last executing test programs: 1m16.188588503s ago: executing program 3 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) 1m15.665221263s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) 1m0.221754154s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) 41.61917725s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) 23.337785251s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) 7.859478277s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) 3.244059327s ago: executing program 4 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10dc}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2be80c9eef132bda) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r4, 0x5, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x4}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x480c5) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x480c5) 2.67922799s ago: executing program 4 (id=552): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @dev}, &(0x7f0000000100)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=@getsadinfo={0x4f8, 0x23, 0x500, 0x70bd2d, 0x25dfdbfb, 0x0, [@tfcpad={0x8, 0x16, 0x9}, @proto={0x5, 0x19, 0x32}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x61, 0x7}}, @tmpl={0x144, 0x5, [{{@in6=@remote, 0x4d3, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x8, 0x7ff, 0x2, 0x3}, {{@in=@multicast2, 0x4d3, 0x33}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7, 0x101}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d4, 0x33}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x1, 0x10, 0x3, 0x1, 0x9}, {{@in6=@remote, 0x4d5, 0x6c}, 0x2, @in=@multicast2, 0x3507, 0x4, 0x3, 0x1, 0x7, 0x1c0c665b, 0xdc}, {{@in=@local, 0x4d4, 0x3c}, 0xa, @in6=@private2, 0x3503, 0x4, 0x1, 0xd, 0xe, 0xe7fb, 0xff}]}, @algo_comp={0x13a, 0x3, {{'lzs\x00'}, 0x790, "bfc2e39a18a1b3a0c6e2bd644b74eb68d2fa3a462f98020f09c7acbca2878caf43070479699d8a98d1c24298dd461c54b0ce393ca07b747a2bfe84ed525336a344549ca5359075f1a2a25aab793b2d9531c264fe3025765eb71c69ce6697f0ca8ac1f8323ad9e28c39b4b07f6510f31869fd5e2cb20195e212400cdaa0f68fc10188d6d391debd7d27fd99c825cf94a65af7a04d3709766127590deb993d892fc227357a073a5651fded77cfa9eb50069740d2f12930c0c50646c24403555c994640b11a03ebbf4fec8f10ba4534ae63a556281026d76f61741f3ddb4a60b6fda0dc77ddf80fbf2348b5aa7d66f5e4e8c913"}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010102}, @policy_type={0xa, 0x10, {0x1}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback, 0x4e21, 0x1ceb, 0x4e23, 0x1, 0xa, 0x20, 0x20, 0x87, r1}, {@in6=@mcast2, 0x4d2, 0x32}, @in=@broadcast, {0x4, 0x27503124, 0x8000000000000000, 0x9, 0x1, 0x54, 0x5, 0x9}, {0x9, 0x5, 0x9, 0x9}, {0x9, 0x200, 0x400}, 0x70bd2d, 0x3502, 0xa, 0x1, 0x9, 0x43}}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd2b, 0x70bd25, 0x70bd25, 0x70bd25, 0x6, [0x200, 0x40, 0x9, 0x1, 0x3, 0xe, 0x5, 0xffffff01, 0x0, 0x200]}}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x0, r2, r3}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x6, 0x4, 0x0, 0xcf, 0xb, 0x100000000, 0x1, 0x3}, {0x8, 0x2, 0xffffffff, 0x6}, {0x4, 0x3, 0xb}, 0x70bd25, 0x0, 0x2, 0x0, 0x8, 0x10}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8081) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 2.419807165s ago: executing program 0 (id=554): r0 = socket(0xa, 0x4, 0x103) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000400)}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 2.380750915s ago: executing program 4 (id=555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) getgid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e20, @private=0xa010101}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0xa0000000}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) unshare(0x6a040000) 2.049037072s ago: executing program 0 (id=559): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/91, &(0x7f0000000080)=0x5b) 1.893399234s ago: executing program 0 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000140)="dfc8f629508ff287d411ebd9341d01c798660b75178c717a8baec71ba9afc37438d31a73dd309212793fea79c09563d6c7bb6508c0ce9977658fe8a739785b2e991e3370ffea613b50736ec44f2e4a1d58c00b45ac6a2398feb7e1db2443a9deed4f851327f033b808812b024342e0418685f69ce8bef9188ea694f67d04c19a50a2c33a1537e33d66113c131dc4c0e64012576cecc944dedf00bd2a5c6f66b54917f9601524935a6bcd476205e3f2c8", &(0x7f0000000380)=""/185, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.559918213s ago: executing program 0 (id=566): r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180)={0xfbff, "11b7b9"}, 0x6) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x8, 0x10}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c, 0x12, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x5]}}}, 0x4c}}, 0x0) 1.261586989s ago: executing program 1 (id=569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='afs_make_fs_calli\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x25dfdbfc, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0xc0) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c814}, 0x40020) 1.123383772s ago: executing program 2 (id=570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000040000003b00000008000300", @ANYRES32=r3, @ANYBLOB="600033008000de00ffffffffffff0802110000005050505050500000000000000000000064000140000973b29fd8576ea3f9d903010e"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f0000000c00)=""/235, 0xeb, 0x0, &(0x7f0000000d00)=""/196, 0xc4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1d, 0x1c, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='GPL\x00', 0x2, 0x99, &(0x7f0000000b40)=""/153, 0x41100, 0x41, '\x00', 0x0, @lsm=0x1b, r5, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x8, 0x7, 0x3}, 0x10, r6, r0, 0x6, &(0x7f0000000e00)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000e40)=[{0x1, 0x3, 0x2, 0x4}, {0x3, 0x1, 0x3, 0x54e09d4d177aeed7}, {0x0, 0x4, 0x10, 0x4}, {0x5, 0x1, 0xc, 0x5}, {0x5, 0x4, 0xa, 0x4}, {0x3, 0x5, 0xd, 0xc}], 0x10, 0x6}, 0x94) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xa, 0x80010, r4, 0xc267a000) write$cgroup_freezer_state(r0, &(0x7f0000000040)='THAWED\x00', 0x7) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='.\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ff030000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001830000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018230000", @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000006c70c2ff100000002c80060004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1d, &(0x7f00000000c0)=""/29, 0xc1100, 0x2, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000000140)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x5, 0x10000}, 0x10, 0x22599, r7, 0xa, &(0x7f0000000400)=[r0, 0x1, r0, r0, r0, r0], &(0x7f0000000880)=[{0x0, 0x2, 0xb}, {0x2, 0x3, 0x9, 0x7}, {0x0, 0x2, 0xd, 0x4}, {0x3, 0x5, 0x0, 0x2}, {0x3, 0x2, 0x0, 0xb}, {0x5, 0x1, 0x9, 0xa}, {0x4, 0x2, 0xf, 0x1}, {0x0, 0x1, 0x5}, {0x3, 0x2, 0x10, 0x9}, {0x0, 0x4, 0x1, 0x6}], 0x10, 0x5}, 0x94) 1.074220498s ago: executing program 0 (id=571): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc, 0x2, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00002401bda100000000000097010000f8ffffffb702000008000000b70300000000000015000000060000006100000000000000bf91000000000000b5020000000000008500000094b09b8dd7cc5a145ec214000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 843.818323ms ago: executing program 0 (id=572): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000480)={@loopback, @multicast2}, &(0x7f00000004c0)=0xc) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000840)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x3ff, 0x0, 0x0, 0xfffff00c}, {0x40}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000000e06010200000000000000000c0000090900020073797a32007400000500010007000000"], 0x28}}, 0x28000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x8f, 0x4f, &(0x7f00000000c0)="1d5d4585bd8ac9551fb3f0a66ee8b650a23103fb9f57fa8f18ced2d7859b1129301e71665c0c49df96585799b877737adfb378e7b558d911c2dca2cf86398093ef854932cc29794830ab264a4d733a70358d96d266aaba67da4371fdebe360b68394e111f4b34d5620901b0ec691c73ccbaf09e635e57eaee090538afcaa45b5c05cc7bb57304be190392717296e6a", &(0x7f0000000240)=""/79, 0x4, 0x0, 0xa2, 0x23, &(0x7f00000002c0)="32560c5f5ea74af30f18c3751a47e1a1e553f47b8d5f9e250ddfa1c6ecc176f2f7f9fb6033a876c5717525adf9e4556ebbcd82e283af8ac36038bbad63dac2ad915cd349833046da20383a5643de1070c437450f254c45f6c6afbe816b01d1ca834165a6020ad32cdd5eeaf3143254ea0935f9cc0794c2dd8c5f63ab8826f90636f233f92d8e9423482c3fa85cff5e458900bce9ec3218331e7b995c8817020227f3", &(0x7f0000000380)="e0b2a4a11b8f8d9e511cbdd94700946e0527f8b7f85fca245ace354019a3193c2e428a", 0x5, 0x0, 0xff}, 0x50) 752.007331ms ago: executing program 1 (id=573): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendto$inet(r1, &(0x7f0000000240)="32514cb086af04d1d4a1af93735cedc6d6492f076053fc50643ddfc853fd5e1139f9281ea716a2884edde4e6b1e60d087566e197f0dd2982f08f0004403e7648e58c2e9d74700d81a5ec354dbfa11a9445e18db72c101bfbfe9f4e295073f2a024b5aa99c1a0b4ce3ee14e5cebe15258bdca9c0789d1e1112bcf43044968fdfa9321913950872a50b51d387918f8a561a441d4c57780a9892ef461f311d51d4d56a50cc8321b202660", 0xa9, 0x41, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010101}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}], 0x4, 0x40010020, 0x0) (async) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}], 0x4, 0x40010020, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f47b9bd30808"], 0x80}}, 0x1) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x36, 0x8, 0xf, 0x8}, {0x2, 0x0, 0x7}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2, 0x0, 0xb}}], 0x40000000000003a, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2, 0x0, 0xb}}], 0x40000000000003a, 0x0) 751.33796ms ago: executing program 2 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1a0, 0x24, 0x800, 0x70bd27, 0x25dfdbfe, {0xd}, [@nested={0x118, 0x13, 0x0, 0x1, [@generic="3cfe6227dfc2a60627419804aafd04079bd141", @nested={0x4, 0x147}, @typed={0x8, 0x112, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x52}, @generic="5a2b426547d4d48243cd15704cc98b08b8c2e0cb383c8cc62b3e844b101b34ab713ffaf01d679ca723643718b84d7691a500b6f341e063ea376f259c048ff2aa50de433051604add089f62f36cc0d20fb514936270ac125c5f9ec47c20d8229adb83c2e75c51edfdc9a5cb6791cc2e25c9c8a9e85b0fd3d791cee090e0e206b58b3896510e5d23a3fcc993e9a8971099ae04bbbfb1ff6c3671b6cd038ce3acc07bef4f0c03640a448221d7dd5c0bfe8ef42d56d9412b8d027e48d24e4c7238c93fdfe2ab1ee55679dc1005ab4c5418414cb4de5234739a94c6e928bc67464081fe608b98f57f8e8f84bdaa6fe8", @nested={0x4, 0xc8}]}, @typed={0x8, 0xad, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r2}, @generic="2c599f549004787d5e214a4c642347d5e1fad23651ad226e056f33eced3190a345367cc6b94ed46618ebfd15af3fd05dec3be557d451a75a08ebfef2bbb135e03b88398634b9accd5fb2d1e77e3fe093f3274dd1296d963b73fd2f4d5fe6e901ae58"]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa00004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@ipv4_getnexthop={0x20, 