last executing test programs: 1m28.051410691s ago: executing program 0 (id=992): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1ffffffe, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x1, "e042f0369d425392401fc066b88d34d9c37dd4dfefc2950b09ae6c9f6848fdfb", 0x0, 0x3c, 0x80000001, 0xfffffff8}, 0x3c) 1m26.5923875s ago: executing program 1 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m11.88515216s ago: executing program 1 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m9.188885059s ago: executing program 0 (id=992): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1ffffffe, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x1, "e042f0369d425392401fc066b88d34d9c37dd4dfefc2950b09ae6c9f6848fdfb", 0x0, 0x3c, 0x80000001, 0xfffffff8}, 0x3c) 56.391426202s ago: executing program 1 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 55.442460194s ago: executing program 0 (id=992): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1ffffffe, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x1, "e042f0369d425392401fc066b88d34d9c37dd4dfefc2950b09ae6c9f6848fdfb", 0x0, 0x3c, 0x80000001, 0xfffffff8}, 0x3c) 40.626511075s ago: executing program 1 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 39.718421334s ago: executing program 0 (id=992): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1ffffffe, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x1, "e042f0369d425392401fc066b88d34d9c37dd4dfefc2950b09ae6c9f6848fdfb", 0x0, 0x3c, 0x80000001, 0xfffffff8}, 0x3c) 27.381278189s ago: executing program 1 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26.286508169s ago: executing program 0 (id=992): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1ffffffe, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x1, "e042f0369d425392401fc066b88d34d9c37dd4dfefc2950b09ae6c9f6848fdfb", 0x0, 0x3c, 0x80000001, 0xfffffff8}, 0x3c) 18.351756004s ago: executing program 2 (id=2716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000003000000050000000800000000000000", @ANYRES32, @ANYBLOB="00000000000bf7069cb67928440000000000009cc37c7acf7d2f17224ed151f826b09b02a22376a8a739296a977313e72e135f3bef87e10d564a50971c763b9747032b00371ef5ca5baee9698f7bb2a1d22e2a5adf95f23bebf61c81d605840ef93a29a11224a505fb7ee0627a0c7ae58cec9459d8c80f0737520a8fd816fc1ccc8bcf503b466c9bea0dd3271493ebdb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="38fa837286f4f0ab3c72a789ff8d441b", 0x10}], 0x1, 0x0, 0x0, 0x4000801}], 0x1, 0x24008844) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0x2) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x1b, &(0x7f0000000380)=@raw=[@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000480)='syzkaller\x00', 0x3ff, 0x2, &(0x7f00000004c0)=""/2, 0x40f00, 0xe1c620c2634a5f0d, '\x00', r2, @cgroup_sock_addr, r4, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x5, 0x4d}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r7, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x3, 0xa}]}, 0x94) r8 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r10, 0x5, 0x1}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 17.486982831s ago: executing program 2 (id=2721): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000800000000000000000000000002002000010000011a000040080002000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000500"/29], 0x0, 0x1d}, 0x28) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000640), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x2f) listen(r4, 0x0) listen(r4, 0xaca) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fd94bd6f", @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x48000) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000780)=0x3, 0x4) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) bind$packet(r8, &(0x7f0000000600)={0x11, 0x1a, r9, 0x1, 0xc9, 0x6, @random="d7d4595b76d3"}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r10, 0x20, &(0x7f0000000240)={&(0x7f00000002c0)=""/205, 0xcd, 0x0, &(0x7f00000003c0)=""/246, 0xf6}}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r4, &(0x7f0000001c80)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x2, 0x1, 0x3, {0xa, 0x4e22, 0xa4b, @remote, 0x84d}}}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000001c40)}}], 0x2, 0x24044810) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f0000000200)={0x0, 0x21, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="889f21cb346ffc826db9a2755020195917d2ff4b3fbae07b13214aa1a251dabd44a5734c23a5d548fe04a9babe329eaa2940179c6f92836edc7dade32134796a90762eb4699acb5215e0d271effc7a3b8fb254aa5c3eb03e15fde988d37133b56afb907590cfa56c6d25e6d301515638e3b8f74083bba0556d662e2b645dd36e51003b87fd629ff591f4e3f2777536d2205234468f9ce37b49853fc568"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0xc814) 17.035927516s ago: executing program 2 (id=2725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x2, 0x0, 0x7, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010022bd7000fedbdf252300000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x208, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x184, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xb4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7d}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7a3c}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20008093}, 0x9081) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x2, 0x0, 0x7, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010022bd7000fedbdf252300000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x208, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x184, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xb4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7d}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7a3c}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20008093}, 0x9081) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) 16.868251436s ago: executing program 2 (id=2727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x5}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x10, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xc40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x0, 0x2, 0x5}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x6) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x10, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xc40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) 16.670182587s ago: executing program 2 (id=2730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000000}, 0x10}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000b00400b0200008d416cfa6fc2313e5206d8da3f8ac06e2eab20a2e1620d7b21da7921be"], 0x48}}, 0x2400c808) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r5, 0x0, 0x9}, 0x18) 10.117901923s ago: executing program 1 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.490437803s ago: executing program 0 (id=992): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1ffffffe, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@remote, @loopback, 0x1, "e042f0369d425392401fc066b88d34d9c37dd4dfefc2950b09ae6c9f6848fdfb", 0x0, 0x3c, 0x80000001, 0xfffffff8}, 0x3c) 4.957259256s ago: executing program 4 (id=2780): r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000840)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYRES16=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x307}, "1f476b377fcc789f", "41931d980719b1dbfa8e2adf7aeffbf3", "9c2ff024", "bd915dee56d466b8"}, 0x28) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x178, 0x1170, 0x1170, 0x178, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x7fffff80, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x108, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x403, 0x9859, 0x4, 0x0, 0x0, "cbabff2e0697a58667525dcf4c820891158a796c7aed8598e1e75ffdbf5a1f6674c8d2564d609f43454bd0f666ab9f24fd9be53312fb51066bb182cffc604c72"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f7) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000100)="1eecc204ac66b4a200120300000040e0bb86be9c12589d9931f9e1cdd45617eabdecaf93374ceccec5043f012f4c11b9a563a99f003c51cc98a85048c275765749565e796d02", 0x46, 0x4000000, &(0x7f00000000c0)={0x6, 0x5, r4, 0xfb88, 0x5, 0x6, @random="4a99f69ea74d"}, 0x14) socket(0xa, 0x3, 0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000840)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYRES16=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x307}, "1f476b377fcc789f", "41931d980719b1dbfa8e2adf7aeffbf3", "9c2ff024", "bd915dee56d466b8"}, 0x28) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x178, 0x1170, 0x1170, 0x178, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x7fffff80, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x108, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x403, 0x9859, 0x4, 0x0, 0x0, "cbabff2e0697a58667525dcf4c820891158a796c7aed8598e1e75ffdbf5a1f6674c8d2564d609f43454bd0f666ab9f24fd9be53312fb51066bb182cffc604c72"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f7) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r6, &(0x7f0000000100)="1eecc204ac66b4a200120300000040e0bb86be9c12589d9931f9e1cdd45617eabdecaf93374ceccec5043f012f4c11b9a563a99f003c51cc98a85048c275765749565e796d02", 0x46, 0x4000000, &(0x7f00000000c0)={0x6, 0x5, r4, 0xfb88, 0x5, 0x6, @random="4a99f69ea74d"}, 0x14) (async) 4.828369621s ago: executing program 4 (id=2781): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x94, 0x2d, 0x100, 0x70dd, 0x25dfdbff, {0x1b}, [@nested={0x4, 0x107}, @generic="bf915d3d32653b7706ac8ead0e224748e436f34efb100678155ab03906d66a", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@multicast2}, @generic="fe0cbed15caa53c7c2716889efcc2f47f8575b5f6f58271cb84235a7423b1f0110fa8250cf8f61604cc668156f137d73d08aaed6249eca1d6dedc945c3261f"]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000001b00)=""/4109, 0x100d}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/190, 0xbe}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x56}], 0x4, 0x40000000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000280)={{r1}, "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"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 3.884105049s ago: executing program 4 (id=2785): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) (async) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) unshare(0x40000000) 1.556191458s ago: executing program 3 (id=2789): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'pimreg1\x00', {'team_slave_0\x00'}, 0x5ac}) 1.484342241s ago: executing program 3 (id=2790): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2809b40e}, 0x0) 1.351953321s ago: executing program 3 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = getuid() r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x8094, 0x4) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x388, 0x22, 0x400, 0x70bd29, 0x25dfdbfe, {0x16}, [@nested={0x21, 0x92, 0x0, 0x1, [@generic="4de5b7333a53289ce4fd222e7cb88d48e9", @nested={0x4, 0x20}, @typed={0x8, 0xa9, 0x0, 0x0, @pid=r2}]}, @nested={0xff, 0xb8, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x800}, @nested={0x4, 0x30}, @generic="337854f1040a8457b58acda3f2059b1af67c053db6de639a3343bae427d6b47487678f45c8dd39ce343d44003b8ce2e70be3313ea68cb6562459356891ff7e4154b4d801012ca630d97ca43027a32d5364b0677ee97ce0d4b373166f5c5c0931795cc28b62a5fbc7033c29cb5add30b113078d03d1873035fed45c3ed3db2be9994fa3edc9512f6969fb299cab62ca891157afe0", @generic="91dc02b62566f20e266fccd40dd2142ef2913022f50fc0d0b6d5200ae5e2bf2e1f49183673ffa20643a65d498c12169bb8acab2e7deb070e1ba127aac58c4c33400830", @typed={0x8, 0x10f, 0x0, 0x0, @u32}, @nested={0x4, 0x4}]}, @nested={0x34, 0x112, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @str='@!$\x00'}, @typed={0x14, 0x108, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x7ff}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x6}]}, @generic="79704f675ed6d17ffcef259fd0028a5de538681732500fccf8204e63848b08ac36d01cc28639823dcde9d151e63a4bdb188858f71e580dd30edce253f181f964c2c84a59cb71a7743a9df9e14b3ba31e37df47c011812a22468fd51770fb7efe97dd2f0694d744a731ead8eff4bd5b6c6f66dd2c8f52048007f65cc6cd1abe", @generic="abca6276f2611bd2607e26426fd1ff423bae674c132424d2a884b9f9b1db896f2e8ae86110aaaedf48e272ac5e19d90df95f5585efc8d8364e401ccc5359d7f78b7e4e444b5a1e439bec688af4bcb96e105222f81fe6900f8b1edc469aec828af2deb41fe698d869b9413fc6134b94c389923d2f7528d1416ffd00e435fd7c3d0a8d1cd99678edff4c4b1026333734033ef3596471eb7678f46356ae66249028f34d3e090584545fb0932b61c5d6e073141cfd121c6949b01a0ff772f1a1ff72bdc0891dd74f28c2", @nested={0xd3, 0xcc, 0x0, 0x1, [@generic="fbd9ea0477cbc81c78d1abf5b61c6e8b5c9ba352617a16f64601d307fb607108f5bb3977dbc17bee906b43c31cff6b7eee1a5799498f1e4a27a060f24776c4407c72728141079c8601ae01f860155a5b3993f1a6b557cd28a46cba92239aa931c77fceea2dc532db7d63f2446c5ff78b336f367fda5333670c068326096a565266fb45ee6178b4be34c5e9344b176065be54c0a0e9ebb9adda9e54e50b0578", @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x74}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r4}, @typed={0x4, 0xa7}, @nested={0x4, 0x1e}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELOBJ={0xc8, 0x14, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x68, 0x8, "4ae4411ed4bf63789329cbfc4cf4116acbd5b24e88805cb76e395cc414a4e885bd7700989c982a858a90fd4559e39c94374accdfcd6d16220b38cdfc814c807168c61fd613f2ff573d2c5da9af8291daac75d3dc6d2593c0db5a7c7efbef0e7133887c32"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xf0}}, 0x0) 1.204839722s ago: executing program 3 (id=2792): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001680)=""/196, 0xc4}], 0x1}, 0x40000061) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040)=0x1, 0x4) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffe54) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x210, 0x9403, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x8, 0x0, 'syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'lo\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x27, 0xa, 0x7, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r4, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES8=r6], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.096215008s ago: executing program 4 (id=2793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4018040}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@get={0x100, 0x13, 0x220, 0x70bd29, 0x25dfdbff, {{'stdrng\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x9}]}, 0x100}}, 0xc004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x140e, 0x20, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000844) read(r1, &(0x7f0000000400)=""/118, 0x76) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r2, &(0x7f0000001b80)={&(0x7f0000000480)={0x2a, 0x2, 0x4000}, 0xc, &(0x7f0000001800)=[{&(0x7f00000004c0)="0d755dee3610df0da6ba62e73fca93e25a293a37f1020a13da66e333627e8ea9e47bb8409aef36bbe8ed7a4d6c946c9b09fad89514", 0x35}, {&(0x7f0000000500)="be4440e32055cdfed1df3547f7eee8e9c5f76bb4dc6b4ff9157069282566da2986f733", 0x23}, {&(0x7f0000000540)="51fe14a32eee7f0fd31575a844b28ba68dfbd03504d1dcfd00d3f39540a699631b312781b6ac220c564bc8a0793ab37b9d4b42610c5b7d6f685719048139882cb24b7ab04383cd77c0039bd14e6d1d3c014c0b53f7114b4333bd7056f72bb561108d5520c8cc634fdd6f639e390436bd53747e3f459fc3ee3768d3cf45", 0x7d}, {&(0x7f00000005c0)="041e5bc3711c8e7a4cdd95180e22d85d6124d3326849bee6897435b5e83fd3eeb82af37da8b9b09dc655fc37ab202f1bdb7c6d3e908f0746a2f1182cc50c99782a161d0fa1f2c63e0c204fe4a38777774d6dde29fed48ea901fca4c0eeeee9dd887f791f0d94cfa6c44d5fed449577a64f910bb40fabc0a88954868f2ed8b52706d724dbda0d408120c8c2f956dc8bc5eb5774378ddddf158f0225d2129d8c6c6b87ec781c2bb9e0c32e11a7dbc4ad3d42fe1bfeacd17de899421b114a5ff62ce4e896416dd0041c5b45bec1b0be8bbbfbf2e549054bcda4bf5b3a45dd3548adf098", 0xe2}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="350ef1335db9996cfbc523c41ffe9d545d6ecf79c76a0d8fa4589329baa799ccf37ea6c38cdfaf81e88d47dd2736009d9b03912606ca07d0eca4b8ef6683078f80668fec8023c89a5fc6b9a68caaf00e9d5f7c5ec8e1223afc296dba31136ad93e419f2e65ae8e149d740cfcb172242d", 0x70}, {&(0x7f0000001740)="5a11e0a59b0a1c9881192520b79aeafd1bf59872ec4d64e869af705ce971ab7a4528799e9585219ec45bd5af37ebeb000390e5523c3afdbf05b5e2b5f25e01fcf8d85d1974701713eac9d634cf6e79fba554851fec1a46aab3dd53b5980de23f442b13dd231edbc6b8a2ebbbf75ce9009028a1fc1301294ae5faf8f79f9a54cc936dd6c286f539bb5ffa946627c5280b68f9987d785fa599218b75819c9facb2db39123d", 0xa4}], 0x7, &(0x7f0000001880)=[{0xf8, 0x109, 0x1ff, "ca478922918459cea4d0f138fa9ed904a153852845dde2dc8ae39c228dcfb42fe899b629900e367c4e043bf62287c7b2798600e7cc421a1637f864a95372ba9d8a4f0aeb7fa68236d11fce99ed47b12bf1de397b7e7bb5f74bc3a8d834eb02dd4e2fd29873b9591b771214d31e8ff9864e7445bd7cce83b66efd805bb15ca10ed1a024a7669c04e039a759f937490f3b4553a64d111be20b63deae95a65514332d088563796e45ece56fa8d67c60d00b9a8ce5cd21f55d408da06e6a3846df5091ff917ce510df8677f1ea9d67a306c0ea9f7fa2fb897ff29cf5aae002b3caa833efaf6b169091"}, {0xf8, 0x112, 0x0, "e66f46dd721f372085b0ea84a2f77686c55f3ab765b85a24a28a0a23eb247cb9821338a2ac9d2707eef097029c12f6542dc8ca21308801bf306275eaea7a2465f78be98649a7a2781327ff1621251b0fe85679ae3650aabb8f8b8d63fb0c879109f6cd785e55031f5e67acc023474fc7f56f6082488285e3ef7b983fb8f2915eb5bebf189781f37a3eccbb5fc87f0724adf1a4865df0bdb3976b3a8cc5c77a4d1240520c152a197eadb455abaa6d3dd02ef8005ff1c17d1580772fafcc76cbcd1806a05812e0323a4a571186ecbdb97c46062af59a93f2c5af3f33c60ef6163c7c"}, {0x100, 0x113, 0x5, "524a59f81eeb9c787b58a2f363b40994aad9e79a17adea55c09cb07d38684e3861895ab060c426b472f1504355fc4c698c6f5eeed26fc6ef625862cc5b4dec70051ce2c3170e4ea6a6786e231d41a94f91970239bb7c3931c3baae006165ca84005f6b17c411a966239987c4597175803c1a3bd1db0d8ffd24ed0646af89922b531fe2d7cf1a2c8752d12df9d41097624a9928e9a24d1db53e64250d6880110967f3e8da2b14df4fce4e13cff7b534ef43267bf98e2495bde6a07428b61741bfad476352ca58febff88f4bfb394c46a19c5dd55f1b09aa767c14e80c40be58ab1ab1a9c4fba0b0795ab12d58444e1d"}], 0x2f0, 0x885}, 0x38) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)=@alg={0xf0, 0x10, 0x4, 0x70bd2b, 0x25dfdbfe, {{'drbg_pr_ctr_aes192\x00'}, '\x00', '\x00', 0x2400, 0x2600}, [{0x8, 0x1, 0x46e}, {0x8, 0x1, 0x62000000}]}, 0xf0}}, 0x800) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000002ac0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a80)={&(0x7f0000001ec0)={0xbb8, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x7}, 