last executing test programs: 1m12.740389197s ago: executing program 2 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) (async) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) 1m1.698315007s ago: executing program 2 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) (async) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) 51.383717408s ago: executing program 3 (id=822): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) socket(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) socket(0x2a, 0x800, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe1320a9d7c136388}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)={@cgroup=r2, r3, 0x2}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) 50.34336797s ago: executing program 3 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0xb, 0x0, 0x1, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r3, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="060000000400000004000004000000000000000008140000e73d8d03de12c9e175e5e7147756ed58448c6d11890b1cbfa105e588629f8197cbd9789bfa878f34f38d316b817ac01a98158dcf6f7fd86a1aa2a2a9e97627180b2b64284c66f06e9ab4a887337a7d79bc84f9384eb35a7b683894ccd60f5bf5ac58e4b7e122b7fe2c2aa2c02d6a5de160bb880c3b630df10628a257e22f2e689a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10) (async) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c00100001e1ffff94000000000012"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001040)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8) (async, rerun: 64) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) (async) sendto$inet6(r10, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r9, 0x4) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffe22, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (rerun: 32) 50.245248699s ago: executing program 2 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) (async) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) 49.577482489s ago: executing program 3 (id=833): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x6, 0x6, "d9387c", 0xfff7, 0x32, 0x0, @empty, @remote, [], "61a262c78fbe3455"}}}}}}}, 0x0) 39.96024809s ago: executing program 3 (id=833): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x6, 0x6, "d9387c", 0xfff7, 0x32, 0x0, @empty, @remote, [], "61a262c78fbe3455"}}}}}}}, 0x0) 39.205711849s ago: executing program 2 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) (async) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) 25.104869392s ago: executing program 3 (id=833): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x6, 0x6, "d9387c", 0xfff7, 0x32, 0x0, @empty, @remote, [], "61a262c78fbe3455"}}}}}}}, 0x0) 23.176988093s ago: executing program 2 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) (async) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) 12.349990369s ago: executing program 3 (id=833): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x6, 0x6, "d9387c", 0xfff7, 0x32, 0x0, @empty, @remote, [], "61a262c78fbe3455"}}}}}}}, 0x0) 10.496284937s ago: executing program 2 (id=396): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4}, 0x1c) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback}, 0x1c) (async) mmap(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x1, 0x22052, r0, 0x6a3ee000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) 2.623963224s ago: executing program 0 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x150, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x54c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x38}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000840}, 0x20044000) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000580)=0x6) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x3f94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x38, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 2.596140719s ago: executing program 1 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000252cd348af67e7225c867cbb69efe945703e9c76e50ab24888bb8ccaf0492adfe8313d0d5c6e44d1cdd09017664c875fcefeb9cbc33883f037824218c4fb7c26287dd80a08ab4f138a83586f34e1cceda474f62f0ee97869cd01fdb763749c9ae35b5ea64e14546d06c5c715c60a"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x28028085}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0xfff1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000"], 0x0, 0x6e}, 0x28) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r8, @ANYRES8=r2, @ANYRES8, @ANYRES64=r2], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000ed00000000000400000000000000610a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240)="29b0", 0x2000cc0, r10}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r10, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/30}, 0x20) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\f\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf250100000008000100030000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x22, 0x803, 0xe) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48267dde7506948f6b020000040000000000000032a96ab6711e4a3253ea8ca3e330063f5b8525f1780ed185165dc200c383c350efad72d4d605e6a8c3266d93f8e3e2203d8776dbe5fe641d8e9ae611700b14fae824a852644d28a315270fef7f3cc9cc2d3259c9002511945a3c4f80ac8a8914a7e10ca41b69787bb2923df2bca6e32548", @ANYRES32=r14, @ANYBLOB="000000000014040028001280090001007665746800000000180002801400010000000000", @ANYRES32=r14, @ANYBLOB="0000000043030000"], 0x48}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="21568e72d1a1", @ANYRES16=r11, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8040) socket$igmp(0x2, 0x3, 0x2) 2.423718375s ago: executing program 0 (id=1121): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) 2.419477409s ago: executing program 4 (id=1122): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.334659195s ago: executing program 0 (id=1123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000020301e8ff000000000000000000000808bc820000000000000002000000000700006200f3d1fe03433fc4a8"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44400) socket$packet(0x11, 0xa, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xa0, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6201ed2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd24eff1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b21}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4759}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x445b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a26}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x58004}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8994, &(0x7f0000000580)={'bond0\x00'}) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x336, 0x8, 0x8, 0x0, 0x7f, @broadcast}, 0x10) 2.254038933s ago: executing program 4 (id=1124): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000400)=""/177, 0xb1, 0x0, &(0x7f00000004c0)=""/207, 0xcf}}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0xb19e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x1e, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x3, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x6, 0x8, 0xffffffffffffff7a, 0x1}, @jmp={0x5, 0x0, 0x1, 0x0, 0x3, 0x10, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0xf, 0xb, &(0x7f0000000300)=""/11, 0x40f00, 0x29, '\x00', 0x0, @sk_msg, r4, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x10, 0x2, 0x3}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000940)=[r6, r7, r8, r9, r10], &(0x7f0000000980)=[{0x0, 0x4, 0x3}, {0x4, 0x4, 0x1, 0x5}], 0x10, 0x9}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a80)={r0}) bind$tipc(r11, &(0x7f0000000ac0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x1}}, 0x10) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000b00)={'netpci0\x00'}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000b40)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r11, 0x8983, &(0x7f0000000b80)={0x8, 'syzkaller1\x00', {'team_slave_1\x00'}, 0x21}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r3, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r13, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f77, 0xffffffffffffffff, 0x5, &(0x7f0000000e00)=[r6, r14, r9, r7, r6, r10], &(0x7f0000000e40)=[{0x4, 0x5, 0xa, 0x5}, {0x4, 0x3, 0xd, 0x5}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x2, 0x7, 0x7}, {0x2, 0x3, 0xf}], 0x10, 0x2}, 0x94) connect$pppl2tp(r11, &(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r12, 0x3, 0x0, 0x4, 0x2, {0xa, 0x4e23, 0xd8a4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff}}}, 0x3a) connect$phonet_pipe(r11, &(0x7f0000000fc0)={0x23, 0xa1, 0x4, 0x5}, 0x10) r15 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001000), &(0x7f0000001040)=0x10, 0x80800) ioctl$SIOCPNENABLEPIPE(r15, 0x89ed, 0x0) setsockopt$PNPIPE_ENCAP(r15, 0x113, 0x1, &(0x7f0000001080), 0x4) shutdown(r11, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0}, &(0x7f0000001140)=0xc) sendmsg$nl_generic(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x22, 0x8, 0x70bd28, 0x25dfdbfc, {0x18}, [@nested={0x10, 0x81, 0x0, 0x1, [@generic, @nested={0x4, 0x1f}, @nested={0x4, 0xa0}, @nested={0x4, 0x100}]}, @typed={0x8, 0xd3, 0x0, 0x0, @uid=r16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xc40840, 0x0) 2.193003908s ago: executing program 0 (id=1125): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000d00)=""/110, 0x6e}, {&(0x7f0000000d80)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/13, 0xd}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000003640)=[{0x0}, {&(0x7f0000000ac0)=""/38, 0x26}], 0x2}, 0xfffffffb}], 0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) 2.190893528s ago: executing program 1 (id=1126): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="f00000001a00010000000000fedbdf2500000000000000000000000000000001ff0200000000000000000000000000014e240020fffd00000a0020a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000002b000000e0000002000000000000000000000000000000000000000f0000000000000000feffffffffffffff0000000000001c46a4e5000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000033500000a0004fd2000000000000000dc3f338a6d998f48d78675bb656ae767adbf4821eeebb8f23b532c956ab3f78028b50c3798b96cfca3cf6e25f9895cac5a00"/229], 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x700, {@ip4=@empty}}}]}, 0x38}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000300)={0x7ffc, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}}, 0x24) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e000505000000000000000012002b00461dc071caf2d43500d1f6c8a6ef0000968f7310db9f8bd5b27312c583dfdd5e9b24a98b645fa0cb754b282210c9c9b1dcb0d4a4de18079c56704cb037153284011556bcb1fa2c33826cd6d03afb99d072ae856e11c41792494724e49b6fe8"], 0x24}], 0x1}, 0x0) accept4(r5, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x80, 0x80800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r9, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 1.623809318s ago: executing program 4 (id=1127): close(0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r1, 0x4) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) (async, rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) ppoll(&(0x7f0000000200)=[{r7, 0x20}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) (rerun: 64) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) accept4$inet(r9, 0x0, 0x0, 0x80000) (async) shutdown(r9, 0x0) (async, rerun: 64) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64) getsockopt$rose(r10, 0x104, 0x7, 0x0, 0x0) 1.147253102s ago: executing program 1 (id=1128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220182018000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140020aab70300000000000085000000d4000000bf0900400000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 1.068921947s ago: executing program 1 (id=1129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="055b7d"], 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x6, 0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdfffffffedbdf2502400000", @ANYRES32=r4, @ANYBLOB="14000300766574682100"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket(0x1, 0x803, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f00000029c0), 0x400006d, 0x20000004) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r4, @ANYRES8=r2, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x804) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xd7615ec2ef3840f9}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x10009, @empty, 0xa}, 0x1c) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x58, r8, 0xf1f, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xb4d91c6b754ed5f2}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100", @ANYRES8], 0x30}}, 0x0) 435.624552ms ago: executing program 0 (id=1130): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) bind$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4) (async, rerun: 32) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6d5faa13c09aea84750978d633e6b0bc09fbe672ea5eebccaff3ab3d220c4f86dfa33e17c442c99acbe8d2536207", @ANYRES32=0x0, @ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES16=r0, @ANYRES16=r0], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000500)="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", 0x5d6}, {0x0}], 0x2}, 0x4044000) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0x6, 0x6, 0x3, 0x3, 0x0, 0x70bd22, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0x84}]}, 0x18}}, 0x20008810) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, 0x0, 0x0) (rerun: 32) r11 = accept$ax25(0xffffffffffffffff, &(0x7f0000000b00)={{0x3, @rose}, [@netrom, @null, @rose, @bcast, @null, @bcast, @bcast, @rose]}, &(0x7f0000000b80)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f0000000bc0)=@netrom={'nr', 0x0}, 0x10) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0830010}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_DESC={0x84, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x104, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xe7}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x64, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1f}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}, @NFT_MSG_DELOBJ={0xe4, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xb1, 0x8, "2909cfd56bb90976e08358db97bb979f481ed6205cd7691c7b97221f8b12e9a228fdb696387579869865fd52d83992df07893bae8d51f285a8150511ed0d6233664b8ecd25ec3267a7fec3629702310407011ce1601f69874f12b1aed396650757a7287c1d87295d606adc277b51e2fe7ebd273868b387ddfe559e2edfe387ab8bc72e4cd72091e9a9b680a2ebec203daedea5f4497a30b60ec4e00e15be6bed5fc99c005dd9b65cb2ef05ec51"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2f4}}, 0xc0) 434.991848ms ago: executing program 4 (id=1131): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009100000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x1, 0x6}, 0xfe}, 0x18) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000a00)={0x84, @empty, 0x4e23, 0x1, 'wlc\x00', 0xb, 0x3, 0x68}, 0x2c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5, r5}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0xb6}, @call={0x85, 0x0, 0x0, 0x62}, @generic={0x5, 0x6, 0x9, 0x4, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8000}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000180)=""/91, 0x41000, 0x8, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x8, 0xfff, 0xffff8000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r5, r8], &(0x7f0000000480)=[{0x5, 0x1, 0xb, 0x6}, {0x3, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xf, 0x8}, {0x2, 0x3, 0x10, 0x4}, {0x4, 0x1, 0x9, 0x4}, {0x4, 0x3, 0xe, 0x4}], 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r9], 0x48}}, 0x0) 374.282514ms ago: executing program 1 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'ip6gre0\x00', {0x8}, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r3}, 0x38) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x4081) 272.002562ms ago: executing program 4 (id=1133): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) 95.951007ms ago: executing program 0 (id=1134): syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e27, 0x2, 'rr\x00', 0x1, 0x5, 0x69}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000ddff0702110000010802110000080211000000000000e3ffffffffffff63822f07c13b1974f1a300010000060202020202020100"], 