0x6a, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000700)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x40) 719.582623ms ago: executing program 2 (id=575): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044054}, 0x240c4144) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 563.969209ms ago: executing program 2 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r2}) r3 = socket(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000040), 0x0}, 0x20) getsockopt$inet6_tcp_int(r4, 0x11c, 0x4, 0x0, &(0x7f0000000380)) ioctl(r3, 0x8936, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000100)=0xff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x8, 0x7fff, 0x4, 0x2d000, r5, 0x101, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb0}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0xde, &(0x7f00000004c0)=""/222, 0x40f00, 0x11, '\x00', r2, 0x25, r6, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0xb1d1, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r5, r7, r5, r5, r8, r5, r9], &(0x7f00000006c0)=[{0x3, 0x4, 0xb, 0xa}, {0x5, 0x4, 0xa, 0x3}, {0x0, 0x1, 0xb, 0x1}, {0x1, 0x4, 0xf, 0x4}, {0x4, 0x4, 0xd, 0x8}, {0x3, 0x2, 0x3, 0x2}], 0x10, 0x128}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x2e2e, 0x5, 0x0, 0x105, 0x0, 0x80009, 0x401}}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 480.109227ms ago: executing program 1 (id=577): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 417.526429ms ago: executing program 1 (id=578): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) write(r0, &(0x7f00000000c0)="25fce684b061738828996789f41ece203e294af207bcc1696fb6f3153445198162a5135350da43a75b73be932a48129e4907ae062c477a4006eb7f15f074b2b813b6be26cb83b34685958b23f896639d957436cc834303b839fa666004ac8c91f23aaa7db281bd0f939531b0b9407b0c2737b262b66eb643a0df7db7f234b7327127be3edb622fc9b4b0b1126f58bab1f1b72a7f454765536e3d9c322524083675220666087de3", 0xa7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063011000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) 383.466292ms ago: executing program 2 (id=579): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x6, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0xffffffffffffffc4, 0x3, {0x8, 0x4}}, @TCA_BPF_ACT={0x9c, 0x1, [@m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7d58}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x5, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket$inet6(0xa, 0x802, 0x0) (async) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 383.006234ms ago: executing program 4 (id=580): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xff, 0x0}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800a4d5e6d4648bae48e20510ea0111cb000000000000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=""/84, &(0x7f0000000080)=0x54) 231.944888ms ago: executing program 1 (id=581): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x3, 0x201}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffc0}]}, @IPVS_CMD_ATTR_SERVICE={0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@broadcast, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 0xe, 0x81, {@empty, {[0xff, 0x0, 0x0, 0x5a2c9a4db567792d, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0x10, 0x2, 0x60f, 0x4, 0x401, 'vxcan1\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x39}}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x1, 0x3}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'veth0_to_bridge\x00', {}, {0x1fe}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x22e}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$kcm(0x2, 0xa, 0x73) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 218.211443ms ago: executing program 4 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffff801, 0x21}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) (async) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x4000000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000d50b00850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='vm_unmapped_area\x00', r5, 0x0, 0x4000000000000000}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) 171.649182ms ago: executing program 2 (id=583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@mcast2, @private2, @mcast1, 0x4, 0x8, 0x0, 0x400, 0x6, 0x4440100, r1}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50bb", @ANYRES16=r3, @ANYRESDEC=r2], 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r4, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000006880)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x8d8, @loopback, 0x2}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000540)="f938a288dce3", 0x6}], 0x1}}], 0x1, 0x100) 148.88823ms ago: executing program 1 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x639f0}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 0s ago: executing program 4 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 88.175624][ T5836] cgroup: Unknown subsys name 'net' [ 88.326440][ T5836] cgroup: Unknown subsys name 'cpuset' [ 88.336145][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.014912][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.833442][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.841684][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.850931][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.861845][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.869533][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.878565][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.893208][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.912792][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.920629][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.953404][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.963827][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.971446][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.980242][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.989525][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.997612][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.005979][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.024535][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.054420][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.067756][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.076396][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.093328][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.094522][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.109422][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.117994][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.118511][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.864605][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 93.937102][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 93.976214][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 94.054900][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 94.087925][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 94.195343][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.205164][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.212846][ T5855] bridge_slave_0: entered allmulticast mode [ 94.220298][ T5855] bridge_slave_0: entered promiscuous mode [ 94.269932][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.277214][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.284902][ T5855] bridge_slave_1: entered allmulticast mode [ 94.292230][ T5855] bridge_slave_1: entered promiscuous mode [ 94.426230][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.433582][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.441339][ T5856] bridge_slave_0: entered allmulticast mode [ 94.448860][ T5856] bridge_slave_0: entered promiscuous mode [ 94.456432][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.464212][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.471408][ T5858] bridge_slave_0: entered allmulticast mode [ 94.478804][ T5858] bridge_slave_0: entered promiscuous mode [ 94.535903][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.543790][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.551041][ T5856] bridge_slave_1: entered allmulticast mode [ 94.559674][ T5856] bridge_slave_1: entered promiscuous mode [ 94.566967][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.576232][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.583733][ T5858] bridge_slave_1: entered allmulticast mode [ 94.592088][ T5858] bridge_slave_1: entered promiscuous mode [ 94.617140][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.640147][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.648907][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.658574][ T5848] bridge_slave_0: entered allmulticast mode [ 94.666356][ T5848] bridge_slave_0: entered promiscuous mode [ 94.705438][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.738451][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.745877][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.753483][ T5847] bridge_slave_0: entered allmulticast mode [ 94.762839][ T5847] bridge_slave_0: entered promiscuous mode [ 94.770815][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.784171][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.791373][ T5848] bridge_slave_1: entered allmulticast mode [ 94.799828][ T5848] bridge_slave_1: entered promiscuous mode [ 94.826426][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.839612][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.865282][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.873260][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.880470][ T5847] bridge_slave_1: entered allmulticast mode [ 94.888169][ T5847] bridge_slave_1: entered promiscuous mode [ 94.910517][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.924361][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.020501][ T5855] team0: Port device team_slave_0 added [ 95.029128][ T5855] team0: Port device team_slave_1 added [ 95.051496][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.065212][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.093281][ T5858] team0: Port device team_slave_0 added [ 95.129153][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.155652][ T5858] team0: Port device team_slave_1 added [ 95.175975][ T51] Bluetooth: hci1: command tx timeout [ 95.176013][ T5869] Bluetooth: hci4: command tx timeout [ 95.181790][ T5863] Bluetooth: hci3: command tx timeout [ 95.187545][ T5854] Bluetooth: hci2: command tx timeout [ 95.204025][ T5856] team0: Port device team_slave_0 added [ 