last executing test programs: 57.297918754s ago: executing program 3 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 48.146544487s ago: executing program 3 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 37.381920369s ago: executing program 3 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 28.413271584s ago: executing program 3 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 17.608745752s ago: executing program 3 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 8.457829942s ago: executing program 3 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x1, 0x70bd23, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) 4.84706973s ago: executing program 4 (id=2216): socketpair(0x10, 0x3, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, @bcast, @rose={'rose', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/pid\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x1e00, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x48}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000014c0)=0x0, &(0x7f0000001500)=0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x3}}, @fwd={0xb}, @fwd={0xe}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x8c210c44d0d4d92b, 0x30, 0x5f, 0x5f]}}, &(0x7f00000015c0)=""/119, 0x5b, 0x77, 0x1, 0x883}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000017c0)=[{}], 0x8, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0x22, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0xd, &(0x7f0000001a00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe91}}], &(0x7f0000001a80)='syzkaller\x00', 0x894, 0xac, &(0x7f0000001ac0)=""/172, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x2, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001bc0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c00)=[{0x4, 0x5, 0x7, 0xb}, {0x5, 0x1, 0x0, 0xa}, {0x5, 0x2, 0x0, 0x6}, {0x4, 0x1, 0x3, 0x3}, {0x3, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xb, 0x5}, {0x3, 0x4, 0x9, 0x7}, {0x5, 0x3, 0xe, 0x3}, {0x1, 0x1, 0x2, 0x3}], 0x10, 0x2}, 0x94) pipe(&(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1c, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x3, 0xa, 0x5, 0x80, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x2, '\x00', r7, @fallback=0xa, r8, 0x8, &(0x7f0000001680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0x5, 0x474, 0x9}, 0x10, r9, r10, 0x1, &(0x7f0000001e80)=[r12, r13], &(0x7f0000001ec0)=[{0x0, 0x1, 0xd, 0x5}], 0x10, 0x3}, 0x94) sendto$l2tp(r12, &(0x7f0000001fc0)="d7056c8b92c94bf44475481d2233a22949887296d99f5e1ffdbe042bd2cdeeb028a073a68ccb56cb545dee603d451fb2d51331346dca092aa78854feaac79ee27eaabeb24a8008b6879f98ace00e46b3c3be05a34614ccdd23b24763f80a2c77f869f4f0de2a204820dd74e506019d3ca2dd46211ac491856430649c822d017fc6", 0x81, 0x44000, &(0x7f0000002080)={0x2, 0x0, @empty, 0x2}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000020c0)={r12, r12}, 0xc) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r11) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000002340)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002300)={&(0x7f0000002180)={0x158, r14, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x67}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x893}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x16d0e342}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x45, 0x3, "18d6ce3426e7b6b2f7a83c25f1ff9e0b161f5e77c1ff8c0c197cc48d3df8d763102563eba4ac40f885548f5704e140d9ecc59438509e16d3435fbd2951b96493dc"}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x60}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "5c30df6301c9db7c42feb24dd8af9a7262809d050dae73b4cbf96aed2ace7db6ed3f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x4c801) r15 = syz_genetlink_get_family_id$smc(&(0x7f00000023c0), r12) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x6c, r15, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000050}, 0x10000800) sendmsg$nl_route(r0, &(0x7f0000002600)={&(0x7f0000002500), 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x2cfb32c21a29ee4e, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2c00c000}, 0x20040044) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x3c, 0x1407, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100}, 0x40010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002840)={r12, &(0x7f0000002740)="1e3d8012ac70cb45edb17e8c3d1c45b35f4a47b5527924e5f6175c0ecc2d8b931c03a96fd47d2065f134516edac5345ce38fe6f1d8924372b08a1f96faaaba8baffa2a2d8995e0128e0f434313bbc87d120493d5bb5e692777093fb4dd13f07f3faf0e88cc878475707e166881834dde8df732d5e3de97305ebc8fe1d10db160494129ae9c2570dff53b35", &(0x7f0000002800)=@udp6, 0x1}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0x53, 0xebb1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40014) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002a80)={'syztnl1\x00', &(0x7f0000002980)={'gretap0\x00', r7, 0x20, 0x7, 0x7ff, 0x6fe59ce9, {{0x34, 0x4, 0x2, 0x5, 0xd0, 0x67, 0x0, 0xd, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0x22, 0x1, 0x7, [{@multicast1, 0x9}, {@loopback, 0x80000001}, {@empty, 0x7}, {@remote, 0x3}, {@multicast2, 0x7ff}, {@broadcast, 0x8}, {@loopback, 0x1}, {@multicast2}, {@multicast1, 0xc6a}]}, @timestamp={0x44, 0x14, 0xeb, 0x0, 0x9, [0x99f, 0x9, 0x3, 0x1]}, @cipso={0x86, 0x14, 0x3, [{0x5, 0x3, "fc"}, {0x5, 0xb, "6ed7fcad18a4ca76c2"}]}, @cipso={0x86, 0x14, 0x2, [{0x6, 0xe, "011ab7784d8f8113a9056944"}]}, @timestamp_addr={0x44, 0x34, 0xaa, 0x1, 0x7, [{@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x9f}, {@broadcast, 0x800}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x400}, {@local, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}]}]}}}}}) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002ac0)=r9, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b00)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x5, '\x00', r16, r17, 0x4, 0x1, 0x2}, 0x50) 4.774203308s ago: executing program 4 (id=2219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000010000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) 4.665633247s ago: executing program 4 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x16c, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000dc}, 0x4000) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x78) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) getsockopt$MRT(r3, 0x0, 0xcf, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x3c, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac05, 0xfac0b, 0xfac0a]}]]}, 0x3c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, 0x0, 0x200, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, 0x0, 0x200, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000880)={r4}) r13 = getuid() setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0xfab8, 0x4e21, 0x1ff, 0x2, 0xa0, 0xa0, 0x3c, r11, r13}, {0x4, 0x7, 0x7ff, 0xffffffff, 0x9, 0x1, 0xf, 0x2e}, {0x101, 0xfff, 0x8, 0x8001}, 0x400, 0x6e6bb9, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x2b}, 0xa, @in6=@loopback, 0x3504, 0x2, 0x1, 0x40, 0x2, 0x7f, 0x1}}, 0xe8) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x7, 0x3, {{0x3f, 0x4, 0x0, 0x7, 0xfc, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast2, @empty, {[@end, @noop, @end, @cipso={0x86, 0x67, 0x0, [{0x0, 0x11, "1d9616aaebf474955c7012b4463617"}, {0x7, 0xb, "2c4751a1eea79afdff"}, {0x0, 0x4, '\v\x00'}, {0x1, 0xc, "2b7318d517809ea56ec0"}, {0x2, 0x12, "a9cdc86c0acf0a6bf27a20690f5985af"}, {0x6, 0x3, "83"}, {0x1, 0x12, "16d4cd0d17905223595dfdc3d38a9a93"}, {0x0, 0xe, "1725777958247601dcb3d7d3"}]}, @ssrr={0x89, 0x7, 0x6c, [@remote]}, @ssrr={0x89, 0x2b, 0x16, [@rand_addr=0x64010102, @loopback, @remote, @rand_addr=0x64010101, @rand_addr=0x64010101, @local, @local, @private=0xa010101, @loopback, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0xf, 0x3, 0x1, [{@local}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x3}, {@multicast2, 0x7}, {@multicast2, 0x4a}, {@multicast2, 0x40}, {@broadcast, 0xc9}, {@private=0xa010101, 0x8}]}, @lsrr={0x83, 0xf, 0x95, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x7, 0x40, 0xe, 0x80000000, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x9, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x7c, 0x4, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x2}, 0x700, 0x8000, 0x9, 0x3}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 4.450603617s ago: executing program 4 (id=2221): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x35, r1}) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@setlink={0x164, 0x13, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x8}, [@IFLA_LINK_NETNSID={0x0, 0x25, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000001800)=0x3, 0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20048889) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000440)={@local, @random="4822d64b5620", @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @remote, @local, {[], @mlv2_query={0x82, 0x0, 0x0, 0xff, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x9, 0x0, 0x2, [@private1, @local]}}}}}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000008e00000300000d02000000100000000100000000000000040000000b0000000200"/74], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x7ff}, 0x28) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 4.365360978s ago: executing program 4 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000014) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffc9d) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="0800abc60200cba0df4b"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r4, 0x0, 0xffdd) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)) epoll_create1(0x80000) nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r8}, &(0x7f0000000040), &(0x7f0000000940)=r7}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.41513425s ago: executing program 1 (id=2227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket(0x2b, 0x80801, 0x4) connect$inet6(r1, 0x0, 0x0) listen(r0, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xc5, &(0x7f0000000840)={@link_local, @random="88a45ad0d3ca", @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @dccp={{0x13, 0x4, 0x2, 0x2f, 0xb3, 0x68, 0x0, 0x2, 0x21, 0x0, @multicast2, @loopback, {[@noop, @ssrr={0x89, 0xb, 0xe1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x28, 0xa3, 0x0, 0x3, [0x0, 0x1, 0x401, 0x45f6886b, 0xfffffffb, 0x6, 0x1, 0x7, 0x3ff]}, @noop]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x7, 0x0, "a18c77", 0x7, "ab5ba5"}, "36970cf7c45c76d44aa87ce360b7b69f921196d1b1fc4ae5b83230d2a4fa573e762e8620bb01071eb28dfa21b85006a066cbcb3aeabbfecac31bff2875d68ebadf7b753da1b8c7d2c2f2219a0c46b549e2ccc188e83deb"}}}}}, &(0x7f00000001c0)={0x0, 0x1, [0xc16, 0x5cf, 0x614, 0x933]}) sendmsg$unix(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.222641737s ago: executing program 1 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd000008000280"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x10448) sendfile(r2, r2, &(0x7f00000000c0)=0x1, 0x4) accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0x27}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f83a00", 0x5e}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) 2.039372323s ago: executing program 1 (id=2232): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1e}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff1}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x12100) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x19, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0xee, &(0x7f0000000540)=""/238, 0x41100, 0x9d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x3, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001d80)=[0xffffffffffffffff], 0x0, 0x10, 0xb5}, 0x94) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r7) sendmsg$nl_route_sched(r6, 0x0, 0x4000000) r8 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x9}}, 0x2, 0x9, 0xe7, 0x2, 0x2}, &(0x7f00000004c0)=0x98) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, 0x0, &(0x7f0000003f80)) sendmmsg$inet_sctp(r8, &(0x7f0000004080), 0x0, 0x400c001) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x24000099}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @local}, 0x14) 1.809931733s ago: executing program 2 (id=2238): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24008045) (async) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24008045) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$IPVS_CMD_SET_CONFIG(r4, 0x0, 0x4080) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, 0x0, 0x4080) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4008015}, 0x0) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}, {0x0}, {&(0x7f0000000340)=""/85, 0x55}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.758975278s ago: executing program 1 (id=2239): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x6, "104f87"}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040c0}, 0x80) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) (async) r5 = socket(0xa, 0x5, 0x9) recvmsg$can_j1939(r5, &(0x7f0000002740)={&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/217, 0xd9}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/159, 0x9f}, {&(0x7f0000002580)=""/66, 0x42}], 0x5, &(0x7f0000002680)=""/180, 0xb4}, 0x12020) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000002780)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000002880)={0x0, 0xffffffff}, &(0x7f00000028c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000002900)={r6, @in={{0x2, 0x4e20, @loopback}}, [0x543, 0xce8, 0x38e, 0x5, 0x5, 0x5, 0xe, 0x6, 0x1, 0x7fffffffffffffff, 0x6, 0x5, 0x5, 0x401, 0x88]}, &(0x7f0000002a00)=0x100) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x20, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000002b40)=0x40, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000003680)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000002bc0)={0xa68, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x2a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',-$]-:&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '([%,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x19c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a2a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '{\x1c+.