f2db5ba4eb11b9cccacb10eb2430f7d59ca56d166d5adbacf7ef90a1799cb04bf842d33b16fab7a000000000000"], 0x410) (async) r9 = socket(0x1e, 0x1, 0x0) listen(r9, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) (async) accept4$nfc_llcp(r9, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r8, 0xffffff80, 0xd4}, &(0x7f0000000100)=0xc) (async) r10 = socket(0x8, 0x6, 0xfffffffd) connect$inet(r10, 0x0, 0x0) connect$can_j1939(r10, &(0x7f0000000200)={0x1d, r2, 0x5, {0x0, 0x0, 0x4}, 0x1}, 0x18) 781.760979ms ago: executing program 4 (id=417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000240)) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/93, 0x5d, 0x27, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x1712847e, 0x200, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r6, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @private2={0xfc, 0x2, '\x00', 0xfd}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r2}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) syz_emit_ethernet(0x275, &(0x7f0000000540)={@broadcast, @random="6a00084fa53b", @val={@void, {0x8100, 0x6}}, {@ipv6={0x86dd, @udp={0x9, 0x6, "1bf859", 0x23b, 0x11, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x3c, 0x2, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x3b, 0x12, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @mcast1, @mcast1, @mcast2, @mcast2]}, @fragment={0xff, 0x0, 0x2, 0x1, 0x0, 0x8, 0x65}, @srh={0x1, 0x14, 0x4, 0xa, 0x9, 0x50, 0xe15b, [@ipv4={'\x00', '\xff\xff', @local}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x6c, 0xc, 0x4, 0x6, 0x4, 0x50, 0x4, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x39}]}], {0x4e20, 0x4e21, 0x73, 0x0, @opaque="dbf85b271810ca6d183b4e55a639f3eeae15e3ba2da9709d55c26f072588d5c7090b72c34ae01bf284b08f0048089df2701acdbcd20d452c1da8c6752d8d06d7d098af25f7f6404c24ea27d49107971f177c7e9895245578ddc5d2a3b8d950a4e1f37c7d2c857d0e3d9e97"}}}}}}, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast]}) 764.871589ms ago: executing program 2 (id=418): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5c}}}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x103}, @broadcast}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x9, 'geneve0\x00'}) epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) unshare(0x28000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="0600cd00000000002f013300802009000802110000010802110000005050505050505f00ffff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 624.361807ms ago: executing program 4 (id=419): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 413.92311ms ago: executing program 0 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x4000) 413.380471ms ago: executing program 4 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x0) 364.670534ms ago: executing program 2 (id=422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 277.44707ms ago: executing program 4 (id=423): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read(r0, &(0x7f0000000000)=""/4096, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@getneightbl={0x14, 0x42, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0xd5ff79d67cc6fa3b) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x480) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001240)={r2, 0x2, 0x3212, 0x2}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000001280)=0xfffff8db, 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x754}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = openat$cgroup_procs(r4, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001400)) r6 = accept$alg(r4, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000001640)={0x7, 0x8, '\x00', 0x0, &(0x7f0000001600)=[0x0]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000001680)) r7 = socket$netlink(0x10, 0x3, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, r8, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40048c2}, 0x4058090) syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r2) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001840)=""/149, &(0x7f0000001900)=0x95) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001d40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001980)={0x37c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1cd}, @NL80211_ATTR_FRAME={0x2c3, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x4b12}, @broadcast, @device_a, @from_mac=@broadcast, {0x5}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x24, "d66d0478a940b8e72fa13aa4d96ced3dc5b776172559191373a9532097e266b8e1c359ad"}, {0xdd, 0x5b, "859046952feb8669a51347946f5be14e247006f97c44381b99a094207cd8926efc67c2527b572f83725f89fb8319b9a53d3080f5cb5d6d2ab6cc0f37db3e1ec5396416789766102ca9107b4801cf58df3b9cabc491046b85690b65"}, {0xdd, 0x8f, "f046689c5a3b798906f0f41fcffc6ceb68fa11862df4a630d52726ed57d9f0ee10d56856b61af40c8977f90bcfed4f5ddbf0459c7fee31dfe4d89b8216271ee52f39ccbffaf922b77cf98e2f08c4711bb97692e252deac9263e81b8bc1f98d1534e7156df9f4a6bbca02561c254d28e9d07800e0cf1cbc10266bd1d9d369ad92874d396b9513239e571283e2c885fd"}, {0xdd, 0xec, "670be868e3bcb5c71e80888b5a93016a2c9dc6aff0d2750d3f148880bfb4b4066149ccec043748799b1f042e3a2a909e4e99af835f889191c0292c38974c265379c40e13e44f1f8dae9bf15ec5832a1070484c023036cff82b4b6fe7efc71601aca011af8bd441b667f4a3c5dbe0c514dd4e516a888a008babb990d9303db06f90c9cb67387200e19904880f6c0b4fd7ab944ecfa99a11160aafa18afac3d72aacec805cbb407ed61fdca18042e64d4e070951d4078e4dfb1eb0b8abce16fb851b0d2722bd5cfa781a8ad094cd8c44979ef286bc1fa27c9e3e92e3642c04a14a4cf3dd9167cd323961070560"}, {0xdd, 0x6, "470658ca1983"}, {0xdd, 0x93, "3f874bfa058aba14c7c6f63bbd38bd35478aa78cf43be1f9b33940df06645ef7148605235d42e51de393548e02206b2dc05c87728dd6f6e15796b1ca889c244f5bc0755d6def7cf12a260ae693a9af13682d2ea4e1d7040e821affb2ed513c5c52651208831e9c3d84199c6c99129d87d9efa41da8d9929b92f235419b113ee6caae891321bd2eea85e348ceaec1a69a2b3fd9"}]}}, @NL80211_ATTR_FRAME={0x56, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac, {0x1}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x800, 0x6, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x22, "a1acc44dee97ea863c7f3587551dcbe72cecf5caa28c956cd3533dd909a0030dd29e"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x7, 0x5, 0x100, 0x1, 0xfffc, 0x1, 0x8]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x37c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004010) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008011}, 0x48c0) r9 = accept4$inet6(r4, &(0x7f0000001e80)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001ec0)=0x1c, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001f80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x700, 0x100, 0x238, 0x400, 0x100, 0x0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, &(0x7f0000001f00), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x6, 0x1, 0x6a, 0x568f, 0x80, 0x2810}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xb8}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0xbb, 0x1}}, @common=@ipv6header={{0x28}, {0xd, 0x180}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x557, 0x1ff, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'ipvlan0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0xdc, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1c}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x100000100, 0xff000000, 0xffffff00], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2, 0x1, 0x5, 0x4}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0xffffffff, [0x1, 0x3], 0x7f, 0x30, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast2, @private0, @remote, @loopback, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x60, 0x1403, 0x300, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x4004088) syz_80211_inject_frame(&(0x7f0000002840), &(0x7f0000002880)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1fc}, @device_b, @initial, @device_b, {0xb, 0x7}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x356) syz_genetlink_get_family_id$tipc2(&(0x7f0000002c00), r4) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x5c, r8, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x37}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5140, 0x5da3}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xd08}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000002d80)={0x0, @aes128, 0x0, @desc1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003000)={r4, 0x0, 0xc0, 0x51, &(0x7f0000002dc0)="19943af873fdf5efbe7940d81edbc23dfd99912f92e73f96e4e52110374f52dd3b9508be7943f7fddc0507a153dd38f7076e76faf2f872b8ef4b75f5b2315c97d164460533a386fd6e979ce4a923fc6ebf0b00d59782c4f82b8544e8cbf30794461c20a67459cef6d508b8f335e46a911399c99bba3fe2cf9cf499cc508963a3a4d936c8d7d5c42d9509e71a7f63a5164e1716ed1c2def60987b325dae309e7c33bd3d5f903a49838b957e1d8ccfeb687e1a1ae2949c81860d7bd4c0b363ed7f", &(0x7f0000002e80)=""/81, 0x206, 0x0, 0x4c, 