95.211064][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.218415][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.244407][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.257259][ T5854] Bluetooth: hci0: command tx timeout [ 95.258087][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.269978][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.296570][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.309907][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.336126][ T5848] team0: Port device team_slave_0 added [ 95.359557][ T5856] team0: Port device team_slave_1 added [ 95.402212][ T5848] team0: Port device team_slave_1 added [ 95.409275][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.417127][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.443790][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.520012][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.527097][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.553701][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.572727][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.579727][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.610059][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.631252][ T5847] team0: Port device team_slave_0 added [ 95.638457][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.645650][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.671890][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.685342][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.692562][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.719196][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.731874][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.739098][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.765430][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.791388][ T5847] team0: Port device team_slave_1 added [ 95.916417][ T5855] hsr_slave_0: entered promiscuous mode [ 95.923761][ T5855] hsr_slave_1: entered promiscuous mode [ 95.937890][ T5858] hsr_slave_0: entered promiscuous mode [ 95.944432][ T5858] hsr_slave_1: entered promiscuous mode [ 95.950603][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.958472][ T5858] Cannot create hsr debugfs directory [ 95.964885][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.971868][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.998182][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.040357][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.047535][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.073585][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.108709][ T5856] hsr_slave_0: entered promiscuous mode [ 96.115846][ T5856] hsr_slave_1: entered promiscuous mode [ 96.121994][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.129792][ T5856] Cannot create hsr debugfs directory [ 96.161207][ T5848] hsr_slave_0: entered promiscuous mode [ 96.168167][ T5848] hsr_slave_1: entered promiscuous mode [ 96.174907][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.182928][ T5848] Cannot create hsr debugfs directory [ 96.429826][ T5847] hsr_slave_0: entered promiscuous mode [ 96.438663][ T5847] hsr_slave_1: entered promiscuous mode [ 96.445124][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.453047][ T5847] Cannot create hsr debugfs directory [ 96.908155][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.930448][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.959618][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.972923][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.022361][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.041245][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.062158][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.077320][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.161304][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.181271][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.213895][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.226603][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.253196][ T5854] Bluetooth: hci2: command tx timeout [ 97.253532][ T5869] Bluetooth: hci4: command tx timeout [ 97.262540][ T5863] Bluetooth: hci1: command tx timeout [ 97.269582][ T5854] Bluetooth: hci3: command tx timeout [ 97.331688][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.341332][ T5854] Bluetooth: hci0: command tx timeout [ 97.349364][ T10] cfg80211: failed to load regulatory.db [ 97.376560][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.389521][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.400781][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.550674][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.572655][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.589927][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.607132][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.618169][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.689371][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.701185][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.728042][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.735432][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.780767][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.787948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.820117][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.841159][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.890057][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.909327][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.916555][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.938552][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.964871][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.972066][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.000349][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.007599][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.031542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.038749][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.064492][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.123892][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.131071][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.193380][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.200607][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.369229][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.476538][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.535260][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.542478][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.614266][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.621580][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.739677][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.919150][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.936222][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.065989][ T5855] veth0_vlan: entered promiscuous mode [ 99.110996][ T5855] veth1_vlan: entered promiscuous mode [ 99.140152][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.219755][ T5858] veth0_vlan: entered promiscuous mode [ 99.250756][ T5858] veth1_vlan: entered promiscuous mode [ 99.333181][ T5863] Bluetooth: hci3: command tx timeout [ 99.333198][ T5869] Bluetooth: hci1: command tx timeout [ 99.333234][ T5869] Bluetooth: hci2: command tx timeout [ 99.339013][ T5854] Bluetooth: hci4: command tx timeout [ 99.385441][ T5855] veth0_macvtap: entered promiscuous mode [ 99.410820][ T5856] veth0_vlan: entered promiscuous mode [ 99.422150][ T5854] Bluetooth: hci0: command tx timeout [ 99.441864][ T5855] veth1_macvtap: entered promiscuous mode [ 99.497089][ T5858] veth0_macvtap: entered promiscuous mode [ 99.515640][ T5858] veth1_macvtap: entered promiscuous mode [ 99.540836][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.558770][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.577311][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.588574][ T5856] veth1_vlan: entered promiscuous mode [ 99.604261][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.622642][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.651130][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.660369][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.670696][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.682087][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.697573][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.708162][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.717767][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.726880][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.867039][ T5856] veth0_macvtap: entered promiscuous mode [ 99.941698][ T5856] veth1_macvtap: entered promiscuous mode [ 99.961663][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.962997][ T5847] veth0_vlan: entered promiscuous mode [ 99.975722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.050429][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.060026][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.067130][ T5847] veth1_vlan: entered promiscuous mode [ 100.075592][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.084874][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.098389][ T5848] veth0_vlan: entered promiscuous mode [ 100.115258][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.171335][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.186446][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.195491][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.204555][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216104][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.246075][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.280502][ T5848] veth1_vlan: entered promiscuous mode [ 100.310497][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.327155][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.338233][ T5847] veth0_macvtap: entered promiscuous mode [ 100.436100][ T5847] veth1_macvtap: entered promiscuous mode [ 100.465036][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.478624][ T5848] veth0_macvtap: entered promiscuous mode [ 100.577706][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.597160][ T5848] veth1_macvtap: entered promiscuous mode [ 100.640983][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.700640][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.709622][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.733104][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.740732][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.771230][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.772950][ T5979] Zero length message leads to an empty skb [ 