0x6, 0x4, 0xf, 0x10, 0x14, 'syz0\x00', "6a5aa1f807c5e4ac9c548b6a2cbfff9accfcbb5698640d42077aba60c810dba5", "097c3e208797b91f6689e0e93604995c8097b658e16adaf8b2317c5c2b2a4978", [{0x9, 0x9c00, {0x1, 0x7}}, {0x7, 0x8000, {0x2, 0x7}}, {0xc, 0x8, {0x0, 0x7}}, {0xffff, 0x5, {0x0, 0x9}}, {0x10, 0x5, {0x0, 0x4}}, {0x4, 0x8, {0x3, 0x3}}, {0x3, 0x7fff, {0x3, 0x2}}, {0x7, 0x0, {0x0, 0x6}}, {0x6, 0x1, {0x0, 0x9}}, {0x1, 0x5, {0x0, 0x54}}, {0x0, 0xa8b5, {0x1}}, {0x35, 0x82, {0x2, 0x1}}, {0x5, 0x8, {0x1, 0x4}}, {0x7, 0x4, {0x1}}, {0x4, 0x1, {0x2, 0xbd8}}, {0x8001, 0x5, {0x0, 0xffff0000}}, {0x1, 0x6, {0x3, 0xb}}, {0x7, 0x3, {0x3, 0x7}}, {0x3, 0x2, {0x1, 0x8}}, {0x4, 0xfc0, {0x1, 0x3}}, {0xab63, 0x47ac, {0x1, 0x2}}, {0x0, 0x516, {0xc49180e1de5cd402, 0x9}}, {0x9769, 0x3, {0x0, 0x80}}, {0x100, 0x5, {0x1, 0x10001}}, {0x2, 0x2, {0x3, 0x8000}}, {0x6, 0x10, {0x1, 0x1000}}, {0xa341, 0x6, {0x0, 0x9}}, {0x6, 0x200, {0x2, 0x200}}, {0x6ee6, 0xb, {0x0, 0x7}}, {0x1, 0x7, {0x2, 0x7}}, {0x9eea, 0x9a3, {0x0, 0x6}}, {0xd, 0x8f0, {0x3, 0x18904000}}, {0x0, 0x9, {0x2, 0x80000001}}, {0x3, 0xcb3, {0x1, 0xf}}, {0x80d1, 0xb337, {0x1, 0x2}}, {0x8, 0x6d, {0x2, 0x3}}, {0x1, 0x6, {0x0, 0x3}}, {0x3, 0xff, {0x3, 0x3}}, {0x8, 0x6, {0x1, 0xe}}, {0x1ff, 0x6, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x4, 0x2, 0x3c, 0x5, 0x23, 'syz1\x00', "d8b4374e541df7db5451c938d75b7eb93c2a7dae72cc98e90767cb779325644b", "80a1717f03f4102e2b810c0fde30a06ace5c3512846e54ea23a88b6dd8aa318f", [{0x7, 0x4, {0x0, 0x5}}, {0x7, 0xffbc, {0x3, 0x7}}, {0x2, 0x0, {0x2, 0xb}}, {0x2, 0xfff7, {0x3, 0x1}}, {0x7f, 0x2180, {0x0, 0x2}}, {0x3f8, 0x8, {0x0, 0xec}}, {0x1, 0x7, {0x4, 0x5}}, {0x9, 0xc, {0x3, 0xd1}}, {0x68d, 0x8, {0x0, 0x9}}, {0xacf7, 0x1, {0x3, 0x65f}}, {0x7ff, 0x8, {0x3, 0x15}}, {0x7, 0x5, {0x1, 0x2}}, {0x2, 0x10, {0x2, 0x7}}, {0x4, 0x2, {0x3, 0x40}}, {0x5, 0xd, {0x1, 0x9}}, {0x9, 0x3, {0x2, 0xfffffffa}}, {0x7, 0x7ff, {0x3, 0x5}}, {0x1, 0xf, {0x3, 0x210}}, {0x6, 0xfff9, {0x3, 0x8}}, {0x0, 0x0, {0x2, 0x80000000}}, {0x0, 0x6, {0x3, 0x9}}, {0x2, 0x7fff, {0x3, 0xa313}}, {0x801, 0xfff8, {0x3, 0x3}}, {0xe6, 0xfff7, {0x3, 0x9}}, {0xe, 0x1, {0x3, 0x1000}}, {0x5, 0xfffb, {0x3, 0x9}}, {0x4, 0x101, {0x0, 0x9}}, {0x5, 0x4, {0x1, 0x180}}, {0xfff2, 0x800, {0x1, 0x2}}, {0x7, 0x5, {0x1, 0x8}}, {0x800, 0xff, {0x3, 0x9f}}, {0x9, 0x4, {0x2, 0x101}}, {0x9, 0x3, {0x1, 0x6}}, {0xaeea, 0x4, {0x3, 0x3c00}}, {0x9, 0xfc00, {0x2, 0x9}}, {0x1, 0x4, {0x3, 0x7}}, {0x72, 0x3, {0x1, 0x8}}, {0x7, 0x3, {0x3}}, {0x2, 0x6, {0x3, 0x3}}, {0x7, 0x4, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{}, 0x4, 0x1, 0x8, 0x9, 0x8, 'syz0\x00', "c52633d03cf5609936d1c4da5c63801ebc892cd0a84cd67434b22e8b17ddd482", "58d52ba22096ea21ad4f1c85362c456d1068cca040ba3124900951edb021cb88", [{0x7f, 0xd53, {0x1, 0x6}}, {0xe, 0xe, {0x0, 0x9}}, {0x8001, 0x8, {0x1, 0x40}}, {0x9, 0xfff, {0x3, 0xc}}, {0xe, 0x316, {0x0, 0x1}}, {0x101, 0x9, {0x1, 0x8}}, {0x6, 0x7ff, {0x1, 0x8}}, {0x0, 0x7fff, {0x3, 0xbb2d}}, {0x7fff, 0xbc, {0x0, 0x1e}}, {0x6, 0x3, {0x3, 0xff}}, {0xfff8, 0x6, {0x0, 0x1}}, {0x1, 0xf, {0x3, 0xfffffffb}}, {0x816, 0x1000, {0x0, 0x2966}}, {0xf2c, 0x7f, {0x3, 0x4}}, {0x6, 0x6, {0x3, 0x2}}, {0x5, 0x9, {0x3, 0x3}}, {0x59, 0x8000, {0x1, 0x6}}, {0x7, 0x3c, {0x3, 0x80000000}}, {0x9, 0x3, {0x2, 0x71}}, {0x6, 0x65, {0x1, 0xd2f0}}, {0x9, 0x3, {0x0, 0xffff}}, {0x6, 0x4, {0x3, 0x2fe3}}, {0x8, 0x3, {0x2, 0xa}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x800, 0x3ff, {0x0, 0x8}}, {0x8a, 0x1}, {0x5, 0x2, {0x2, 0xa628}}, {0xffff, 0xfff, {0x0, 0x80000001}}, {0x49, 0x801f, {0x1, 0x4}}, {0x800, 0xa, {0x0, 0x174}}, {0x7, 0x6, {0x0, 0x6}}, {0x4, 0x7, {0x0, 0xcbee}}, {0xf, 0x3ff, {0x2, 0x401}}, {0x1, 0xd2, {0x1, 0x7}}, {0x9, 0x272, {0x2, 0x85e}}, {0x40, 0x101, {0x1}}, {0x6, 0x100, {0x3, 0x842}}, {0xffff, 0x9873, {0x0, 0x228}}, {0xa6c6, 0x3, {0x2, 0x9}}, {0xd259, 0x1000, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x7f}, 0x8, 0xa, 0x0, 0x2000, 0x1d, 'syz0\x00', "2a578339be99c276f7e38417bd68fe2368828bdf07a9a5bfa51bb44413292f04", "78b5a0445739c937e48854a441de1de3eddf3c7137131b7190cadfa2bb263bdd", [{0x8, 0xfff, {0x2, 0x6}}, {0x401, 0x101, {0x3, 0x5}}, {0x6, 0x4, {0x3, 0xf}}, {0x0, 0x3, {0x1, 0x36}}, {0x7, 0xde, {0x3, 0xa}}, {0x1, 0x2, {0x1, 0xfffffff8}}, {0x2, 0xe020, {0x2, 0x4}}, {0x3, 0x5, {0x2, 0x5}}, {0x4, 0x2, {0x2, 0x8}}, {0x0, 0x7, {0x2, 0x6}}, {0x4, 0xd9c6, {0x2, 0x3}}, {0x64, 0xe3, {0x1}}, {0xff, 0x8, {0x0, 0x6}}, {0x8, 0x7, {0x3, 0x5}}, {0xfff, 0x8, {0x3, 0x8}}, {0x3, 0x1, {0x0, 0xffffffff}}, {0x4, 0x3, {0x1, 0x2}}, {0x1, 0x1bc, {0x1, 0x2c}}, {0x7, 0xf6ec, {0x0, 0x16e}}, {0xbca7, 0x1, {0x0, 0xfe}}, {0x401, 0x0, {0x2, 0x8}}, {0xe, 0xfff, {0x0, 0xb1}}, {0x3004, 0x3, {0x3, 0x1}}, {0x2, 0xe7e1, {0x3, 0x80000001}}, {0x7, 0xa, {0x3, 0x2}}, {0x3, 0x2, {0x2, 0x3}}, {0xfffd, 0x6, {0x1, 0x4}}, {0x0, 0x4, {0x0, 0x4}}, {0x8, 0xa, {0x0, 0xfffffffd}}, {0x8001, 0xd46, {0x1, 0x6}}, {0xd, 0x27, {0x0, 0x1}}, {0x751, 0xca, {0x3, 0x47a0}}, {0x61ae, 0x854, {0x1, 0xffffffc1}}, {0xa, 0x16f0, {0x0, 0xe15}}, {0x7, 0xd5ce, {0x1, 0xfffffffa}}, {0xfe00, 0x6, {0x2, 0x200}}, {0x8, 0x4, {0x0, 0xf9}}, {0x2, 0xb8, {0x1, 0x2}}, {0x9, 0x50, {0x0, 0x6}}, {0x8, 0x0, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1}, 0x1, 0xe, 0x8, 0x7, 0x16, 'syz0\x00', "b60cc2ae127180a0e831d38110d53d3cb2a91e4de14b0fde4c0021ea03f4cca8", "675b40ffe3c1be2ccd4a6d0715a63e867f6cfc20f491a0a2c07b0bfb2e670aa9", [{0xfe00, 0x7fff, {0x1, 0x8}}, {0x3f, 0x3, {0x2, 0x3}}, {0x800, 0x5, {0x3, 0x6}}, {0x1, 0xdc3, {0x2, 0x80}}, {0x8000, 0xfff8, {0x1, 0x8}}, {0x4, 0x4, {0x1, 0xc6a}}, {0x3, 0xfffc, {0x0, 0x800}}, {0x4, 0x7f, {0x3, 0x3}}, {0x5, 0x1, {0x3, 0xb}}, {0x401, 0x1}, {0x5, 0x5, {0x0, 0x1}}, {0x8, 0xb, {0x3, 0x3}}, {0x4, 0xbc3, {0x3}}, {0x1, 0x2, {0x2, 0x1ff}}, {0x9, 0xfffd, {0x0, 0x2}}, {0x5, 0x6, {0x3, 0x3}}, {0x7, 0x2, {0x3, 0x1ff}}, {0x36ab, 0x4, {0x1, 0x5}}, {0xe2cd, 0x7f, {0x3}}, {0x1, 0xb9c, {0x1, 0x7}}, {0x5ebb, 0x9, {0x0, 0x8}}, {0xfff, 0x1, {0x1, 0x7}}, {0x0, 0x3, {0x3, 0x2}}, {0x9, 0xd, {0x3, 0x1}}, {0x9, 0x2, {0x0, 0xd1}}, {0xa709, 0x5, {0x0, 0xfffffffd}}, {0x1, 0x3, {0x2, 0x200}}, {0x8000, 0x1, {0x3}}, {0xb813, 0x3, {0x1, 0x10000}}, {0xfff8, 0x44, {0x1, 0xe}}, {0x2, 0x1, {0x2, 0x200}}, {0x2, 0x0, {0x0, 0x8}}, {0x1, 0x9, {0x3, 0xff}}, {0x200, 0x7f, {0x1, 0x27}}, {0x40, 0x1, {0x0, 0x4}}, {0x1, 0xa76, {0x0, 0x81}}, {0x6, 0xa031, {0x1, 0xf42b}}, {0x8, 0x2, {0x1, 0xffffffff}}, {0x80, 0x6, {0x1, 0xfff}}, {0x4, 0x0, {0x1, 0x6eae}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002b00)) r5 = socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003cc0)={0xffffffffffffffff, 0x0, 0x60, 0x83, &(0x7f0000002b40)="7dd87cddf5506b75dccd75485b602fc2d3bba15b2efd88760e8e7dd2dbe10c46bc65cb8492d096b6e237d3c71c6eb4123114f517adce835c63bb3fbe4e82825ef7de97d749e4ebc85d798d25934c590c6042cfb37615bcae39f74ec123c3f839", &(0x7f0000002bc0)=""/131, 0x78d, 0x0, 0x1b, 0x1000, &(0x7f0000002c80)="b5f4ac1f2d459ec9d479b7fd09c0b8552cf4a80e243b980305d2fa", &(0x7f0000002cc0)="50ac8c4c35cb0ad7d344fa43ebeee7c7cb867779ea797dd46882f737bdc5701d6d014fdfd3d4b2d46893821d313c40962d54d79cea063a94d515574e4b6701bb9289b6049855e4b1542e266a0d752a64dc0ac56c5013c58c42f4ff4cb73be68fc9de44848ee488de58d586f27883392c81e2c549916901b738600bc83a893d0c791f92c86c13a396160bd6e945fc08e359729d0f04feb5f80efca178731b44f333b80ca6a7b82ae10ee2d55e92073dfd7a0cc8ab6cb142c4c898c189bd50c981ce0fe4db9fd9e21391cae7cbadcd03da2d6abd72f8174ae3e1b76d40e12859762454244c31091b62d23a0357734cf3bae2110fe62e0bf37903067fb4bb77490eea40233c92119babc8bb2e182ae8a26698387c4b5afb9132fff1f980b883129ba12cb09eda1a2bbe01bc60255abacffafc5ee85d36c5c2d3cbde73cb45c0a8c6eed808d23c3e469356ea618d552328115b0f215e4fe7c35f8ad9fd93eb40e75b271e4b5f5d847fec488439c8fd323649652c15742b5543fb29915703d5201a82e569e121bdf64c944374b70faa3c2264134275b541355e3a533642ad902e615274ed8bd48e3aa5d01a7f89e67a492cb6c651d36ca7e6089681f0ac24ec4d268659610d56a0655a29198079134b5f796275016e44597755bf09e2365da87a424c368d9a7f46b3b8a611de3fe44e70a62b5106606b0996d59ff5a2d0ba3aab20bbd651c6221743010b27d18adb1877b6085c6dc2813371a872f4aca7f675a475c7fae49288ab9ccb44a914ada7b9b0d1d4bf6424e901369e0aadbe4bfff6bd381015b152957d630b619ca0582ac84e80611c1bccb1e06179de975bbc5c6c8fd579bde85b572a5abf96a4851ce981d207b2e19f9736d9db59e76e40bbf78e6d4fa34ab40ce848dd29ab8fabae884015b748d6bd05cb28f88b22aa9bc30276abf8b4eeca460d0b26e6b2687aa15022bb923e5c3a5adce754c6e8c419cc412261d8f6940bd661512fc5616b07e225a82679a7691fab9fc0a21d93892549b49c896bf28108c9da58fc0e6bcbe0cc7b59b05d9cbed39c9e7efbacc7a2b357b2ff9363d9e35dad07243478e381ca0163c277a99ac79ffc32d35907caa3e85b482ce1f885174048625a1584393ddc7754c4787fa232b7578aa0f680acfc16558ecf1326f628e4b156f21d997044b116bf4bea771b22259781a170dd0e671c5413a1125c6ba13f575fc27b0c429ac573e7440ef66eb13934b653bb8cbf879d05d46c936ea9df913d725004995aa4cf6615b15d684c01321143ae0ab1f58a0277f449e8dca620df8f420a6e8ce10c0b2818269ebc53c3102996f5cf86708c660d8c910917b95da899b86067400f6cfee2c97458aa3d22aa7f01b6942beef3c30bb745c2a85e104b4168950c3760084134f3f1beee7f34f6be0a0fb63661a20e8d5ca9ba03d28a4aa72bd823cbc6462b9ad1fc2c492a2bb7ca54ee2dcaf9d32eeeeeb0e8fe03fcd5f69d982e83214a1dfca7a7a5436d868585a1dab0d58e1b733920ce07c4b530cd379d3e599c928b3bfaa4fe753e78fc884fbaecc7bc8e13146b506b6ba54e6ce947afc4a27b04e0f2f86c8a581bb9d864c18bd06aee01ee41bce98bbad6f15243c2df531e0035d33544bf843d682e0e047b3fa8ee0e4718f0ce5dd2ea6e7dfe54c88fa7b96c4d95e22d4042ca49f8c1ed9070a3844d233dc86795a8fc177a3c1f6753f0b5652af5a8508f5f98bcf958f4de7293ba4fae4f27f57137c4fbf5f22e92c8dfe03fbb9aa14c4bcdfd0a7f1c16176961202fe1fccb43aa9fe973dc497b04c931f6699fdc435eb0183bf9600ce4268f7f9f0c90e0136dbc33d522de3601181b84b38e3601b653961429906822a774b63fb5c10d4693d299301398c5754f60dd9ee81ba16ee7ee92d02ca38388cd6bb598ea203e45e2eef937624f22d6a99073ef65ab3e5915772ec815056ded691c1b08cc6c1fec3b3b244e83dd32f921c61ca055a42bdd669580610a5d08a8aace63d6d3cafc4b29c414d2ab349012bf5a6d5c425e53f82eb01a474a0590a296d569ff84c8d36aeaf6ce539f35eb38184c53ecb0c6e7e9b1afaca39e6ac8b470d6bb0f7d74edc8fb7dbc23ce429b8b95672f772d15f47eb53da7cea010fd28047241d391d6c9be12969533aaa32a5eac5821d8ed023bed25e369485b3d37ec7311fa98b866f506ead0efba30f55608a69c87f7bfae798fc2dde114de124588b603cfafb0a281f90c6e9959bc88a0b3640f0ac37716ca4e7a86c3581f93cdbc345a7094d54abdaffc44984dd4ff2dcd30f844d964b0676adfb4ea26818d7ad9a0fe7fa1b95e7e6d48032816c7180243e306b44a8bedb73ce9e2e3ca91f063b87fc2a1cc76e3c09f1686648726bf8dd5e0470cbc7366553746cdc38a11233019627a473518d07267637f1b86ed98717aea45990c7b88a8c6625680276e580e4ffaa31dbedbb1b429a59a3b667990bd0b775029d90fb248230dbb02fa8bfc509f06d50f1d85742ee44d1310913c1d0f51f09319fb3fdf6caceb53d95f7da36418ef1cfca626113f0455ba8c6560d6795754c602affee35c9e56792f8876294e4be7192f41476efea1853415a50fd305741b7ee3b0ee6b3d2345573b96633ba4b7cbcd712af2581295922525accbfbdc48c0fd8c66fe7426010eac5dd446340b11f4c077e3e5f4917ad79ce7bf495fc37bf2bb82322fef5f35c0df1751a62f3ba9b79a45690c99344a0e8213f6635766b2195d618ae81752a88ea957902ba9485b4195e0f6dcb2ab3826400425d934f9daaad669ace0572987df9247308c5b86da96064e65799a75e30187a40304a0522f1617447262068f1abe26fc45c3823867d9da26fca30cfe71e7218dad2e1b0f10fa7431517cd86c5d94675a5b96cdc0a5265a939dc3134956a2baa6789468db7d654209ac6c0dfaf1b4015e2bd0288ae92d0fd67f24ecab581c139dfdca12b4e4b217905c573becb4df2c02b5b50cfb09e65c517486b82a4fbada8be5398e9a510feca65e2d2e463779fc6e81ea02e84f5abb9644cdf47b11d1fe668dc99d3cb2ae7bb837925e845357b9b0c6d28ee77a7fc26a32d5b1e86ca35938d3da47e39fb9c25dbd7fd6e7afd1d2da328930139a0d89f136d4a6c74eec26f62b8f59767853856e45a7431c8bed116685b3530d9ad92977230b5fc4718a08a80e488e9e6ae14a50da5330d75ec6e45136f46759d2f2b7e3bb5623a6a6a122ae2205515819aee6969962f944453eaaab9fd15f35718b41aa4a22ee40d0dcb0ee48f40848aaeac0660e256cd9acac22e114d1a2b8d6218200e45e2137a08cef68d7bb8d34023956e8e5326c0fb8131e0d28fa1bb2bbb9c23416d085203ac7efbe3fd2c45deb9cff579053f26415a3933909899ea6896e0b93cc706c329bf20561ce5764593d165d6a95272a92d28a0186ddb617e824cbddbdffa6900009886c5ebf99d70302f86272599e12d52ec4def09b0f7ffeae6c2aec4f15926b79d4f67fa52d6679d49899f0efaafba7d5fa4afa3d5f9b6b6a39cb69543a38bdf427d5d0afe477cf00555c5ca7136b948550a25a4e3e8437560426b45d73877ae6e0d9dbb58e5b1a732f5341ccd2a8cb344ff8b3d9cc4dac99ae8fdd724c0e326a8543d085d3cb3adf48f5ee8aa14c76206224e17aa37be3deb13826dfa89b4fda335126e6b524d2ceed66f563ebed3cf6c688352c5af4f40edc60538cf231ddf7daa1cc3b44092bac2fea14b1ee3ce2b4a2224b550d936a84462f9d1ba39c4806d0490bce72641c0bcc77b7ffda6b5ee69d503032f6e24d874cecdd8e81d282aee527ff51ef6bfb9b3b5c3a143b9344df358a2114cc94e1ea5e4ad6f811c8628f0850c42a29a9d00d9b13891a7d5bc9e475427869a816b6d48f2fddbde3260c79d361d7c4da9c4d19e6f103fcb3be8c14add89ba33eccf14ec2c08f3159fbd737de887534962123f01861e434335a364bb8ba0b64e5a1f627fc208916729af6b75b4623433243c6001f1dd484b6689a1f7becc883d8e1651308bf18f9ea66bd01280a332a0942e5c4290112791080f916bf85881b4e0ff6c585d1214b869194dd1975ab3a7db20da3f473fab68636761ca186409e9b797ab6edd93436a02f0dbe64906a3f5e553e5445ac3dc3887d48f529b25ddd712a3b3e8ecd5b1621110bead60528ecbf2be487dd35d210fb918b95cdf250f96ca126b45d70720b995bcd0ccff4caf4d92a807deab6da29eb75de052342594dc8d0333e192edff986b0f7bbead711d0cd0253cd32f9c404e776f8977a5a3e8edcc3c019f7a3f0a98db3c714810c98347b42cee9b0341a2d442f2a9c16ce2485b394cf901b05b1f9c69fd40b42386039cb5f758ec1ed103411196ff102568482de9daeffcc89720ebd735dc2f44c9badfaa8e1bb7064672b657feb0ea3825971ae4098eaebde5e86018a66daef9a3a167668822518c79df4f351c6e4d5cc4e77872a4cbc33d2e546c5b8a0fc5f710b1469d558c3abdb64d68216506fe3450b0ebb4134ef8d6b8ce65ed7587c474f98130143f828a4833147035d07d2720b3282e0b439c1e831c2c441d8886537992e9402974e569e712161487b0f6f2e1a49d78743afc6ad87d27ec6347cae4f2f10ccb2e5dbffb6d12db965e597940c1b0a08b21b899fba0f8846d76a25ddbf79ab2ef9d75efc7531b82c3cd292fc9fa22064c95c2c2d33872d2bf6a6bf32ecdbf84e2e84a26ba3a41f2f5590844a4ebaa2094f813305be9eaaf45b1e924352d91a5e1e2cb794f1cf8525cc49880b9b8fefda7aebf6a37cff96c0273db6ca9719b7f093d131b14bcf1292e138d61f94faff20b86c907f46a2dd0f8eea09212af80f81ba4d2b6cd907569caf5fd81ce828f4e4f5cfe96082c4d54e3d4017797a16701450a0065df0a0e59c6758ee1701d06be622f8087ef9c6cfb7d8983a20471e45b035ee582e34e2e748fbb8f42aec7838c90d7d4e3b2fd3a8c290553a7400995aa82dc598f473eb4a5afc0f2aa561ad0c81f6ee236acd12e74fca70cf6d9a3408c93397a367d58c1f84d862fff2cf0f7217d0208cbb6ce73d528709de62f16997fa8f4ada16e40eb118a1d5ace2754629c11e62c3bb99829ea6df4d4c6f225f8b700ba24f65ff83a3926b53b50c9d9168f622df46ae38e27813d9935e0a1733c46b1c48d5a7d8962ddaf051d9cd99bc9e6b8463614db7fdc9d931b5441857f534ca7f2efb526c56d6ee28fedb0b77ae7bee1f684df7f64b16140f0c22cc6984d6ef8cd68b59c5eaef3ace284fbafcd3881e55e98af13c4f26e727cd32ddb23be7e14fa41d214597bac2099f7c10ed9695cdda82aa8b001928ac019cb4549bf78ca19e6640f91794a92bd8e1c41dba0ba715e961b4266000d2a832548b72f5f9c00ec5ef16c7eefe59ebacd2434179ccb6e87e6d588c989751615c61c8378cfea475af1e762b2d8e4885ce97780c7c3a411e3d3e11879eb68d784d1e84fb118512dca6fa61798dc73b038b76e1588a2c673d8b9542097587ca7afc9030748649c062ce80dbbbe0f10eb4e56c90fdad38988ec74976092f05c22481af84c6a8920acdef27ce04f1d62c1f69b60092d3fafe834cb333b9f0174b310cbb412ee5920d9a1ad6fd3ec67c71e25e9818bd5c585f50da837a07595bab177785f3e7d3b3c31cef879ad6c14ee1071ffdedc7d8b15ca04ee02463c322a648ad13c0a609fd18501b06ef849257b6d70cd9b89d7c90dc817188c7c3beede3e66cf05a3e342a1ff7b6efbf", 0x2, 0x0, 0xff}, 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xce, &(0x7f0000003d40), &(0x7f0000003d80)=0x4) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003dc0)={0x0, "11898777c3e5a81e0709caca642f8b74"}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000004dc0)={r7, 0x2, 0x9, 0x1}) close(r0) read(r4, &(0x7f00000051c0)=""/72, 0x48) sendmsg(r6, &(0x7f0000005400)={&(0x7f0000005240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x3}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000052c0)="e367878f7d0c6cb62522f25e6a0a259b19323d93aab685c2c8dfbf4e892f79608536213e8f4a76bca330f021c47b98b02b529d86369b6951528da3721e487f50d452d38a2713bd641644bc0c7cdbce493290ba9a11cf47881f385584eb37b969fde5cfa86cc6e42ea6222153806958fce18cadae28b10fbbaa5612bd4874e140e1fbf4ed2cc40733fd1ec82a422e8724efb3a74880c0d1fff7e022f58c576f81619da6972ce1e9cea627ad3b66661832f771", 0xb2}, {&(0x7f0000005380)=')', 0x1}], 0x2}, 0x2000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000055c0)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005580)={&(0x7f0000005480)={0xec, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @CTA_TUPLE_REPLY={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040014}, 0x20000000) r8 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r8, &(0x7f0000005600)={0xa, 0x4e22, 0x7fffffff, @local, 0x4}, 0x1c) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000005740)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005700)={&(0x7f0000005680)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2fe}]}]}, 0x68}}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bind$can_raw(0xffffffffffffffff, &(0x7f00000058c0), 0x10) 928.107087ms ago: executing program 3 (id=2794): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x50) 818.204864ms ago: executing program 3 (id=2795): unshare(0x26020480) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x168, 0x30, 0x51b, 0x0, 0x0, {}, [{0x154, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_vlan={0xf4, 0xc, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x289}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xae, 0x6, "34ddf61265e3758b86c4a56a6d33167acf3a14755cbf49fec1df7331b59ffa977a033e65c77bbc8b62cc13bbd03db31ea4b55b33ca184827032925d6b5665a23d98ccba1d1032ea4af4fd076eaca70e93a968238aefb2c44c6311c9122cc83b19c78a3d9f3627538d42c10ee71ab3324e0b735eb68263748afb758e7276742623774d39227d3692a657086366b379e29c16408a97101ca153fe7bed0d175545e9bd465e9851c155e17b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x168}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x20040100}, 