0x43, &(0x7f0000002f00)="6c5cca6a82427688d0535a834abebe06f14aeb0fb62cc43e44f6db9f92713b037cd35c802d13cac05a4accbdee2e62d1869d552fb75f9fa3f51550b2aab1577e03e50a1045146615a924ba54", &(0x7f0000002f80)="13fbde83d81da6625d91be91b24db121838513bac7e6b2e4fee499393e3354b10dddb62c2e3b6ace4ab97e60ac8996adf9c53ebee929a0952413d96307df616914596d", 0x3, 0x0, 0x8001}, 0x50) 49.88157ms ago: executing program 3 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x709}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 0s ago: executing program 0 (id=425): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x355, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x355, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. syzkaller login: [ 83.255522][ T5817] cgroup: Unknown subsys name 'net' [ 83.390054][ T5817] cgroup: Unknown subsys name 'cpuset' [ 83.399265][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.028440][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.631678][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.655536][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.663961][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.676218][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.685434][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.814317][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.822617][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.853187][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.875597][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.916450][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.917385][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.925002][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.931497][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.938823][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.951799][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.952496][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.960291][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.967242][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.975473][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.982246][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.987779][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.996028][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.001681][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.008095][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.015913][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.380981][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.644905][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.704395][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.712480][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.720077][ T5828] bridge_slave_0: entered allmulticast mode [ 88.727713][ T5828] bridge_slave_0: entered promiscuous mode [ 88.739829][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.747115][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.754326][ T5828] bridge_slave_1: entered allmulticast mode [ 88.761954][ T5828] bridge_slave_1: entered promiscuous mode [ 88.892925][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.906019][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.950071][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.958483][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.965855][ T5834] bridge_slave_0: entered allmulticast mode [ 88.973051][ T5834] bridge_slave_0: entered promiscuous mode [ 89.044451][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.052788][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.060028][ T5834] bridge_slave_1: entered allmulticast mode [ 89.068198][ T5834] bridge_slave_1: entered promiscuous mode [ 89.089030][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.103052][ T5828] team0: Port device team_slave_0 added [ 89.169281][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.181334][ T5828] team0: Port device team_slave_1 added [ 89.222416][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.288330][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.301934][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.309679][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.337440][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.375019][ T5834] team0: Port device team_slave_0 added [ 89.388372][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.395720][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.421862][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.439074][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.452912][ T5834] team0: Port device team_slave_1 added [ 89.625572][ T5828] hsr_slave_0: entered promiscuous mode [ 89.632086][ T5828] hsr_slave_1: entered promiscuous mode [ 89.670430][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.677618][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.704046][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.716979][ T5848] Bluetooth: hci0: command tx timeout [ 89.718545][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.729845][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.756230][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.773574][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.781435][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.788956][ T5832] bridge_slave_0: entered allmulticast mode [ 89.797910][ T5832] bridge_slave_0: entered promiscuous mode [ 89.808040][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.815244][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.822621][ T5832] bridge_slave_1: entered allmulticast mode [ 89.830923][ T5832] bridge_slave_1: entered promiscuous mode [ 89.924981][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.974532][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.981936][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.989796][ T5835] bridge_slave_0: entered allmulticast mode [ 89.997801][ T5835] bridge_slave_0: entered promiscuous mode [ 90.007036][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.014292][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.022460][ T5835] bridge_slave_1: entered allmulticast mode [ 90.030669][ T5835] bridge_slave_1: entered promiscuous mode [ 90.040815][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.065090][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.075060][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.082728][ T5833] bridge_slave_0: entered allmulticast mode [ 90.090854][ T5833] bridge_slave_0: entered promiscuous mode [ 90.105533][ T5829] Bluetooth: hci1: command tx timeout [ 90.111281][ T5829] Bluetooth: hci2: command tx timeout [ 90.116892][ T5840] Bluetooth: hci3: command tx timeout [ 90.122412][ T5848] Bluetooth: hci4: command tx timeout [ 90.169063][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.176287][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.183514][ T5833] bridge_slave_1: entered allmulticast mode [ 90.191188][ T5833] bridge_slave_1: entered promiscuous mode [ 90.254932][ T5832] team0: Port device team_slave_0 added [ 90.264733][ T5832] team0: Port device team_slave_1 added [ 90.298840][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.312355][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.327204][ T5834] hsr_slave_0: entered promiscuous mode [ 90.333725][ T5834] hsr_slave_1: entered promiscuous mode [ 90.340137][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.348235][ T5834] Cannot create hsr debugfs directory [ 90.377576][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.390530][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.448589][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.455915][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.482220][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.531560][ T5835] team0: Port device team_slave_0 added [ 90.541204][ T5835] team0: Port device team_slave_1 added [ 90.548550][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.556480][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.582741][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.663339][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.671133][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.697345][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.712204][ T5833] team0: Port device team_slave_0 added [ 90.739666][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.749904][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.776336][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.789524][ T5833] team0: Port device team_slave_1 added [ 90.903344][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.910595][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.937035][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.950108][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.957472][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.983620][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.013542][ T5832] hsr_slave_0: entered promiscuous mode [ 91.020288][ T5832] hsr_slave_1: entered promiscuous mode [ 91.027218][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.034818][ T5832] Cannot create hsr debugfs directory [ 91.121397][ T5835] hsr_slave_0: entered promiscuous mode [ 91.128381][ T5835] hsr_slave_1: entered promiscuous mode [ 91.134478][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.142590][ T5835] Cannot create hsr debugfs directory [ 91.257371][ T5833] hsr_slave_0: entered promiscuous mode [ 91.263764][ T5833] hsr_slave_1: entered promiscuous mode [ 91.270845][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.278832][ T5833] Cannot create hsr debugfs directory [ 91.382020][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.396412][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.454131][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.501023][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.672588][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.692155][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.724896][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.737586][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.785421][ T5848] Bluetooth: hci0: command tx timeout [ 91.832488][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.860637][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.886965][ T24] cfg80211: failed to load regulatory.db [ 91.906015][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.916779][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.040599][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.077272][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.103309][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.143291][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.185487][ T5840] Bluetooth: hci3: command tx timeout [ 92.185682][ T5829] Bluetooth: hci2: command tx timeout [ 92.190923][ T5840] Bluetooth: hci1: command tx timeout [ 92.201994][ T5848] Bluetooth: hci4: command tx timeout [ 92.212613][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.226123][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.237474][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.249890][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.270616][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.294610][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.381241][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.400912][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.434763][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.442069][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.453363][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.460580][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.493335][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.500544][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.527025][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.545886][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.553047][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.598350][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.639234][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.660221][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.667456][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.714448][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.721655][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.751616][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.783499][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.790791][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.824962][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.832161][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.854860][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.081545][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.165083][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.172783][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.193586][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.200836][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.340067][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.421500][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.594162][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.649869][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.673856][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.703257][ T5828] veth0_vlan: entered promiscuous mode [ 93.809661][ T5828] veth1_vlan: entered promiscuous mode [ 93.869421][ T5840] Bluetooth: hci0: command tx timeout [ 93.917993][ T5832] veth0_vlan: entered promiscuous mode [ 93.950337][ T5828] veth0_macvtap: entered promiscuous mode [ 93.987850][ T5832] veth1_vlan: entered promiscuous mode [ 93.997211][ T5828] veth1_macvtap: entered promiscuous mode [ 94.017825][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.038339][ T5835] veth0_vlan: entered promiscuous mode [ 94.080130][ T5835] veth1_vlan: entered promiscuous mode [ 94.091029][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.121347][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.136309][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.145170][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.155242][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.165922][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.226374][ T5832] veth0_macvtap: entered promiscuous mode [ 94.255016][ T5832] veth1_macvtap: entered promiscuous mode [ 94.265395][ T5840] Bluetooth: hci2: command tx timeout [ 94.270073][ T5848] Bluetooth: hci3: command tx timeout [ 94.276626][ T5840] Bluetooth: hci1: command tx timeout [ 94.277855][ T5829] Bluetooth: hci4: command tx timeout [ 94.300349][ T5834] veth0_vlan: entered promiscuous mode [ 94.326811][ T5835] veth0_macvtap: entered promiscuous mode [ 94.337970][ T5834] veth1_vlan: entered promiscuous mode [ 94.352402][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.364887][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.377015][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.390874][ T5835] veth1_macvtap: entered promiscuous mode [ 94.421451][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.433465][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.445244][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.472407][ T5833] veth0_vlan: entered promiscuous mode [ 94.487434][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.496498][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.505189][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.514277][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.540780][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.552521][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.592443][ T5833] veth1_vlan: entered promiscuous mode [ 94.634253][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.643469][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.656603][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.664199][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.674874][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.685581][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.697114][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.714442][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.726826][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.736832][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.754432][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.767354][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.789263][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800282][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810645][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.820064][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.845216][ T5833] veth0_macvtap: entered promiscuous mode [ 94.863749][ T5834] veth0_macvtap: entered promiscuous mode [ 94.889116][ T5833] veth1_macvtap: entered promiscuous mode [ 94.922800][ T5834] veth1_macvtap: entered promiscuous mode [ 