100.801122][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.920621][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.960060][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.002499][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.011081][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.059884][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.069138][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.079561][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090958][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.300477][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.324659][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.348063][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.413531][ T5854] Bluetooth: hci2: command tx timeout [ 101.419035][ T5854] Bluetooth: hci4: command tx timeout [ 101.420926][ T5869] Bluetooth: hci3: command tx timeout [ 101.425628][ T51] Bluetooth: hci1: command tx timeout [ 101.456770][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.470392][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.494372][ T5854] Bluetooth: hci0: command tx timeout [ 101.716976][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.752727][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.808875][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.853251][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.207924][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 102.277397][ T6016] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 102.365246][ T6020] openvswitch: netlink: EtherType 257 is less than min 600 [ 102.778070][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.848067][ T6034] tipc: Started in network mode [ 102.855914][ T6034] tipc: Node identity 4, cluster identity 4711 [ 102.875062][ T6034] tipc: Node number set to 4 [ 102.938785][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.067234][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.257015][ T6040] nbd: must specify at least one socket [ 103.327311][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.604869][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 103.872634][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 104.108335][ T12] bridge_slave_1: left allmulticast mode [ 104.141660][ T12] bridge_slave_1: left promiscuous mode [ 104.182964][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.241501][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.251007][ T12] bridge_slave_0: left allmulticast mode [ 104.261116][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.270878][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.279363][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.299854][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.307711][ T12] bridge_slave_0: left promiscuous mode [ 104.318462][ T6074] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.331232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.939926][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.956084][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.968041][ T12] bond0 (unregistering): Released all slaves [ 105.602843][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 105.877758][ T6121] Cannot find add_set index 0 as target [ 105.898347][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 105.921443][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 106.202492][ T12] hsr_slave_0: left promiscuous mode [ 106.235861][ T6132] sctp: [Deprecated]: syz.0.46 (pid 6132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.235861][ T6132] Use struct sctp_sack_info instead [ 106.239446][ T12] hsr_slave_1: left promiscuous mode [ 106.267751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.279819][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.311050][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.334295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.373517][ T51] Bluetooth: hci2: command tx timeout [ 106.431594][ T12] veth1_macvtap: left promiscuous mode [ 106.443208][ T12] veth0_macvtap: left promiscuous mode [ 106.453339][ T12] veth1_vlan: left promiscuous mode [ 106.467609][ T12] veth0_vlan: left promiscuous mode [ 106.661108][ T6149] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 106.674534][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.48'. [ 107.421245][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.459686][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.140222][ T6164] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 108.148369][ T6164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.52'. [ 108.170059][ T6156] netlink: 2 bytes leftover after parsing attributes in process `syz.2.50'. [ 108.183648][ T6158] 8021q: VLANs not supported on ip_vti0 [ 108.199008][ T6164] dummy0: entered promiscuous mode [ 108.238810][ T6164] bridge0: port 3(dummy0) entered blocking state [ 108.245685][ T6164] bridge0: port 3(dummy0) entered disabled state [ 108.259843][ T6164] dummy0: entered allmulticast mode [ 108.296240][ T6164] bridge0: port 3(dummy0) entered blocking state [ 108.303426][ T6164] bridge0: port 3(dummy0) entered forwarding state [ 108.454131][ T51] Bluetooth: hci2: command tx timeout [ 108.471637][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 108.549710][ T6174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 108.787587][ T6181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.831182][ T6069] chnl_net:caif_netlink_parms(): no params data found [ 109.094333][ T6197] netlink: 'syz.1.59': attribute type 2 has an invalid length. [ 109.113383][ T6197] netlink: 119 bytes leftover after parsing attributes in process `syz.1.59'. [ 109.354169][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.361542][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.380955][ T6069] bridge_slave_0: entered allmulticast mode [ 109.397318][ T6069] bridge_slave_0: entered promiscuous mode [ 109.436668][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.472496][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.487260][ T6069] bridge_slave_1: entered allmulticast mode [ 109.534438][ T6069] bridge_slave_1: entered promiscuous mode [ 109.696548][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.728807][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.104843][ T6069] team0: Port device team_slave_0 added [ 110.146815][ T6069] team0: Port device team_slave_1 added [ 110.327105][ T6240] netlink: 'syz.4.73': attribute type 3 has an invalid length. [ 110.338439][ T6240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.73'. [ 110.529534][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.544322][ T51] Bluetooth: hci2: command tx timeout [ 110.554878][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.596992][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.611658][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.623975][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.672419][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.893034][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 111.238783][ T6069] hsr_slave_0: entered promiscuous mode [ 111.309303][ T6069] hsr_slave_1: entered promiscuous mode [ 111.371966][ T6069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.434282][ T6069] Cannot create hsr debugfs directory [ 111.493653][ T6272] netlink: 'syz.4.80': attribute type 10 has an invalid length. [ 111.671218][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.727642][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.737773][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.874487][ T6280] netlink: 100 bytes leftover after parsing attributes in process `syz.1.82'. [ 111.904072][ T6272] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.138924][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.86'. [ 112.172855][ T5921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.191208][ T6291] netlink: 9 bytes leftover after parsing attributes in process `syz.2.87'. [ 112.289851][ T6299] netlink: 'syz.1.88': attribute type 21 has an invalid length. [ 112.363271][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.424415][ T6291] gretap0: entered promiscuous mode [ 112.612577][ T51] Bluetooth: hci2: command tx timeout [ 113.563333][ T6359] __nla_validate_parse: 2 callbacks suppressed [ 113.563354][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.100'. [ 113.979361][ T6069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.020473][ T6069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.053080][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 114.066434][ T6069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.104155][ T6069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.389798][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.467698][ T6069] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.503469][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.510688][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.549435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.556753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.648420][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 114.697690][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.113'. [ 114.717053][ T6412] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 114.735585][ T6413] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 114.759414][ T6413] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 114.767251][ T6413] netlink: 'syz.0.114': attribute type 10 has an invalid length. [ 114.775971][ T6413] netlink: 'syz.0.114': attribute type 4 has an invalid length. [ 114.791007][ T6413] netlink: 136 bytes leftover after parsing attributes in process `syz.0.114'. [ 114.984079][ T6422] syzkaller1: entered promiscuous mode [ 115.011185][ T6422] syzkaller1: entered allmulticast mode [ 115.034719][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 115.059896][ T6422] macvlan2: entered promiscuous mode [ 115.070115][ T6422] macvlan2: entered allmulticast mode [ 115.082551][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 115.091979][ T6428] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.471609][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.492524][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.510523][ T6442] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.118'. [ 115.543553][ T6442] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.118'. [ 115.704189][ T6069] veth0_vlan: entered promiscuous mode [ 115.755711][ T6069] veth1_vlan: entered promiscuous mode [ 115.883171][ T6069] veth0_macvtap: entered promiscuous mode [ 115.932738][ T6069] veth1_macvtap: entered promiscuous mode [ 116.009272][ T6456] vlan0: entered promiscuous mode [ 116.100315][ T6456] team0: Port device vlan0 added [ 116.131964][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.170584][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.281993][ T6069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.308673][ T6069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.317617][ T6069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.338237][ T6069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.385971][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 116.506791][ T6471] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 116.520861][ T6471] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 116.924631][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.970304][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.075268][ T6490] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 117.107365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.138972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.747774][ T6519] nft_compat: unsupported protocol 0 [ 117.871128][ T6528] xt_socket: unknown flags 0x50 [ 118.279752][ T6547] netlink: 'syz.2.141': attribute type 39 has an invalid length. [ 118.381319][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.433899][ T6543] netlink: 'syz.0.140': attribute type 4 has an invalid length. [ 118.681430][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.864515][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.902802][ T6567] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 119.273212][ T6593] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.496213][ T6600] netlink: 'syz.1.150': attribute type 2 has an invalid length. [ 119.504278][ T6590] xt_CT: No such helper "snmp" [ 119.879486][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.891413][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.901905][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.918518][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.927768][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.185552][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.508925][ T6626] netlink: 'syz.0.152': attribute type 7 has an invalid length. [ 120.754921][ T6637] Bluetooth: MGMT ver 1.23 [ 121.138672][ T49] bridge_slave_1: left allmulticast mode [ 121.177565][ T49] bridge_slave_1: left promiscuous mode [ 121.194085][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.235467][ T49] bridge_slave_0: left allmulticast mode [ 121.262406][ T49] bridge_slave_0: left promiscuous mode [ 121.282443][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.330009][ T6657] __nla_validate_parse: 9 callbacks suppressed [ 121.330029][ T6657] netlink: 256 bytes leftover after parsing attributes in process `syz.2.159'. [ 121.374568][ T6657] nbd: must specify at least one socket [ 121.400030][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 121.456689][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 121.535836][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.978527][ T51] Bluetooth: hci2: command tx timeout [ 122.272721][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.287079][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.301468][ T49] bond0 (unregistering): Released all slaves [ 122.336374][ T6682] netlink: 'syz.4.163': attribute type 12 has an invalid length. [ 122.364681][ T6682] netlink: 'syz.4.163': attribute type 29 has an invalid length. [ 122.394812][ T6682] netlink: 148 bytes leftover after parsing attributes in process `syz.4.163'. [ 122.422542][ T6682] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 122.448137][ T6682] netlink: 'syz.4.163': attribute type 3 has an invalid length. [ 122.502447][ T6682] netlink: 15 bytes leftover after parsing attributes in process `syz.4.163'. [ 122.531908][ T6698] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 122.653199][ T6705] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.165'. [ 122.932488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.108105][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 123.159342][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 123.223543][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 123.428663][ T6727] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.437940][ T6727] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.446857][ T6727] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.455866][ T6727] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.535849][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 123.573863][ T6747] netlink: 14 bytes leftover after parsing attributes in process `syz.4.176'. [ 123.602154][ T6747] hsr_slave_0: left promiscuous mode [ 123.632204][ T6747] hsr_slave_1: left promiscuous mode [ 123.811907][ T6760] xt_recent: Unsupported userspace flags (00000061) [ 123.890527][ T49] hsr_slave_0: left promiscuous mode [ 123.931143][ T49] hsr_slave_1: left promiscuous mode [ 123.945832][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.969465][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.000416][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.008669][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.052710][ T51] Bluetooth: hci2: command tx timeout [ 124.077286][ T49] veth1_macvtap: left promiscuous mode [ 124.102857][ T49] veth0_macvtap: left promiscuous mode [ 124.120502][ T49] veth1_vlan: left promiscuous mode [ 124.125240][ T6776] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 124.142506][ T49] veth0_vlan: left promiscuous mode [ 124.160103][ T6776] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 124.919517][ T49] team0 (unregistering): Port device team_slave_1 removed [ 124.962207][ T49] team0 (unregistering): Port device team_slave_0 removed [ 125.731908][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.756557][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.777449][ T6607] bridge_slave_0: entered allmulticast mode [ 125.795942][ T6607] bridge_slave_0: entered promiscuous mode [ 125.824708][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.855245][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.870903][ T6607] bridge_slave_1: entered allmulticast mode [ 125.880810][ T6607] bridge_slave_1: entered promiscuous mode [ 125.915131][ T6814] pim6reg: entered allmulticast mode [ 126.029860][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.077179][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.134164][ T51] Bluetooth: hci2: command tx timeout [ 126.266825][ T6607] team0: Port device team_slave_0 added [ 126.315007][ T6607] team0: Port device team_slave_1 added [ 126.332678][ T6830] __nla_validate_parse: 3 callbacks suppressed [ 126.332743][ T6830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.192'. [ 126.357371][ T6831] netlink: 14 bytes leftover after parsing attributes in process `syz.2.192'. [ 126.698093][ T6830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.717943][ T6830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.731086][ T6830] bond0 (unregistering): Released all slaves [ 126.905999][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.943066][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.042438][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.075038][ T6855] lo speed is unknown, defaulting to 1000 [ 127.083658][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.090677][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.131895][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.148518][ T6855] lo speed is unknown, defaulting to 1000 [ 127.164718][ T6855] lo speed is unknown, defaulting to 1000 [ 127.525567][ T6607] hsr_slave_0: entered promiscuous mode [ 127.540991][ T6607] hsr_slave_1: entered promiscuous mode [ 127.557192][ T6872] netlink: 'syz.4.200': attribute type 8 has an invalid length. [ 127.569031][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.580751][ T6874] Cannot find map_set index 0 as target [ 127.594253][ T6607] Cannot create hsr debugfs directory [ 127.852075][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.203'. [ 127.922016][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.989923][ T6883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.009214][ T6881] unsupported nla_type 52263 [ 128.114615][ T6855] infiniband syz0: set active [ 128.126915][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.131703][ T6855] infiniband syz0: added lo [ 128.148117][ T1210] lo speed is unknown, defaulting to 1000 [ 128.187483][ T6855] syz0: rxe_create_cq: returned err = -12 [ 128.213463][ T51] Bluetooth: hci2: command tx timeout [ 128.231103][ T6855] infiniband syz0: Couldn't create ib_mad CQ [ 128.262534][ T6855] infiniband syz0: Couldn't open port 1 [ 128.450236][ T6855] RDS/IB: syz0: added [ 128.476828][ T6855] smc: adding ib device syz0 with port count 1 [ 128.486942][ T6855] smc: ib device syz0 port 1 has pnetid [ 128.682906][ T6898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.207'. [ 128.758623][ T6855] lo speed is unknown, defaulting to 1000 [ 128.773748][ T5930] lo speed is unknown, defaulting to 1000 [ 129.309777][ T6921] netlink: 'syz.4.212': attribute type 11 has an invalid length. [ 129.344393][ T6921] netlink: 224 bytes leftover after parsing attributes in process `syz.4.212'. [ 129.378574][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 129.621864][ T6934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.214'. [ 129.657890][ T6934] netlink: 43 bytes leftover after parsing attributes in process `syz.4.214'. [ 129.694587][ T6934] netlink: 'syz.4.214': attribute type 5 has an invalid length. [ 129.706161][ T6934] netlink: 43 bytes leftover after parsing attributes in process `syz.4.214'. [ 129.949214][ T6607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.083752][ T6607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.188639][ T6855] lo speed is unknown, defaulting to 1000 [ 130.205053][ T6607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.334986][ T6607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.409490][ T6956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.217'. [ 130.573370][ T6967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.907466][ T6977] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 131.111404][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.269194][ T6981] syzkaller0: entered promiscuous mode [ 131.283841][ T6981] syzkaller0: entered allmulticast mode [ 131.307646][ T6855] lo speed is unknown, defaulting to 1000 [ 131.367119][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.721355][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.728660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.742074][ T6992] __nla_validate_parse: 1 callbacks suppressed [ 133.742093][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 133.858186][ T6855] lo speed is unknown, defaulting to 1000 [ 133.888756][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.896030][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.984574][ T7047] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.228'. [ 134.109939][ T7052] openvswitch: netlink: Duplicate or invalid key (type 0). [ 134.160067][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.830592][ T7082] vlan0: left promiscuous mode [ 134.963551][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.000033][ T6855] lo speed is unknown, defaulting to 1000 [ 135.018443][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.180436][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 135.199772][ T6607] veth0_vlan: entered promiscuous mode [ 135.292576][ T6607] veth1_vlan: entered promiscuous mode [ 135.381984][ T7091] bridge0: port 3(dummy0) entered disabled state [ 135.440559][ T7091] dummy0 (unregistering): left allmulticast mode [ 135.448111][ T7091] dummy0 (unregistering): left promiscuous mode [ 135.461371][ T7091] bridge0: port 3(dummy0) entered disabled state [ 135.566216][ T6607] veth0_macvtap: entered promiscuous mode [ 135.601031][ T6607] veth1_macvtap: entered promiscuous mode [ 135.691759][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.724206][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.760611][ T6607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.783331][ T7110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.245'. [ 135.799244][ T6607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.808910][ T6607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.819041][ T6607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.839885][ T6855] lo speed is unknown, defaulting to 1000 [ 135.894810][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.005911][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.035579][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.084244][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.094264][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.587452][ T7113] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 136.965689][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.004414][ T7129] 8021q: VLANs not supported on pim6reg [ 137.105042][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.228418][ T7136] batman_adv: batadv0: Adding interface: dummy0 [ 137.249567][ T7136] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.291050][ T7136] batman_adv: batadv0: Interface activated: dummy0 [ 137.445574][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.652473][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.657187][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 137.701991][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.892428][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 138.010230][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.020582][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.028912][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.044656][ T7163] netlink: 56 bytes leftover after parsing attributes in process `syz.4.260'. [ 138.058472][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.078665][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.263453][ T12] bridge_slave_1: left allmulticast mode [ 138.269183][ T12] bridge_slave_1: left promiscuous mode [ 138.296540][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.308516][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.332653][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.417846][ T12] bridge_slave_0: left allmulticast mode [ 138.443798][ T12] bridge_slave_0: left promiscuous mode [ 138.449741][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.555425][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.265'. [ 138.693309][ T7192] Cannot find del_set index 17 as target [ 139.303126][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.330068][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.356126][ T12] bond0 (unregistering): Released all slaves [ 139.545423][ T7209] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 139.676063][ T7166] lo speed is unknown, defaulting to 1000 [ 140.008708][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 140.032529][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 140.134700][ T51] Bluetooth: hci2: command tx timeout [ 140.396160][ T7225] bond1 (unregistering): Released all slaves [ 140.498244][ T7238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.276'. [ 141.501927][ T7280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'. [ 141.860009][ T12] hsr_slave_0: left promiscuous mode [ 141.883764][ T12] hsr_slave_1: left promiscuous mode [ 141.924912][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.949611][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.981851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.996536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.031733][ T12] veth1_macvtap: left promiscuous mode [ 142.054384][ T12] veth0_macvtap: left promiscuous mode [ 142.106234][ T12] veth1_vlan: left promiscuous mode [ 142.126128][ T12] veth0_vlan: left promiscuous mode [ 142.214490][ T51] Bluetooth: hci2: command tx timeout [ 142.443582][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 142.461291][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 143.031431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.070346][ T12] team0 (unregistering): Port device team_slave_0 removed [ 143.492203][ T7261] lo speed is unknown, defaulting to 1000 [ 143.510877][ T7296] netlink: 'syz.0.288': attribute type 7 has an invalid length. [ 143.757474][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 144.292513][ T51] Bluetooth: hci2: command tx timeout [ 144.349485][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.380288][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.394898][ T7166] bridge_slave_0: entered allmulticast mode [ 144.467427][ T7166] bridge_slave_0: entered promiscuous mode [ 144.543009][ T7348] vlan1: entered allmulticast mode [ 144.556393][ T7348] veth0_vlan: entered allmulticast mode [ 144.578419][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.589821][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.612866][ T7166] bridge_slave_1: entered allmulticast mode [ 144.624383][ T7166] bridge_slave_1: entered promiscuous mode [ 144.898271][ T7373] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 144.912042][ T7373] netlink: 232 bytes leftover after parsing attributes in process `syz.0.303'. [ 144.922924][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 144.985550][ T7372] netlink: 'syz.4.304': attribute type 1 has an invalid length. [ 145.060288][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.130469][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.171736][ T7380] xt_TCPMSS: Only works on TCP SYN packets [ 145.493361][ T7166] team0: Port device team_slave_0 added [ 145.561267][ T7166] team0: Port device team_slave_1 added [ 145.745443][ T7405] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 145.983458][ T7398] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.310'. [ 146.150025][ T7411] No such timeout policy "syz0" [ 146.229901][ T7414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.243173][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.250474][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.271701][ T7414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.313782][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.332543][ T7414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.335861][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 146.372348][ T51] Bluetooth: hci2: command tx timeout [ 146.400387][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.447545][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.502648][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.780866][ T7437] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 146.795017][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 146.818097][ T7437] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 146.874983][ T7166] hsr_slave_0: entered promiscuous mode [ 146.907986][ T7166] hsr_slave_1: entered promiscuous mode [ 146.924598][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.939790][ T7166] Cannot create hsr debugfs directory [ 147.376847][ T7455] netlink: 404 bytes leftover after parsing attributes in process `syz.1.325'. [ 147.416565][ T7455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.325'. [ 147.462349][ T7455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.325'. [ 147.527410][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 147.613201][ T7466] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.327'. [ 147.864516][ T7481] team0: Device vti0 is of different type [ 147.873465][ T7480] IPVS: set_ctl: invalid protocol: 2470 0.0.0.0:0 [ 148.448472][ T7504] netlink: 'syz.2.332': attribute type 8 has an invalid length. [ 148.659145][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.767824][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.273766][ T7536] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 149.641855][ T7510] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.702185][ T7510] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.012209][ T7166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.065921][ T7166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.141477][ T7166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.207396][ T7166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.271263][ T7573] netem: incorrect gi model size [ 150.277674][ T7573] netem: change failed [ 150.351448][ T7577] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 150.413697][ T7585] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 150.465521][ T7587] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 150.595575][ T7591] netlink: 'syz.2.354': attribute type 13 has an invalid length. [ 150.620174][ T7591] lo: entered promiscuous mode [ 150.642700][ T7591] lo: entered allmulticast mode [ 150.669265][ T7591] tunl0: entered promiscuous mode [ 150.696407][ T7591] tunl0: entered allmulticast mode [ 150.742432][ T7591] gre0: entered promiscuous mode [ 150.768990][ T7591] gre0: entered allmulticast mode [ 150.821310][ T7591] gretap0: entered allmulticast mode [ 150.828684][ T7591] gretap0: refused to change device tx_queue_len [ 150.836060][ T7591] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 150.861679][ T5943] lo speed is unknown, defaulting to 1000 [ 150.919005][ T5943] syz0: Port: 1 Link DOWN [ 150.990629][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.110828][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.181832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.189140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.253125][ T1210] lo speed is unknown, defaulting to 1000 [ 