{#\x99,/+.*-+:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xa9&,\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x384, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "b3808f86dae4f1dc5f085c162c63bc243c20bac27b6ba8dffc6102bfbfa063d0255ff998f452cc76f53fa363a502768120668a6f6313921e162b4301df97a759303e1963a8c56c28fff7e13e753d1507a83789a76085af2aa039501acef10418b33f2c12050c54438dd601c1c4b6f572a117fb2fa27297d3b829a264e826170671e380065ca93912d83b8d509cd16917e4674ca46c8248046beb5f9edc9e5f30faa26c8bba65d29e103642c10ff6497bbc536396e6b978fdd54c73a83b5290fa8eb037f9dc7b22f77590a9f98691f808834e2847cba487dc451db7"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "710e1095382aaf50d7a4ecc2afdf53c9a9de4be4917154428cd013d9adb75aeadc435f53f09ba93ebcbd97f49b792c3ff7a99eecedc10539d4e06093d39c7eb8fec1253ac692108738db6d79f0af88b952d28cdfd6e90dea48c7cf590401edd40fd0f820be63ae75d84a65c4b85b766a0961b64f3459c3f9b8b42ba857b4747d8772153ac89379e2ebf0d2e826fb651846b2f35998612ae1faa4a91797c42aaec96c2489c7a29952a78cc1b7"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4cc3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "440cfe6e1ad1ecf563995280ff020c82f943aa98e8026743adb06528000e149667784d94c0b06d2550315d06517464da376480c2a08fedbe5433f6d06a64edd6f89f5a7488fabdb3897543d3f5961d1b501c2ba04a972c2a363ef1152ba90203d8d9f1b52f997b1f0f9681ebb776d5b4a845b6390c"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "9efb7ec67a7f888ee97f666d77d13811e55557d46b9b91607e88a881e98b1ede81be9baa0a106cb9208a407c09d59f041c1cc880ca29ab683274103474cfe68cc60056cb391d128a119d83369131a02b8f98ba553a5ad551fd4209b646dbbe36a14ee5de525b4a6617f525697fea33a856f2ebe229e40627a35b425c12b131b0d2392dcb9961bb2328306c651d61b6b36b6a49e5d93f5555af8e7d74b3f0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "291ac92f09b38229811dbfaeedd48b94f7722466bcda1703a90a096dec9345791bd7d4418897597e289755cd1e41d9a582828caaa63b078e3f7c1ac8b8deadc0ea0c29d26511f713febf1dcb3eef0d6e840a206b88"}]}, @ETHTOOL_A_FEATURES_WANTED={0xe0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd37}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "b7b07a709aedaf2945ca472232d6e23d33ce7e12483ac4d505da0d94ed024b33fbe739ff3967e1a9027711ef08b160dbab767c75bf99c81a9e51d55495a9c1f842"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "d5cce4db2618407281bb8153f6e74028069f8ee8cde202ceb94de1e1699341d7"}, @ETHTOOL_A_BITSET_MASK={0x7f, 0x5, "1575ba222c66a87d9d969f1638068e30191039f6de3aa49bae405f5c9d4ac411408adc11773557061968c198cc13629636c288a7d9ba184a25066a1ad8d267f9dc376b004c090f869a8437697eafe4c7bb69986201e6d8e45ff8c214323d6ff6af82b2d2d1719a38a26eab8998b74d151f99581ebb725fe8ae0b5d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x174, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "63527e7ee930e5f5607f1657b5968d636d7a52f0337997420b560d1a5b44139e05fdf317641e317139dc659b13c997f4bd1c04d7c80e311268a6b769ad1dc4a5771a76e9b7ec49ba1340e276c6d4556d6cdc6a3c2bbb5e9ce1ce3f2eebf20ffaaf7587d4639ab227e671579ef49470e874c20c38587d47cb569559f4e425b042b681fcc2abaf6149828fc247cd9f52996288acf0c8fd0d82733116c015fd3a74a1f4cf1aad77"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}, @ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "226611e314a4f049ad0df31bb06dea486191aea3e486a88870706ae205ca80e12f417a20facf44b8905c6bf363b84e07755a3967581039060441f830e349a468107044f0413600f83e903846c1eed33dfaaf2abadc84ef43ed23f9903cbf870a29a13fb837c379eff17188261aa87636e5359d0762b5b9241987afd6dda4a86d9510cfd77da1eff0deef3f09efabb7d60d13894a85446cd0bffccaf15de660c20597b1a6b15f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0xa68}}, 0x40040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x4c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x44010}, 0x8800) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004980)={&(0x7f0000003900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@enum={0xe, 0x4, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0xf, 0x1}, {0x4, 0x7}, {0x8, 0x6}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x1d, 0xd}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000003980)=""/4096, 0x58, 0x1000, 0x1, 0x9}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b00)={0x11, 0xc, &(0x7f0000003840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffff4}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x21}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000038c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x0, r8, 0x8, &(0x7f00000049c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000004a00)={0x1, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000004a40), &(0x7f0000004a80)=[{0x5, 0x2, 0x2, 0xe}, {0x1, 0x2, 0xe, 0x5}, {0x5, 0x5, 0xf, 0x7}, {0x1, 0x4, 0xf, 0x8}, {0x2, 0x2, 0x0, 0x5}, {0x4, 0x2, 0xf, 0x3}, {0x0, 0x5, 0x1, 0x7}, {0x4, 0x5, 0xa, 0x3}], 0x10, 0x10001}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000004bc0), r5) (async) socket$unix(0x1, 0x5, 