0x36) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@mark={{0x0, 0x1, 0x24, 0x9}}], 0x2}}], 0x1, 0x20000050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="02000108537d29c3c1e0484a1b97d68b4333a7a4259800000000001600000000fe80b50dadefe51a2033ddaf6ea5198f706fe9eabe3d7ce1ce294c5a55e1b8910587d918fad2e00a63f9034ec72a4563d8f4227a04386f3388f78c477ad63305a2f21fc1570219928c5b5642f395b59df77bbc9148d77af6fb88f9969781a026e553aec7d203516e1846bbd6d71f18bb79cddbc8a6f0751fa5ce09d84021efe31e0bbb5561b4f895c06d15524cd7e576c3801bd7cf0d0631c2a343b9fb6a024406cb5e1d2d9937ca6d5f399441b5ba9447397d19ccc3a13047a4462074697a32e702ab", @ANYRES32=r5, @ANYBLOB="000428bd7000fbdbdf254f00000008000300", @ANYRESHEX, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64, @ANYRES16=r0, @ANYBLOB="1afb82ba7e486cd82df9575637b23bb7794e3ca1188676b649dfdff374af7011f8f5d661d6fbbd44315a83c304dd91beeddc4048a503c63cdced153da0be76b9a760e0ff73015fb1f73798b68e04d9fd8f364bbfbc19c652b9b77469f376e059a6ae81fb8630971d894bae9a02f71f01646c12388a248cca691a5bfaf490ad9b212ef2ef34c362a2f91b13db56f6cfd927c3f1ac897cec0d28508febd679a3f369445974414b3d20b8584e427cdd4acc685b0ce9e8350c891746f4c146cad0c30e9bc6cabf2b648e188bdaa30f5e9cc7b028fd6cbb4eca4f332fb5a2cddd16230ed1816a39"], 0x170}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket(0x1a, 0xa, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000400)={'pimreg0\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000fc0)=@gettaction={0xb0, 0x32, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x741}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) 95.585562ms ago: executing program 1 (id=1135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x50d4}], 0x1, 0x832b, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @remote}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r10, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='timer_expire_entry\x00', r11, 0x0, 0xd99}, 0x18) 0s ago: executing program 4 (id=1136): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100e712b4a7"], 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000400)='\xc6kalLe\xff\xff\x06\x00\x00\x00\x00\x00\x00\x00\xddC\x00'}, 0x30) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000180)) kernel console output (not intermixed with test programs): ransport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.248755][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.266281][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.282828][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.345686][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.714872][ T7929] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 146.738987][ T7745] hsr_slave_0: entered promiscuous mode [ 146.744724][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 146.771994][ T7745] hsr_slave_1: entered promiscuous mode [ 146.778892][ T7745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.787738][ T7745] Cannot create hsr debugfs directory [ 147.116738][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 147.138449][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 147.604421][ T5861] Bluetooth: hci3: command tx timeout [ 147.952234][ T7967] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 148.477111][ T7971] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 148.510363][ T7971] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 148.569452][ T7967] gretap3: entered promiscuous mode [ 148.589532][ T7967] bond1: (slave gretap3): making interface the new active one [ 148.621361][ T7967] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 148.636596][ T7981] sctp: [Deprecated]: syz.3.542 (pid 7981) Use of int in max_burst socket option. [ 148.636596][ T7981] Use struct sctp_assoc_value instead [ 148.696746][ T7973] macvlan2: entered promiscuous mode [ 148.702357][ T7973] macvlan2: entered allmulticast mode [ 148.712508][ T7973] bond1: entered promiscuous mode [ 148.719347][ T7973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.759826][ T7973] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 148.780108][ T7973] bond1: left promiscuous mode [ 148.835480][ T7975] sch_fq: defrate 0 ignored. [ 148.923657][ T7117] lo speed is unknown, defaulting to 1000 [ 148.947223][ T44] lo speed is unknown, defaulting to 1000 [ 148.953015][ T44] syz2: Port: 1 Link DOWN [ 148.990283][ T7988] netlink: 'syz.0.543': attribute type 21 has an invalid length. [ 149.013475][ T7988] netlink: 128 bytes leftover after parsing attributes in process `syz.0.543'. [ 149.057727][ T7988] netlink: 'syz.0.543': attribute type 5 has an invalid length. [ 149.098936][ T7988] netlink: 'syz.0.543': attribute type 6 has an invalid length. [ 149.107587][ T7988] netlink: 3 bytes leftover after parsing attributes in process `syz.0.543'. [ 149.170753][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 149.171082][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'. [ 149.283661][ T7745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.297630][ T7745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.360093][ T7745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.401729][ T7745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.457146][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 149.538556][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 149.683278][ T5861] Bluetooth: hci3: command tx timeout [ 149.706164][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.779096][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.795228][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.802481][ T7204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.846811][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.854147][ T7200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.109570][ T8041] veth3: entered promiscuous mode [ 150.494082][ T8059] vlan2: entered promiscuous mode [ 150.684825][ T8069] lo speed is unknown, defaulting to 1000 [ 150.920788][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.458882][ T7745] veth0_vlan: entered promiscuous mode [ 151.500466][ T8090] __nla_validate_parse: 2 callbacks suppressed [ 151.500485][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'. [ 151.564485][ T7745] veth1_vlan: entered promiscuous mode [ 151.584934][ T8096] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 151.592763][ T8096] xt_hashlimit: max too large, truncated to 1048576 [ 151.600961][ T8096] No such timeout policy "syz1" [ 151.612891][ T8093] xt_connbytes: Forcing CT accounting to be enabled [ 151.620325][ T8093] set match dimension is over the limit! [ 151.631798][ T8093] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 151.690471][ T7745] veth0_macvtap: entered promiscuous mode [ 151.722733][ T7745] veth1_macvtap: entered promiscuous mode [ 151.755165][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.777473][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.806116][ T7200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.838637][ T7200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.871420][ T7200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.885756][ T7200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.949016][ T8101] lo speed is unknown, defaulting to 1000 [ 152.017628][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.032563][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.084749][ T8098] mpoa:mpoad_close: () going down [ 152.097977][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.114660][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.547117][ T8117] netlink: 'syz.4.575': attribute type 13 has an invalid length. [ 152.555731][ T8117] netlink: 'syz.4.575': attribute type 17 has an invalid length. [ 152.652866][ T8120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.722716][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.754927][ T8120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.764507][ T8117] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.833391][ T8117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.870863][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.947214][ T7202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.996783][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.578'. [ 153.043033][ T8127] netlink: 'syz.1.578': attribute type 2 has an invalid length. [ 153.073839][ T8127] netlink: 224 bytes leftover after parsing attributes in process `syz.1.578'. [ 153.078790][ T7202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.314814][ T7202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.545261][ T7202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.660183][ T8143] netlink: 140 bytes leftover after parsing attributes in process `syz.4.583'. [ 153.715711][ T8145] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 153.839078][ T7202] bridge_slave_1: left allmulticast mode [ 153.854798][ T7202] bridge_slave_1: left promiscuous mode [ 153.860676][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.887443][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.899330][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.908236][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.909233][ T7202] bridge_slave_0: left allmulticast mode [ 153.933390][ T7202] bridge_slave_0: left promiscuous mode [ 153.939589][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.946968][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 153.956456][ T8155] netlink: 'syz.4.587': attribute type 20 has an invalid length. [ 153.964296][ T8155] netlink: 'syz.4.587': attribute type 21 has an invalid length. [ 153.972218][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.983648][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.397208][ T8170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.590'. [ 154.409939][ T8170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.590'. [ 154.420319][ T8170] netlink: 'syz.1.590': attribute type 6 has an invalid length. [ 154.430700][ T8170] netlink: 'syz.1.590': attribute type 5 has an invalid length. [ 154.439178][ T8170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.590'. [ 154.520314][ T7202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.537108][ T7202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.550391][ T7202] bond0 (unregistering): Released all slaves [ 154.688189][ T8151] lo speed is unknown, defaulting to 1000 [ 154.917628][ T8179] netlink: 'syz.0.593': attribute type 13 has an invalid length. [ 154.935976][ T8179] netlink: 'syz.0.593': attribute type 17 has an invalid length. [ 154.949961][ T8179] 0ªX¹¦D: left allmulticast mode [ 154.976555][ T8179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.987766][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.010632][ T8177] netlink: 156 bytes leftover after parsing attributes in process `syz.1.591'. [ 155.066815][ T8179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.121594][ T8186] ipvlan2: entered promiscuous mode [ 155.171058][ T8179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.185164][ T8185] ipvlan2: entered promiscuous mode [ 155.273855][ T7202] hsr_slave_0: left promiscuous mode [ 155.280403][ T7202] hsr_slave_1: left promiscuous mode [ 155.292972][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.300630][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.309858][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.317379][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.342873][ T7202] veth1_macvtap: left promiscuous mode [ 155.348675][ T7202] veth0_macvtap: left promiscuous mode [ 155.354714][ T7202] veth1_vlan: left promiscuous mode [ 155.360186][ T7202] veth0_vlan: left promiscuous mode [ 155.572582][ T8192] Bluetooth: MGMT ver 1.23 [ 155.833653][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 155.899060][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 156.083458][ T5861] Bluetooth: hci3: command tx timeout [ 156.349476][ T8206] netlink: 208 bytes leftover after parsing attributes in process `syz.4.601'. [ 156.441356][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 156.621621][ T8218] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 156.649765][ T8217] bond_slave_0: entered promiscuous mode [ 156.655567][ T8217] bond_slave_1: entered promiscuous mode [ 156.661807][ T8217] vlan2: entered promiscuous mode [ 156.681295][ T8217] bond0: entered promiscuous mode [ 156.983836][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.999113][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 157.001280][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.016340][ T8151] bridge_slave_0: entered allmulticast mode [ 157.024846][ T8151] bridge_slave_0: entered promiscuous mode [ 157.048492][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.056102][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.063461][ T8151] bridge_slave_1: entered allmulticast mode [ 157.071391][ T8151] bridge_slave_1: entered promiscuous mode [ 157.107233][ T8234] lo speed is unknown, defaulting to 1000 [ 157.307363][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.346878][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.428464][ T8254] Cannot find del_set index 1 as target [ 157.536562][ T8151] team0: Port device team_slave_0 added [ 157.581009][ T8151] team0: Port device team_slave_1 added [ 157.708449][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.721989][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.764227][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.803725][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.815188][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.817196][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.616'. [ 157.842774][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.075293][ T8151] hsr_slave_0: entered promiscuous mode [ 158.090094][ T8151] hsr_slave_1: entered promiscuous mode [ 158.107456][ T8151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.115637][ T8151] Cannot create hsr debugfs directory [ 158.173624][ T5861] Bluetooth: hci3: command tx timeout [ 158.611579][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 158.621786][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 158.795346][ T8295] bridge0: port 3(syz_tun) entered blocking state [ 158.808076][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 158.825773][ T8295] bridge0: port 3(syz_tun) entered disabled state [ 158.839070][ T8295] syz_tun: entered allmulticast mode [ 158.857073][ T8295] syz_tun: entered promiscuous mode [ 158.864913][ T8295] bridge0: port 3(syz_tun) entered blocking state [ 158.871653][ T8295] bridge0: port 3(syz_tun) entered forwarding state [ 158.896974][ T8300] netlink: 232 bytes leftover after parsing attributes in process `syz.1.628'. [ 158.918402][ T8300] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.628'. [ 159.148616][ T8151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.179051][ T8151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.202714][ T8151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.252245][ T8151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.271644][ T8315] netlink: zone id is out of range [ 159.277245][ T8315] netlink: zone id is out of range [ 159.282540][ T8315] netlink: zone id is out of range [ 159.299179][ T8315] netlink: zone id is out of range [ 159.307313][ T8315] netlink: zone id is out of range [ 159.322534][ T8315] netlink: zone id is out of range [ 159.351185][ T8315] netlink: zone id is out of range [ 159.357989][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 159.363878][ T8315] netlink: zone id is out of range [ 159.372226][ T8315] netlink: zone id is out of range [ 159.378450][ T8315] netlink: zone id is out of range [ 159.436174][ T8317] netlink: 128 bytes leftover after parsing attributes in process `syz.1.634'. [ 159.468417][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 159.560776][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.647471][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.687218][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.694455][ T7204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.743161][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.750385][ T7204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.941736][ T8341] syzkaller1: tun_chr_ioctl cmd 35111 [ 160.243316][ T5861] Bluetooth: hci3: command tx timeout [ 160.397799][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.546405][ T8151] veth0_vlan: entered promiscuous mode [ 160.596667][ T8151] veth1_vlan: entered promiscuous mode [ 160.696916][ T8151] veth0_macvtap: entered promiscuous mode [ 160.734807][ T8151] veth1_macvtap: entered promiscuous mode [ 160.751368][ T8388] IPVS: length: 163 != 112 [ 160.788435][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.882724][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.947170][ T7200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.961397][ T7200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.004245][ T7200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.039941][ T7200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.314845][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.355728][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.431469][ T7216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.457844][ T7216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.498469][ T8420] sit0: entered promiscuous mode [ 161.532659][ T8420] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 161.877748][ T8432] Unsupported ieee802154 address type: 0 [ 161.881148][ T8434] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 161.903578][ T8434] bridge0: port 3(dummy0) entered disabled state [ 161.918796][ T8434] dummy0: left allmulticast mode [ 161.927870][ T8434] dummy0: left promiscuous mode [ 161.940498][ T8434] bridge0: port 3(dummy0) entered disabled state [ 161.966651][ T8434] team0: Port device dummy0 added [ 162.264909][ T8444] __nla_validate_parse: 3 callbacks suppressed [ 162.264929][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 162.320526][ T8444] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 162.409000][ T8448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.670'. [ 162.438213][ T8444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.670'. [ 162.557097][ T7200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.027922][ T7200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.298934][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.675'. [ 163.312741][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.675'. [ 163.569906][ T7200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.648465][ T8456] lo speed is unknown, defaulting to 1000 [ 163.824041][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.859232][ T7200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.910099][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.013935][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'. [ 164.027489][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.039866][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.050239][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.059837][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.077959][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.087623][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.365004][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 164.379333][ T8478] lo speed is unknown, defaulting to 1000 [ 164.424494][ T8473] lo speed is unknown, defaulting to 1000 [ 164.426716][ T7200] bridge_slave_1: left allmulticast mode [ 164.446737][ T7200] bridge_slave_1: left promiscuous mode [ 164.456825][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.507006][ T7200] bridge_slave_0: left allmulticast mode [ 164.517000][ T7200] bridge_slave_0: left promiscuous mode [ 164.522793][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.171011][ T7200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.187787][ T7200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.199759][ T7200] bond0 (unregistering): Released all slaves [ 165.332681][ T8502] net_ratelimit: 14 callbacks suppressed [ 165.332700][ T8502] openvswitch: netlink: IP tunnel dst address not specified [ 165.719508][ T7200] hsr_slave_0: left promiscuous mode [ 165.738085][ T7200] hsr_slave_1: left promiscuous mode [ 165.771831][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.787236][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.804650][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.819959][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.869300][ T7200] veth1_macvtap: left promiscuous mode [ 165.879424][ T7200] veth0_macvtap: left promiscuous mode [ 165.893039][ T7200] veth1_vlan: left promiscuous mode [ 165.905894][ T7200] veth0_vlan: left promiscuous mode [ 166.164187][ T5861] Bluetooth: hci3: command tx timeout [ 166.401149][ T7200] team0 (unregistering): Port device team_slave_1 removed [ 166.449491][ T7200] team0 (unregistering): Port device team_slave_0 removed [ 166.966605][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 167.042770][ T8540] tipc: Started in network mode [ 167.066527][ T8540] tipc: Node identity ac14140f, cluster identity 4711 [ 167.074634][ T8540] tipc: New replicast peer: 255.255.255.255 [ 167.081202][ T8540] tipc: Enabled bearer , priority 10 [ 167.128152][ T8478] chnl_net:caif_netlink_parms(): no params data found [ 167.250144][ T8544] vxcan3: entered allmulticast mode [ 167.580437][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.600975][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.608639][ T8478] bridge_slave_0: entered allmulticast mode [ 167.616736][ T8478] bridge_slave_0: entered promiscuous mode [ 167.628368][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.643024][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.656746][ T8478] bridge_slave_1: entered allmulticast mode [ 167.657007][ T8564] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 167.676326][ T8478] bridge_slave_1: entered promiscuous mode [ 167.695617][ T8568] netlink: 'syz.0.699': attribute type 21 has an invalid length. [ 167.767238][ T8568] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 167.788295][ T8568] netlink: 144 bytes leftover after parsing attributes in process `syz.0.699'. [ 167.808730][ T8564] batadv_slave_1: entered promiscuous mode [ 167.820759][ T8478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.836129][ T8478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.175505][ T8478] team0: Port device team_slave_0 added [ 168.175947][ T7117] IPVS: starting estimator thread 0... [ 168.194810][ T5919] tipc: Node number set to 2886997007 [ 168.227719][ T8478] team0: Port device team_slave_1 added [ 168.243471][ T5861] Bluetooth: hci3: command tx timeout [ 168.296303][ T8581] IPVS: using max 25 ests per chain, 60000 per kthread [ 168.459056][ T8584] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 168.617424][ T8593] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 168.645735][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.683821][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.746721][ T8478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.775058][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.782702][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.816165][ T8478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.929203][ T8478] hsr_slave_0: entered promiscuous mode [ 168.950414][ T8478] hsr_slave_1: entered promiscuous mode [ 168.967725][ T8478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.984378][ T8478] Cannot create hsr debugfs directory [ 169.220214][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 169.408338][ T8627] netlink: 'syz.4.714': attribute type 21 has an invalid length. [ 169.497482][ T8627] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 169.521222][ T8627] netlink: 144 bytes leftover after parsing attributes in process `syz.4.714'. [ 169.562643][ T8617] lo speed is unknown, defaulting to 1000 [ 169.687487][ T8634] sctp: [Deprecated]: syz.3.716 (pid 8634) Use of int in max_burst socket option deprecated. [ 169.687487][ T8634] Use struct sctp_assoc_value instead [ 169.728067][ T8634] x_tables: duplicate underflow at hook 1 [ 170.045072][ T8649] netlink: 52 bytes leftover after parsing attributes in process `syz.3.719'. [ 170.073353][ T8649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.719'. [ 170.135643][ T8651] netlink: 'syz.4.720': attribute type 21 has an invalid length. [ 170.201525][ T8651] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 170.252747][ T8651] netlink: 144 bytes leftover after parsing attributes in process `syz.4.720'. [ 170.323457][ T5861] Bluetooth: hci3: command tx timeout [ 170.510474][ T8664] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 170.607671][ T8664] netlink: 'syz.3.723': attribute type 7 has an invalid length. [ 170.715370][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 170.754298][ T8478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.778597][ T8478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.794906][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 170.819166][ T8478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.852238][ T8478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.034369][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.059575][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 171.089103][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.726'. [ 171.278067][ T8686] bond3: entered promiscuous mode [ 171.286565][ T8686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.302781][ T8478] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.383702][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.390953][ T7202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.418952][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.426169][ T7202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.634338][ T8703] netlink: 'syz.1.728': attribute type 21 has an invalid length. [ 171.670311][ T8703] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 172.048435][ T8478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.087417][ T8718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.180618][ T8478] veth0_vlan: entered promiscuous mode [ 172.188953][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.210559][ T8478] veth1_vlan: entered promiscuous mode [ 172.270421][ T8478] veth0_macvtap: entered promiscuous mode [ 172.274176][ T8718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.301659][ T8478] veth1_macvtap: entered promiscuous mode [ 172.356226][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.386392][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.406130][ T5861] Bluetooth: hci3: command tx timeout [ 172.415058][ T7216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.427317][ T7216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.438409][ T7216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.450924][ T7216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.540324][ T7213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.562564][ T7213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.602973][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.611834][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.930709][ T8742] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.154251][ T8753] netlink: 'syz.4.744': attribute type 21 has an invalid length. [ 173.162101][ T8753] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 173.170821][ T8754] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 173.197610][ T8753] __nla_validate_parse: 3 callbacks suppressed [ 173.197633][ T8753] netlink: 144 bytes leftover after parsing attributes in process `syz.4.744'. [ 173.369456][ T8764] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 173.446670][ T8764] bond0: entered promiscuous mode [ 173.454554][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.627519][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 173.899203][ T7216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.259258][ T8768] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 174.645062][ T8781] tipc: Enabling of bearer rejected, failed to enable media [ 174.889990][ T7216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.017750][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.027544][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.035997][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.046685][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.054772][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.126621][ T8799] lo speed is unknown, defaulting to 1000 [ 175.148372][ T8803] netlink: 'syz.0.757': attribute type 21 has an invalid length. [ 175.199057][ T8803] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 175.233224][ T8803] netlink: 144 bytes leftover after parsing attributes in process `syz.0.757'. [ 175.512524][ T7216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.721572][ T7216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.783452][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 175.995792][ T8824] syzkaller1: entered promiscuous mode [ 176.001324][ T8824] syzkaller1: entered allmulticast mode [ 176.041910][ T8822] tipc: Enabled bearer , priority 0 [ 176.082630][ T8820] netlink: 'syz.3.762': attribute type 3 has an invalid length. [ 176.112392][ T8820] netlink: 'syz.3.762': attribute type 3 has an invalid length. [ 176.138947][ T8825] syzkaller0: entered promiscuous mode [ 176.150085][ T8825] syzkaller0: entered allmulticast mode [ 176.401890][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.418715][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.438393][ T8799] bridge_slave_0: entered allmulticast mode [ 176.452111][ T8799] bridge_slave_0: entered promiscuous mode [ 176.473720][ T8822] tipc: Resetting bearer [ 176.494691][ T8821] tipc: Resetting bearer [ 176.531984][ T8821] tipc: Disabling bearer [ 176.567401][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.574948][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.588887][ T8799] bridge_slave_1: entered allmulticast mode [ 176.608104][ T8799] bridge_slave_1: entered promiscuous mode [ 176.764803][ T7216] bridge_slave_1: left allmulticast mode [ 176.776642][ T7216] bridge_slave_1: left promiscuous mode [ 176.780402][ T8846] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.767'. [ 176.791691][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.805110][ T8847] netlink: 'syz.0.768': attribute type 21 has an invalid length. [ 176.816215][ T7216] bridge_slave_0: left allmulticast mode [ 176.821912][ T7216] bridge_slave_0: left promiscuous mode [ 176.841584][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.126955][ T5861] Bluetooth: hci3: command tx timeout [ 177.339149][ T7216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.351792][ T7216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.363057][ T7216] bond0 (unregistering): Released all slaves [ 177.391501][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.401788][ T8847] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 177.411317][ T8847] netlink: 144 bytes leftover after parsing attributes in process `syz.0.768'. [ 177.480362][ T8854] netlink: 132 bytes leftover after parsing attributes in process `syz.4.769'. [ 177.542727][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.801529][ T8799] team0: Port device team_slave_0 added [ 177.827876][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 177.872103][ T8799] team0: Port device team_slave_1 added [ 177.951024][ T8873] smc: net device bond0 applied user defined pnetid SYZ2 [ 177.967156][ T8875] netlink: 256 bytes leftover after parsing attributes in process `syz.3.773'. [ 178.011825][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.025721][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.056371][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.070871][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.077906][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.104439][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.190759][ T7216] hsr_slave_0: left promiscuous mode [ 178.201938][ T7216] hsr_slave_1: left promiscuous mode [ 