94.931230][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.943849][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.958652][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.968965][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.979850][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.990639][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.001549][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.012971][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.030458][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.050458][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.122100][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.133888][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.143869][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.164437][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.177808][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.188400][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.200391][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.227370][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.250194][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.271490][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.290202][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.304179][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.321929][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.332809][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.348404][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.360805][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.378369][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.390839][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.404340][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.414336][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.423330][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.432364][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.473090][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.489454][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.499862][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.510720][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.521349][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.531901][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.542108][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.553187][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.567154][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.600814][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.614329][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.655351][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.662912][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.695832][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.701782][ T5926] Zero length message leads to an empty skb [ 95.704573][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.850050][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 95.906055][ T2136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.913941][ T2136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.946186][ T5848] Bluetooth: hci0: command tx timeout [ 96.012011][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.029642][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.214899][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.245980][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.271896][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.298717][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.345610][ T5848] Bluetooth: hci3: command tx timeout [ 96.351426][ T5829] Bluetooth: hci1: command tx timeout [ 96.351815][ T5840] Bluetooth: hci4: command tx timeout [ 96.361037][ T5848] Bluetooth: hci2: command tx timeout [ 96.477038][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.495010][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.540678][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.613298][ T5950] netlink: 'syz.2.12': attribute type 12 has an invalid length. [ 96.638547][ T5950] netlink: 'syz.2.12': attribute type 29 has an invalid length. [ 96.677781][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.679838][ T5950] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.713117][ T5950] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 96.756407][ T5950] netlink: 47 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.942929][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.997557][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 97.244459][ T5972] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 97.282630][ T5972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.313793][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 97.333399][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 97.566232][ T5982] bond0: entered allmulticast mode [ 97.571444][ T5982] bond_slave_0: entered allmulticast mode [ 97.586127][ T5982] bond_slave_1: entered allmulticast mode [ 97.739285][ T5989] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 98.193346][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.227441][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 98.304179][ T2136] TC_ACT_REPEAT abuse ? [ 98.336768][ T2136] TC_ACT_REPEAT abuse ? [ 99.212321][ T6057] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 99.224942][ T6052] netlink: 'syz.3.38': attribute type 2 has an invalid length. [ 99.388529][ T5886] TC_ACT_REPEAT abuse ? [ 100.022414][ T6093] sctp: [Deprecated]: syz.3.49 (pid 6093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.022414][ T6093] Use struct sctp_sack_info instead [ 100.208496][ T6098] netlink: 'syz.4.51': attribute type 2 has an invalid length. [ 100.429222][ T10] TC_ACT_REPEAT abuse ? [ 100.530820][ T10] TC_ACT_REPEAT abuse ? [ 100.889092][ T6125] __nla_validate_parse: 10 callbacks suppressed [ 100.889113][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 100.928296][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 101.006198][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.044176][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 101.184168][ T6128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.281936][ T6139] x_tables: duplicate underflow at hook 2 [ 101.742080][ T6160] warning: `syz.4.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.792214][ T6163] Bluetooth: MGMT ver 1.23 [ 102.184076][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.225096][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.711043][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 102.734961][ T6198] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 102.749372][ T6198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.468073][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 103.480892][ T6221] netlink: 348 bytes leftover after parsing attributes in process `syz.0.82'. [ 103.842587][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 103.888034][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 103.972680][ T6233] bridge_slave_0: left allmulticast mode [ 103.993948][ T6233] bridge_slave_0: left promiscuous mode [ 104.048829][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.092844][ T6233] bridge_slave_1: left allmulticast mode [ 104.099513][ T6233] bridge_slave_1: left promiscuous mode [ 104.128095][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.180667][ T6233] bond0: (slave bond_slave_0): Releasing backup interface [ 104.250350][ T6233] bond0: (slave bond_slave_1): Releasing backup interface [ 104.322808][ T6233] team0: Port device team_slave_0 removed [ 104.354097][ T6233] team0: Port device team_slave_1 removed [ 104.364761][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.386238][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.406368][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.413852][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.639042][ T6300] xt_policy: neither incoming nor outgoing policy selected [ 105.652061][ T6300] x_tables: duplicate underflow at hook 3 [ 105.720432][ T3459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.793515][ T6300] sch_tbf: peakrate 32768 is lower than or equals to rate 18446744073709551615 ! [ 105.880648][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.895651][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.911237][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.922060][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.930907][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.982130][ T3459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.051760][ T6306] syz.3.104 (6306) used greatest stack depth: 18168 bytes left [ 106.132285][ T3459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.278138][ T3459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.300196][ T6327] __nla_validate_parse: 3 callbacks suppressed [ 106.300216][ T6327] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.107'. [ 106.326658][ T6327] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.107'. [ 106.573999][ T6337] x_tables: unsorted underflow at hook 3 [ 106.605396][ T30] audit: type=1800 audit(1746738136.959:2): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.108" name="memory.events" dev="tmpfs" ino=121 res=0 errno=0 [ 106.647560][ T30] audit: type=1804 audit(1746738136.989:3): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.108" name="/newroot/20/memory.events" dev="tmpfs" ino=121 res=1 errno=0 [ 106.977233][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 107.092604][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 107.315903][ T3459] bridge_slave_1: left allmulticast mode [ 107.366549][ T3459] bridge_slave_1: left promiscuous mode [ 107.378577][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.466658][ T3459] bridge_slave_0: left allmulticast mode [ 107.492441][ T3459] bridge_slave_0: left promiscuous mode [ 107.502957][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.662694][ T6389] x_tables: unsorted underflow at hook 3 [ 107.743445][ T30] audit: type=1800 audit(1746738138.099:4): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="memory.events" dev="tmpfs" ino=174 res=0 errno=0 [ 107.813220][ T30] audit: type=1804 audit(1746738138.099:5): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.120" name="/newroot/31/memory.events" dev="tmpfs" ino=174 res=1 errno=0 [ 108.025570][ T5848] Bluetooth: hci4: command tx timeout [ 108.170165][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.181442][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.193941][ T3459] bond0 (unregistering): Released all slaves [ 108.249527][ T6311] chnl_net:caif_netlink_parms(): no params data found [ 108.547766][ T6403] 8021q: VLANs not supported on ip6tnl0 [ 108.584858][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 108.594327][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 109.063688][ T6430] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 109.126504][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 109.163432][ T6435] netlink: 'syz.0.133': attribute type 11 has an invalid length. [ 109.179080][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.195056][ T6435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.133'. [ 109.220583][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.241061][ T6311] bridge_slave_0: entered allmulticast mode [ 109.252904][ T6311] bridge_slave_0: entered promiscuous mode [ 109.370193][ T3459] hsr_slave_0: left promiscuous mode [ 109.397265][ T3459] hsr_slave_1: left promiscuous mode [ 109.410963][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.428062][ T6442] x_tables: unsorted underflow at hook 3 [ 109.455595][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.507719][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.526236][ T30] audit: type=1800 audit(1746738139.879:6): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="memory.events" dev="tmpfs" ino=169 res=0 errno=0 [ 109.553118][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.599356][ T30] audit: type=1804 audit(1746738139.879:7): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.135" name="/newroot/30/memory.events" dev="tmpfs" ino=169 res=1 errno=0 [ 109.639370][ T3459] veth1_macvtap: left promiscuous mode [ 109.649010][ T3459] veth0_macvtap: left promiscuous mode [ 109.654757][ T3459] veth1_vlan: left promiscuous mode [ 109.663876][ T3459] veth0_vlan: left promiscuous mode [ 110.087966][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 110.119933][ T5848] Bluetooth: hci4: command tx timeout [ 110.130694][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 110.464509][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.472015][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.479320][ T6311] bridge_slave_1: entered allmulticast mode [ 110.493416][ T6311] bridge_slave_1: entered promiscuous mode [ 110.721513][ T6464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.828601][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.872067][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.108941][ T6311] team0: Port device team_slave_0 added [ 111.158513][ T6311] team0: Port device team_slave_1 added [ 111.400860][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.418316][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.525496][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.615029][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 111.659824][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.681623][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.770933][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.180117][ T6516] x_tables: unsorted underflow at hook 3 [ 112.200129][ T5848] Bluetooth: hci4: command tx timeout [ 112.219501][ T6311] hsr_slave_0: entered promiscuous mode [ 112.268818][ T30] audit: type=1800 audit(1746738142.629:8): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.151" name="memory.events" dev="tmpfs" ino=152 res=0 errno=0 [ 112.271641][ T6311] hsr_slave_1: entered promiscuous mode [ 112.320711][ T30] audit: type=1804 audit(1746738142.629:9): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.151" name="/newroot/26/memory.events" dev="tmpfs" ino=152 res=1 errno=0 [ 112.328275][ T6311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.395663][ T6311] Cannot create hsr debugfs directory [ 113.832014][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 113.857826][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 113.885739][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 114.041165][ T6582] x_tables: unsorted underflow at hook 3 [ 114.105757][ T30] audit: type=1800 audit(1746738144.459:10): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.164" name="memory.events" dev="tmpfs" ino=215 res=0 errno=0 [ 114.139010][ T30] audit: type=1804 audit(1746738144.469:11): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.164" name="/newroot/39/memory.events" dev="tmpfs" ino=215 res=1 errno=0 [ 114.278351][ T5848] Bluetooth: hci4: command tx timeout [ 114.330825][ T6593] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 114.342183][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 114.452109][ T6593] team0: Port device geneve0 added [ 114.716437][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 114.744341][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 114.804925][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 114.815461][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 114.841321][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 115.286357][ T6311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.346202][ T6311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.417130][ T6311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.534913][ T6311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.578888][ T6640] netlink: 'syz.3.178': attribute type 20 has an invalid length. [ 115.993905][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.134547][ T6311] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.192231][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.199469][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.260889][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.268129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.065637][ T6702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.171257][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.358176][ T6311] veth0_vlan: entered promiscuous mode [ 117.392245][ T6708] __nla_validate_parse: 1 callbacks suppressed [ 117.392263][ T6708] netlink: 80 bytes leftover after parsing attributes in process `syz.3.193'. [ 117.393703][ T6711] netlink: 'syz.0.195': attribute type 2 has an invalid length. [ 117.415879][ T6709] netlink: 80 bytes leftover after parsing attributes in process `syz.3.193'. [ 117.441999][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 117.462890][ T6311] veth1_vlan: entered promiscuous mode [ 117.560984][ T6311] veth0_macvtap: entered promiscuous mode [ 117.605682][ T6311] veth1_macvtap: entered promiscuous mode [ 117.726760][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.775511][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.813936][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.866176][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.894919][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.915717][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.950988][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 117.957379][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.059013][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 118.071150][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.081917][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.092117][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.102749][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.114048][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.124634][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.136303][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.171939][ T6311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.215439][ T6311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.233684][ T6311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.247996][ T6311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.661080][ T6745] lo speed is unknown, defaulting to 1000 [ 118.700133][ T6745] lo speed is unknown, defaulting to 1000 [ 118.716926][ T6751] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.746138][ T6745] lo speed is unknown, defaulting to 1000 [ 