0x806) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000001180)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000001680)=ANY=[@ANYBLOB="60010000987a9624bc25a7d5fdc2add19b222c1838e38083fe064a5d877c0c66be94ddb70330e7292cbb208b2679246dcbe42328baf832fd2a5c6922f6879b035e8839d48184f7be4265b6941790b17540b7453914e52fa644792bba79934497bddf9c25332a8cd39b23befaa40c9703be1ab6ff73801e64c8ad5b5333251db8e101379533dd28b25f5d46b98b05a0a11eaded7fd398", @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="44013080c000018008000100000000000c00000028000380080002000000000006000300ffff000006000100030000000c00040000000000000000000500020000000000080001000300000050000380060001000300000006000100ffff000006000300ffff000006000300a0aa00000600010003000000080002000300000006000100020000000c00040000000000000000000600010000000000180003800c0004000000000000000000060001003e00000014000400726449e5f3d29320c717b9e80caf5b30240003000723baa5d53b4417fdcc2ad3886e2c0a8ef6c44ca5464a189882f79dfdf80174240001800500020002000000080001000200000008000100000000000000000001000000240003001eb9eb9d94af704de76f00d0a3eefb2445731fb807e98716c9abd9"], 0x160}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x810) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r6, r7+60000000}, &(0x7f0000000380)) r8 = socket(0x2, 0x80805, 0x0) sendmmsg(r8, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c, 0x8}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r9}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) bind$vsock_stream(r1, &(0x7f0000000740), 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc00180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000c284d9f0eb"], 0x0) 136.965014ms ago: executing program 4 (id=2796): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008081) 40.514651ms ago: executing program 2 (id=2730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000000}, 0x10}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000b00400b0200008d416cfa6fc2313e5206d8da3f8ac06e2eab20a2e1620d7b21da7921be"], 0x48}}, 0x2400c808) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r5, 0x0, 0x9}, 0x18) 0s ago: executing program 4 (id=2797): r0 = socket$netlink(0x10, 0x3, 0xf) getsockname(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0xf, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0xf) (async) getsockname(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket(0xf, 0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) kernel console output (not intermixed with test programs): netdevsim1: renamed from eth1 [ 293.164782][T13444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.174884][T13444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.263292][T13444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.289411][T13444] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.302798][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.310025][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.327767][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.334960][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.687762][T13444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.755158][T10397] wlan1: Trigger new scan to find an IBSS to join [ 293.764453][T13444] veth0_vlan: entered promiscuous mode [ 293.782643][T13444] veth1_vlan: entered promiscuous mode [ 293.799886][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 293.816960][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2141'. [ 293.821555][T13444] veth0_macvtap: entered promiscuous mode [ 293.841958][T13444] veth1_macvtap: entered promiscuous mode [ 293.872539][T13444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.893732][T13444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.912501][T13444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.924254][T13444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.934602][T13444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.949833][T13444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.995795][ T5843] Bluetooth: hci4: command tx timeout [ 294.144722][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.161970][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.173689][T13559] syzkaller1: entered promiscuous mode [ 294.188140][T13559] syzkaller1: entered allmulticast mode [ 294.265998][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.275705][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.901064][T13583] delete_channel: no stack [ 295.319321][T13607] tipc: Started in network mode [ 295.331103][T13607] tipc: Node identity ac14142f, cluster identity 4711 [ 295.356553][T13607] tipc: New replicast peer: 0.0.0.0 [ 295.363142][T13607] tipc: Enabled bearer , priority 10 [ 295.574253][T13612] xt_socket: unknown flags 0x3c [ 295.799478][T13624] __nla_validate_parse: 66 callbacks suppressed [ 295.799500][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2163'. [ 295.890134][T13627] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2164'. [ 296.242112][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.360161][T10479] tipc: Node number set to 2886997039 [ 296.708637][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 296.789987][T10387] wlan1: Trigger new scan to find an IBSS to join [ 297.557685][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 297.607515][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 297.768646][T13653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2171'. [ 297.781928][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.833560][T10475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.846613][T10479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.991534][T13660] netlink: 'syz.2.2174': attribute type 4 has an invalid length. [ 298.034921][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.126982][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 298.191752][T13664] netlink: 'syz.4.2173': attribute type 11 has an invalid length. [ 298.265372][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.402103][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.412614][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.423750][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.437586][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.454055][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.494525][T13675] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 298.522532][T13681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2178'. [ 298.735942][ T66] bridge_slave_1: left allmulticast mode [ 298.756710][ T66] bridge_slave_1: left promiscuous mode [ 298.773096][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.796254][ T66] bridge_slave_0: left allmulticast mode [ 298.802544][ T66] bridge_slave_0: left promiscuous mode [ 298.816067][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.932770][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 299.384834][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.396378][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.407387][ T66] bond0 (unregistering): Released all slaves [ 299.748562][ T36] wlan1: Trigger new scan to find an IBSS to join [ 299.760092][ T124] block nbd1: Possible stuck request ffff8880255f7000: control (read@0,1024B). Runtime 180 seconds [ 299.771620][ T124] block nbd1: Possible stuck request ffff8880255f71c0: control (read@1024,1024B). Runtime 180 seconds [ 299.783313][ T124] block nbd1: Possible stuck request ffff8880255f7380: control (read@2048,1024B). Runtime 180 seconds [ 299.796313][ T124] block nbd1: Possible stuck request ffff8880255f7540: control (read@3072,1024B). Runtime 180 seconds [ 300.105702][T13728] netlink: 'syz.4.2196': attribute type 10 has an invalid length. [ 300.159610][T13728] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 300.209385][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 300.341893][T13736] netlink: 'syz.4.2198': attribute type 3 has an invalid length. [ 300.366879][T13736] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2198'. [ 300.435571][ T66] hsr_slave_0: left promiscuous mode [ 300.445931][ T66] hsr_slave_1: left promiscuous mode [ 300.474583][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.506284][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.534068][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.549156][ T5840] Bluetooth: hci4: command tx timeout [ 300.557445][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.639691][ T66] veth1_macvtap: left promiscuous mode [ 300.645314][ T66] veth0_macvtap: left promiscuous mode [ 300.678881][T10389] wlan1: Creating new IBSS network, BSSID fa:22:00:b6:f8:bc [ 300.683058][ T66] veth1_vlan: left promiscuous mode [ 300.693063][ T66] veth0_vlan: left promiscuous mode [ 300.760408][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.774150][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.783604][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.796256][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.804811][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.205069][ T66] team0 (unregistering): Port device team_slave_1 removed [ 301.247760][ T66] team0 (unregistering): Port device team_slave_0 removed [ 301.782785][T13682] chnl_net:caif_netlink_parms(): no params data found [ 301.991442][T13766] SET target dimension over the limit! [ 302.095071][T13770] netlink: 'syz.4.2206': attribute type 1 has an invalid length. [ 302.122657][T13770] __nla_validate_parse: 2 callbacks suppressed [ 302.122676][T13770] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2206'. [ 302.138606][T13770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2206'. [ 302.162380][T13776] Cannot find del_set index 5 as target [ 302.222825][T13770] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2206'. [ 302.287436][T13780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.347596][T13784] pim6reg: entered allmulticast mode [ 302.360234][T13682] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.379264][T13682] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.388264][T13682] bridge_slave_0: entered allmulticast mode [ 302.400237][T13682] bridge_slave_0: entered promiscuous mode [ 302.424855][T13682] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.433528][T13682] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.442168][T13682] bridge_slave_1: entered allmulticast mode [ 302.481329][T13682] bridge_slave_1: entered promiscuous mode [ 302.628634][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 302.642658][T13682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.660159][T13682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.691508][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2216'. [ 302.789585][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 302.789992][T13682] team0: Port device team_slave_0 added [ 302.814064][T13682] team0: Port device team_slave_1 added [ 302.871281][ T5843] Bluetooth: hci3: command tx timeout [ 302.951296][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.967278][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.001537][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.036983][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 303.047234][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.065945][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.094079][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.125592][T13821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.135313][T13821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.145002][T13821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.155084][T13821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.165648][T13821] geneve3: entered promiscuous mode [ 303.171766][T13821] geneve3: entered allmulticast mode [ 303.363049][T13682] hsr_slave_0: entered promiscuous mode [ 303.369711][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 303.379991][T13682] hsr_slave_1: entered promiscuous mode [ 303.386360][T13682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.405734][T13682] Cannot create hsr debugfs directory [ 303.517352][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 303.543480][T13753] chnl_net:caif_netlink_parms(): no params data found [ 303.751402][T13753] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.763108][T13753] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.772072][T13753] bridge_slave_0: entered allmulticast mode [ 303.783974][T13753] bridge_slave_0: entered promiscuous mode [ 303.815782][T13753] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.839155][T13753] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.846646][T13753] bridge_slave_1: entered allmulticast mode [ 303.862492][T13753] bridge_slave_1: entered promiscuous mode [ 303.983483][T13753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.000923][T13753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.005304][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 304.093585][T13753] team0: Port device team_slave_0 added [ 304.109306][T13753] team0: Port device team_slave_1 added [ 304.176395][T13753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.199499][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.240657][T13753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.267786][T13753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.268584][T13865] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 304.288339][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.319533][T13753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.359883][T13865] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.395158][T13866] bond6: (slave veth13): Enslaving as an active interface with a down link [ 304.530880][T13876] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2237'. [ 304.535850][T13865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.562666][T13865] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 304.714011][ T5843] Bluetooth: hci4: command 0x041b tx timeout [ 304.744518][T13753] hsr_slave_0: entered promiscuous mode [ 304.782220][T13753] hsr_slave_1: entered promiscuous mode [ 304.788925][T13753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.798576][T13753] Cannot create hsr debugfs directory [ 304.950710][ T5843] Bluetooth: hci3: command tx timeout [ 304.985577][T13887] x_tables: unsorted entry at hook 1 [ 305.292294][T13682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 305.373773][T13682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.403595][T13682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.453466][T13682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.714559][T13753] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.743317][T13924] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 305.843516][T13753] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.880756][T13930] team0: Cannot enslave team device to itself [ 305.949847][T13753] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.034785][T13682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.074754][T13753] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.129809][T13938] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 306.143396][T13938] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 306.155003][T13938] gretap1: entered promiscuous mode [ 306.161043][T13938] gretap1: entered allmulticast mode [ 306.194796][T13682] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.233409][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.240714][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.294187][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.301488][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.446356][T13753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.527286][T13753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.555389][T13753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.599265][T13753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.792436][ T5852] Bluetooth: hci4: command 0x041b tx timeout [ 306.904891][T13753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.966093][T13753] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.005329][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.012577][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.031142][ T5852] Bluetooth: hci3: command tx timeout [ 307.075496][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.082766][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.186632][T13682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.283896][T13981] __nla_validate_parse: 3 callbacks suppressed [ 307.283916][T13981] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2263'. [ 307.300674][T13682] veth0_vlan: entered promiscuous mode [ 307.324399][T13682] veth1_vlan: entered promiscuous mode [ 307.415832][T13682] veth0_macvtap: entered promiscuous mode [ 307.456151][T13682] veth1_macvtap: entered promiscuous mode [ 307.542980][T13682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.584131][T13682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.616096][T13682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.625732][T13682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.658637][T13682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.667439][T13682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.776438][T14003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.794845][T14004] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.902555][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.927165][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.973432][T13753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.995914][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.021392][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.130788][T13753] veth0_vlan: entered promiscuous mode [ 308.414319][T14015] team0 (unregistering): Port device C removed [ 308.425880][T14015] team0 (unregistering): Port device team_slave_1 removed [ 308.525490][T13753] veth1_vlan: entered promiscuous mode [ 308.623855][T13753] veth0_macvtap: entered promiscuous mode [ 308.643913][T13753] veth1_macvtap: entered promiscuous mode [ 308.680226][T13753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.701843][T13753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.726962][T13753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.760208][T13753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.783694][T13753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.808124][T13753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.957308][ T3464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.091917][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.104609][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.119066][ T5852] Bluetooth: hci3: command tx timeout [ 309.168589][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.176459][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.396867][ T3464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.485501][ T3464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.579969][ T3464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.819132][ T3464] bridge_slave_1: left allmulticast mode [ 309.824900][ T3464] bridge_slave_1: left promiscuous mode [ 309.832867][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.843194][ T3464] bridge_slave_0: left allmulticast mode [ 309.850886][ T3464] bridge_slave_0: left promiscuous mode [ 309.856616][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.343892][T14051] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2282'. [ 310.600757][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.654188][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.712264][ T3464] bond0 (unregistering): Released all slaves [ 310.846791][T14072] xt_ecn: cannot match TCP bits for non-tcp packets [ 310.908662][T14062] tipc: Enabled bearer , priority 0 [ 311.037591][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.050458][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.058982][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.068642][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.076756][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.199063][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.210005][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.218639][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.228137][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.236609][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.270409][T14067] syzkaller0: entered promiscuous mode [ 311.276049][T14067] syzkaller0: entered allmulticast mode [ 311.356858][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 311.564251][T14088] netlink: 212404 bytes leftover after parsing attributes in process `syz.2.2289'. [ 311.586604][T14089] sctp: [Deprecated]: syz.3.2288 (pid 14089) Use of int in max_burst socket option. [ 311.586604][T14089] Use struct sctp_assoc_value instead [ 311.609424][T14047] tipc: Resetting bearer [ 312.837188][T14102] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 312.846773][T14102] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2293'. [ 313.109466][ T5843] Bluetooth: hci3: command tx timeout [ 313.179076][T14047] tipc: Disabling bearer [ 313.270214][ T5843] Bluetooth: hci4: command tx timeout [ 313.477785][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 313.705696][T14120] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 313.720628][T14120] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2298'. [ 314.082469][T14136] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2301'. [ 314.134206][ T3464] hsr_slave_0: left promiscuous mode [ 314.144500][ T3464] hsr_slave_1: left promiscuous mode [ 314.152115][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.162544][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.176040][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.184306][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.215475][ T3464] veth1_macvtap: left promiscuous mode [ 314.221742][ T3464] veth0_macvtap: left promiscuous mode [ 314.227380][ T3464] veth1_vlan: left promiscuous mode [ 314.235253][ T3464] veth0_vlan: left promiscuous mode [ 314.717438][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 314.761480][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 315.063593][T14147] netlink: 'syz.4.2304': attribute type 29 has an invalid length. [ 315.188877][ T5843] Bluetooth: hci3: command tx timeout [ 315.348721][ T5843] Bluetooth: hci4: command tx timeout [ 315.353064][T14075] chnl_net:caif_netlink_parms(): no params data found [ 315.783995][T14075] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.793010][T14075] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.801622][T14075] bridge_slave_0: entered allmulticast mode [ 315.810364][T14075] bridge_slave_0: entered promiscuous mode [ 315.825026][T14175] tipc: Enabling of bearer rejected, failed to enable media [ 315.859398][T14075] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.866844][T14075] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.882108][T14075] bridge_slave_1: entered allmulticast mode [ 315.904156][T14075] bridge_slave_1: entered promiscuous mode [ 315.975687][T14075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.011069][T14079] chnl_net:caif_netlink_parms(): no params data found [ 316.037818][T14075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.149758][T14191] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2316'. [ 316.161377][T14075] team0: Port device team_slave_0 added [ 316.187175][T14191] bridge_slave_0: left allmulticast mode [ 316.193238][T14191] bridge_slave_0: left promiscuous mode [ 316.200266][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.218839][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 316.307045][T14075] team0: Port device team_slave_1 added [ 316.369185][T14202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 316.374259][ T3464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.407417][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 316.531460][T14075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.544797][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.605424][T14075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.698947][ T3464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.755378][T14075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.771451][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.814155][T14075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.922584][ T3464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.953925][T14079] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.962290][T14079] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.970619][T14079] bridge_slave_0: entered allmulticast mode [ 316.981135][T14079] bridge_slave_0: entered promiscuous mode [ 317.022689][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.039867][T14079] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.047674][T14079] bridge_slave_1: entered allmulticast mode [ 317.055317][T14079] bridge_slave_1: entered promiscuous mode [ 317.081100][T14230] pimreg3: entered allmulticast mode [ 317.133040][ T3464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.179859][T14075] hsr_slave_0: entered promiscuous mode [ 317.186424][T14075] hsr_slave_1: entered promiscuous mode [ 317.194356][T14075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.203063][T14075] Cannot create hsr debugfs directory [ 317.214399][T14079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.271447][ T5843] Bluetooth: hci3: command tx timeout [ 317.292234][T14237] xt_TCPMSS: Only works on TCP SYN packets [ 317.299965][T14238] xt_TCPMSS: Only works on TCP SYN packets [ 317.334537][T14079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.428101][ T5843] Bluetooth: hci4: command tx timeout [ 317.469090][T14240] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 317.513710][T14079] team0: Port device team_slave_0 added [ 317.555660][T14079] team0: Port device team_slave_1 added [ 317.594949][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 317.605497][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2332'. [ 317.647001][T14247] geneve2: entered promiscuous mode [ 317.654034][T14247] geneve2: entered allmulticast mode [ 317.693228][T14079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.703179][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.736111][T14079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.751138][T14079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.761944][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.793544][T14079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.816289][ T3464] bridge_slave_1: left allmulticast mode [ 317.822548][ T3464] bridge_slave_1: left promiscuous mode [ 317.831154][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.857035][ T3464] bridge_slave_0: left allmulticast mode [ 317.868921][ T3464] bridge_slave_0: left promiscuous mode [ 317.882423][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.317368][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.333000][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.345292][ T3464] bond0 (unregistering): Released all slaves [ 318.657182][T14079] hsr_slave_0: entered promiscuous mode [ 318.675556][T14079] hsr_slave_1: entered promiscuous mode [ 318.693927][T14079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.712735][T14079] Cannot create hsr debugfs directory [ 319.087140][T14291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 319.277167][T14297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2346'. [ 319.348144][ T5843] Bluetooth: hci3: command tx timeout [ 319.501766][ T3464] hsr_slave_0: left promiscuous mode [ 319.508045][ T5843] Bluetooth: hci4: command tx timeout [ 319.515735][ T3464] hsr_slave_1: left promiscuous mode [ 319.523581][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.531306][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.540566][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.548184][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.583409][ T3464] veth1_macvtap: left promiscuous mode [ 319.600298][ T3464] veth0_macvtap: left promiscuous mode [ 319.611807][ T3464] veth1_vlan: left promiscuous mode [ 319.626369][ T3464] veth0_vlan: left promiscuous mode [ 320.144427][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 320.154003][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2354'. [ 320.375633][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 320.434901][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 320.880388][T14308] tipc: Enabled bearer , priority 10 [ 321.061276][T14075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.124146][T14075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.164961][T14075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.170233][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 321.206718][T14075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.664276][T14075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.757863][T14075] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.783438][T14374] tipc: Enabled bearer , priority 0 [ 321.803012][T14374] syzkaller0: entered promiscuous mode [ 321.814582][T14374] syzkaller0: entered allmulticast mode [ 321.846811][T14374] tipc: Resetting bearer [ 321.871897][T14079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.889467][T10475] tipc: Node number set to 40779717 [ 321.899829][T14079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.913417][T14372] tipc: Resetting bearer [ 321.947299][T14372] tipc: Disabling bearer [ 321.961955][T14079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.973101][T14381] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2364'. [ 321.990742][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.998034][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.043516][T14079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.089218][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.096434][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.461460][T14079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.541845][T14079] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.584815][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.592080][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.642192][T14412] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 322.646293][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2372'. [ 322.697496][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.704737][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.866170][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 322.992673][T14433] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2375'. [ 323.075842][T14075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.240578][T14075] veth0_vlan: entered promiscuous mode [ 323.279277][T14440] netlink: 'syz.3.2377': attribute type 12 has an invalid length. [ 323.343780][T14075] veth1_vlan: entered promiscuous mode [ 323.416853][T14075] veth0_macvtap: entered promiscuous mode [ 323.470432][T14075] veth1_macvtap: entered promiscuous mode [ 323.512665][T14079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.530026][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 323.554959][T14075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.564556][T14451] veth0: entered promiscuous mode [ 323.574655][T14450] veth0: left promiscuous mode [ 323.607756][T14075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.642257][T14075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.658968][T14075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.675569][T14075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.701664][T14075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.859424][T14079] veth0_vlan: entered promiscuous mode [ 323.933114][T14079] veth1_vlan: entered promiscuous mode [ 323.995780][T14467] netlink: 'syz.3.2385': attribute type 7 has an invalid length. [ 324.030963][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.053127][T14467] netlink: 'syz.3.2385': attribute type 8 has an invalid length. [ 324.058181][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.145157][T14461] __nla_validate_parse: 2 callbacks suppressed [ 324.145179][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 324.225001][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.257364][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.391587][T14079] veth0_macvtap: entered promiscuous mode [ 324.424774][T14473] tipc: Enabled bearer , priority 0 [ 324.442100][T14079] veth1_macvtap: entered promiscuous mode [ 324.454012][T14480] netlink: 'syz.2.2387': attribute type 21 has an invalid length. [ 324.463502][T14480] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.494524][T14079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.526159][T14079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.554232][T14079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.570150][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 324.571887][T14079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.588647][T14079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.597634][T14079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.832282][T14491] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 324.857345][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.876665][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.983863][ T3485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.014699][T14472] tipc: Resetting bearer [ 325.545983][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.566330][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.581622][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.602388][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.623014][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.705906][T14500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2393'. [ 325.712624][T14501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2393'. [ 326.655013][T14472] tipc: Disabling bearer [ 326.669888][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.684994][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.697542][ T3485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.835464][ T3485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.032361][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 327.060569][T14516] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 327.114517][ T3485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.571846][ T3485] bridge_slave_1: left allmulticast mode [ 327.577563][ T3485] bridge_slave_1: left promiscuous mode [ 327.592763][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.645881][ T3485] bridge_slave_0: left allmulticast mode [ 327.668119][ T5843] Bluetooth: hci3: command tx timeout [ 327.734186][ T3485] bridge_slave_0: left promiscuous mode [ 327.758111][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.296657][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.314125][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.324979][ T3485] bond0 (unregistering): Released all slaves [ 328.574231][T14497] chnl_net:caif_netlink_parms(): no params data found [ 328.835211][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.844096][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.859508][T14497] bridge_slave_0: entered allmulticast mode [ 328.894323][T14497] bridge_slave_0: entered promiscuous mode [ 328.906274][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.914642][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.925343][T14497] bridge_slave_1: entered allmulticast mode [ 328.934863][T14497] bridge_slave_1: entered promiscuous mode [ 328.945621][ T3485] hsr_slave_0: left promiscuous mode [ 328.954380][ T3485] hsr_slave_1: left promiscuous mode [ 328.960340][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.967740][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.976126][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.983623][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.006227][ T3485] veth1_macvtap: left promiscuous mode [ 329.011839][ T3485] veth0_macvtap: left promiscuous mode [ 329.018548][ T3485] veth1_vlan: left promiscuous mode [ 329.024152][ T3485] veth0_vlan: left promiscuous mode [ 329.483132][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 329.525371][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 329.590603][T14552] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2408'. [ 329.748384][ T5843] Bluetooth: hci3: command tx timeout [ 329.829051][ T124] block nbd1: Possible stuck request ffff8880255f7000: control (read@0,1024B). Runtime 210 seconds [ 329.842005][ T124] block nbd1: Possible stuck request ffff8880255f71c0: control (read@1024,1024B). Runtime 210 seconds [ 329.854407][ T124] block nbd1: Possible