0x0) write(r9, &(0x7f0000004c00)="7ae954c06c6cadcc724a270cf74e7e64699f3b8f0e0951db3234fde97e5998c58386ec81f541ade0a10c02dd8a704b17b5e13f6f7e666086117c6fd484844b3fe4741323dd8d81584db5e84735fe5d740cfa9f7d74bc5051c9097d276b528d7ae055e26e2cbae593d924abadc8fbfd3887e2b071adb90ba3f7c4cf049befc9110fad58be5e0a57fb75959907863fe862652ab6ae2a80a92f12325d894a6e128e6a91ac5026ab3dfb9049d6a1120ab74015e66a0de42388060ea04f9053e56d28191c0eccb7789e636e7c6c0f88c4f31ce0f8719a8f6008b98a07ec943f5907ece05961f93f29fc545c6fbbbec2cdf82dde6fe4e99568aae0c44013e10d9e6945bb7d9fd4e652b7e66cb9e15e674756f3e8a6e94fb49738dbed11e6e62bb9bce687afd6e8cd26463028af7762414e360cd12cc07d7faea39bc49691e529e6ee112faac69a66e82da13c5136526f06e0b70ce2cb74b7869ba4612eb8e40aee901bf4ae204749f4ca343497b0e64e06f55b54a02d97fed60d8d197d37b1d7b604a72bf513fffe68d22ec1de6add6ab65e563409c5dde82d58382a7332ff76bf614cb68012c8d4e783819e4b6b6559249494fb4244f6d7d74a5f115813092b571da632321ecce43d71a078d9dcac51313ff11ea73b06020cfabf394682c15610fe2831f18b0b14c66ee745e18197db1a11ffd55aa54bbace5e100744122f2800b686255404a905e3821ce71c002510adfa25581cd1f338d5ab3395e7601d7dcba8fda61e9df9b916f89aebf1c51d5f80bdc7b7a2b95b6d9c96640af36e78f5d7e7b8d3a081e421fcda9cfacbd7a6aa9c993b9f6551007fed03456515e1e1f6d33c5aa161a338e165520def893aaf338852faba2f3e2f509bcffd6931812e3fe7cb79e1412123d8abb6af991b5bc22122cdba896b6492655fefe3ab31b2ef61b5f643cb482ca26b6a85a6ed13ba67fdd4336d4755fd878525394c8b1c72d7b7e79f74e9ddb070b0bc6a2483bc05db052890a588e3a4cb85efe0696447de789b1b434e9f766699105a076f54d34e08013e726453e79fb68bbdf68119a26acb06eda87b9081aaccf7f7c9ef5adee6253adf41cc6d9061e9cd8ee991bd36ac540b7ed5134166e9886bd63819b001f7e8e171e788f518b82d59c2cf83a2d7860577666c9e20189cf8856af1f2d3c5b23045ee04c627b78a174cccdd9edc0eace54413e255b83f39375236d470fe477449284dc725018ab057cf1940401ed56f6669ef6fdaa991170b5597ccf8ace094c27d76f39da6a1bfa0d27c467b452b0185a81033fd654f05ca7a93002c34e18322f5426d022597bde428060fe7d4a5f7c5558eef271c689c477b4f5a6ee33b03c1ddad42f3151775ae46bd4a84a1bb6ddd920ad0bb9a9ce2a234571ea247ce24482ff972785764544ec6699332e386d2c4c8638a28e466b0749d0e3f95cc8408c4f09b81a4bdd47882a44157db476de8117c588673ff8b5c45263e2e626a9ae2fe854a6ff3bb7d6cec946595716032c34df8df99197a8123ccf3c8aa1464236f6120886642f8c56456c6e47af936e6f5da31fc752a1b2c6190facfe8c4badd34bc923e393a718a32720cfd6a69585f64f114d14a6d439e836a6ec7b42c31e4f3cfe627b6277d63ed85a8ebfcd6eb1a598999652ec73e2885e09dac1841461dd1ab21424bd262b65084b87ed8664116c37af5329d0e63c8cf9e497b14fe700e552a4ea888aa575a97ede34b4cc39f656a43a8a9262435363b4e5afd6ce39ffc7e8fff60c45a26ff2e4801243bc9d4fabe86fd253c3dc08407bfb84c0f80459eeecf98fcd0d27ee2ed3599d75bcab23f5bc0ab8f106b826e45283e0e66db974d49ed3a0dfe0f56a357e23507a892a948127d1ac9990e6921177d469cd5ea45ae3bc48b6b43ed011937af8aea49c4b7ceef764fc803f6c4a2925c4e90d3d4d71d0b2fb972c8e2ba7c162e1ee460a5fa6731403b68527aa15b129e4845161a6b4f484562fc5a4086fccbdd2d3d4b5604b7ea6a3653c5d7401a5c73ef99decf9c9e4b9f789e2c557ec83fd2ad7a4af54ff30216bf049704119ceda2ba8deed7adb65febc7bc589e9914209eb88abb32d4e075be1abd83313c6f66ed85af43f9a33427e8b99c46cdc6f5d70dcaa078b20fa181279f325d29aa2bcaa8db02506fab571db3c86b2862d47e6930c6c733e4263c63445e8824ed3a1b2a6884f4453f05b501396eed832583f71d8be689930796052adbf80ac898ab39458c3a53aaef61ce9142778d41f173be6fdde6d9cfb8711773042715942853b18ed5bec9801548bf92df11d06dc1cb3d24369ea66b1b42bf2f888740e6c86e17c23c6d4d46ca40dd66b78aaa5b0df80e47a703deb7774d2e9c4125fc16d4c2aac8bfa5d751af7a73180af29c96bd9ca57123576a9215b691787d9bedc94782e0593aa1953e05d384af9555f83e098e440ffa9f25f7463711a774bd122a9b3c1d7e8e666cb6ed17c7b05be6d1e400952af40ed981852f13fdbdc14de76385f54cd575bae3e2bfd0e14ca369eb05c0dffab08226b46892866ed212e665798b2aa41db3acdac6a4f37b67b1ede6337b47d2090db3d1b7e5a470f8aae39512b95cbe467789536d32031594293cbc65ef98d98147b0751d7fea1f558f67b3ca02767b7d282af65a145760e70c00f8e8120b41e628ac19933255a47f3e6f213cef3010656345048103688bad6995854f3c6bc5faf74415dff013535b808124b9c52f0f8b8d44d9c9fc2589f327ac69e917eef95a52aaee9b097e69e967d3f6925b602f01bfb42a3e6932c1c131ef64cf83c3980e781e013b396d05c4ebfda773df64a1e2573fb64062967f570a711752b19708faabccb1c3baa40131e6afaba8241bf29de4a8b75121cd5f9c3660793de24d341e83ef05d932b2d2f70ca701ef175dcd9c6b10158c1548e65a99cf3e0413a04b42d63d670d9a85683a816f701870eaadc08ebcf7cb5b19cc58b1472a62d8ae34cc111802067cd4853c345c99e60f1b62825d4901e5c8d607d31efa8f159f81dfab44f05eda8151baa4459424e5222e36a96b1cf25999e756deee2bf246c0e64d9c4cedd80b18089367a5745e1efa75b052344bef0541bfa495d20dc2162d849fed716713923a13988d1a3d40923dc87ccf181b2a04e4c81149fa3840b75d9885659f6620458129614a4972d52c3d9b86d57bc565cc7b16d3bc4f9659b56beeac48e636f62d8d9132c17c0687eb145b60c79f831e603d2ebd0b2482456845c98c15f44e3acc07b345dc382329c1bfc2a76ebf182e0bacb662684c04e60b7e5b6cc73b90075cc326f05b17abfada41301ed9a842f455246135c420535471ad9adfbc99104226df58d78ea599aaaf572484a987f5fac1d65e2029a51f615ac609cbe5a911b1946c36a81ab983741b40439e92581fb603cefdb96c912bc8a02df537435d3dd3d7fd09e001c1833eaba27e2dc526a05a0b0f2d9dbda362d94eb7d4f6f802aa686eef611433fd85d8c48ca902c71767c227e99afba58d1325539d7eafa47c32af5c5989484fb81c752fe86efee9aaa4e723ae0cd7cae0cfc1129703957e1a91a555e0ce71543d734f1fe47a793a8cbffff2521784596ee5ef9fd90eb5b3718d1f27dfa61725df1a15a0c974cb4cc91f8da4ffc97477cc9cf3ad8558d11f8dc1546878b17a4d65f478c6701f3dc406f1d06af2427dfacc2efeab72492acaa65906affa25931c73ccfb798c9f37c464516163f33ef50def1fd68dfd8c4307998cce2c74a9552dd0a70f78b793a537f5be9dc7dc529142eaf88887bc8b8674d0c02d518937373bdb0244388bdab5c60054082ff1ca619148ebe51659d74b3edd28a6d7df9569d11a3d49e9691a57544104903145f734322e8d9b78456b5446b876424379a43f4139b2f84882d3271bc06e8c4844b067367bab623516350a4ad683afff2b42747c3f3fedbc874855cac90996e61585644462008a7da38467eba1a0523a06eba49f96af782c6855ddcece9c9203f0f0f0125e1fd273384eda6bb2e9650fce6014bde9a2c931490b2d4ce4f38ed07f4c6ec9e3bfaae4b41c6824fafc1e5efb2404fa00531a1207d211c94ec4ba44ddb731b79eb935404319b52c139f1e6916391b2d3118e09650a4fb031fc8977be3d611a232b7b28ed4235ae1c7fc1b60eeccada8eee4d2c9b7da652eb7c41551b3bffb588e2f74f1d26a974fd7427be787c858072af39b3c3bde80d233d8ea7d3500be0ff17b980ff235ff0065f398fc67ee11eeb6a2a8dbbce4fead666f7910403210d16c0252263eb91785589446895124b229b9b95605b444fa30ea318ebf2dc8ff18df188da5917e4058753278864729b861c93ac51626a54c7f5364c83bd5019032b2bc0215ab17fa59017ef8ec8d393fa82ed34fbae13638840f990c131ba52bf48cabb46134df8948de89496e9ff1a0ac3d33de8f5f2d56f5e4faef71757f7e72e0f0f2f321bd8583576deb99ebf5dd10d1b459feb50e657e4ca1441d338bb0e8c924c665ee21c388c47430102d5d247797aa7d22ad12e761d398660da36cc679d7ec904513e2a50b88bd740f7746db6f2489a900910a2ffba038a66f267cd64727018198c87fe51a5f02055e268b2d8fb601f44fa2986cf5be03ba754ff830fbe63f2964674259ce6d93c00247786decd3b03add01f38017d960c33754b3b6fa149fcfb0dd0082d85991086e54979a19552801f7bfe8d2825c0563bd7d7c5ce6ee65b30b817bec04f595a741df1443cae5ab0484e9d232bbc88dc63d9df46fba53910966efeb810e08bf99385690226a347a673ca98aa95352746f5ef3033502adc7b18213c719f8953635f65d191e1521581d5b49fe8c541fe971db89db073b30a327924d8f791868b1b0127d48489a8a925610711c6ea77b5344af5c9b270737418e313e1636e25ef1f66232a866c7cdf1fe981725acf3cf430251c7a9fd7a2859caec194637429bbfa2bda841aa08600897d13cc38205e2f67de835382d5f46698fc973fd7a33f2da64a842fca11ee0b908e13fcd71109382e573c143d1fb1c47a20d489843575a55484b00adbae1edb0db0b8e5dd2b5b1430e3e6e12a68c95ee38f42cbfe83876f501cbac8e6a138997416fef802852736fa6e874f0e5afcc37d1423e00588a4f0e1718624f1d2973aa97bdaaea1c6c3f967ec60155a80283c120f9bbeae31e85cafab787ac65ff3d72ddd7275f466c5c5d710af8ee4cd1d1246ec87244588ed218d6fe14c983360f805d08c9851488b275c5ccb8a93dd5453ff38beffb644c31c4c1e3a0fd48643b16d0ee5f940c1add4d636be1b11a46b7c0e51f559da80361bbdded47a4b9cf2e82587ffa7fc584e3dfdcd648592a732d276e86f3ff4c47791207aa455ab0c40ac38b3ddb5b5e4dcc59e808140976780b71fe1cc3e5d8face07915cb99cb2f585c54834187794e49000c46fc8d7f4e2e26e48a48a737832b7b6a234c99ca15d8d8a3dda8d98b4a73b316a50c4dd8a5052b2fca8b2484e95e63471ee60e1ddb9600715d236be1831eb13466ccb184932c9435b74bd2dc375fd4805d35e9b6ffe2a85b8dfe18e6d3f23e9887833e4935464f07d5f5314643c02039f511e3bb9317cd6a9579ba5ff211b995673f38484d6c818e64df44a941c484bad1b5cda137150ad7c9d15984eb7c1a123b5e7d500f52cec98e3b5788ca1501243c08500c63c9fd41b2f1ee2f2c8edd39767c84fdfea735514a50e74972d3593f25a1e91f4b4068337dfa3", 