178.212505][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.220748][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.238034][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.264933][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.305544][ T7216] veth1_macvtap: left promiscuous mode [ 178.311613][ T7216] veth0_macvtap: left promiscuous mode [ 178.331907][ T7216] veth1_vlan: left promiscuous mode [ 178.337661][ T7216] veth0_vlan: left promiscuous mode [ 178.431881][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 178.554081][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 178.878478][ T7216] team0 (unregistering): Port device team_slave_1 removed [ 178.921203][ T7216] team0 (unregistering): Port device team_slave_0 removed [ 179.204819][ T5861] Bluetooth: hci3: command tx timeout [ 179.334919][ T8799] hsr_slave_0: entered promiscuous mode [ 179.341982][ T8799] hsr_slave_1: entered promiscuous mode [ 179.349938][ T8799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.358506][ T8799] Cannot create hsr debugfs directory [ 179.369155][ T8890] netlink: 'syz.3.776': attribute type 29 has an invalid length. [ 179.463460][ T8892] lo speed is unknown, defaulting to 1000 [ 179.707317][ T8911] netlink: 'syz.0.782': attribute type 21 has an invalid length. [ 179.858781][ T8911] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 179.886626][ T8911] netlink: 144 bytes leftover after parsing attributes in process `syz.0.782'. [ 180.568205][ T8940] syzkaller1: entered promiscuous mode [ 180.604042][ T8940] syzkaller1: entered allmulticast mode [ 180.791445][ T8957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.794'. [ 180.929339][ T8960] lo speed is unknown, defaulting to 1000 [ 181.043695][ T8799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.072136][ T8972] netlink: 'syz.0.797': attribute type 21 has an invalid length. [ 181.082586][ T8799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.089487][ T8967] netlink: 'syz.3.796': attribute type 9 has an invalid length. [ 181.097982][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 181.189650][ T8972] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 181.201883][ T8972] netlink: 144 bytes leftover after parsing attributes in process `syz.0.797'. [ 181.228613][ T8967] hsr0: entered promiscuous mode [ 181.265789][ T8967] macvlan2: entered promiscuous mode [ 181.271366][ T8967] macvlan2: entered allmulticast mode [ 181.290409][ T5861] Bluetooth: hci3: command tx timeout [ 181.298016][ T8967] hsr0: entered allmulticast mode [ 181.313414][ T8967] hsr_slave_0: entered allmulticast mode [ 181.319188][ T8967] hsr_slave_1: entered allmulticast mode [ 181.328460][ T8799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.357364][ T8799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.585580][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.799'. [ 181.918465][ T9005] netlink: 'syz.4.803': attribute type 10 has an invalid length. [ 181.991185][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.803'. [ 182.028623][ T9009] lo speed is unknown, defaulting to 1000 [ 182.061921][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.105428][ T9005] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 182.242453][ T9018] netlink: 64 bytes leftover after parsing attributes in process `syz.0.806'. [ 182.329522][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.388898][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.396207][ T7204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.437339][ T9028] netlink: 'syz.4.809': attribute type 21 has an invalid length. [ 182.496447][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.503714][ T7204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.552699][ T9028] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 182.583396][ T9028] netlink: 144 bytes leftover after parsing attributes in process `syz.4.809'. [ 183.353622][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.363601][ T5861] Bluetooth: hci3: command tx timeout [ 183.471444][ T8799] veth0_vlan: entered promiscuous mode [ 183.516003][ T8799] veth1_vlan: entered promiscuous mode [ 183.570061][ T9076] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.821'. [ 183.690724][ T8799] veth0_macvtap: entered promiscuous mode [ 183.714594][ T8799] veth1_macvtap: entered promiscuous mode [ 183.765791][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.802898][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.836639][ T7204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.865643][ T7204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.875040][ T9083] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 183.890483][ T7204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.906395][ T7204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.131003][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 184.151783][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.177002][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.209923][ T7213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.309257][ T9092] netlink: 144 bytes leftover after parsing attributes in process `syz.0.825'. [ 184.359373][ T7213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.479448][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'. [ 184.710788][ T9103] validate_nla: 2 callbacks suppressed [ 184.710803][ T9103] netlink: 'syz.0.829': attribute type 2 has an invalid length. [ 184.728581][ T9101] syzkaller0: entered promiscuous mode [ 184.735177][ T9101] syzkaller0: entered allmulticast mode [ 184.770447][ T9101] netlink: 256 bytes leftover after parsing attributes in process `syz.1.828'. [ 184.840855][ T9103] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.829'. [ 185.127069][ T7213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.306569][ T7213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.609625][ T9116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.831'. [ 185.633560][ T9116] netlink: 43 bytes leftover after parsing attributes in process `syz.0.831'. [ 185.675663][ T9116] netlink: 'syz.0.831': attribute type 5 has an invalid length. [ 185.705106][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'. [ 185.714310][ T9116] netlink: 43 bytes leftover after parsing attributes in process `syz.0.831'. [ 185.736756][ T7213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.066486][ T7213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.204481][ T9137] netlink: 'syz.4.839': attribute type 21 has an invalid length. [ 186.286068][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.295345][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.307344][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.319522][ T9136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.349019][ T9140] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 186.356679][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.364697][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.373558][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.381993][ T9140] netlink: 'syz.1.841': attribute type 2 has an invalid length. [ 186.390770][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.395267][ T9137] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 186.407034][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.415760][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.425551][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.481946][ T9136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.612717][ T9136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.662977][ T9138] lo speed is unknown, defaulting to 1000 [ 186.741997][ T9136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.785324][ T9144] lo speed is unknown, defaulting to 1000 [ 186.910562][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 186.932261][ T9167] netlink: 'syz.1.848': attribute type 21 has an invalid length. [ 186.935941][ T7213] bridge_slave_1: left allmulticast mode [ 186.946035][ T7213] bridge_slave_1: left promiscuous mode [ 186.951989][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.964497][ T7213] bridge_slave_0: left allmulticast mode [ 186.970250][ T7213] bridge_slave_0: left promiscuous mode [ 186.976592][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.286621][ T7213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.299093][ T7213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.309396][ T7213] bond0 (unregistering): Released all slaves [ 187.343024][ T9167] netlink: 'syz.1.848': attribute type 4 has an invalid length. [ 187.351317][ T9167] netlink: 'syz.1.848': attribute type 5 has an invalid length. [ 187.551894][ T7216] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.561711][ T7216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.601394][ T7216] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.688020][ T7202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.838164][ T7213] hsr_slave_0: left promiscuous mode [ 187.865146][ T7213] hsr_slave_1: left promiscuous mode [ 187.871249][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.892909][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.916127][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.935689][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.949133][ T9187] netlink: 'syz.4.853': attribute type 21 has an invalid length. [ 187.974698][ T7213] veth1_macvtap: left promiscuous mode [ 187.980500][ T7213] veth0_macvtap: left promiscuous mode [ 187.990345][ T7213] veth1_vlan: left promiscuous mode [ 187.996581][ T7213] veth0_vlan: left promiscuous mode [ 188.417543][ T7213] team0 (unregistering): Port device team_slave_1 removed [ 188.452426][ T7213] team0 (unregistering): Port device team_slave_0 removed [ 188.486568][ T5855] Bluetooth: hci0: command tx timeout [ 188.486627][ T51] Bluetooth: hci3: command tx timeout [ 188.867220][ T9187] __nla_validate_parse: 12 callbacks suppressed [ 188.867240][ T9187] netlink: 144 bytes leftover after parsing attributes in process `syz.4.853'. [ 188.890831][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 189.124388][ T9204] syzkaller1: entered promiscuous mode [ 189.129917][ T9204] syzkaller1: entered allmulticast mode [ 189.136062][ T9202] netlink: 256 bytes leftover after parsing attributes in process `syz.4.858'. [ 189.180317][ T9144] chnl_net:caif_netlink_parms(): no params data found [ 189.352108][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 189.537170][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.547219][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.555216][ T9144] bridge_slave_0: entered allmulticast mode [ 189.562405][ T9144] bridge_slave_0: entered promiscuous mode [ 189.573242][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.580965][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.588260][ T9138] bridge_slave_0: entered allmulticast mode [ 189.596323][ T9138] bridge_slave_0: entered promiscuous mode [ 189.604851][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.612065][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.619405][ T9138] bridge_slave_1: entered allmulticast mode [ 189.627389][ T9138] bridge_slave_1: entered promiscuous mode [ 189.634639][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.641965][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.650591][ T9144] bridge_slave_1: entered allmulticast mode [ 189.658048][ T9144] bridge_slave_1: entered promiscuous mode [ 189.722267][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.735990][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.748165][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.772529][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.816569][ T9144] team0: Port device team_slave_0 added [ 189.838323][ T9144] team0: Port device team_slave_1 added [ 189.849268][ T9138] team0: Port device team_slave_0 added [ 189.871979][ T9138] team0: Port device team_slave_1 added [ 189.918095][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.928954][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.955881][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.967792][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.975234][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.002438][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.024620][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.031649][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.058032][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.069713][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.080398][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.110000][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.258604][ T9144] hsr_slave_0: entered promiscuous mode [ 190.270241][ T9144] hsr_slave_1: entered promiscuous mode [ 190.276883][ T9144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.289269][ T9144] Cannot create hsr debugfs directory [ 190.315079][ T9138] hsr_slave_0: entered promiscuous mode [ 190.332005][ T9138] hsr_slave_1: entered promiscuous mode [ 190.348432][ T9138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.357535][ T9138] Cannot create hsr debugfs directory [ 190.484609][ T9221] lo speed is unknown, defaulting to 1000 [ 190.565282][ T51] Bluetooth: hci3: command tx timeout [ 190.569904][ T5855] Bluetooth: hci0: command tx timeout [ 190.578013][ T9228] validate_nla: 2 callbacks suppressed [ 190.578029][ T9228] netlink: 'syz.4.866': attribute type 13 has an invalid length. [ 190.599372][ T9228] netlink: 'syz.4.866': attribute type 17 has an invalid length. [ 190.615373][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.864'. [ 190.656256][ T9228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.673926][ T44] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.735707][ T7213] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.745757][ T7213] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.758209][ T9229] netlink: 'syz.1.864': attribute type 12 has an invalid length. [ 190.772816][ T9222] lo speed is unknown, defaulting to 1000 [ 190.848028][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.892314][ T9230] lo speed is unknown, defaulting to 1000 [ 190.926285][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.967527][ T9144] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.043791][ T7117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.052169][ T7117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.075174][ T9144] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.223944][ T9237] netlink: 'syz.0.868': attribute type 21 has an invalid length. [ 191.346112][ T9144] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.366008][ T9237] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 191.380798][ T9237] netlink: 144 bytes leftover after parsing attributes in process `syz.0.868'. [ 191.442000][ T9144] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.508046][ T9241] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 191.647609][ T9144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.670175][ T9144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.707185][ T9144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.719882][ T9144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.809433][ T9254] xt_l2tp: invalid flags combination: 4 [ 191.817320][ T9254] lo speed is unknown, defaulting to 1000 [ 191.890874][ T9254] lo speed is unknown, defaulting to 1000 [ 191.899616][ T9254] lo speed is unknown, defaulting to 1000 [ 191.939402][ T9257] netlink: 'syz.4.873': attribute type 21 has an invalid length. [ 191.951619][ T9257] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.964970][ T9257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.972445][ T9257] IPv6: NLM_F_CREATE should be set when creating new route [ 191.979769][ T9257] IPv6: NLM_F_CREATE should be set when creating new route [ 191.987063][ T9257] IPv6: NLM_F_CREATE should be set when creating new route [ 192.019721][ T9246] lo speed is unknown, defaulting to 1000 [ 192.192848][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.362950][ T9138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.386784][ T9254] infiniband syz0: set down [ 192.391597][ T9138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.392048][ T5919] lo speed is unknown, defaulting to 