stuck request ffff8880255f7380: control (read@2048,1024B). Runtime 210 seconds [ 329.869133][ T124] block nbd1: Possible stuck request ffff8880255f7540: control (read@3072,1024B). Runtime 210 seconds [ 330.032247][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.056844][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.070355][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.088115][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.099123][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.260204][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.282583][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.388541][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2409'. [ 330.433090][T14497] team0: Port device team_slave_0 added [ 330.443084][T14497] team0: Port device team_slave_1 added [ 330.639793][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.646809][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.769420][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.814888][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.838105][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.892755][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.906534][T14584] tipc: Enabled bearer , priority 10 [ 331.195657][T14497] hsr_slave_0: entered promiscuous mode [ 331.214619][T14497] hsr_slave_1: entered promiscuous mode [ 331.232997][T14497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.250773][T14497] Cannot create hsr debugfs directory [ 331.459056][ T3485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.537332][T14607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2419'. [ 331.685480][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2419'. [ 331.709902][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'. [ 331.731818][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2419'. [ 331.750880][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2419'. [ 331.762166][ T3485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.777234][T14602] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 331.827990][ T5852] Bluetooth: hci3: command tx timeout [ 331.928574][ T978] tipc: Node number set to 1 [ 332.002448][ T3485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.080582][T14624] netlink: 'syz.2.2424': attribute type 21 has an invalid length. [ 332.089311][T14629] netlink: 'syz.2.2424': attribute type 21 has an invalid length. [ 332.133559][T14627] syzkaller1: entered promiscuous mode [ 332.148629][T14627] syzkaller1: entered allmulticast mode [ 332.151121][ T5852] Bluetooth: hci4: command tx timeout [ 332.217192][ T3485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.266144][T14558] chnl_net:caif_netlink_parms(): no params data found [ 332.292641][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 333.030582][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.165467][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.188135][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.195448][T14558] bridge_slave_0: entered allmulticast mode [ 333.220441][T14558] bridge_slave_0: entered promiscuous mode [ 333.234405][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.258455][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.265787][T14558] bridge_slave_1: entered allmulticast mode [ 333.283858][T14558] bridge_slave_1: entered promiscuous mode [ 333.288881][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 333.352485][ T3485] bridge_slave_1: left allmulticast mode [ 333.415122][ T3485] bridge_slave_1: left promiscuous mode [ 333.436820][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.473556][ T3485] bridge_slave_0: left allmulticast mode [ 333.489333][ T3485] bridge_slave_0: left promiscuous mode [ 333.504280][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.642888][T14672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 333.913128][ T5852] Bluetooth: hci3: command tx timeout [ 334.231528][ T5852] Bluetooth: hci4: command tx timeout [ 334.250942][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.266174][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.276893][ T3485] bond0 (unregistering): Released all slaves [ 334.371635][T14687] syzkaller1: entered promiscuous mode [ 334.377248][T14687] syzkaller1: entered allmulticast mode [ 334.393269][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.492915][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.575331][T14558] team0: Port device team_slave_0 added [ 334.663371][T14558] team0: Port device team_slave_1 added [ 334.901025][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.919192][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.988862][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.096215][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.129696][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.156854][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.213202][ T3485] hsr_slave_0: left promiscuous mode [ 335.221960][ T3485] hsr_slave_1: left promiscuous mode [ 335.229195][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.237227][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.250327][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.268173][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.320636][ T3485] veth1_macvtap: left promiscuous mode [ 335.326326][ T3485] veth0_macvtap: left promiscuous mode [ 335.349578][ T3485] veth1_vlan: left promiscuous mode [ 335.358759][ T3485] veth0_vlan: left promiscuous mode [ 335.953509][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 336.002871][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 336.320648][ T5852] Bluetooth: hci4: command tx timeout [ 336.423805][T14723] bridge0: left promiscuous mode [ 336.484627][T14497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.518564][T14497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.554121][T14497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.634455][T14497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.721271][T14558] hsr_slave_0: entered promiscuous mode [ 336.735396][T14558] hsr_slave_1: entered promiscuous mode [ 336.744102][T14558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.770763][T14558] Cannot create hsr debugfs directory [ 337.135268][T14761] netlink: 'syz.4.2456': attribute type 11 has an invalid length. [ 337.148562][T14761] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2456'. [ 337.385116][T14497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.513703][T14497] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.547664][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.554849][T10397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.571453][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.578760][T10397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.715414][ T30] audit: type=1800 audit(1751573362.461:7): pid=14775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2461" name="memory.events" dev="tmpfs" ino=3119 res=0 errno=0 [ 337.761181][T14558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.771900][ T30] audit: type=1804 audit(1751573362.491:8): pid=14775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2461" name="/newroot/608/memory.events" dev="tmpfs" ino=3119 res=1 errno=0 [ 337.822826][T14558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.843074][T14558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.856233][T14558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.028413][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.074505][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.085689][T14795] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 338.100552][T14795] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 338.101741][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.115605][T10389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.148110][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.155345][T10397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.229621][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.375121][T14497] veth0_vlan: entered promiscuous mode [ 338.390417][ T5852] Bluetooth: hci4: command tx timeout [ 338.420531][T14497] veth1_vlan: entered promiscuous mode [ 338.561179][T14497] veth0_macvtap: entered promiscuous mode [ 338.586321][T14497] veth1_macvtap: entered promiscuous mode [ 338.652534][T14811] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 338.670629][T14497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.716680][T14497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.749727][T14497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.792645][T14497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.828055][T14497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.847077][T14497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.897847][T14817] netlink: 'syz.3.2468': attribute type 10 has an invalid length. [ 338.924318][T14819] bond0: (slave bond_slave_0): Releasing backup interface [ 338.950291][T14809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2468'. [ 338.951245][T14819] bond_slave_0: left promiscuous mode [ 338.969704][T14819] bond_slave_0: left allmulticast mode [ 338.991332][T14819] bond0: (slave bond_slave_1): Releasing backup interface [ 339.007161][T14819] bond_slave_1: left promiscuous mode [ 339.013196][T14819] bond_slave_1: left allmulticast mode [ 339.024664][T14819] team_slave_0: left promiscuous mode [ 339.068911][T14819] team0: Port device team_slave_0 removed [ 339.078344][T14819] team_slave_1: left promiscuous mode [ 339.095832][T14819] team0: Port device team_slave_1 removed [ 339.111181][T14819] batadv_slave_1: left allmulticast mode [ 339.116887][T14819] batadv_slave_1: left promiscuous mode [ 339.122843][T14819] bridge0: port 1(batadv_slave_1) entered disabled state [ 339.281999][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.419136][T10389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.455043][T10389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.625763][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.637825][T14558] veth0_vlan: entered promiscuous mode [ 339.666792][T14558] veth1_vlan: entered promiscuous mode [ 339.709710][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.732682][T14858] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2478'. [ 339.783301][T14858] 0ªX¹¦D: entered promiscuous mode [ 339.792341][T14858] 0ªX¹¦D: left allmulticast mode [ 339.843631][T14858] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2478'. [ 339.858974][T14858] 1ªX¹¦D: renamed from 30ªX¹¦D [ 339.880930][T14858] 1ªX¹¦D: left promiscuous mode [ 339.885962][T14858] 1ªX¹¦D: entered allmulticast mode [ 339.903802][T14858] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 339.951352][T14558] veth0_macvtap: entered promiscuous mode [ 340.045778][T14558] veth1_macvtap: entered promiscuous mode [ 340.086537][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.118898][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.143973][T14558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.169028][T14876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2484'. [ 340.175539][T14558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.188068][T14558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.196803][T14558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.361178][T10397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.376875][T10397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.417106][T14882] netlink: 'syz.2.2486': attribute type 1 has an invalid length. [ 340.473168][T10397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.506262][T10389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.529509][T10389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.719534][ T5852] Bluetooth: hci0: command tx timeout [ 340.745128][T10397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.825485][T10397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.024607][T10397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.154134][T10397] bridge_slave_1: left allmulticast mode [ 341.160928][T10397] bridge_slave_1: left promiscuous mode [ 341.166707][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.177719][T10397] bridge_slave_0: left allmulticast mode [ 341.183632][T10397] bridge_slave_0: left promiscuous mode [ 341.189598][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.289993][T14889] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2490'. [ 341.453048][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2489'. [ 342.003533][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.032675][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.048732][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.082250][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.095579][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.143615][T10397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.157354][T10397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.172962][T10397] bond0 (unregistering): Released all slaves [ 342.744621][T10397] hsr_slave_0: left promiscuous mode [ 342.751327][T10397] hsr_slave_1: left promiscuous mode [ 342.757170][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.767301][T10397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.776843][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.784811][T10397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.807741][T10397] veth1_macvtap: left promiscuous mode [ 342.813886][T10397] veth0_macvtap: left promiscuous mode [ 342.820319][T10397] veth1_vlan: left promiscuous mode [ 342.825605][T10397] veth0_vlan: left promiscuous mode [ 343.262601][T10397] team0 (unregistering): Port device team_slave_1 removed [ 343.303911][T10397] team0 (unregistering): Port device team_slave_0 removed [ 343.522637][T14921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2492'. [ 343.912246][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.934771][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.943911][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.953090][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.962356][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.149462][ T5843] Bluetooth: hci3: command tx timeout [ 344.204218][T14932] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2497'. [ 344.322930][T14912] chnl_net:caif_netlink_parms(): no params data found [ 344.354734][T14941] netlink: 'syz.4.2498': attribute type 1 has an invalid length. [ 344.455241][T14941] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.739037][T14912] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.746737][T14912] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.768555][T14912] bridge_slave_0: entered allmulticast mode [ 344.776535][T14912] bridge_slave_0: entered promiscuous mode [ 344.803685][T14912] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.823789][T14912] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.843412][T14912] bridge_slave_1: entered allmulticast mode [ 344.861921][T14912] bridge_slave_1: entered promiscuous mode [ 344.972420][T14912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.994192][T14967] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 345.027402][T10397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.083465][T14912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.319937][T10397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.365403][T14976] bond20: (slave bridge7): making interface the new active one [ 345.374553][T14976] bond20: (slave bridge7): Enslaving as an active interface with an up link [ 345.439611][T14912] team0: Port device team_slave_0 added [ 345.485699][T10397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.507265][T14912] team0: Port device team_slave_1 added [ 345.673502][T10397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.709065][T14994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2512'. [ 345.745283][T14912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.756669][T14912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.784467][T15001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2512'. [ 345.809292][T14912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.837142][T14928] chnl_net:caif_netlink_parms(): no params data found [ 345.881086][T14912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.909145][T14912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.955804][T14912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.007957][ T5843] Bluetooth: hci4: command tx timeout [ 346.229071][ T5843] Bluetooth: hci3: command tx timeout [ 346.637531][T15044] netlink: 'syz.3.2521': attribute type 8 has an invalid length. [ 347.610166][T15050] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2522'. [ 348.062967][T14912] hsr_slave_0: entered promiscuous mode [ 348.072262][T14912] hsr_slave_1: entered promiscuous mode [ 348.078754][T14912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.085357][ T5843] Bluetooth: hci4: command tx timeout [ 348.086321][T14912] Cannot create hsr debugfs directory [ 348.134629][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.142763][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.152252][T14928] bridge_slave_0: entered allmulticast mode [ 348.160954][T14928] bridge_slave_0: entered promiscuous mode [ 348.240020][T14928] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.247171][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.282045][T14928] bridge_slave_1: entered allmulticast mode [ 348.301116][T14928] bridge_slave_1: entered promiscuous mode [ 348.309199][ T5843] Bluetooth: hci3: command tx timeout [ 348.333111][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2526'. [ 348.361971][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2526'. [ 348.529227][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.559682][T15068] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2529'. [ 348.582419][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.606721][T10397] bridge_slave_1: left allmulticast mode [ 348.612830][T10397] bridge_slave_1: left promiscuous mode [ 