0x1000) (async) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000005c00)="05b717db4f4fb1627a50ba2fa333bd6cb172df55ea794084680d795a29359ed86df7fce8c61d54b1d807cca681a0d9ac4d65fc6b0a5a943c752359e118cba7333231ddf90103155e6a79167387345f471986f937e2a44fe9", 0x58) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000005c80)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000005cc0)='cgroup.procs\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000005e00)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d80)={0x3c, 0x0, 0x1, 0xfffffffa, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40000) 1.683775896s ago: executing program 1 (id=2240): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001b40)=""/4079, 0xfef}, {&(0x7f00000009c0)=""/148, 0x94}, {&(0x7f0000002b40)=""/4142, 0x102e}, {&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000440)=""/230, 0xe6}], 0x5}, 0xfffffffe}], 0x5d1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001b40)=""/4079, 0xfef}, {&(0x7f00000009c0)=""/148, 0x94}, {&(0x7f0000002b40)=""/4142, 0x102e}, {&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000440)=""/230, 0xe6}], 0x5}, 0xfffffffe}], 0x5d1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xffffd000) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="d02fc9"], 0x48) (async) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="d02fc9"], 0x48) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018006000600800a0000080002800400728008000500708e46c15427164635dd8a816cad13d246e9fc25925e0a8f48974df918bb0614a605a29b97fcc2bca81485b9dceae2efb0d8d2db17c4a4f25c30a6a92b13a8672e7c4442f68c21c2666804090cce2663c42b7e16568a1faa27278e955039a98f83ec2eb1afd33eafb2509266bf50092aca4614baa63ec706", @ANYRESOCT=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="457ea42b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fcdbdf251600000005000300010000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x20000000000002e9, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r1], &(0x7f0000000a80)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207ffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x20000000000002e9, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r1], &(0x7f0000000a80)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207ffffd}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000011c0)={0x0, 0x1195, 0x9, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) bind$802154_dgram(r8, &(0x7f00000003c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0xfffffffffffffce3) (async) bind$802154_dgram(r8, &(0x7f00000003c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0xfffffffffffffce3) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000b80)=""/111, 0x6f}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0) (async) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000b80)=""/111, 0x6f}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000000ac0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) tee(r8, r5, 0x1200000, 0xb) (async) tee(r8, r5, 0x1200000, 0xb) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9}, {0xffff, 0xffff}, {0x10, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.594907128s ago: executing program 4 (id=2241): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) unshare(0x6020400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x26, 0x0, 0x2, 0x3}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0200000033"], 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x4, 0x6ded76d3, 0x1, 0x3, 0x6]}, &(0x7f00000000c0)=0x54) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) unshare(0x24040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, 0x0, 0x8010) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r5, 0x0, 0x4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x20, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x5}}}}}, 0xffffffffffffffe8}}, 0x0) r7 = socket(0x22, 0x2, 0x23) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 1.460663862s ago: executing program 1 (id=2243): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg$inet(r0, &(0x7f0000003240), 0x0, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380031001040990400", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001800128008000100736974000c00028005000a0001000000"], 0x38}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x5, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x9d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], 0x0, 0x800, 0xe2, &(0x7f0000000100)=""/226, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x7ff, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000240)=[0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x1, 0x3, 0x1, 0xb}], 0x10, 0x5}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x20, 0x1, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex, r3, 0xe, 0x200f, r4, @value=r6, @void, @void, @void, r5}, 0x20) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.421334819s ago: executing program 0 (id=2244): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0x31, 0x2c53ff7a3b62436c, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) ioctl$FICLONE(r1, 0x40049409, r2) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x8804}, 0x80) 1.156074811s ago: executing program 0 (id=2245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9f, 0x9f, 0x7, [@union={0xc, 0x4, 0x0, 0x5, 0x0, 0x8, [{0xe, 0x2, 0xb0a}, {0x2, 0x5, 0x7f80}, {0x8, 0x0, 0x101}, {0xa, 0x5, 0x2}]}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @datasec={0xa, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x7, 0x6}, {0x1, 0x2, 0xd3}, {0x2, 0x6, 0x5}, {0x7, 0xfffffffe, 0xd}, {0x3, 0x0, 0xffffffff}], "cf2728"}]}, {0x0, [0x51, 0x2e, 0x61, 0x61, 0x8e]}}, &(0x7f00000000c0)=""/80, 0xbf, 0x50, 0x0, 0xad85}, 0x28) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.047328114s ago: executing program 0 (id=2246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000700000000010000000000000000000200000000000000000000000a0200000000002e0061"], 0x0, 0x5a, 0x0, 0x0, 0x10}, 0x28) splice(r0, 0x0, r2, 0x0, 0xa2a8, 0x3) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r5, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r7}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r9, 