1000 [ 192.405059][ T9254] infiniband syz0: added lo [ 192.420115][ T9144] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.430171][ T9138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.448935][ T9138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.463553][ T9254] RDS/IB: syz0: added [ 192.468364][ T9254] smc: adding ib device syz0 with port count 1 [ 192.474968][ T9254] smc: ib device syz0 port 1 has pnetid [ 192.490736][ T5919] lo speed is unknown, defaulting to 1000 [ 192.493662][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.503779][ T7200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.518637][ T9254] lo speed is unknown, defaulting to 1000 [ 192.550196][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.557379][ T7200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.643774][ T5855] Bluetooth: hci0: command tx timeout [ 192.649767][ T51] Bluetooth: hci3: command tx timeout [ 192.923905][ T9138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.991250][ T9138] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.026766][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.033972][ T7216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.072347][ T9254] lo speed is unknown, defaulting to 1000 [ 193.088972][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.096250][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.320672][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.422587][ T9144] veth0_vlan: entered promiscuous mode [ 193.450798][ T9144] veth1_vlan: entered promiscuous mode [ 193.551240][ T9144] veth0_macvtap: entered promiscuous mode [ 193.597248][ T9144] veth1_macvtap: entered promiscuous mode [ 193.626129][ T9138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.653306][ T9254] lo speed is unknown, defaulting to 1000 [ 193.678565][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.716608][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.756479][ T7213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.771882][ T7213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.814288][ T9138] veth0_vlan: entered promiscuous mode [ 193.833218][ T7213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.857736][ T7216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.890996][ T9138] veth1_vlan: entered promiscuous mode [ 194.007278][ T7204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.036393][ T7204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.068191][ T9138] veth0_macvtap: entered promiscuous mode [ 194.140722][ T9138] veth1_macvtap: entered promiscuous mode [ 194.161276][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.173943][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.229370][ T9302] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 194.242790][ T9300] can: request_module (can-proto-3) failed. [ 194.257844][ T9302] netlink: 'syz.0.881': attribute type 2 has an invalid length. [ 194.298686][ T9254] lo speed is unknown, defaulting to 1000 [ 194.327030][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341543][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.397046][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.460409][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.490513][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.522234][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.622409][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.723318][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.724434][ T5855] Bluetooth: hci0: command tx timeout [ 194.815379][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.836492][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.891722][ T9254] lo speed is unknown, defaulting to 1000 [ 194.918260][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.935222][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.582294][ T9254] lo speed is unknown, defaulting to 1000 [ 196.129357][ T9254] lo speed is unknown, defaulting to 1000 [ 196.485132][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.494254][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.501917][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.510100][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.517828][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.648218][ T9330] lo speed is unknown, defaulting to 1000 [ 196.670344][ T9330] lo speed is unknown, defaulting to 1000 [ 196.888759][ T7202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.995157][ T7202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.084169][ T7202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.101294][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 197.212090][ T7202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.283827][ T9337] lo: entered promiscuous mode [ 197.289232][ T9337] tunl0: entered promiscuous mode [ 197.295004][ T9337] gre0: entered promiscuous mode [ 197.300551][ T9337] gretap0: entered promiscuous mode [ 197.325615][ T9337] erspan0: entered promiscuous mode [ 197.331604][ T9337] ip_vti0: entered promiscuous mode [ 197.342157][ T9337] ip6_vti0: entered promiscuous mode [ 197.374325][ T9337] sit0: entered promiscuous mode [ 197.391123][ T9337] ip6tnl0: entered promiscuous mode [ 197.413990][ T9337] ip6gre0: entered promiscuous mode [ 197.419866][ T9337] syz_tun: entered promiscuous mode [ 197.444259][ T9337] ip6gretap0: entered promiscuous mode [ 197.450487][ T9337] vcan0: entered promiscuous mode [ 197.460711][ T9337] bond0: entered promiscuous mode [ 197.467163][ T9337] @ÿ: entered promiscuous mode [ 197.472555][ T9337] bond_slave_1: entered promiscuous mode [ 197.473586][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 197.479830][ T9337] team0: entered promiscuous mode [ 197.497349][ T9337] team_slave_0: entered promiscuous mode [ 197.505797][ T9337] team_slave_1: entered promiscuous mode [ 197.517698][ T9337] dummy0: entered promiscuous mode [ 197.527869][ T9337] nlmon0: entered promiscuous mode [ 197.534184][ T9337] caif0: entered promiscuous mode [ 197.539440][ T9337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.582189][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.601690][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.610336][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.619519][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.627364][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.635711][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.643981][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.664030][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.683790][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.725355][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 197.736241][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.894'. [ 197.782904][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.895'. [ 197.924112][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.931277][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.000534][ T9330] bridge_slave_0: entered allmulticast mode [ 198.025145][ T9330] bridge_slave_0: entered promiscuous mode [ 198.039724][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.050512][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.057961][ T9330] bridge_slave_1: entered allmulticast mode [ 198.066583][ T9330] bridge_slave_1: entered promiscuous mode [ 198.089165][ T7213] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.103297][ T7213] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.140495][ T9350] lo speed is unknown, defaulting to 1000 [ 198.195314][ T9350] lo speed is unknown, defaulting to 1000 [ 198.277613][ T7202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.329028][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.334431][ T9378] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 198.349971][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.393896][ T5960] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.438340][ T9378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.498786][ T7202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.552875][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.903'. [ 198.562131][ T9380] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 198.580394][ T5855] Bluetooth: hci0: command tx timeout [ 198.599941][ T9382] ipvlan2: entered allmulticast mode [ 198.610238][ T9382] bond2: entered allmulticast mode [ 198.770998][ T9378] bond2: (slave gretap0): making interface the new active one [ 198.779700][ T9378] gretap0: entered allmulticast mode [ 198.786680][ T9378] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 198.864329][ T9330] team0: Port device team_slave_0 added [ 198.904875][ T7202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.946771][ T9330] team0: Port device team_slave_1 added [ 199.126441][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.143628][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.245350][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.409122][ T7202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.473381][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.483005][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.515191][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.612087][ T9418] netlink: 'syz.1.913': attribute type 11 has an invalid length. [ 199.636192][ T9420] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 199.683945][ T5855] Bluetooth: hci3: command tx timeout [ 199.909253][ T9330] hsr_slave_0: entered promiscuous mode [ 199.928966][ T9330] hsr_slave_1: entered promiscuous mode [ 199.938646][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.954228][ T9330] Cannot create hsr debugfs directory [ 200.066766][ T9448] netlink: 'syz.4.920': attribute type 3 has an invalid length. [ 200.136139][ T9350] chnl_net:caif_netlink_parms(): no params data found [ 200.192069][ T9450] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.244126][ T9453] netlink: 'syz.0.923': attribute type 13 has an invalid length. [ 200.252678][ T9453] netlink: 'syz.0.923': attribute type 17 has an invalid length. [ 200.266142][ T9453] netlink: 'syz.0.923': attribute type 27 has an invalid length. [ 200.307759][ T7202] bridge_slave_1: left allmulticast mode [ 200.315882][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.319390][ T7202] bridge_slave_1: left promiscuous mode [ 200.345652][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.360531][ T7202] bridge_slave_0: left allmulticast mode [ 200.366744][ T7202] bridge_slave_0: left promiscuous mode [ 200.372486][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.390162][ T7202] bridge_slave_1: left allmulticast mode [ 200.398731][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.411662][ T7202] bridge_slave_1: left promiscuous mode [ 200.419211][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.431811][ T7202] bridge_slave_0: left allmulticast mode [ 200.439726][ T7202] bridge_slave_0: left promiscuous mode [ 200.445652][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.470699][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.509695][ T9463] FAULT_INJECTION: forcing a failure. [ 200.509695][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 200.523769][ T9463] CPU: 1 UID: 0 PID: 9463 Comm: syz.4.926 Not tainted 6.16.0-rc4-syzkaller-01140-g6a971e48e2d8 #0 PREEMPT(full) [ 200.523799][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.523813][ T9463] Call Trace: [ 200.523821][ T9463] [ 200.523831][ T9463] dump_stack_lvl+0x189/0x250 [ 200.523866][ T9463] ? __pfx____ratelimit+0x10/0x10 [ 200.523897][ T9463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.523924][ T9463] ? __pfx__printk+0x10/0x10 [ 200.523958][ T9463] ? __pfx___might_resched+0x10/0x10 [ 200.523984][ T9463] ? fs_reclaim_acquire+0x7d/0x100 [ 200.524022][ T9463] should_fail_ex+0x414/0x560 [ 200.524060][ T9463] should_failslab+0xa8/0x100 [ 200.524091][ T9463] __kmalloc_noprof+0xcb/0x4f0 [ 200.524117][ T9463] ? tomoyo_encode+0x28b/0x550 [ 200.524145][ T9463] tomoyo_encode+0x28b/0x550 [ 200.524173][ T9463] tomoyo_realpath_from_path+0x58d/0x5d0 [ 200.524198][ T9463] ? tomoyo_domain+0xd9/0x130 [ 200.524228][ T9463] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 200.524259][ T9463] tomoyo_path_number_perm+0x1e8/0x5a0 [ 200.524293][ T9463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.524339][ T9463] ? sb_end_write+0xe9/0x1c0 [ 200.524370][ T9463] ? vfs_write+0x8d8/0xa90 [ 200.524441][ T9463] ? ksys_write+0x1e1/0x250 [ 200.524470][ T9463] security_file_ioctl+0xcb/0x2d0 [ 200.524496][ T9463] __se_sys_ioctl+0x47/0x170 [ 200.524519][ T9463] do_syscall_64+0xfa/0x3b0 [ 200.524544][ T9463] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.524568][ T9463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.524586][ T9463] ? clear_bhb_loop+0x60/0xb0 [ 200.524616][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.524633][ T9463] RIP: 0033:0x7fa33858e929 [ 200.524649][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.524665][ T9463] RSP: 002b:00007fa33948d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.524685][ T9463] RAX: ffffffffffffffda RBX: 00007fa3387b5fa0 RCX: 00007fa33858e929 [ 200.524698][ T9463] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 200.524710][ T9463] RBP: 00007fa33948d090 R08: 0000000000000000 R09: 0000000000000000 [ 200.524721][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.524733][ T9463] R13: 0000000000000000 R14: 00007fa3387b5fa0 R15: 00007ffd32d2d138 [ 200.524762][ T9463] [ 200.524797][ T9463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.643699][ T5855] Bluetooth: hci0: command tx timeout [ 201.112432][ T7202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.132543][ T7202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.144719][ T7202] bond0 (unregistering): Released all slaves [ 201.409797][ T7202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.420743][ T7202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.434347][ T7202] bond0 (unregistering): Released all slaves [ 201.468442][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 201.700649][ T9350] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.707962][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.715256][ T9350] bridge_slave_0: entered allmulticast mode [ 201.722460][ T9350] bridge_slave_0: entered promiscuous mode [ 201.758238][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.768678][ T5855] Bluetooth: hci3: command tx timeout [ 201.782804][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.790243][ T9350] bridge_slave_1: entered allmulticast mode [ 201.798059][ T9350] bridge_slave_1: entered promiscuous mode [ 201.919347][ T9493] netlink: 'syz.1.932': attribute type 1 has an invalid length. [ 201.986632][ T9350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.066696][ T9496] syzkaller0: entered promiscuous mode [ 202.072309][ T9496] syzkaller0: entered allmulticast mode [ 202.159704][ T9350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.329914][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 202.472845][ T9350] team0: Port device team_slave_0 added [ 202.483304][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 202.587448][ T9519] netlink: 'syz.4.941': attribute type 9 has an invalid length. [ 202.812805][ T5855] Bluetooth: hci0: command tx timeout [ 203.657080][ T9350] team0: Port device team_slave_1 added [ 203.662994][ T9522] netlink: 52 bytes leftover after parsing attributes in process `syz.1.942'. [ 203.843532][ T5855] Bluetooth: hci3: command tx timeout [ 203.876518][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 203.890778][ T9350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.918816][ T9350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.951927][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 203.967410][ T9350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.994427][ T9532] bridge0: port 3(syz_tun) entered disabled state [ 204.050154][ T9532] syz_tun (unregistering): left allmulticast mode [ 204.075134][ T9532] syz_tun (unregistering): left promiscuous mode [ 204.081717][ T9532] bridge0: port 3(syz_tun) entered disabled state [ 204.111299][ T9350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.131249][ T9350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.162893][ T9350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.299174][ T9549] netlink: 'syz.0.949': attribute type 5 has an invalid length. [ 204.369188][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 204.399574][ T9547] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 204.642403][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 204.683403][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 204.719420][ T9350] hsr_slave_0: entered promiscuous mode [ 204.726245][ T9350] hsr_slave_1: entered promiscuous mode [ 204.732527][ T9350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.744660][ T9350] Cannot create hsr debugfs directory [ 204.761968][ T9330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.771149][ T9553] netlink: 248 bytes leftover after parsing attributes in process `syz.4.950'. [ 204.787996][ T7202] hsr_slave_0: left promiscuous mode [ 204.794246][ T7202] hsr_slave_1: left promiscuous mode [ 204.800046][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.807861][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.816156][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.823844][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.825390][ T9554] Bluetooth: MGMT ver 1.23 [ 204.843607][ T7202] hsr_slave_0: left promiscuous mode [ 204.850218][ T7202] hsr_slave_1: left promiscuous mode [ 204.856473][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.864078][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.871936][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.880174][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.887543][ T5849] Bluetooth: hci0: command tx timeout [ 204.926740][ T7202] veth1_macvtap: left promiscuous mode [ 204.932299][ T7202] veth0_macvtap: left promiscuous mode [ 204.938311][ T7202] veth1_vlan: left promiscuous mode [ 204.943969][ T7202] veth0_vlan: left promiscuous mode [ 204.951572][ T7202] veth1_macvtap: left promiscuous mode [ 204.957271][ T7202] veth0_macvtap: left promiscuous mode [ 204.962945][ T7202] veth1_vlan: left promiscuous mode [ 204.968768][ T7202] veth0_vlan: left promiscuous mode [ 205.455511][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 205.486950][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 205.926110][ T5849] Bluetooth: hci3: command tx timeout [ 206.055484][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 206.091042][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 206.393555][ T9546] lo speed is unknown, defaulting to 1000 [ 206.409669][ T9330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.466085][ T9546] lo speed is unknown, defaulting to 1000 [ 206.500114][ T9330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.551459][ T9330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.655989][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.662449][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.683765][ T9558] wg2: entered promiscuous mode [ 206.692606][ T9558] wg2: entered allmulticast mode [ 207.060604][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 207.069694][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 207.079801][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.957'. [ 207.434103][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.506730][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.539712][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.546959][ T7216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.595101][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.602283][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.768898][ T9350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.787806][ T9350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.807473][ T9350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.840399][ T9350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.178362][ T9350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.260082][ T9350] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.299000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.306238][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.329845][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.337064][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.378950][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.422776][ T9628] D: renamed from syzkaller0 [ 208.505504][ T9632] openvswitch: netlink: Missing key (keys=40, expected=80) [ 208.555593][ T9330] veth0_vlan: entered promiscuous mode [ 208.595243][ T9330] veth1_vlan: entered promiscuous mode [ 208.607610][ T9637] tipc: Failed to remove unknown binding: 66,1,1/0:1665440531/1665440533 [ 208.631567][ T9637] tipc: Failed to remove unknown binding: 66,1,1/0:1665440531/1665440533 [ 208.650799][ T9637] tipc: Failed to remove unknown binding: 66,1,1/0:1665440531/1665440533 [ 208.677253][ T9330] veth0_macvtap: entered promiscuous mode [ 208.708559][ T9330] veth1_macvtap: entered promiscuous mode [ 208.791638][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.822530][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.916628][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.928269][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.938369][ T9643] lo speed is unknown, defaulting to 1000 [ 208.966333][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.992050][ T9643] lo speed is unknown, defaulting to 1000 [ 208.998922][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.078138][ T9350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.242441][ T9630] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 209.270793][ T7204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.298294][ T7204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.381563][ T9654] __nla_validate_parse: 4 callbacks suppressed [ 209.381581][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 209.414849][ T7202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.433033][ T7202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.518782][ T9350] veth0_vlan: entered promiscuous mode [ 209.584013][ T9350] veth1_vlan: entered promiscuous mode [ 209.927006][ T9350] veth0_macvtap: entered promiscuous mode [ 209.958916][ T9668] hsr0: entered allmulticast mode [ 209.965522][ T9668] hsr_slave_0: entered allmulticast mode [ 209.983017][ T9668] hsr_slave_1: entered allmulticast mode [ 210.037428][ T9350] veth1_macvtap: entered promiscuous mode [ 210.068960][ T9668] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 210.196815][ T9350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.267315][ T9350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.357582][ T7216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.376852][ T7216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.405251][ T7216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.434668][ T7216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.559627][ T7204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.604712][ T7202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.612563][ T7202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.729718][ T7211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.750837][ T7211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.805403][ T7204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.820103][ T9681] FAULT_INJECTION: forcing a failure. [ 210.820103][ T9681] name failslab, interval 1, probability 0, space 0, times 0 [ 210.837014][ T9683] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 210.849868][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.0.992 Not tainted 6.16.0-rc4-syzkaller-01140-g6a971e48e2d8 #0 PREEMPT(full) [ 210.849895][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.849906][ T9681] Call Trace: [ 210.849913][ T9681] [ 210.849921][ T9681] dump_stack_lvl+0x189/0x250 [ 210.849948][ T9681] ? __pfx____ratelimit+0x10/0x10 [ 210.849973][ T9681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.849996][ T9681] ? __pfx__printk+0x10/0x10 [ 210.850026][ T9681] ? __pfx___might_resched+0x10/0x10 [ 210.850048][ T9681] ? fs_reclaim_acquire+0x7d/0x100 [ 210.850079][ T9681] should_fail_ex+0x414/0x560 [ 210.850111][ T9681] should_failslab+0xa8/0x100 [ 210.850137][ T9681] __kmalloc_noprof+0xcb/0x4f0 [ 210.850160][ T9681] ? __cgroup_bpf_run_filter_setsockopt+0xa79/0xc70 [ 210.850191][ T9681] __cgroup_bpf_run_filter_setsockopt+0xa79/0xc70 [ 210.850221][ T9681] ? __cgroup_bpf_run_filter_setsockopt+0x36b/0xc70 [ 210.850248][ T9681] ? vfs_write+0x8d8/0xa90 [ 210.850274][ T9681] ? __pfx___cgroup_bpf_run_filter_setsockopt+0x10/0x10 [ 210.850299][ T9681] ? aa_sk_perm+0x81e/0x950 [ 210.850331][ T9681] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.850361][ T9681] ? aa_sock_opt_perm+0x74/0x110 [ 210.850394][ T9681] do_sock_setsockopt+0x37a/0x3e0 [ 210.850426][ T9681] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 210.850459][ T9681] ? __fget_files+0x2a/0x420 [ 210.850492][ T9681] __x64_sys_setsockopt+0x18b/0x220 [ 210.850526][ T9681] do_syscall_64+0xfa/0x3b0 [ 210.850551][ T9681] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.850575][ T9681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.850594][ T9681] ? clear_bhb_loop+0x60/0xb0 [ 210.850617][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.850635][ T9681] RIP: 0033:0x7f03a618e929 [ 210.850652][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.850668][ T9681] RSP: 002b:00007f03a704f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.850688][ T9681] RAX: ffffffffffffffda RBX: 00007f03a63b5fa0 RCX: 00007f03a618e929 [ 210.850702][ T9681] RDX: 000000000000000b RSI: 0000000000000011 RDI: 0000000000000006 [ 210.850713][ T9681] RBP: 00007f03a704f090 R08: 0000000000000004 R09: 0000000000000000 [ 210.850725][ T9681] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 210.850736][ T9681] R13: 0000000000000000 R14: 00007f03a63b5fa0 R15: 00007fff0a9da308 [ 210.850763][ T9681] [ 211.189946][ T9683] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 211.242924][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.285821][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.295857][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.304682][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.312468][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.320521][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.328194][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.385810][ T7204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.500942][ T30] audit: type=1804 audit(1752137381.167:2): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.994" name="memory.events" dev="tmpfs" ino=1238 res=1 errno=0 [ 211.530976][ T7204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.559861][ T30] audit: type=1800 audit(1752137381.167:3): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="memory.events" dev="tmpfs" ino=1238 res=0 errno=0 [ 211.582403][ T9701] netlink: 'syz.0.994': attribute type 12 has an invalid length. [ 211.591114][ T9701] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 211.599931][ T9701] netlink: 148 bytes leftover after parsing attributes in process `syz.0.994'. [ 211.609097][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.662314][ T9692] lo speed is unknown, defaulting to 1000 [ 211.695866][ T9692] lo speed is unknown, defaulting to 1000 [ 211.897536][ T7204] bridge_slave_1: left allmulticast mode [ 211.919724][ T7204] bridge_slave_1: left promiscuous mode [ 211.934948][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.011918][ T7204] bridge_slave_0: left allmulticast mode [ 212.037787][ T7204] bridge_slave_0: left promiscuous mode [ 212.062491][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.098269][ T9722] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1001'. [ 212.493738][ T7204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.507805][ T7204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.519889][ T7204] bond0 (unregistering): Released all slaves [ 212.537194][ T9717] netlink: 'syz.1.1000': attribute type 2 has an invalid length. [ 212.545481][ T9720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 212.822050][ T9692] chnl_net:caif_netlink_parms(): no params data found [ 213.028852][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.037304][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.044980][ T9692] bridge_slave_0: entered allmulticast mode [ 213.057803][ T9692] bridge_slave_0: entered promiscuous mode [ 213.078680][ T7204] hsr_slave_0: left promiscuous mode [ 213.089600][ T7204] hsr_slave_1: left promiscuous mode [ 213.095956][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.104033][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.111909][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.119427][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.199191][ T7204] veth1_macvtap: left promiscuous mode [ 213.212220][ T7204] veth0_macvtap: left promiscuous mode [ 213.218858][ T9734] netlink: 'syz.1.1003': attribute type 7 has an invalid length. [ 213.235754][ T7204] veth1_vlan: left promiscuous mode [ 213.241125][ T7204] veth0_vlan: left promiscuous mode [ 213.378839][ T5855] Bluetooth: hci0: command tx timeout [ 213.396310][ T9738] FAULT_INJECTION: forcing a failure. [ 213.396310][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.497667][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.1.1005 Not tainted 6.16.0-rc4-syzkaller-01140-g6a971e48e2d8 #0 PREEMPT(full) [ 213.497701][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.497714][ T9738] Call Trace: [ 213.497722][ T9738] [ 213.497732][ T9738] dump_stack_lvl+0x189/0x250 [ 213.497762][ T9738] ? __pfx____ratelimit+0x10/0x10 [ 213.497792][ T9738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.497819][ T9738] ? __pfx__printk+0x10/0x10 [ 213.497862][ T9738] should_fail_ex+0x414/0x560 [ 213.497906][ T9738] _copy_to_user+0x31/0xb0 [ 213.497936][ T9738] simple_read_from_buffer+0xe1/0x170 [ 213.497969][ T9738] proc_fail_nth_read+0x1df/0x250 [ 213.498004][ T9738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.498040][ T9738] ? rw_verify_area+0x258/0x650 [ 213.498063][ T9738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.498096][ T9738] vfs_read+0x200/0x980 [ 213.498127][ T9738] ? __pfx___mutex_lock+0x10/0x10 [ 213.498158][ T9738] ? __pfx_vfs_read+0x10/0x10 [ 213.498185][ T9738] ? __fget_files+0x2a/0x420 [ 213.498220][ T9738] ? __fget_files+0x3a0/0x420 [ 213.498248][ T9738] ? __fget_files+0x2a/0x420 [ 213.498288][ T9738] ksys_read+0x145/0x250 [ 213.498310][ T9738] ? __fget_files+0x2a/0x420 [ 213.498340][ T9738] ? __pfx_ksys_read+0x10/0x10 [ 213.498371][ T9738] ? do_syscall_64+0xbe/0x3b0 [ 213.498405][ T9738] do_syscall_64+0xfa/0x3b0 [ 213.498433][ T9738] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.498459][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.498480][ T9738] ? clear_bhb_loop+0x60/0xb0 [ 213.498507][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.498527][ T9738] RIP: 0033:0x7f426398d33c [ 213.498546][ T9738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.498564][ T9738] RSP: 002b:00007f426472c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.498587][ T9738] RAX: ffffffffffffffda RBX: 00007f4263bb5fa0 RCX: 00007f426398d33c [ 213.498603][ T9738] RDX: 000000000000000f RSI: 00007f426472c0a0 RDI: 0000000000000007 [ 213.498616][ T9738] RBP: 00007f426472c090 R08: 0000000000000000 R09: 0000000000000000 [ 213.498629][ T9738] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 213.498642][ T9738] R13: 0000000000000000 R14: 00007f4263bb5fa0 R15: 00007fffa36d5648 [ 213.498676][ T9738] [ 213.882327][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.916220][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.927159][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.935749][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.945014][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.104610][ T9758] Bluetooth: MGMT ver 1.23 [ 214.306830][ T7204] team0 (unregistering): Port device team_slave_1 removed [ 214.337807][ T7204] team0 (unregistering): Port device team_slave_0 removed [ 214.649489][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.656819][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.664278][ T9692] bridge_slave_1: entered allmulticast mode [ 214.672389][ T9692] bridge_slave_1: entered promiscuous mode [ 214.820966][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.855901][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.900268][ T9747] lo speed is unknown, defaulting to 1000 [ 214.906657][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 214.917865][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 214.981431][ T9692] team0: Port device team_slave_0 added [ 214.991842][ T9747] lo speed is unknown, defaulting to 1000 [ 215.005223][ T9692] team0: Port device team_slave_1 added [ 215.136515][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.156513][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.188860][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.208406][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.228855][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.293145][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.444716][ T5849] Bluetooth: hci0: command tx timeout [ 215.449659][ T9692] hsr_slave_0: entered promiscuous mode [ 215.458601][ T9692] hsr_slave_1: entered promiscuous mode [ 215.466931][ T9692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.474765][ T9692] Cannot create hsr debugfs directory [ 215.494164][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.528366][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.598189][ T7204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.768679][ T7204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.856644][ T7204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.986351][ T7204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.003234][ T5849] Bluetooth: hci3: command tx timeout [ 216.339254][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 216.366022][ T9832] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 216.418582][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 216.490066][ T9832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.567739][ T9833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.577253][ T9833] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 216.589615][ T9833] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 216.660662][ T9839] gretap1: entered promiscuous mode [ 216.671980][ T9839] bond3: (slave gretap1): making interface the new active one [ 216.683292][ T9839] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 216.699420][ T9832] macvlan2: entered promiscuous mode [ 216.704932][ T9832] macvlan2: entered allmulticast mode [ 216.711075][ T9832] bond3: entered promiscuous mode [ 216.717725][ T9832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.728136][ T9832] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 216.740732][ T9832] bond3: left promiscuous mode [ 216.783306][ T9846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.794240][ T9846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.886321][ T7204] bridge_slave_1: left allmulticast mode [ 216.892008][ T7204] bridge_slave_1: left promiscuous mode [ 216.914642][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.928076][ T7204] bridge_slave_0: left allmulticast mode [ 216.936815][ T7204] bridge_slave_0: left promiscuous mode [ 216.942500][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.045635][ T9857] IPVS: set_ctl: invalid protocol: 59 172.20.20.30:20002 [ 217.397394][ T7204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.411594][ T7204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.422337][ T7204] bond0 (unregistering): Released all slaves [ 217.526370][ T5849] Bluetooth: hci0: command tx timeout [ 217.550095][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.557471][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.565122][ T9747] bridge_slave_0: entered allmulticast mode [ 217.572477][ T9747] bridge_slave_0: entered promiscuous mode [ 217.651229][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.669622][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.679827][ T9747] bridge_slave_1: entered allmulticast mode [ 217.686604][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 217.687939][ T9747] bridge_slave_1: entered promiscuous mode [ 217.708092][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 217.825838][ T9868] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 217.907963][ T9873] tipc: MTU too low for tipc bearer [ 217.940265][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.965102][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.999063][ T9692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.020447][ T9692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.084309][ T5849] Bluetooth: hci3: command tx timeout [ 218.154378][ T9892] RDS: rds_bind could not find a transport for fe80::44, load rds_tcp or rds_rdma? [ 218.203381][ T9892] RDS: rds_bind could not find a transport for fe80::44, load rds_tcp or rds_rdma? [ 218.392290][ T9692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.435091][ T9692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.447466][ T9897] batadv_slave_1: entered promiscuous mode [ 218.464528][ T9747] team0: Port device team_slave_0 added [ 218.504864][ T9747] team0: Port device team_slave_1 added [ 218.532580][ T7204] hsr_slave_0: left promiscuous mode [ 218.548342][ T7204] hsr_slave_1: left promiscuous mode [ 218.555520][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.558628][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 218.563607][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.581168][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 218.582083][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.600580][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.631727][ T7204] veth1_macvtap: left promiscuous mode [ 218.637615][ T7204] veth0_macvtap: left promiscuous mode [ 218.644255][ T7204] veth1_vlan: left promiscuous mode [ 218.649553][ T7204] veth0_vlan: left promiscuous mode [ 219.020127][ T7204] team0 (unregistering): Port device team_slave_1 removed [ 219.058940][ T7204] team0 (unregistering): Port device team_slave_0 removed [ 219.461708][ T9893] batadv_slave_1: left promiscuous mode [ 219.487396][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.505234][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.523893][ T9919] netlink: 'syz.4.1048': attribute type 10 has an invalid length. [ 219.544363][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.584619][ T9923] netlink: 'syz.4.1048': attribute type 10 has an invalid length. [ 219.597698][ T9919] dummy0: left promiscuous mode [ 219.606265][ T5849] Bluetooth: hci0: command tx timeout [ 219.620247][ T9919] dummy0: entered promiscuous mode [ 219.651153][ T9919] team0: Port device dummy0 added [ 219.668095][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.675392][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.702189][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.742983][ T9923] dummy0: left promiscuous mode [ 219.749946][ T9923] team0: Port device dummy0 removed [ 219.762965][ T9923] dummy0: entered promiscuous mode [ 219.769241][ T9923] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.801970][ T7220] bond0: (slave dummy0): interface is now down [ 219.834877][ T7213] bond0: (slave dummy0): interface is now down [ 219.871345][ T69] bond0: (slave dummy0): interface is now down [ 219.893193][ T7213] bond0: (slave dummy0): interface is now down [ 219.923710][ T7213] bond0: (slave dummy0): interface is now down [ 219.945048][ T7220] bond0: (slave dummy0): interface is now down [ 219.955991][ T9934] lo speed is unknown, defaulting to 1000 [ 219.968906][ T9747] hsr_slave_0: entered promiscuous mode [ 219.987044][ T9747] hsr_slave_1: entered promiscuous mode [ 219.999362][ T9747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.001710][ T7200] bond0: (slave dummy0): interface is now down [ 220.007935][ T9747] Cannot create hsr debugfs directory [ 220.036104][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 220.045555][ T69] bond0: (slave dummy0): interface is now down [ 220.084310][ T69] bond0: (slave dummy0): interface is now down [ 220.113911][ T36] bond0: (slave dummy0): interface is now down [ 220.122524][ T9934] lo speed is unknown, defaulting to 1000 [ 220.135671][ T36] bond0: (slave dummy0): interface is now down [ 220.153711][ T36] bond0: (slave dummy0): interface is now down [ 220.182742][ T5849] Bluetooth: hci3: command tx timeout [ 220.194023][ T36] bond0: (slave dummy0): interface is now down [ 220.248271][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.266384][ T36] bond0: (slave dummy0): interface is now down [ 220.277590][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.306847][ T36] bond0: (slave dummy0): interface is now down [ 220.364221][ T7220] bond0: (slave dummy0): interface is now down [ 220.395064][ T36] bond0: (slave dummy0): interface is now down [ 220.415329][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.422495][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.430026][ T7220] bond0: (slave dummy0): interface is now down [ 220.437702][ T9946] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 220.450122][ T9946] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 220.470575][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 220.479847][ T7213] bond0: (slave dummy0): interface is now down [ 220.488674][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1056'. [ 220.501575][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.503356][ T36] bond0: (slave dummy0): interface is now down [ 220.508750][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.543839][ T36] bond0: (slave dummy0): interface is now down [ 220.573264][ T36] bond0: (slave dummy0): interface is now down [ 220.608232][ T36] bond0: (slave dummy0): interface is now down [ 220.655594][ T7200] bond0: (slave dummy0): interface is now down [ 220.684041][ T7200] bond0: (slave dummy0): interface is now down [ 220.704677][ T7211] bond0: (slave dummy0): interface is now down [ 220.733528][ T7200] bond0: (slave dummy0): interface is now down [ 220.763758][ T7211] bond0: (slave dummy0): interface is now down [ 220.790570][ T7200] bond0: (slave dummy0): interface is now down [ 220.811096][ T9959] netlink: 'syz.4.1059': attribute type 3 has an invalid length. [ 220.824116][ T7211] bond0: (slave dummy0): interface is now down [ 220.873381][ T7200] bond0: (slave dummy0): interface is now down [ 220.893830][ T36] bond0: (slave dummy0): interface is now down [ 220.916080][ T36] bond0: (slave dummy0): interface is now down [ 220.935176][ T36] bond0: now running without any active interface! [ 220.981200][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 221.275366][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.333753][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 221.406629][ T9747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.420736][ T9747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.429813][ T9973] netlink: 'syz.4.1062': attribute type 21 has an invalid length. [ 221.450115][ T9747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.463863][ T9973] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 221.472326][ T9973] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1062'. [ 221.489664][ T9747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.510870][ T9692] veth0_vlan: entered promiscuous mode [ 221.555002][ T9692] veth1_vlan: entered promiscuous mode [ 221.654293][ T9692] veth0_macvtap: entered promiscuous mode [ 221.677130][ T9692] veth1_macvtap: entered promiscuous mode [ 221.715045][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.731945][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.762289][ T7220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.789972][ T7220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.800882][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 221.803716][ T7220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.832040][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.845337][ T7220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.897342][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.922498][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.929715][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.977783][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.984984][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.030770][ T7220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.042526][ T7220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.175662][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.186595][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.243498][ T5849] Bluetooth: hci3: command tx timeout [ 222.726167][T10021] tipc: Enabled bearer , priority 0 [ 222.777522][T10021] tipc: Resetting bearer [ 222.802474][T10022] syzkaller0: entered promiscuous mode [ 222.828948][T10022] syzkaller0: entered allmulticast mode [ 222.893867][ T7213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.935220][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 222.967702][T10022] tipc: Resetting bearer [ 223.005481][T10022] tipc: Disabling bearer [ 223.077961][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.126164][ T7213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.179703][ T9747] veth0_vlan: entered promiscuous mode [ 223.191921][ T9747] veth1_vlan: entered promiscuous mode [ 223.247493][ T7213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.262065][ T9747] veth0_macvtap: entered promiscuous mode [ 223.275307][ T9747] veth1_macvtap: entered promiscuous mode [ 223.296637][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.310331][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.330391][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.340622][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.352151][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.362648][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.429038][ T7213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.467971][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.477464][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.514612][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.535717][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.975086][T10041] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 223.989238][ T7213] bridge_slave_1: left allmulticast mode [ 223.995338][ T7213] bridge_slave_1: left promiscuous mode [ 224.004215][T10041] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20000 [ 224.015410][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.036079][ T7213] bridge_slave_0: left allmulticast mode [ 224.041759][ T7213] bridge_slave_0: left promiscuous mode [ 224.048101][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.154098][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.162974][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.174867][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.185114][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.195927][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.411145][ T7213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.424143][ T7213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.434660][ T7213] bond0 (unregistering): Released all slaves [ 224.627935][T10057] Cannot find del_set index 1 as target [ 224.806942][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 226.123370][T10051] lo speed is unknown, defaulting to 1000 [ 226.211242][T10070] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 226.229664][T10051] lo speed is unknown, defaulting to 1000 [ 226.250124][ T5849] Bluetooth: hci0: command tx timeout [ 226.257767][T10070] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1087'. [ 226.272066][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 226.409594][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.422446][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.431414][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.453255][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.464937][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.859155][T10074] lo