348.637427][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.674096][T10397] bridge_slave_0: left allmulticast mode [ 348.684827][T10397] bridge_slave_0: left promiscuous mode [ 348.698173][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.733542][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.752906][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.765161][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.784785][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.804294][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.822463][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.836017][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.851576][T15075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.921722][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.954006][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.009442][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.048024][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.473446][T10397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.495024][T10397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.507468][T10397] bond0 (unregistering): Released all slaves [ 349.759556][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 349.775257][T14928] team0: Port device team_slave_0 added [ 349.801845][T14928] team0: Port device team_slave_1 added [ 349.990432][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.016823][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.046848][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.139367][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2539'. [ 350.155529][ T5843] Bluetooth: hci4: command tx timeout [ 350.169770][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.187359][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.235849][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.388762][ T5843] Bluetooth: hci3: command tx timeout [ 350.686168][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 350.814547][T10397] hsr_slave_0: left promiscuous mode [ 350.839919][T10397] hsr_slave_1: left promiscuous mode [ 350.846456][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.862092][T10397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.873017][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.887596][T10397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.915166][T10397] veth1_macvtap: left promiscuous mode [ 350.922121][T10397] veth0_macvtap: left promiscuous mode [ 350.929065][T10397] veth1_vlan: left promiscuous mode [ 350.934387][T10397] veth0_vlan: left promiscuous mode [ 350.994305][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 351.307625][T15149] netlink: 'syz.2.2548': attribute type 4 has an invalid length. [ 351.493334][T10397] team0 (unregistering): Port device team_slave_1 removed [ 351.533070][T10397] team0 (unregistering): Port device team_slave_0 removed [ 351.921139][T15132] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 351.932416][T15132] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.943019][T15132] gretap1: entered promiscuous mode [ 351.951583][T15132] gretap1: entered allmulticast mode [ 351.964779][T14928] hsr_slave_0: entered promiscuous mode [ 351.979679][T14928] hsr_slave_1: entered promiscuous mode [ 351.986109][T14928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.994687][T14928] Cannot create hsr debugfs directory [ 352.233933][ T5843] Bluetooth: hci4: command tx timeout [ 352.533853][T14912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.612744][T15174] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2555'. [ 352.620106][T14912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.653431][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2552'. [ 352.710509][T14912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.745197][T14912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.803347][T15163] syzkaller1: entered promiscuous mode [ 352.812844][T15163] syzkaller1: entered allmulticast mode [ 352.824541][T15175] dvmrp1: left allmulticast mode [ 353.328482][T14912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.386007][T14912] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.425663][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.432911][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.464930][T14928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.504177][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.511408][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.522427][T14928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.564314][T14928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.616791][T14928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.975656][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.034839][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.065213][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.072444][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.104041][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.111230][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.411823][T14912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.561763][T14912] veth0_vlan: entered promiscuous mode [ 354.600719][T14912] veth1_vlan: entered promiscuous mode [ 354.681337][T14912] veth0_macvtap: entered promiscuous mode [ 354.711726][T14912] veth1_macvtap: entered promiscuous mode [ 354.765727][T14912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.791572][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2579'. [ 354.802235][T14912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.837719][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.849110][T14912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.865699][T14912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.876373][T14912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.887364][T14912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.045494][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.069472][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.135488][T15290] vlan0: entered promiscuous mode [ 355.141768][T15290] hsr_slave_1: entered promiscuous mode [ 355.147491][T15290] vlan0: entered allmulticast mode [ 355.152829][T15290] hsr_slave_1: entered allmulticast mode [ 355.167001][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 355.189668][T14928] veth0_vlan: entered promiscuous mode [ 355.280507][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.295696][T14928] veth1_vlan: entered promiscuous mode [ 355.306978][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.514616][T14928] veth0_macvtap: entered promiscuous mode [ 355.526563][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'. [ 355.529218][T14928] veth1_macvtap: entered promiscuous mode [ 355.576292][T15302] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.586180][T15299] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2585'. [ 355.611669][T15303] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2585'. [ 355.653217][T15302] netlink: 'syz.4.2586': attribute type 29 has an invalid length. [ 355.694812][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.704798][T15302] netlink: 'syz.4.2586': attribute type 2 has an invalid length. [ 355.737139][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.765693][T15302] netlink: 'syz.4.2586': attribute type 29 has an invalid length. [ 355.785972][T15302] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2586'. [ 355.786959][T14928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.851567][T14928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.868271][T14928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.877042][T14928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.070072][T10387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.094327][T10387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.124581][T15316] Bluetooth: MGMT ver 1.23 [ 356.194277][T15319] netlink: 'syz.4.2589': attribute type 1 has an invalid length. [ 356.235730][T10397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.288878][T10397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.419909][ T3485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.555296][ T3485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.672516][ T3485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.007495][ T3485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.367397][T15333] bridge8: entered promiscuous mode [ 357.372934][T15333] bridge8: entered allmulticast mode [ 357.384251][ T3485] bridge_slave_1: left allmulticast mode [ 357.409126][ T3485] bridge_slave_1: left promiscuous mode [ 357.414948][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.463986][ T3485] bridge_slave_0: left allmulticast mode [ 357.482302][ T3485] bridge_slave_0: left promiscuous mode [ 357.496208][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.687181][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.700135][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.719579][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.731556][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.758471][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.004972][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.016070][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.027725][ T3485] bond0 (unregistering): Released all slaves [ 358.566421][ T3485] hsr_slave_0: left promiscuous mode [ 358.572529][ T3485] hsr_slave_1: left promiscuous mode [ 358.578606][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.586059][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.594474][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.602294][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.626737][ T3485] veth1_macvtap: left promiscuous mode [ 358.633813][ T3485] veth0_macvtap: left promiscuous mode [ 358.640152][ T3485] veth1_vlan: left promiscuous mode [ 358.645453][ T3485] veth0_vlan: left promiscuous mode [ 359.084456][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 359.123932][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 359.308770][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2598'. [ 359.351195][T15349] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2598'. [ 359.426561][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2598'. [ 359.596206][T15361] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2601'. [ 359.780803][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.790860][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.805190][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.833659][ T5843] Bluetooth: hci3: command tx timeout [ 359.842632][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.851014][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.923207][ T124] block nbd1: Possible stuck request ffff8880255f7000: control (read@0,1024B). Runtime 240 seconds [ 359.934682][ T124] block nbd1: Possible stuck request ffff8880255f71c0: control (read@1024,1024B). Runtime 240 seconds [ 359.947086][ T124] block nbd1: Possible stuck request ffff8880255f7380: control (read@2048,1024B). Runtime 240 seconds [ 359.959508][ T124] block nbd1: Possible stuck request ffff8880255f7540: control (read@3072,1024B). Runtime 240 seconds [ 360.051517][T15351] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 360.067593][T15341] chnl_net:caif_netlink_parms(): no params data found [ 360.077164][T15351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 360.097521][T15351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 360.300402][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'. [ 360.405275][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 360.436409][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.453389][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.469798][T15381] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2603'. [ 360.479383][T15341] bridge_slave_0: entered allmulticast mode [ 360.484325][T15341] bridge_slave_0: entered promiscuous mode [ 360.536078][T15385] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 360.617652][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.640971][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.654653][T15341] bridge_slave_1: entered allmulticast mode [ 360.662735][T15341] bridge_slave_1: entered promiscuous mode [ 360.719119][T15387] sctp: [Deprecated]: syz.3.2606 (pid 15387) Use of int in max_burst socket option deprecated. [ 360.719119][T15387] Use struct sctp_assoc_value instead [ 360.831504][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.846032][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.931724][ T3485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.032794][T15341] team0: Port device team_slave_0 added [ 361.083362][T15401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2611'. [ 361.090251][ T3485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.107427][T15395] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.126186][T15341] team0: Port device team_slave_1 added [ 361.204285][ T3485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.357028][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.365916][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.394065][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.425092][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.432931][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.460194][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.508532][ T3485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.716241][T15341] hsr_slave_0: entered promiscuous mode [ 361.726861][T15341] hsr_slave_1: entered promiscuous mode [ 361.735826][T15341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.745338][T15341] Cannot create hsr debugfs directory [ 361.909664][ T5852] Bluetooth: hci3: command tx timeout [ 361.915331][ T5843] Bluetooth: hci4: command tx timeout [ 362.015212][T15365] chnl_net:caif_netlink_parms(): no params data found [ 362.061947][ T3485] bridge_slave_1: left allmulticast mode [ 362.067665][ T3485] bridge_slave_1: left promiscuous mode [ 362.079107][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.101075][ T3485] bridge_slave_0: left allmulticast mode [ 362.107140][ T3485] bridge_slave_0: left promiscuous mode [ 362.117717][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.203298][T15425] xt_cgroup: invalid path, errno=-2 [ 362.517002][T15439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2617'. [ 362.637103][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.650851][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.662106][ T3485] bond0 (unregistering): Released all slaves [ 362.875910][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 363.219869][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.233630][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.243092][T15365] bridge_slave_0: entered allmulticast mode [ 363.265037][T15365] bridge_slave_0: entered promiscuous mode [ 363.375130][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.387566][T15471] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 363.393778][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.408749][T15365] bridge_slave_1: entered allmulticast mode [ 363.424602][T15365] bridge_slave_1: entered promiscuous mode [ 363.464664][T15471] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.637121][T15471] bond10: (slave veth15): Enslaving as an active interface with a down link [ 363.661370][T15365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.702523][T15476] vlan0: entered allmulticast mode [ 363.711394][T15476] bond10: entered allmulticast mode [ 363.719600][T15476] bond10: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 363.774728][T15365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.823564][ T3485] hsr_slave_0: left promiscuous mode [ 363.836052][ T3485] hsr_slave_1: left promiscuous mode [ 363.844197][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.856637][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.866836][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.874899][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.910822][ T3485] veth1_macvtap: left promiscuous mode [ 363.916479][ T3485] veth0_macvtap: left promiscuous mode [ 363.922298][ T3485] veth1_vlan: left promiscuous mode [ 363.927700][ T3485] veth0_vlan: left promiscuous mode [ 363.988230][ T5843] Bluetooth: hci4: command tx timeout [ 363.993813][ T5843] Bluetooth: hci3: command tx timeout [ 364.507312][T15495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2633'. [ 364.521763][T15496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2633'. [ 364.657618][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 364.698833][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 365.032577][T10387] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.181486][T15365] team0: Port device team_slave_0 added [ 365.220932][T15495] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 365.248950][T15496] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 365.300165][T15365] team0: Port device team_slave_1 added [ 365.322773][T15500] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 365.439102][T15365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.456375][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.485807][T15365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.519428][T15365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.526442][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.575028][T15365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.645823][T15341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.684730][T15341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.733598][T15341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.798162][T15365] hsr_slave_0: entered promiscuous mode [ 365.813865][T15365] hsr_slave_1: entered promiscuous mode [ 365.825915][T15365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.840679][T15365] Cannot create hsr debugfs directory [ 365.857133][T15341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.068093][ T5852] Bluetooth: hci4: command tx timeout [ 366.073805][ T5843] Bluetooth: hci3: command tx timeout [ 366.170442][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.290032][T15341] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.319640][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.326856][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.458094][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.465371][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.502335][T15543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2646'. [ 366.664315][T15341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.988377][T15365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.029256][T15365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.068343][T15365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.103554][T15365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.441596][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.539546][T15365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.638313][T15365] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.675929][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.683212][T10397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.763053][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.770306][T10397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.952477][T15341] veth0_vlan: entered promiscuous mode [ 368.049868][T15341] veth1_vlan: entered promiscuous mode [ 368.147953][ T5843] Bluetooth: hci4: command tx timeout [ 368.171449][T15341] veth0_macvtap: entered promiscuous mode [ 368.194929][T15341] veth1_macvtap: entered promiscuous mode [ 368.239656][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.315428][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.338371][T15341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.378191][T15341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.387053][T15341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.418456][T15341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.638097][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.672938][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.722064][T15365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.832340][T15631] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 368.854278][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.863709][T15631] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2666'. [ 368.874536][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.924479][T15631] veth0: entered promiscuous mode [ 369.004492][T15365] veth0_vlan: entered promiscuous mode [ 369.012320][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2667'. [ 369.034675][T15365] veth1_vlan: entered promiscuous mode [ 369.149173][T15636] netlink: 'syz.4.2668': attribute type 1 has an invalid length. [ 369.157061][T15636] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2668'. [ 369.180899][T15365] veth0_macvtap: entered promiscuous mode [ 369.202421][T15365] veth1_macvtap: entered promiscuous mode [ 369.240864][T15365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.253151][T15365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.263920][T15365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.275366][T15365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.303749][T15365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.313975][T15365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.362567][T15644] tipc: Enabled bearer , priority 10 [ 369.505688][ T3420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.535198][T15652] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 369.553644][T15652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.560993][T15652] IPv6: NLM_F_CREATE should be set when creating new route [ 369.656070][ T3420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.691514][T15630] veth0: left promiscuous mode [ 369.796263][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.810327][T15653] sit0: entered promiscuous mode [ 369.833569][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.835905][T15653] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 369.884316][T15653] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2672'. [ 369.973631][ T3420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.012947][T10397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.027702][T10397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.076838][ T3420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.450379][ T3420] bridge_slave_1: left allmulticast mode [ 370.456144][ T3420] bridge_slave_1: left promiscuous mode [ 370.461926][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.473737][ T3420] bridge_slave_0: left allmulticast mode [ 370.481258][ T3420] bridge_slave_0: left promiscuous mode [ 370.487022][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.032029][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.048909][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.057239][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.066065][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.074461][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.164458][ T3420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.175785][ T3420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.186569][ T3420] bond0 (unregistering): Released all slaves [ 371.813372][ T3420] hsr_slave_0: left promiscuous mode [ 371.825822][ T3420] hsr_slave_1: left promiscuous mode [ 371.837789][ T3420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.846528][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.855712][ T3420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.863455][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.889968][ T3420] veth1_macvtap: left promiscuous mode [ 371.895586][ T3420] veth0_macvtap: left promiscuous mode [ 371.901243][ T3420] veth1_vlan: left promiscuous mode [ 371.906550][ T3420] veth0_vlan: left promiscuous mode [ 372.357686][ T3420] team0 (unregistering): Port device team_slave_1 removed [ 372.397974][ T3420] team0 (unregistering): Port device team_slave_0 removed [ 372.736847][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 372.783048][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 373.097062][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.108158][ T5852] Bluetooth: hci3: command tx timeout [ 373.114479][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.124433][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.134349][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.143034][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.151728][T15684] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2679'. [ 373.164418][T15685] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 373.187182][T15665] chnl_net:caif_netlink_parms(): no params data found [ 373.343334][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2682'. [ 373.353798][T15695] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2682'. [ 373.416933][T15665] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.435195][T15665] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.460454][T15665] bridge_slave_0: entered allmulticast mode [ 373.480174][T15665] bridge_slave_0: entered promiscuous mode [ 373.509711][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2683'. [ 373.509718][T15665] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.514045][T15665] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.558341][T15665] bridge_slave_1: entered allmulticast mode [ 373.570153][T15665] bridge_slave_1: entered promiscuous mode [ 373.601405][T10397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.618126][T10397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.628239][ T5849] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.756996][T15665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.768287][ T55] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.789588][T15706] tipc: Enabled bearer , priority 0 [ 373.814357][T15665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.877271][T15707] tipc: Resetting bearer [ 374.001967][T15665] team0: Port device team_slave_0 added [ 374.031694][T15665] team0: Port device team_slave_1 added [ 374.229254][ T3420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.248844][T15705] tipc: Disabling bearer [ 374.358296][T15665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.365409][T15665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.396518][T15665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.461672][ T3420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.555329][ T3420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.576055][T15665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.585319][T15665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.617827][T15665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.710038][ T55] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.733546][ T3420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.866789][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'. [ 374.935794][T15665] hsr_slave_0: entered promiscuous mode [ 374.943406][T15665] hsr_slave_1: entered promiscuous mode [ 374.950750][T15665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.960245][T15665] Cannot create hsr debugfs directory [ 375.191959][ T5852] Bluetooth: hci3: command tx timeout [ 375.198550][ T5843] Bluetooth: hci4: command tx timeout [ 375.267715][T15689] chnl_net:caif_netlink_parms(): no params data found [ 375.353284][ T3420] bridge_slave_1: left allmulticast mode [ 375.367952][ T3420] bridge_slave_1: left promiscuous mode [ 375.373786][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.398949][T15773] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2698'. [ 375.416254][ T3420] bridge_slave_0: left allmulticast mode [ 375.423340][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 375.438289][ T3420] bridge_slave_0: left promiscuous mode [ 375.444122][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.059593][ T3420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.071051][ T3420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.082792][ T3420] bond0 (unregistering): Released all slaves [ 376.416771][T15806] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 376.425536][T15806] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2705'. [ 376.536845][T15814] netlink: 'syz.4.2706': attribute type 2 has an invalid length. [ 376.607341][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.618973][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.626205][T15689] bridge_slave_0: entered allmulticast mode [ 376.636476][T15689] bridge_slave_0: entered promiscuous mode [ 376.705987][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.732354][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.755311][T15689] bridge_slave_1: entered allmulticast mode [ 376.779999][T15689] bridge_slave_1: entered promiscuous mode [ 376.844961][T15825] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 377.105366][ T3420] hsr_slave_0: left promiscuous mode [ 377.112606][ T3420] hsr_slave_1: left promiscuous mode [ 377.118783][ T3420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.126648][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.159045][ T3420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.166529][ T3420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.230031][ T3420] veth1_macvtap: left promiscuous mode [ 377.235660][ T3420] veth0_macvtap: left promiscuous mode [ 377.245910][ T3420] veth1_vlan: left promiscuous mode [ 377.252039][ T3420] veth0_vlan: left promiscuous mode [ 377.268050][ T5852] Bluetooth: hci3: command tx timeout [ 377.273621][ T5843] Bluetooth: hci4: command tx timeout [ 377.348194][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 377.796694][ T3420] team0 (unregistering): Port device team_slave_1 removed [ 377.847789][ T3420] team0 (unregistering): Port device team_slave_0 removed [ 378.274353][T15689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.290833][T15689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.555868][T15689] team0: Port device team_slave_0 added [ 378.604229][T15689] team0: Port device team_slave_1 added [ 378.832151][T15689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.850122][T15689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.919329][T15689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.002854][T15689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.029313][T15689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.089931][T15689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.329672][T15689] hsr_slave_0: entered promiscuous mode [ 379.336571][T15689] hsr_slave_1: entered promiscuous mode [ 379.343405][T15689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.351627][ T5843] Bluetooth: hci4: command tx timeout [ 379.357102][ T5852] Bluetooth: hci3: command tx timeout [ 379.362929][T15689] Cannot create hsr debugfs directory [ 379.459784][T15883] xt_time: unknown flags 0x4 [ 379.480645][T15884] xt_time: unknown flags 0x4 [ 379.566174][T15665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.593867][T15665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.605145][T15886] __nla_validate_parse: 7 callbacks suppressed [ 379.605163][T15886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2721'. [ 379.641784][T15665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.701018][T15665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.743845][T15896] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2725'. [ 379.841783][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2725'. [ 379.875312][T15909] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2725'. [ 380.083374][T15665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.237599][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.302130][T15920] 8021q: VLANs not supported on ip6_vti0 [ 380.356674][T15665] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.405911][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.413178][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.451172][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.458408][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.512429][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.680424][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.907099][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.024628][T15689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.082458][T15689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.112465][T15951] netlink: 'syz.3.2738': attribute type 23 has an invalid length. [ 381.124841][T15689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.176350][T15689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.295889][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.305810][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.316190][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.342629][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.354591][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.428662][ T5843] Bluetooth: hci4: command tx timeout [ 382.253034][ T36] bond1 (unregistering): Released all slaves [ 382.358017][ T36] bond0 (unregistering): Released all slaves [ 382.477685][ T36] bond2 (unregistering): Released all slaves [ 382.509121][T15974] veth0: entered promiscuous mode [ 382.514383][T15974] veth0: left promiscuous mode [ 382.597145][ T36] : left promiscuous mode [ 382.698118][ T36] tipc: Disabling bearer [ 382.721291][ T36] tipc: Disabling bearer [ 382.727393][ T36] tipc: Left network mode [ 382.742980][T15665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.856397][T15689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.010772][T15665] veth0_vlan: entered promiscuous mode [ 383.036348][T15665] veth1_vlan: entered promiscuous mode [ 383.097433][T15689] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.112973][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.120197][T10397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.229616][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.236860][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.432553][ T5843] Bluetooth: hci2: command tx timeout [ 383.468988][T15665] veth0_macvtap: entered promiscuous mode [ 383.636268][ T36] hsr_slave_0: left promiscuous mode [ 383.662558][ T36] vlan0: left allmulticast mode [ 383.667503][ T36] : left allmulticast mode [ 383.673964][ T36] vlan0: left promiscuous mode [ 383.681874][ T36] veth1_macvtap: left promiscuous mode [ 383.687482][ T36] veth0_macvtap: left promiscuous mode [ 383.695494][ T36] veth1_vlan: left promiscuous mode [ 383.701075][ T36] : left promiscuous mode [ 383.834288][ T36] pim6reg (unregistering): left allmulticast mode [ 384.563388][T15665] veth1_macvtap: entered promiscuous mode [ 384.587596][T15957] chnl_net:caif_netlink_parms(): no params data found [ 384.746112][T15665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.868051][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 385.141060][T15665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.188924][T15957] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.196100][T15957] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.221572][T15957] bridge_slave_0: entered allmulticast mode [ 385.239951][T15957] bridge_slave_0: entered promiscuous mode [ 385.256328][T15957] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.264372][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.276678][T15957] bridge_slave_1: entered allmulticast mode [ 385.285651][T15957] bridge_slave_1: entered promiscuous mode [ 385.303504][T15665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.316178][T15665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.326125][T15665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.338845][T15665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.490076][T15689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.508899][ T5843] Bluetooth: hci2: command tx timeout [ 385.525727][T15957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.544135][ T36] IPVS: stop unused estimator thread 0... [ 