151.301920][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.309212][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.263097][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 152.400773][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.502434][ T7661] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 152.510406][ T7661] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 152.612266][ T7166] veth0_vlan: entered promiscuous mode [ 152.618799][ T7661] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 152.689017][ T7166] veth1_vlan: entered promiscuous mode [ 152.765424][ T7674] netlink: 'syz.2.371': attribute type 32 has an invalid length. [ 152.822192][ T7166] veth0_macvtap: entered promiscuous mode [ 152.992622][ T7166] veth1_macvtap: entered promiscuous mode [ 153.077591][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.138783][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.169497][ T7166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.182170][ T7166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.238484][ T7166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.249161][ T7166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.253074][ T7689] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.526605][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.554584][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.635848][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.644364][ T7697] netlink: 68 bytes leftover after parsing attributes in process `syz.4.376'. [ 153.693938][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.896642][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 154.317348][ T7716] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 154.809919][ T7716] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 154.862887][ T7716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.892189][ T7730] tipc: Enabling of bearer rejected, failed to enable media [ 155.089829][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.249711][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.387729][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.781778][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.041298][ T7760] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 156.073367][ T36] bridge_slave_1: left allmulticast mode [ 156.079105][ T36] bridge_slave_1: left promiscuous mode [ 156.137568][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.181451][ T36] bridge_slave_0: left allmulticast mode [ 156.207319][ T36] bridge_slave_0: left promiscuous mode [ 156.239346][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.341307][ T7772] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 157.688667][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.705676][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.716716][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.733985][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.751560][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.027379][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 158.188009][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.201839][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.219030][ T36] bond0 (unregistering): Released all slaves [ 158.246179][ T7772] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 158.353755][ T7808] lo speed is unknown, defaulting to 1000 [ 159.223512][ T7857] bond0 (unregistering): Released all slaves [ 159.308768][ T7797] lo speed is unknown, defaulting to 1000 [ 159.649036][ T7882] Cannot find set identified by id 0 to match [ 159.689556][ T7883] Cannot find set identified by id 0 to match [ 159.892627][ T51] Bluetooth: hci2: command tx timeout [ 160.032089][ T7892] sctp: [Deprecated]: syz.0.410 (pid 7892) Use of int in max_burst socket option deprecated. [ 160.032089][ T7892] Use struct sctp_assoc_value instead [ 160.621632][ T7920] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 160.697418][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.415'. [ 160.802109][ T7916] delete_channel: no stack [ 161.110281][ T36] hsr_slave_0: left promiscuous mode [ 161.125736][ T36] hsr_slave_1: left promiscuous mode [ 161.141228][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.149323][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.159156][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.168653][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.194683][ T36] veth1_macvtap: left promiscuous mode [ 161.200613][ T36] veth0_macvtap: left promiscuous mode [ 161.207590][ T36] veth1_vlan: left promiscuous mode [ 161.213564][ T36] veth0_vlan: left promiscuous mode [ 161.398631][ T7945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.422'. [ 161.452138][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 161.560403][ T7952] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.424'. [ 161.646905][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805975e000: rx timeout, send abort [ 161.901488][ T36] team0 (unregistering): Port device team_slave_1 removed [ 161.946772][ T36] team0 (unregistering): Port device team_slave_0 removed [ 161.986831][ T51] Bluetooth: hci2: command tx timeout [ 162.147513][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059651000: rx timeout, send abort [ 162.156354][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805975e000: abort rx timeout. Force session deactivation [ 162.561857][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 162.655924][ C1] vxcan1 (unregistered): j1939_tp_rxtimer: 0xffff888059651000: abort rx timeout. Force session deactivation [ 162.704262][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 163.297427][ T7987] Bluetooth: MGMT ver 1.23 [ 163.341426][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.356545][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.367129][ T7797] bridge_slave_0: entered allmulticast mode [ 163.382663][ T7797] bridge_slave_0: entered promiscuous mode [ 163.392549][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 163.413710][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.421071][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.440421][ T7797] bridge_slave_1: entered allmulticast mode [ 163.450822][ T7797] bridge_slave_1: entered promiscuous mode [ 163.467349][ T7982] lo speed is unknown, defaulting to 1000 [ 163.651952][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.702077][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.876021][ T8007] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 163.905804][ T7797] team0: Port device team_slave_0 added [ 163.933781][ T7797] team0: Port device team_slave_1 added [ 164.052989][ T51] Bluetooth: hci2: command tx timeout [ 164.148433][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.169128][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.185208][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 164.203721][ T7797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.209256][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 164.224110][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.231429][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 164.231517][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.243320][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 164.268447][ T7797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.491838][ T7797] hsr_slave_0: entered promiscuous mode [ 164.509472][ T7797] hsr_slave_1: entered promiscuous mode [ 164.517165][ T7797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.528473][ T7797] Cannot create hsr debugfs directory [ 164.839299][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 165.057748][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 165.239910][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 165.523703][ T8044] netlink: 'syz.0.451': attribute type 3 has an invalid length. [ 165.537293][ T8049] sit0: entered promiscuous mode [ 165.736891][ T8051] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.777162][ T8054] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 165.812451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.921915][ T8054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.128540][ T8066] gtp0: entered promiscuous mode [ 166.134448][ T51] Bluetooth: hci2: command tx timeout [ 166.172632][ T8066] gtp0: entered allmulticast mode [ 166.588717][ T7797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.606941][ T7797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.736254][ T7797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.760734][ T8099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.468'. [ 166.779822][ T7797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.849150][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'. [ 167.020029][ T8113] netlink: 'syz.1.471': attribute type 27 has an invalid length. [ 167.054942][ T8110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.236237][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.316674][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.351926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.359554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.418222][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.425521][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.480604][ T8126] lo speed is unknown, defaulting to 1000 [ 168.370252][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.507421][ T7797] veth0_vlan: entered promiscuous mode [ 168.561103][ T8168] __nla_validate_parse: 68 callbacks suppressed [ 168.561123][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 168.587889][ T7797] veth1_vlan: entered promiscuous mode [ 168.720103][ T7797] veth0_macvtap: entered promiscuous mode [ 168.766947][ T7797] veth1_macvtap: entered promiscuous mode [ 168.841400][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.899810][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.926116][ T7797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.955501][ T7797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.976035][ T7797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.986635][ T7797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.294487][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.326081][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.461323][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.492195][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.005191][ T8228] netlink: 'syz.1.503': attribute type 12 has an invalid length. [ 170.034372][ T8228] netlink: 'syz.1.503': attribute type 29 has an invalid length. [ 170.042195][ T8228] netlink: 148 bytes leftover after parsing attributes in process `syz.1.503'. [ 170.093298][ T8228] netlink: 51 bytes leftover after parsing attributes in process `syz.1.503'. [ 170.191985][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 