0x0, 0x2, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)="711f664eb50cd5279c17da770c65", 0xe}, 0x1, 0x0, 0x0, 0x805}, 0x4044004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711065000000000006000000000000009500"], 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmmsg(r11, &(0x7f0000002e40)=[{{0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x80, r13, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8161ca9c02f30d93daf7dac7b9e1967e4cada64e0c5f1672"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa0022}) 385.2352ms ago: executing program 2 (id=2247): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) 299.057828ms ago: executing program 2 (id=2248): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xe, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04600000000000002000128008000100767469001400028008000500ac1414aa08000400ac1414bb5d68971bdcadd879886d19e936b8a0628d129bb31ff54a936ef7496275bfef83db7e3f435fb2c7d7638f02d0848a5d618920e86d7bcdeee5baaaa7c5d4ada198a9b90e6201b742efae91"], 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x10'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11e, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "8edfc10dcedbc710", "566c0b37f066cffc79e1862e9fa0f8ac", "bfb64c00", "4a0f995759a1daf9"}, 0x28) 155.45341ms ago: executing program 2 (id=2249): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000020000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff0000001fbfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 155.130685ms ago: executing program 0 (id=2250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept4$rose(r1, &(0x7f0000000080)=@short={0xb, @remote, @default, 0x1, @rose}, &(0x7f00000000c0)=0x6d, 0x80800) getsockopt$rose(r2, 0x104, 0x0, &(0x7f0000000100), &(0x7f0000000180)=0x4) close(0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, 0x0, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r5, 0x4, 0x22, "604f5d5f1f9d39f2faa8d92f3f656f1812a0f7de394b22e4fff01fd82d32ec74acdc"}, 0x2a) 136.171282ms ago: executing program 2 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000080)=0x80, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x1, [{0xe, 0x0, 0x5}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x9}, 0x28) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) (async) r3 = socket(0x23, 0x80805, 0x2) connect$llc(r3, &(0x7f0000000540)={0x1a, 0x205, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r5, 0x16, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$xdp(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x2, r6, 0x38}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="0d9c96bb7e3a73cd497c2dcb7949ff665bd867e0baaeb4552e4b6c6cf609d14eb5038b", 0x23}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f0000000300)="708d20206d635747e299bb187c33c72dca7b0a081a9546d4097525d40a8efa7687e757be276b019a0f376cb3cb8004c8d9421366c08d95cee09b1735d2c1b21bc317faaac2a0b69593d7025e594668a72dda76b8ad24de53415d567d9ed3cc32bf53ad320ed7929971baa87dfbe76df7f6f523f384e6d5191026273ca752ab803f5da4fbd1224fa9d186b402963fa5", 0x8f}], 0x4, 0x0, 0x0, 0x800}, 0x4000000) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x0, 0x3c8, 0xd0, 0x2e0, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0x0, 0x1fe], 'xfrm0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x3a, 0x8, 0x3, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast2, 0x5, 0x0, 0x1}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff000000, 0x101000000, 0xffffff00], [0xffffff00, 0xff, 0xff000000, 0xff000000], 'ipvlan0\x00', 'wg2\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x7, 0x1a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x99c, 0xd, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) 126.521673ms ago: executing program 0 (id=2252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0x21, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x44000) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x9, 0x3d, 0xffff0000, 0x24140, r3, 0x4, '\x00', r4, r3, 0x4, 0x2, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="18220000", @ANYRES32=r9, @ANYBLOB="000000000a00001a"], 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000010003c3bfa300000000000007030000f0ffffff7a0af0fff8ffffff71a4f0ff00000000650a0200000000ff2d400500000000004400000001ede4ff6b03000000000000cc440000000000007a0a00fe00ffffffdb03000001000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8cde6aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a42b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75cafd2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719ba9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeeaaed7b35e3460bd571e09196ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb0613684e128cb06ded90b9a341304c2890cda1f96b95add69279063eaa76c336adad0b80b4be2511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999a556b3df4dd146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa83a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d0f9dd53478dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d78d6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ba0d48fceb72b30bbeeaab3e6b12ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4c52ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c3c4e853800f56124eec7505744b29c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc24f30daca3c9b184e140792297d023ef525e2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800000000000000000000000000000064563875944a308cfd7bccc4bdc6ca5107b7affa9962afe1b3c64ad26ebfde3bb82020147e20db88bd0358769e9b407f74795e153e59d16b1675ae8cde3ca8ee3eea9eb93cea89d52275f8e9bf4e00000080353bd348938c446fa3d59c62db01c6d30bc9f6b3862c949c7fce4db56e58349c9fa363c662c34d461a58bfebd2a3cdb17906b0f9dafd31a80533e4aa064e4b8e891fcc82fbffe0f55220862750edd1a317338d6b1fad87bc6bcd0cd22c3172bb64c6f893c99e445fa387097e5359b644477c23a72eeb00e34c84d7a8bb462a10fb2d981f90b9c74a06d8470fff093e699a7c3b09d81118dafc74e7603d8c8e5a6d14c444663499eff6bd25f3c356dc31fa93f7053d09fa45eaebfaa7da6ba8ac5bc4b660e2c3745f5b41c361d5750a7c11850a91e51927679f255500e2cfd2f0c592e13713271d74105aa1202d7acbbd10cc2b9d31c23f0cdf710e277ab78aab43da554167f56362187667e61e0f6a4a00a0d247f241146c64bc266f91fe0ed2358e03a415a52304aea86c3527c87e94a15578ea5230222c5c20220b4fd2e5506699820e3cc8de3faeb163f2a65009bfee4d53fe5e4723377cba9b52ab0b21e881b4e89f22d676c3020df1b39b678c71d989a91cd88ff69cf6fd14e700"/3715], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, r8}, 0x94) 7.331173ms ago: executing program 2 (id=2253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000001d80), &(0x7f0000001d40)=r4}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000040), 0x0}, 0x20) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/177, 