118.770948][ T6751] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 118.829490][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.831048][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 118.863629][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.944851][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.963931][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.053090][ T6745] infiniband syz0: set active [ 119.058202][ T6745] infiniband syz0: added lo [ 119.111561][ T6751] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.121449][ T6751] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.131482][ T6751] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.140283][ T6751] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.174809][ T6751] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.182130][ T6745] RDS/IB: syz0: added [ 119.184053][ T6751] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.197523][ T6751] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.207478][ T6751] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.240666][ T6745] smc: adding ib device syz0 with port count 1 [ 119.260890][ T6745] smc: ib device syz0 port 1 has pnetid [ 119.352884][ T5889] lo speed is unknown, defaulting to 1000 [ 119.427427][ T5888] lo speed is unknown, defaulting to 1000 [ 119.452880][ T6745] lo speed is unknown, defaulting to 1000 [ 119.627014][ T6770] xt_socket: unknown flags 0x4 [ 119.948285][ T2136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.978058][ T6757] lo speed is unknown, defaulting to 1000 [ 120.127027][ T2136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.263289][ T2136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.384366][ T6745] lo speed is unknown, defaulting to 1000 [ 120.447428][ T2136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.538261][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 120.590003][ T6785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'. [ 120.600950][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 121.024764][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.040322][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.050587][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.060917][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.071607][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.288079][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 121.299716][ T6745] lo speed is unknown, defaulting to 1000 [ 121.299946][ T2136] bridge_slave_1: left allmulticast mode [ 121.345804][ T2136] bridge_slave_1: left promiscuous mode [ 121.361808][ T2136] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.429498][ T2136] bridge_slave_0: left allmulticast mode [ 121.435214][ T2136] bridge_slave_0: left promiscuous mode [ 121.444591][ T2136] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.946636][ T2136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.959007][ T2136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.969197][ T2136] bond0 (unregistering): Released all slaves [ 122.008640][ T6745] lo speed is unknown, defaulting to 1000 [ 122.541129][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 122.720342][ T6745] lo speed is unknown, defaulting to 1000 [ 123.096661][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 123.149884][ T5848] Bluetooth: hci4: command tx timeout [ 123.172644][ T6847] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 123.218359][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 123.247909][ T6847] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 123.291539][ T6846] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 123.299337][ T6846] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 123.326862][ T6846] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 123.658169][ T6745] lo speed is unknown, defaulting to 1000 [ 124.258875][ T6878] netlink: 104 bytes leftover after parsing attributes in process `syz.3.232'. [ 124.639249][ T5900] IPVS: starting estimator thread 0... [ 124.771682][ T6893] IPVS: using max 25 ests per chain, 60000 per kthread [ 124.860414][ T6903] xt_hashlimit: size too large, truncated to 1048576 [ 124.871435][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 124.930171][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 124.984346][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 125.151856][ T2136] hsr_slave_0: left promiscuous mode [ 125.164555][ T2136] hsr_slave_1: left promiscuous mode [ 125.174651][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.182523][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.196182][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.211658][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.225383][ T5848] Bluetooth: hci4: command tx timeout [ 125.250064][ T2136] veth1_macvtap: left promiscuous mode [ 125.265640][ T2136] veth0_macvtap: left promiscuous mode [ 125.281794][ T2136] veth1_vlan: left promiscuous mode [ 125.301795][ T2136] veth0_vlan: left promiscuous mode [ 125.725197][ T2136] team0 (unregistering): Port device team_slave_1 removed [ 125.760004][ T2136] team0 (unregistering): Port device team_slave_0 removed [ 126.611590][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 126.749004][ T6934] netlink: 'syz.0.246': attribute type 39 has an invalid length. [ 126.772610][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 126.887785][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 127.012109][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 127.274043][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.302052][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.321928][ T6795] bridge_slave_0: entered allmulticast mode [ 127.329328][ T5848] Bluetooth: hci4: command tx timeout [ 127.341521][ T6795] bridge_slave_0: entered promiscuous mode [ 127.434193][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.453716][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.466137][ T6795] bridge_slave_1: entered allmulticast mode [ 127.493406][ T6795] bridge_slave_1: entered promiscuous mode [ 127.861058][ T6953] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 127.870213][ T6990] tipc: Enabling of bearer rejected, failed to enable media [ 128.108282][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.135551][ T6997] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 128.145088][ T6997] __nla_validate_parse: 2 callbacks suppressed [ 128.145106][ T6997] netlink: 244 bytes leftover after parsing attributes in process `syz.0.261'. [ 128.217990][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.332034][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.397980][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.414709][ T6795] team0: Port device team_slave_0 added [ 128.423604][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 128.477434][ T6795] team0: Port device team_slave_1 added [ 128.589490][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 128.627048][ T7018] netlink: 'syz.3.264': attribute type 7 has an invalid length. [ 128.648515][ T7018] netlink: 'syz.3.264': attribute type 8 has an invalid length. [ 128.649299][ T7010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.667664][ T7022] x_tables: unsorted underflow at hook 2 [ 128.683828][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 128.698449][ T7022] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 128.701140][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 128.750858][ T7014] veth3: entered promiscuous mode [ 128.774637][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 128.803473][ T7024] openvswitch: netlink: Flow key attr not present in new flow. [ 128.814108][ T7014] bond3: (slave veth3): Enslaving as an active interface with an up link [ 128.821872][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.264'. [ 128.842850][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.269'. [ 128.880338][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.901429][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.936304][ T7030] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 128.948374][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.981742][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.992004][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.023847][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.145671][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 129.386852][ T5848] Bluetooth: hci4: command tx timeout [ 129.491696][ T6795] hsr_slave_0: entered promiscuous mode [ 129.512163][ T6795] hsr_slave_1: entered promiscuous mode [ 129.543998][ T6795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.580675][ T6795] Cannot create hsr debugfs directory [ 129.691478][ T7063] netlink: 'syz.0.280': attribute type 2 has an invalid length. [ 129.730150][ T7063] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 130.123551][ T7092] netlink: 