170.484601][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.512'. [ 170.631381][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.827719][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.107655][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.198281][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.312207][ T49] bridge_slave_1: left allmulticast mode [ 171.318104][ T49] bridge_slave_1: left promiscuous mode [ 171.326290][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.336433][ T49] bridge_slave_0: left allmulticast mode [ 171.342394][ T49] bridge_slave_0: left promiscuous mode [ 171.348383][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.900355][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.918371][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.934933][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.945424][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.947864][ T49] bond0 (unregistering): Released all slaves [ 171.959340][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.968654][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.978544][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.125344][ T8289] lo speed is unknown, defaulting to 1000 [ 172.360828][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.521'. [ 172.372875][ T8299] ipt_ECN: cannot use operation on non-tcp rule [ 172.435314][ T8297] veth0: entered promiscuous mode [ 172.464675][ T8296] veth0: left promiscuous mode [ 172.568599][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 172.611995][ T8309] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 172.641378][ T8309] netlink: 172 bytes leftover after parsing attributes in process `syz.4.526'. [ 172.672186][ T8309] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 172.911992][ T8305] team0 (unregistering): Port device team_slave_0 removed [ 172.944785][ T8305] team0 (unregistering): Port device team_slave_1 removed [ 173.041153][ T8310] netlink: 420 bytes leftover after parsing attributes in process `syz.0.527'. [ 173.170271][ T8320] xt_ipcomp: unknown flags B [ 173.263400][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 173.694873][ T8342] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 173.708544][ T8343] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 173.749446][ T49] hsr_slave_0: left promiscuous mode [ 173.771891][ T49] hsr_slave_1: left promiscuous mode [ 173.782097][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.798084][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.817773][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.843622][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.895061][ T49] veth1_macvtap: left promiscuous mode [ 173.900701][ T49] veth0_macvtap: left promiscuous mode [ 173.915670][ T8353] netlink: 'syz.2.541': attribute type 2 has an invalid length. [ 173.916912][ T49] veth1_vlan: left promiscuous mode [ 173.933741][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 173.950998][ T49] veth0_vlan: left promiscuous mode [ 174.053888][ T5854] Bluetooth: hci2: command tx timeout [ 174.525993][ T8365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 174.595350][ T49] team0 (unregistering): Port device team_slave_1 removed [ 174.676715][ T49] team0 (unregistering): Port device team_slave_0 removed [ 174.779961][ T30] audit: type=1800 audit(1752686824.709:2): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.546" name="memory.events" dev="tmpfs" ino=768 res=0 errno=0 [ 175.252816][ T1090] wlan1: Trigger new scan to find an IBSS to join [ 175.570543][ T8367] veth7: entered allmulticast mode [ 175.669520][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 175.740625][ T8383] netlink: 48 bytes leftover after parsing attributes in process `syz.2.551'. [ 175.741058][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 175.765117][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 175.799685][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 175.886163][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 176.030846][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 176.064239][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 176.076180][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 176.133967][ T5854] Bluetooth: hci2: command tx timeout [ 176.239234][ T8396] lo speed is unknown, defaulting to 1000 [ 176.298096][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.324186][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.334481][ T8289] bridge_slave_0: entered allmulticast mode [ 176.372640][ T8289] bridge_slave_0: entered promiscuous mode [ 176.391605][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.415698][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.429576][ T8418] trusted_key: syz.2.562 sent an empty control message without MSG_MORE. [ 176.432387][ T8289] bridge_slave_1: entered allmulticast mode [ 176.465634][ T8289] bridge_slave_1: entered promiscuous mode [ 176.747406][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.814927][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.861521][ T8439] netlink: zone id is out of range [ 176.868197][ T8429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.870713][ T8439] netlink: zone id is out of range [ 176.882743][ T8439] netlink: zone id is out of range [ 176.887922][ T8439] netlink: zone id is out of range [ 176.888791][ T8429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.893781][ T8439] netlink: zone id is out of range [ 176.908656][ T8439] netlink: zone id is out of range [ 176.910178][ T8429] bond0 (unregistering): Released all slaves [ 176.914658][ T8439] netlink: zone id is out of range [ 176.925650][ T8439] netlink: zone id is out of range [ 176.930956][ T8439] netlink: zone id is out of range [ 176.940454][ T8439] netlink: zone id is out of range [ 177.345055][ T8289] team0: Port device team_slave_0 added [ 177.369705][ T8289] team0: Port device team_slave_1 added [ 177.541827][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.550981][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.585808][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.600188][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.611665][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.638306][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.743353][ T8289] hsr_slave_0: entered promiscuous mode [ 177.751975][ T8289] hsr_slave_1: entered promiscuous mode [ 177.760544][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.775316][ T8289] Cannot create hsr debugfs directory [ 177.816714][ T8460] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 178.213214][ T5854] Bluetooth: hci2: command tx timeout [ 178.219738][ T36] wlan1: Trigger new scan to find an IBSS to join [ 178.239664][ T36] ------------[ cut here ]------------ [ 178.246145][ T36] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.260248][ T36] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 178.300060][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 178.300090][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.300104][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 178.300154][ T36] Call Trace: [ 178.300163][ T36] [ 178.300173][ T36] dump_stack_lvl+0x189/0x250 [ 178.300206][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.300233][ T36] ? __pfx__printk+0x10/0x10 [ 178.300287][ T36] ubsan_epilogue+0xa/0x40 [ 178.300318][ T36] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 178.300351][ T36] ieee80211_request_ibss_scan+0x600/0x8b0 [ 178.300401][ T36] ieee80211_ibss_work+0xde7/0x1060 [ 178.300442][ T36] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 178.300487][ T36] ? ieee80211_iface_work+0xf39/0xfe0 [ 178.300509][ T36] ? rcu_is_watching+0x15/0xb0 [ 178.300539][ T36] cfg80211_wiphy_work+0x2dc/0x460 [ 178.300565][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 178.300592][ T36] process_scheduled_works+0xae1/0x17b0 [ 178.300648][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.300693][ T36] worker_thread+0x8a0/0xda0 [ 178.300751][ T36] kthread+0x70e/0x8a0 [ 178.300785][ T36] ? __pfx_worker_thread+0x10/0x10 [ 178.300810][ T36] ? __pfx_kthread+0x10/0x10 [ 178.300842][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.300871][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.300902][ T36] ? __pfx_kthread+0x10/0x10 [ 178.300932][ T36] ret_from_fork+0x3fc/0x770 [ 178.300957][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 178.300988][ T36] ? __switch_to_asm+0x39/0x70 [ 178.301013][ T36] ? __switch_to_asm+0x33/0x70 [ 178.301039][ T36] ? __pfx_kthread+0x10/0x10 [ 178.301075][ T36] ret_from_fork_asm+0x1a/0x30 [ 178.301124][ T36] [ 178.477813][ T36] ---[ end trace ]--- [ 178.481873][ T36] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 178.489124][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 178.501147][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.511229][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 178.517523][ T36] Call Trace: [ 178.520844][ T36] [ 178.523793][ T36] dump_stack_lvl+0x99/0x250 [ 178.528413][ T36] ? __asan_memcpy+0x40/0x70 [ 178.533024][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.538352][ T36] ? __pfx__printk+0x10/0x10 [ 178.542979][ T36] panic+0x2db/0x790 [ 178.546899][ T36] ? __pfx_panic+0x10/0x10 [ 178.551418][ T36] ? _printk+0xcf/0x120 [ 178.555600][ T36] ? __pfx__printk+0x10/0x10 [ 178.560223][ T36] check_panic_on_warn+0x89/0xb0 [ 178.565209][ T36] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 178.570958][ T36] ieee80211_request_ibss_scan+0x600/0x8b0 [ 178.576823][ T36] ieee80211_ibss_work+0xde7/0x1060 [ 178.582055][ T36] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 178.587727][ T36] ? ieee80211_iface_work+0xf39/0xfe0 [ 178.593115][ T36] ? rcu_is_watching+0x15/0xb0 [ 178.597905][ T36] cfg80211_wiphy_work+0x2dc/0x460 [ 178.603067][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 178.608812][ T36] process_scheduled_works+0xae1/0x17b0 [ 178.614407][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.620427][ T36] worker_thread+0x8a0/0xda0 [ 178.625061][ T36] kthread+0x70e/0x8a0 [ 178.629280][ T36] ? __pfx_worker_thread+0x10/0x10 [ 178.634411][ T36] ? __pfx_kthread+0x10/0x10 [ 178.639029][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.644257][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.649479][ T36] ? __pfx_kthread+0x10/0x10 [ 178.654115][ T36] ret_from_fork+0x3fc/0x770 [ 178.658733][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 178.663870][ T36] ? __switch_to_asm+0x39/0x70 [ 178.668658][ T36] ? __switch_to_asm+0x33/0x70 [ 178.673443][ T36] ? __pfx_kthread+0x10/0x10 [ 178.678056][ T36] ret_from_fork_asm+0x1a/0x30 [ 178.682873][ T36] [ 178.686208][ T36] Kernel Offset: disabled [ 178.690597][ T36] Rebooting in 86400 seconds..