0xb1, 0x0, &(0x7f0000000600)=""/151, 0x97}}, 0x10) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x20ac7, 0x10}, 0xc) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="9e00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000007000000000000005600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000043a12000000000008547020004000000b7080000000000007b8af8ff00000000b7080000ff0700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000ffff1600010000000e00000018280000", @ANYRES32=r5, @ANYBLOB="00000000ff030000af140200ffffffff184b0000faffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xa5, &(0x7f0000000480)=""/165, 0x41000, 0x2, '\x00', 0x0, 0x1b, r11, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, 0x0, 0x3, &(0x7f0000000840)=[r13, 0x1, 0xffffffffffffffff, r14], &(0x7f0000000880)=[{0x4, 0x5, 0xf, 0x5}, {0x1, 0x5, 0xb, 0x9}, {0x4, 0x2, 0xc, 0x6}], 0x10, 0x6}, 0x94) 0s ago: executing program 0 (id=2254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) kernel console output (not intermixed with test programs): ge0: port 1(bridge_slave_0) entered forwarding state [ 233.963078][T11786] netlink: 'syz.4.1487': attribute type 32 has an invalid length. [ 233.976192][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 233.987873][T11786] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 234.007106][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.014239][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.215542][T11588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.259419][T11775] lo speed is unknown, defaulting to 1000 [ 234.303778][T11588] veth0_vlan: entered promiscuous mode [ 234.320577][T11588] veth1_vlan: entered promiscuous mode [ 234.362239][T11588] veth0_macvtap: entered promiscuous mode [ 234.380286][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'. [ 234.386488][T11588] veth1_macvtap: entered promiscuous mode [ 234.419918][T11588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.438471][T11588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.454373][ T6276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.464454][ T6276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.480215][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.507048][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.594945][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.602782][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.634098][T11811] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.1492'. [ 234.690878][ T6276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.711294][ T6276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.734517][T11793] lo speed is unknown, defaulting to 1000 [ 234.901221][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 235.060879][T11818] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.074058][T11818] bridge0: port 3(bond6) entered blocking state [ 235.080507][T11818] bridge0: port 3(bond6) entered disabled state [ 235.087305][T11818] bond6: entered allmulticast mode [ 235.094413][T11818] bond6: entered promiscuous mode [ 235.099991][T11818] bridge0: port 3(bond6) entered blocking state [ 235.106540][T11818] bridge0: port 3(bond6) entered forwarding state [ 235.155225][ T36] bridge0: port 3(bond6) entered disabled state [ 235.190800][T11818] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 235.269553][T11820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.277229][T11820] bridge0: port 4(bond7) entered blocking state [ 235.287025][T11820] bridge0: port 4(bond7) entered disabled state [ 235.293695][T11820] bond7: entered allmulticast mode [ 235.300630][T11820] bond7: entered promiscuous mode [ 235.309306][T11820] bridge0: port 4(bond7) entered blocking state [ 235.315659][T11820] bridge0: port 4(bond7) entered forwarding state [ 235.378469][ T6276] bridge0: port 4(bond7) entered disabled state [ 235.386295][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1496'. [ 235.718114][T11833] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 235.734747][T11833] batman_adv: batadv0: Adding interface: team0 [ 235.747545][T11833] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 235.780572][T11836] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 235.796602][T11836] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1498'. [ 235.808472][T11836] team0: entered promiscuous mode [ 235.859171][T11833] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1498'. [ 235.860313][T11836] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.897870][T11836] batman_adv: batadv0: Interface activated: team0 [ 235.910340][T11836] batman_adv: batadv0: Interface deactivated: team0 [ 235.933969][T11836] batman_adv: batadv0: Removing interface: team0 [ 235.947654][T11836] bridge0: port 1(team0) entered blocking state [ 235.970519][T11836] bridge0: port 1(team0) entered disabled state [ 235.988924][T11836] team0: entered allmulticast mode [ 236.240896][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 236.316863][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.387789][T11852] syzkaller0: entered allmulticast mode [ 237.365510][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.576867][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.679589][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1508'. [ 237.723559][T11875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.731912][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.820463][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.896158][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.899894][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.914388][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.922395][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.930572][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.938346][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.959175][ T1104] bridge_slave_1: left allmulticast mode [ 237.965390][ T1104] bridge_slave_1: left promiscuous mode [ 237.971090][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.981228][ T1104] bridge_slave_0: left allmulticast mode [ 237.987963][ T1104] bridge_slave_0: left promiscuous mode [ 238.003814][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.306561][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.317957][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.328156][ T1104] bond0 (unregistering): Released all slaves [ 238.341140][T11869] lo speed is unknown, defaulting to 1000 [ 238.550164][T11887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.620856][T11888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.000975][T11903] netlink: 'syz.1.1517': attribute type 11 has an invalid