speed is unknown, defaulting to 1000 [ 226.880407][T10080] lo speed is unknown, defaulting to 1000 [ 226.920227][T10074] lo speed is unknown, defaulting to 1000 [ 227.272398][T10098] lo speed is unknown, defaulting to 1000 [ 227.392530][T10080] lo speed is unknown, defaulting to 1000 [ 227.453970][T10051] chnl_net:caif_netlink_parms(): no params data found [ 227.745961][T10104] lo speed is unknown, defaulting to 1000 [ 227.951675][T10098] lo speed is unknown, defaulting to 1000 [ 228.040609][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.073412][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.080691][T10051] bridge_slave_0: entered allmulticast mode [ 228.099657][T10051] bridge_slave_0: entered promiscuous mode [ 228.157575][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.183277][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.191472][T10051] bridge_slave_1: entered allmulticast mode [ 228.217476][T10051] bridge_slave_1: entered promiscuous mode [ 228.324885][ T5849] Bluetooth: hci0: command tx timeout [ 228.337103][ T7213] hsr_slave_0: left promiscuous mode [ 228.347544][ T7213] hsr_slave_1: left promiscuous mode [ 228.363755][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.373303][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.391644][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.411354][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.452173][ T7213] veth1_macvtap: left promiscuous mode [ 228.463189][ T7213] veth0_macvtap: left promiscuous mode [ 228.468960][ T7213] veth1_vlan: left promiscuous mode [ 228.483427][ T7213] veth0_vlan: left promiscuous mode [ 228.563279][ T5849] Bluetooth: hci3: command tx timeout [ 228.836399][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 228.898433][ T7213] team0 (unregistering): Port device team_slave_1 removed [ 228.930376][ T7213] team0 (unregistering): Port device team_slave_0 removed [ 229.279331][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.298100][T10129] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 229.323331][T10104] lo speed is unknown, defaulting to 1000 [ 229.338594][T10133] batadv_slave_0: entered promiscuous mode [ 229.362285][T10074] chnl_net:caif_netlink_parms(): no params data found [ 229.386114][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.523241][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.601878][T10051] team0: Port device team_slave_0 added [ 229.627619][T10051] team0: Port device team_slave_1 added [ 229.758664][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'. [ 230.006047][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.018254][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.050750][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.081707][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.096576][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.127238][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.197726][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.209553][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.216875][T10074] bridge_slave_0: entered allmulticast mode [ 230.232539][T10074] bridge_slave_0: entered promiscuous mode [ 230.240587][T10143] syzkaller1: entered promiscuous mode [ 230.247253][T10143] syzkaller1: entered allmulticast mode [ 230.285534][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.292686][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.300653][T10074] bridge_slave_1: entered allmulticast mode [ 230.307918][T10074] bridge_slave_1: entered promiscuous mode [ 230.397238][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.412738][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.422250][ T5849] Bluetooth: hci0: command tx timeout [ 230.475023][T10074] team0: Port device team_slave_0 added [ 230.604625][T10074] team0: Port device team_slave_1 added [ 230.644440][ T5849] Bluetooth: hci3: command tx timeout [ 230.682722][ T7213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.779290][T10051] hsr_slave_0: entered promiscuous mode [ 230.786294][T10051] hsr_slave_1: entered promiscuous mode [ 230.792663][T10051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.801713][T10051] Cannot create hsr debugfs directory [ 230.830604][ T7213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.856146][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.865986][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.899261][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.914710][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.921673][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.947998][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.968447][T10151] netlink: 'syz.4.1109': attribute type 3 has an invalid length. [ 230.993629][ T7213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.096762][ T7213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.151085][T10074] hsr_slave_0: entered promiscuous mode [ 231.159798][T10074] hsr_slave_1: entered promiscuous mode [ 231.166035][T10074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.173904][T10074] Cannot create hsr debugfs directory [ 231.199958][T10154] lo: left promiscuous mode [ 231.209445][T10154] tunl0: left promiscuous mode [ 231.215421][T10154] gre0: left promiscuous mode [ 231.223084][T10154] gretap0: left promiscuous mode [ 231.229899][T10154] erspan0: left promiscuous mode [ 231.236768][T10154] ip_vti0: left promiscuous mode [ 231.244005][T10154] ip6_vti0: left promiscuous mode [ 231.251463][T10154] sit0: left promiscuous mode [ 231.262893][T10154] ip6tnl0: left promiscuous mode [ 231.269525][T10154] ip6gre0: left promiscuous mode [ 231.276388][T10154] syz_tun: left promiscuous mode [ 231.282835][T10154] ip6gretap0: left promiscuous mode [ 231.290904][T10154] vcan0: left promiscuous mode [ 231.300445][T10154] bond0: left promiscuous mode [ 231.305322][T10154] @ÿ: left promiscuous mode [ 231.310236][T10154] bond_slave_1: left promiscuous mode [ 231.316572][T10154] dummy0: left promiscuous mode [ 231.326125][T10154] team0: left promiscuous mode [ 231.330923][T10154] team_slave_0: left promiscuous mode [ 231.337168][T10154] team_slave_1: left promiscuous mode [ 231.346457][T10154] nlmon0: left promiscuous mode [ 231.352314][T10154] caif0: left promiscuous mode [ 231.360293][T10154] wg2: left promiscuous mode [ 231.365001][T10154] wg2: left allmulticast mode [ 231.378441][T10154] batadv_slave_1: left promiscuous mode [ 231.385470][T10154] hsr0: left allmulticast mode [ 231.390478][T10154] hsr_slave_0: left allmulticast mode [ 231.396387][T10154] hsr_slave_1: left allmulticast mode [ 231.408944][T10154] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 231.417538][T10154] vxlan0: left promiscuous mode [ 231.422399][T10154] vxlan0: left allmulticast mode [ 231.427664][T10154] batadv1: left allmulticast mode [ 231.434167][T10154] gretap3: left promiscuous mode [ 231.627093][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 231.792391][ T7213] bridge_slave_1: left allmulticast mode [ 231.798851][ T7213] bridge_slave_1: left promiscuous mode [ 231.806826][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.833937][ T7213] bridge_slave_0: left allmulticast mode [ 231.839975][ T7213] bridge_slave_0: left promiscuous mode [ 231.873420][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.896491][T10177] netlink: 'syz.4.1114': attribute type 3 has an invalid length. [ 231.909023][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 231.937427][T10168] xt_CT: No such helper "snmp" [ 232.391052][ T7213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.402403][ T7213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.412846][ T7213] bond0 (unregistering): Released all slaves [ 232.483748][ T5849] Bluetooth: hci0: command tx timeout [ 232.617951][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 232.685324][T10192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1119'. [ 232.706234][T10192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1119'. [ 232.715975][T10192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1119'. [ 232.725681][ T5849] Bluetooth: hci3: command tx timeout [ 232.811507][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 232.832539][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 233.289431][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1126'. [ 233.376415][T10051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.418861][T10051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.461369][T10051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.490391][ T7213] hsr_slave_0: left promiscuous mode [ 233.506771][ T7213] hsr_slave_1: left promiscuous mode [ 233.514847][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.522503][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.531666][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.540369][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.562330][ T7213] veth1_macvtap: left promiscuous mode [ 233.568033][ T7213] veth0_macvtap: left promiscuous mode [ 233.573967][ T7213] veth1_vlan: left promiscuous mode [ 233.579406][ T7213] veth0_vlan: left promiscuous mode [ 234.113244][ T7213] team0 (unregistering): Port device team_slave_1 removed [ 234.146734][ T7213] team0 (unregistering): Port device team_slave_0 removed [ 234.166253][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 234.282392][T10236] netlink: 'syz.1.1129': attribute type 15 has an invalid length. [ 234.541311][T10051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.813917][ T5849] Bluetooth: hci3: command tx timeout [ 234.934114][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.017424][T10051] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.094211][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.101400][ T7202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.124954][T10257] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 235.159347][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.166614][ T7202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.210775][T10074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.215332][T10259] netlink: 'syz.4.1136': attribute type 39 has an invalid length. [ 235.228877][T10260] tipc: Enabled bearer , priority 0 [ 235.236842][T10074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.265518][T10260] syzkaller0: entered allmulticast mode [ 235.271507][T10074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.290785][T10260] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 235.302721][T10260] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 235.311154][T10260] CPU: 0 UID: 0 PID: 10260 Comm: syz.1.1135 Not tainted 6.16.0-rc4-syzkaller-01140-g6a971e48e2d8 #0 PREEMPT(full) [ 235.323252][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.333328][T10260] RIP: 0010:qfq_qlen_notify+0x29/0x70 [ 235.338716][T10260] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 2c 42 37 f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 79 c2 9a f8 49 8b 07 4c 39 f8 74 1c [ 235.358340][T10260] RSP: 0018:ffffc90003077108 EFLAGS: 00010202 [ 235.364440][T10260] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000 [ 235.372416][T10260] RDX: ffffc9000d37d000 RSI: 00000000000002f7 RDI: 00000000000002f8 [ 235.380483][T10260] RBP: dffffc0000000000 R08: ffff888036948000 R09: 0000000000000002 [ 235.388458][T10260] R10: 00000000ffffffff R11: ffffffff89891dc0 R12: 0000000000000000 [ 235.396439][T10260] R13: ffff88805e4b4000 R14: ffff88805e4b4000 R15: 0000000000000058 [ 235.404417][T10260] FS: 00007f42617f66c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 235.413352][T10260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.419950][T10260] CR2: 00007fa33946bf98 CR3: 00000000767a8000 CR4: 00000000003526f0 [ 235.427948][T10260] Call Trace: [ 235.431243][T10260] [ 235.434194][T10260] qdisc_tree_reduce_backlog+0x299/0x480 [ 235.439846][T10260] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 235.445580][T10260] hhf_change+0x764/0xad0 [ 235.449923][T10260] ? __pfx_hhf_change+0x10/0x10 [ 235.454784][T10260] ? __raw_spin_lock_init+0x45/0x100 [ 235.460087][T10260] ? qdisc_alloc+0x7a1/0xaa0 [ 235.464691][T10260] ? __pfx_hhf_init+0x10/0x10 [ 235.469379][T10260] hhf_init+0x213/0x950 [ 235.473540][T10260] ? __pfx_hhf_init+0x10/0x10 [ 235.478224][T10260] qdisc_create+0x7a9/0xea0 [ 235.482740][T10260] tc_modify_qdisc+0x1426/0x2010 [ 235.487704][T10260] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 235.493026][T10260] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 235.498338][T10260] rtnetlink_rcv_msg+0x779/0xb70 [ 235.503304][T10260] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 235.508430][T10260] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.513906][T10260] netlink_rcv_skb+0x205/0x470 [ 235.518685][T10260] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.524155][T10260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.529457][T10260] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.534662][T10260] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.539878][T10260] netlink_unicast+0x758/0x8d0 [ 235.544657][T10260] netlink_sendmsg+0x805/0xb30 [ 235.549438][T10260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.554735][T10260] ? aa_sock_msg_perm+0x94/0x160 [ 235.559690][T10260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.564981][T10260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.570290][T10260] __sock_sendmsg+0x219/0x270 [ 235.574978][T10260] ____sys_sendmsg+0x505/0x830 [ 235.579754][T10260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.585058][T10260] ? import_iovec+0x74/0xa0 [ 235.589572][T10260] ___sys_sendmsg+0x21f/0x2a0 [ 235.594257][T10260] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.599483][T10260] ? __fget_files+0x2a/0x420 [ 235.604084][T10260] ? __fget_files+0x3a0/0x420 [ 235.608780][T10260] __x64_sys_sendmsg+0x19b/0x260 [ 235.613725][T10260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.619193][T10260] ? rcu_is_watching+0x15/0xb0 [ 235.623971][T10260] ? do_syscall_64+0xbe/0x3b0 [ 235.628664][T10260] do_syscall_64+0xfa/0x3b0 [ 235.633184][T10260] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.638403][T10260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.644477][T10260] ? clear_bhb_loop+0x60/0xb0 [ 235.649165][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.655061][T10260] RIP: 0033:0x7f426398e929 [ 235.659503][T10260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.679119][T10260] RSP: 002b:00007f42617f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.687546][T10260] RAX: ffffffffffffffda RBX: 00007f4263bb6080 RCX: 00007f426398e929 [ 235.695523][T10260] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 235.703501][T10260] RBP: 00007f4263a10b39 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.711477][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.719452][T10260] R13: 0000000000000000 R14: 00007f4263bb6080 R15: 00007fffa36d5648 [ 235.727437][T10260] [ 235.730480][T10260] Modules linked in: [ 235.734612][T10260] ---[ end trace 0000000000000000 ]--- [ 235.740164][T10260] RIP: 0010:qfq_qlen_notify+0x29/0x70 [ 235.745596][T10260] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 2c 42 37 f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 79 c2 9a f8 49 8b 07 4c 39 f8 74 1c [ 235.765250][T10260] RSP: 0018:ffffc90003077108 EFLAGS: 00010202 [ 235.771350][T10260] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000 [ 235.779357][T10260] RDX: ffffc9000d37d000 RSI: 00000000000002f7 RDI: 00000000000002f8 [ 235.787368][T10260] RBP: dffffc0000000000 R08: ffff888036948000 R09: 0000000000000002 [ 235.795477][T10260] R10: 00000000ffffffff R11: ffffffff89891dc0 R12: 0000000000000000 [ 235.803484][T10260] R13: ffff88805e4b4000 R14: ffff88805e4b4000 R15: 0000000000000058 [ 235.811467][T10260] FS: 00007f42617f66c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 235.820428][T10260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.827040][T10260] CR2: 00007fa33946bf98 CR3: 00000000767a8000 CR4: 00000000003526f0 [ 235.835048][T10260] Kernel panic - not syncing: Fatal exception in interrupt [ 235.842593][T10260] Kernel Offset: disabled [ 235.846916][T10260] Rebooting in 86400 seconds..