'syz.2.286': attribute type 2 has an invalid length. [ 130.132936][ T7094] x_tables: duplicate underflow at hook 1 [ 130.143267][ T7080] veth5: entered allmulticast mode [ 130.540327][ T7109] netlink: 'syz.3.288': attribute type 39 has an invalid length. [ 130.574601][ T7110] openvswitch: netlink: nsh attribute has 16387 unknown bytes. [ 130.583023][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.088872][ T7130] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 132.022784][ T7172] netlink: 'syz.2.306': attribute type 24 has an invalid length. [ 132.340460][ T6795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.472259][ T6795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.550400][ T7204] netlink: 'syz.4.313': attribute type 7 has an invalid length. [ 132.586401][ T6795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.663291][ T6795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.829852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.837839][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991525][ T7216] openvswitch: netlink: Actions may not be safe on all matching packets [ 133.063054][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.379890][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.412992][ T7238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.420667][ T7238] IPv6: NLM_F_CREATE should be set when creating new route [ 133.445528][ T7238] __nla_validate_parse: 23 callbacks suppressed [ 133.445549][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 133.468463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.475694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.512952][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.520249][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.066596][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 134.092669][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 134.119532][ T7257] netlink: 'syz.2.328': attribute type 14 has an invalid length. [ 134.149274][ T7257] netlink: 'syz.2.328': attribute type 13 has an invalid length. [ 134.325148][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.427805][ T7270] x_tables: unsorted entry at hook 2 [ 134.519966][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 134.591439][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 134.677779][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 134.880091][ T7288] openvswitch: netlink: Message has 4 unknown bytes. [ 135.053380][ T6795] veth0_vlan: entered promiscuous mode [ 135.110263][ T6795] veth1_vlan: entered promiscuous mode [ 135.316696][ T6795] veth0_macvtap: entered promiscuous mode [ 135.361686][ T6795] veth1_macvtap: entered promiscuous mode [ 135.457442][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.515373][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.531686][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.542669][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.600924][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.639525][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.668925][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.692444][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 135.717710][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.728867][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.739401][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.756473][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 135.759408][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.781356][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.793312][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.809193][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 135.820912][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.978303][ T7339] netlink: 'syz.2.347': attribute type 21 has an invalid length. [ 135.993732][ T7339] netlink: 156 bytes leftover after parsing attributes in process `syz.2.347'. [ 136.060898][ T6795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.080333][ T6795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.115358][ T6795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.124138][ T6795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.369252][ T7357] raw_sendmsg: syz.2.350 forgot to set AF_INET. Fix it! [ 136.559655][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.601981][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.678220][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.724078][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.076782][ T7378] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 137.970710][ T7426] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 138.077527][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.251647][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.494415][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.636093][ T7440] __nla_validate_parse: 3 callbacks suppressed [ 138.636114][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 138.645767][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.371'. [ 138.699174][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.869749][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 139.298658][ T7463] netlink: 224 bytes leftover after parsing attributes in process `syz.2.377'. [ 139.438804][ T7460] wg2: entered promiscuous mode [ 139.443748][ T7460] wg2: entered allmulticast mode [ 139.590536][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.599562][ T12] bridge_slave_1: left allmulticast mode [ 139.607776][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.617136][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.628788][ T12] bridge_slave_1: left promiscuous mode [ 139.634745][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.647688][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.661666][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.742249][ T7481] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 139.750214][ T7481] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 139.791357][ T12] bridge_slave_0: left allmulticast mode [ 139.802851][ T12] bridge_slave_0: left promiscuous mode [ 139.840669][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.974603][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 139.998601][ T7500] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 140.044795][ T7500] netlink: 208 bytes leftover after parsing attributes in process `syz.4.384'. [ 140.084736][ T7500] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 140.144927][ T7500] netlink: 'syz.4.384': attribute type 2 has an invalid length. [ 140.218566][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.386'. [ 140.227711][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 140.627301][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.640036][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.655781][ T12] bond0 (unregistering): Released all slaves [ 140.851781][ T7478] lo speed is unknown, defaulting to 1000 [ 140.875916][ T7526] x_tables: duplicate underflow at hook 2 [ 141.036261][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 141.356630][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 141.386371][ T7549] sctp: [Deprecated]: syz.4.394 (pid 7549) Use of int in maxseg socket option. [ 141.386371][ T7549] Use struct sctp_assoc_value instead [ 141.543643][ T7552] xt_CT: No such helper "pptp" [ 141.697284][ T7546] tipc: Started in network mode [ 141.706287][ T5848] Bluetooth: hci4: command tx timeout [ 141.713048][ T7546] tipc: Node identity 4, cluster identity 4711 [ 141.754059][ T7546] tipc: Node number set to 4 [ 142.803033][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.835411][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.897191][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.904699][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.221999][ T5887] IPVS: starting estimator thread 0... [ 143.236681][ T7628] netlink: 'syz.0.409': attribute type 9 has an invalid length. [ 143.277252][ T12] hsr_slave_0: left promiscuous mode [ 143.286248][ T12] hsr_slave_1: left promiscuous mode [ 143.300498][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.317905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.338708][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.347694][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.357452][ T7629] IPVS: using max 25 ests per chain, 60000 per kthread [ 143.384299][ T12] veth1_macvtap: left promiscuous mode [ 143.391719][ T12] veth0_macvtap: left promiscuous mode [ 143.398369][ T12] veth1_vlan: left promiscuous mode [ 143.404012][ T12] veth0_vlan: left promiscuous mode [ 143.785438][ T5848] Bluetooth: hci4: command tx timeout [ 143.934372][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.973051][ T12] team0 (unregistering): Port device team_slave_0 removed [ 144.314361][ T7619] __nla_validate_parse: 4 