385.572061][T15957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.581368][T16019] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 385.699975][T15957] team0: Port device team_slave_0 added [ 385.717720][T16018] bond23: (slave bridge9): making interface the new active one [ 385.731458][T16018] bond23: (slave bridge9): Enslaving as an active interface with an up link [ 385.753993][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.780888][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.795686][T15957] team0: Port device team_slave_1 added [ 385.895904][T15957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.904027][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.931819][T15957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.946963][T15957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.959055][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.990891][T15957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.085254][T10397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.095120][T10397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.155878][T15957] hsr_slave_0: entered promiscuous mode [ 386.173800][T15957] hsr_slave_1: entered promiscuous mode [ 386.188909][T15957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.204706][T15957] Cannot create hsr debugfs directory [ 386.228287][T15689] veth0_vlan: entered promiscuous mode [ 386.286939][T15689] veth1_vlan: entered promiscuous mode [ 386.545082][T16045] veth0: entered promiscuous mode [ 386.564074][T15689] veth0_macvtap: entered promiscuous mode [ 386.632681][T15689] veth1_macvtap: entered promiscuous mode [ 386.653250][T16039] netlink: 'syz.4.2758': attribute type 11 has an invalid length. [ 386.669106][T16039] netlink: 'syz.4.2758': attribute type 11 has an invalid length. [ 386.677434][T16039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2758'. [ 386.912458][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.971876][T15689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.990642][T16038] veth0: left promiscuous mode [ 387.052953][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.112320][T15689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.155518][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.185116][T15689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.195999][T15689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.212695][T15689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.221700][T15689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.250710][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.353687][T10397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.364435][T10397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.408061][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.415948][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.503906][ T36] bridge_slave_1: left allmulticast mode [ 387.511522][ T36] bridge_slave_1: left promiscuous mode [ 387.517344][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.530460][ T36] bridge_slave_0: left allmulticast mode [ 387.536172][ T36] bridge_slave_0: left promiscuous mode [ 387.546177][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.588214][ T5843] Bluetooth: hci2: command tx timeout [ 387.937355][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.988641][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.012215][ T36] bond0 (unregistering): Released all slaves [ 388.267932][T15957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.398669][T15957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.427515][T16070] pim6reg1: entered promiscuous mode [ 388.437996][T16070] pim6reg1: entered allmulticast mode [ 388.454955][T15957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.482688][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.490978][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.499905][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.512072][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.520313][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.579285][T15957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.812003][T15957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.849427][T15957] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.871081][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.878325][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.926591][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.933814][T10387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.013849][ T36] hsr_slave_0: left promiscuous mode [ 389.022652][ T36] hsr_slave_1: left promiscuous mode [ 389.032846][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.040860][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.049699][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.057144][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.085365][ T36] veth1_macvtap: left promiscuous mode [ 389.091134][ T36] veth0_macvtap: left promiscuous mode [ 389.096820][ T36] veth1_vlan: left promiscuous mode [ 389.102859][ T36] veth0_vlan: left promiscuous mode [ 389.552467][ T36] team0 (unregistering): Port device team_slave_1 removed [ 389.594928][ T36] team0 (unregistering): Port device team_slave_0 removed [ 389.672498][ T5843] Bluetooth: hci2: command tx timeout [ 389.989547][ T124] block nbd1: Possible stuck request ffff8880255f7000: control (read@0,1024B). Runtime 270 seconds [ 390.000984][ T124] block nbd1: Possible stuck request ffff8880255f71c0: control (read@1024,1024B). Runtime 270 seconds [ 390.012829][ T124] block nbd1: Possible stuck request ffff8880255f7380: control (read@2048,1024B). Runtime 270 seconds [ 390.024783][ T124] block nbd1: Possible stuck request ffff8880255f7540: control (read@3072,1024B). Runtime 270 seconds [ 390.420275][T16073] chnl_net:caif_netlink_parms(): no params data found [ 390.529370][T16090] openvswitch: netlink: Key 6 has unexpected len 221 expected 2 [ 390.540167][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.629038][ T5843] Bluetooth: hci3: command tx timeout [ 390.689007][T16095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2769'. [ 390.810992][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.923246][T15957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.932177][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.940954][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.955822][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.964938][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.973208][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.995505][T16073] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.005366][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.014757][T16073] bridge_slave_0: entered allmulticast mode [ 391.024283][T16107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2772'. [ 391.026824][T16073] bridge_slave_0: entered promiscuous mode [ 391.070856][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.138094][T16073] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.145244][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.170362][T16073] bridge_slave_1: entered allmulticast mode [ 391.186771][T16073] bridge_slave_1: entered promiscuous mode [ 391.264111][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.334034][T16073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.392068][T16073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.561831][T16132] netlink: 'syz.4.2778': attribute type 13 has an invalid length. [ 391.616481][T16073] team0: Port device team_slave_0 added [ 391.640787][T16073] team0: Port device team_slave_1 added [ 391.730053][T15957] veth0_vlan: entered promiscuous mode [ 391.811275][T16073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.835678][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.871133][T16073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.912265][T16073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.928037][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.964689][T16073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.040740][ T36] bridge_slave_1: left allmulticast mode [ 392.046563][ T36] bridge_slave_1: left promiscuous mode [ 392.053897][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.064265][ T36] bridge_slave_0: left allmulticast mode [ 392.072269][ T36] bridge_slave_0: left promiscuous mode [ 392.081065][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.637704][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.654515][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.679758][ T36] bond0 (unregistering): Released all slaves [ 392.709788][ T5843] Bluetooth: hci3: command tx timeout [ 392.716687][T15957] veth1_vlan: entered promiscuous mode [ 392.965398][T16073] hsr_slave_0: entered promiscuous mode [ 392.975146][T16073] hsr_slave_1: entered promiscuous mode [ 392.982890][T16073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.992363][T16073] Cannot create hsr debugfs directory [ 393.038845][ T5843] Bluetooth: hci4: command tx timeout [ 393.434585][T15957] veth0_macvtap: entered promiscuous mode [ 393.561029][T15957] veth1_macvtap: entered promiscuous mode [ 393.687173][T16104] chnl_net:caif_netlink_parms(): no params data found [ 393.746879][ T36] hsr_slave_0: left promiscuous mode [ 393.755929][ T36] hsr_slave_1: left promiscuous mode [ 393.762698][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.770337][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.779076][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.786569][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.811694][ T36] veth1_macvtap: left promiscuous mode [ 393.817314][ T36] veth0_macvtap: left promiscuous mode [ 393.823208][ T36] veth1_vlan: left promiscuous mode [ 393.838080][ T36] veth0_vlan: left promiscuous mode [ 394.467793][ T36] team0 (unregistering): Port device team_slave_1 removed [ 394.508563][ T36] team0 (unregistering): Port device team_slave_0 removed [ 394.800520][ T5843] Bluetooth: hci3: command tx timeout [ 395.109884][ T5843] Bluetooth: hci4: command tx timeout [ 395.317678][T16104] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.333196][T16104] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.344206][T16104] bridge_slave_0: entered allmulticast mode [ 395.355918][T16104] bridge_slave_0: entered promiscuous mode [ 395.376354][T15957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.403256][T16104] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.411795][T16104] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.432157][T16104] bridge_slave_1: entered allmulticast mode [ 395.442048][T16104] bridge_slave_1: entered promiscuous mode [ 395.509273][T16104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.540323][T15957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.552241][T16104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.621972][T15957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.636720][T15957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.647065][T15957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.656541][T15957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.702904][T16104] team0: Port device team_slave_0 added [ 395.714236][T16104] team0: Port device team_slave_1 added [ 395.813401][T16104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.822138][T16104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.852507][T16104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.867227][T16104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.875182][T16104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.905874][T16104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.947548][T16073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.966942][T16073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.043174][T16073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.094054][T16104] hsr_slave_0: entered promiscuous mode [ 396.104428][T16104] hsr_slave_1: entered promiscuous mode [ 396.111571][T16104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.120781][T16104] Cannot create hsr debugfs directory [ 396.126425][T16073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.283437][T10387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.291603][T10387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.410187][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.419524][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.579469][T16073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.614439][T16073] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.633486][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.640790][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.666732][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.673975][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.863400][ T1036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.879059][ T5843] Bluetooth: hci3: command tx timeout [ 397.012973][T16104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.030763][ T3420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.045329][T16104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.069023][ T3420] ------------[ cut here ]------------ [ 397.074562][ T3420] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 397.117460][ T3420] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 397.158912][ T3420] CPU: 1 UID: 0 PID: 3420 Comm: kworker/u8:6 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 397.158943][ T3420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.158958][ T3420] Workqueue: events_unbound cfg80211_wiphy_work [ 397.158999][ T3420] Call Trace: [ 397.159007][ T3420] [ 397.159017][ T3420] dump_stack_lvl+0x189/0x250 [ 397.159056][ T3420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.159088][ T3420] ? __pfx__printk+0x10/0x10 [ 397.159126][ T3420] ubsan_epilogue+0xa/0x40 [ 397.159148][ T3420] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 397.159195][ T3420] ieee80211_request_ibss_scan+0x600/0x8b0 [ 397.159243][ T3420] ieee80211_ibss_work+0xd85/0x1060 [ 397.159271][ T3420] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.159297][ T3420] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 397.159320][ T3420] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.159343][ T3420] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 397.159370][ T3420] ? skb_dequeue+0x10e/0x150 [ 397.159394][ T3420] ? ieee80211_iface_work+0xcdb/0xfe0 [ 397.159422][ T3420] ? ieee80211_iface_work+0xf39/0xfe0 [ 397.159448][ T3420] ? rcu_is_watching+0x15/0xb0 [ 397.159480][ T3420] cfg80211_wiphy_work+0x2dc/0x460 [ 397.159498][ T3420] ? process_scheduled_works+0x9ef/0x17b0 [ 397.159527][ T3420] process_scheduled_works+0xae1/0x17b0 [ 397.159580][ T3420] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.159624][ T3420] worker_thread+0x8a0/0xda0 [ 397.159663][ T3420] ? __kthread_parkme+0x7b/0x200 [ 397.159689][ T3420] kthread+0x70e/0x8a0 [ 397.159711][ T3420] ? __pfx_worker_thread+0x10/0x10 [ 397.159736][ T3420] ? __pfx_kthread+0x10/0x10 [ 397.159757][ T3420] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.159793][ T3420] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.159817][ T3420] ? __pfx_kthread+0x10/0x10 [ 397.159839][ T3420] ret_from_fork+0x3fc/0x770 [ 397.159869][ T3420] ? __pfx_ret_from_fork+0x10/0x10 [ 397.159899][ T3420] ? __switch_to_asm+0x39/0x70 [ 397.159917][ T3420] ? __switch_to_asm+0x33/0x70 [ 397.159933][ T3420] ? __pfx_kthread+0x10/0x10 [ 397.159954][ T3420] ret_from_fork_asm+0x1a/0x30 [ 397.159992][ T3420] [ 397.159999][ T3420] ---[ end trace ]--- [ 397.162994][ T1036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.175284][ T3420] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 397.175308][ T3420] CPU: 1 UID: 0 PID: 3420 Comm: kworker/u8:6 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 397.175338][ T3420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.175356][ T3420] Workqueue: events_unbound cfg80211_wiphy_work [ 397.175399][ T3420] Call Trace: [ 397.175409][ T3420] [ 397.175420][ T3420] dump_stack_lvl+0x99/0x250 [ 397.175459][ T3420] ? __asan_memcpy+0x40/0x70 [ 397.175491][ T3420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.175527][ T3420] ? __pfx__printk+0x10/0x10 [ 397.175569][ T3420] panic+0x2db/0x790 [ 397.175608][ T3420] ? __pfx_panic+0x10/0x10 [ 397.175639][ T3420] ? _printk+0xcf/0x120 [ 397.175668][ T3420] ? __pfx__printk+0x10/0x10 [ 397.175705][ T3420] check_panic_on_warn+0x89/0xb0 [ 397.175735][ T3420] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 397.175777][ T3420] ieee80211_request_ibss_scan+0x600/0x8b0 [ 397.175829][ T3420] ieee80211_ibss_work+0xd85/0x1060 [ 397.175860][ T3420] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.175895][ T3420] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 397.175927][ T3420] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.175959][ T3420] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 397.175998][ T3420] ? skb_dequeue+0x10e/0x150 [ 397.176031][ T3420] ? ieee80211_iface_work+0xcdb/0xfe0 [ 397.176068][ T3420] ? ieee80211_iface_work+0xf39/0xfe0 [ 397.176103][ T3420] ? rcu_is_watching+0x15/0xb0 [ 397.176147][ T3420] cfg80211_wiphy_work+0x2dc/0x460 [ 397.176177][ T3420] ? process_scheduled_works+0x9ef/0x17b0 [ 397.176214][ T3420] process_scheduled_works+0xae1/0x17b0 [ 397.176284][ T3420] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.176339][ T3420] worker_thread+0x8a0/0xda0 [ 397.176390][ T3420] ? __kthread_parkme+0x7b/0x200 [ 397.176425][ T3420] kthread+0x70e/0x8a0 [ 397.176454][ T3420] ? __pfx_worker_thread+0x10/0x10 [ 397.176488][ T3420] ? __pfx_kthread+0x10/0x10 [ 397.176515][ T3420] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.176546][ T3420] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.176577][ T3420] ? __pfx_kthread+0x10/0x10 [ 397.176606][ T3420] ret_from_fork+0x3fc/0x770 [ 397.176643][ T3420] ? __pfx_ret_from_fork+0x10/0x10 [ 397.176683][ T3420] ? __switch_to_asm+0x39/0x70 [ 397.176706][ T3420] ? __switch_to_asm+0x33/0x70 [ 397.176727][ T3420] ? __pfx_kthread+0x10/0x10 [ 397.176755][ T3420] ret_from_fork_asm+0x1a/0x30 [ 397.176798][ T3420] [ 397.184069][ T3420] Kernel Offset: disabled