callbacks suppressed [ 144.314383][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.408'. [ 144.358381][ T7628] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 144.389389][ T7636] team0: entered promiscuous mode [ 144.405490][ T7636] team_slave_0: entered promiscuous mode [ 144.412020][ T7636] team_slave_1: entered promiscuous mode [ 144.430467][ T7636] batadv_slave_1: entered promiscuous mode [ 144.482315][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 144.600213][ T7650] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 144.644855][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 144.656307][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 144.681186][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.413'. [ 144.693510][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 145.003232][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 145.017494][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.043986][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.063104][ T7478] bridge_slave_0: entered allmulticast mode [ 145.075151][ T7478] bridge_slave_0: entered promiscuous mode [ 145.129057][ C0] Unknown status report in ack skb [ 145.186907][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.198321][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.207203][ T7478] bridge_slave_1: entered allmulticast mode [ 145.214997][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.227799][ T7478] bridge_slave_1: entered promiscuous mode [ 145.234242][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.324333][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.354140][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 145.359930][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.413927][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.432429][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.453884][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.483162][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.515802][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.552563][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.576070][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.602625][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.631183][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.671282][ T1162] ------------[ cut here ]------------ [ 145.677168][ T1162] WARNING: CPU: 0 PID: 1162 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 145.687206][ T1162] Modules linked in: [ 145.691444][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 145.703787][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 145.714174][ T1162] Workqueue: cfg80211 cfg80211_event_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.720576][ T1162] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 145.726823][ T1162] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 99 09 f7 90 0f 0b 90 eb bd e8 77 99 09 f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 67 99 09 f7 90 0f 0b 90 e9 de fd [ 145.746691][ T1162] RSP: 0000:ffffc90003e5f980 EFLAGS: 00010293 [ 145.752820][ T1162] RAX: ffffffff8ab626d9 RBX: dffffc0000000000 RCX: ffff8880266dbc00 [ 145.760867][ T1162] RDX: 0000000000000000 RSI: ffffffff8d749fba RDI: ffffffff8bc1cde0 [ 145.769003][ T1162] RBP: ffffc90003e5fa58 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 145.777081][ T1162] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: ffff8880268d8d90 [ 145.785098][ T1162] R13: 1ffff920007cbf38 R14: ffff888011163338 R15: 0000000000000006 [ 145.793236][ T1162] FS: 0000000000000000(0000) GS:ffff8881260ce000(0000) knlGS:0000000000000000 [ 145.802245][ T1162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.808904][ T1162] CR2: 00007f411ce041d4 CR3: 000000007c624000 CR4: 00000000003526f0 [ 145.816963][ T1162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.824979][ T1162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.833044][ T1162] Call Trace: [ 145.836438][ T1162] [ 145.839560][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.844813][ T1162] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 145.850793][ T1162] ? cfg80211_event_work+0x24/0x60 [ 145.856123][ T1162] ? __pfx___mutex_lock+0x10/0x10 [ 145.861456][ T1162] cfg80211_process_wdev_events+0x38a/0x4f0 [ 145.867617][ T1162] cfg80211_process_rdev_events+0xa1/0x110 [ 145.867661][ T5848] Bluetooth: hci4: command tx timeout [ 145.873449][ T1162] cfg80211_event_work+0x2c/0x60 [ 145.883917][ T1162] ? process_scheduled_works+0x9ec/0x17a0 [ 145.889726][ T1162] process_scheduled_works+0xadb/0x17a0 [ 145.895393][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.901449][ T1162] worker_thread+0x8a0/0xda0 [ 145.906217][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.912621][ T1162] ? __kthread_parkme+0x7b/0x200 [ 145.917736][ T1162] kthread+0x70e/0x8a0 [ 145.921859][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 145.927069][ T1162] ? __pfx_kthread+0x10/0x10 [ 145.931969][ T1162] ? __pfx_kthread+0x10/0x10 [ 145.936654][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.942048][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.947351][ T1162] ? __pfx_kthread+0x10/0x10 [ 145.952003][ T1162] ret_from_fork+0x4b/0x80 [ 145.956952][ T1162] ? __pfx_kthread+0x10/0x10 [ 145.961599][ T1162] ret_from_fork_asm+0x1a/0x30 [ 145.966745][ T1162] [ 145.970125][ T1162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.977453][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 145.989730][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 145.999806][ T1162] Workqueue: cfg80211 cfg80211_event_work [ 146.005581][ T1162] Call Trace: [ 146.008907][ T1162] [ 146.011849][ T1162] dump_stack_lvl+0x99/0x250 [ 146.016464][ T1162] ? __asan_memcpy+0x40/0x70 [ 146.021093][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.026320][ T1162] ? __pfx__printk+0x10/0x10 [ 146.030955][ T1162] panic+0x2db/0x790 [ 146.034921][ T1162] ? __pfx_panic+0x10/0x10 [ 146.039365][ T1162] ? show_trace_log_lvl+0x4fb/0x550 [ 146.044613][ T1162] ? ret_from_fork_asm+0x1a/0x30 [ 146.049701][ T1162] __warn+0x31b/0x4b0 [ 146.053883][ T1162] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 146.059443][ T1162] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 146.065186][ T1162] report_bug+0x2be/0x4f0 [ 146.069832][ T1162] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 146.075445][ T1162] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 146.081040][ T1162] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 146.086622][ T1162] handle_bug+0x84/0x160 [ 146.090982][ T1162] exc_invalid_op+0x1a/0x50 [ 146.095524][ T1162] asm_exc_invalid_op+0x1a/0x20 [ 146.100402][ T1162] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 146.106582][ T1162] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 99 09 f7 90 0f 0b 90 eb bd e8 77 99 09 f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 67 99 09 f7 90 0f 0b 90 e9 de fd [ 146.127151][ T1162] RSP: 0000:ffffc90003e5f980 EFLAGS: 00010293 [ 146.133241][ T1162] RAX: ffffffff8ab626d9 RBX: dffffc0000000000 RCX: ffff8880266dbc00 [ 146.141219][ T1162] RDX: 0000000000000000 RSI: ffffffff8d749fba RDI: ffffffff8bc1cde0 [ 146.149217][ T1162] RBP: ffffc90003e5fa58 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 146.157208][ T1162] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: ffff8880268d8d90 [ 146.165190][ T1162] R13: 1ffff920007cbf38 R14: ffff888011163338 R15: 0000000000000006 [ 146.173178][ T1162] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 146.178753][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.183967][ T1162] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 146.189872][ T1162] ? cfg80211_event_work+0x24/0x60 [ 146.194999][ T1162] ? __pfx___mutex_lock+0x10/0x10 [ 146.200052][ T1162] cfg80211_process_wdev_events+0x38a/0x4f0 [ 146.205965][ T1162] cfg80211_process_rdev_events+0xa1/0x110 [ 146.211786][ T1162] cfg80211_event_work+0x2c/0x60 [ 146.216734][ T1162] ? process_scheduled_works+0x9ec/0x17a0 [ 146.222472][ T1162] process_scheduled_works+0xadb/0x17a0 [ 146.228452][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 146.234480][ T1162] worker_thread+0x8a0/0xda0 [ 146.239082][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 146.245426][ T1162] ? __kthread_parkme+0x7b/0x200 [ 146.250401][ T1162] kthread+0x70e/0x8a0 [ 146.254497][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 146.259628][ T1162] ? __pfx_kthread+0x10/0x10 [ 146.264247][ T1162] ? __pfx_kthread+0x10/0x10 [ 146.268851][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.274061][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.279274][ T1162] ? __pfx_kthread+0x10/0x10 [ 146.283873][ T1162] ret_from_fork+0x4b/0x80 [ 146.288301][ T1162] ? __pfx_kthread+0x10/0x10 [ 146.292907][ T1162] ret_from_fork_asm+0x1a/0x30 [ 146.297734][ T1162] [ 146.301111][ T1162] Kernel Offset: disabled [ 146.305446][ T1162] Rebooting in 86400 seconds..