length. [ 239.017739][T11903] vlan2: entered allmulticast mode [ 239.023147][T11903] hsr0: entered allmulticast mode [ 239.028423][T11903] hsr_slave_0: entered allmulticast mode [ 239.037240][T11903] hsr_slave_1: entered allmulticast mode [ 239.058624][T11879] lo speed is unknown, defaulting to 1000 [ 239.058637][T11907] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1516'. [ 239.087863][T11907] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1516'. [ 239.231748][T11910] erspan0: left allmulticast mode [ 239.375428][T11910] gretap1: left promiscuous mode [ 239.383723][T11910] batadv1: left allmulticast mode [ 239.409545][T11910] geneve2: left allmulticast mode [ 239.429217][T11910] gretap2: left promiscuous mode [ 239.442389][T11910] veth5: left promiscuous mode [ 239.453954][T11864] lo speed is unknown, defaulting to 1000 [ 239.461268][ T6780] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.482843][ T6780] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.495314][ T6780] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.513659][ T6780] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.756809][T11877] lo speed is unknown, defaulting to 1000 [ 239.899307][T11879] chnl_net:caif_netlink_parms(): no params data found [ 240.003975][ T5852] Bluetooth: hci2: command tx timeout [ 240.037968][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.054481][T11879] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.072002][T11879] bridge_slave_0: entered allmulticast mode [ 240.095154][T11879] bridge_slave_0: entered promiscuous mode [ 240.103160][T11879] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.114443][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.121774][T11879] bridge_slave_1: entered allmulticast mode [ 240.159605][T11879] bridge_slave_1: entered promiscuous mode [ 240.185642][T11917] lo speed is unknown, defaulting to 1000 [ 240.211921][T11930] x_tables: ip_tables: osf match: only valid for protocol 6 [ 240.392627][T11879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.427800][T11879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.537827][T11879] team0: Port device team_slave_0 added [ 240.560565][T11879] team0: Port device team_slave_1 added [ 240.731795][T11879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.739269][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.767011][T11879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.785079][ T1104] hsr_slave_0: left promiscuous mode [ 240.791066][ T1104] hsr_slave_1: left promiscuous mode [ 240.797188][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.805021][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.812835][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.825932][T11940] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 240.835781][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.843057][T11940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1525'. [ 240.857617][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 240.874811][ T1104] veth1_macvtap: left promiscuous mode [ 240.880496][ T1104] veth0_macvtap: left promiscuous mode [ 240.886569][ T1104] veth1_vlan: left promiscuous mode [ 240.891996][ T1104] veth0_vlan: left promiscuous mode [ 241.527794][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 241.556322][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 241.807660][T11879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.816285][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.842404][T11879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.996571][T11879] hsr_slave_0: entered promiscuous mode [ 242.002924][T11879] hsr_slave_1: entered promiscuous mode [ 242.083651][ T5846] Bluetooth: hci2: command tx timeout [ 242.138558][T11939] lo speed is unknown, defaulting to 1000 [ 242.471713][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1527'. [ 242.516408][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.580725][T11951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.663070][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.805003][T11879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.816851][T11879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.845598][T11879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.859844][T11879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.966055][T11879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.989872][T11879] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.009628][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.016742][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.051958][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.059140][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.160527][T11949] lo speed is unknown, defaulting to 1000 [ 243.543311][T11879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.635005][T11879] veth0_vlan: entered promiscuous mode [ 243.662404][T11879] veth1_vlan: entered promiscuous mode [ 243.896411][T11879] veth0_macvtap: entered promiscuous mode [ 243.923877][T11879] veth1_macvtap: entered promiscuous mode [ 243.954690][T11879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.978994][T11879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.011416][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.033163][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.052739][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.090778][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.167002][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 244.178536][ T5846] Bluetooth: hci2: command 0x040f tx timeout [ 244.187192][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 244.707431][T11995] pim6reg9: entered allmulticast mode [ 244.815285][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.835059][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.916071][T12001] smc: net device bond0 erased user defined pnetid SYZ [ 244.924444][ T30] audit: type=1800 audit(1751677233.509:6): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1535" name="memory.events" dev="tmpfs" ino=1742 res=0 errno=0 [ 244.945237][T12001] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2 [ 244.959985][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.999593][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.043209][T12005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1538'. [ 245.073864][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 245.157242][T12004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.481806][T12005] bond0 (unregistering): left promiscuous mode [ 245.503570][T12005] !: left promiscuous mode [ 245.524050][T12005] bond0 (unregistering): (slave 0!): Releasing backup interface [ 245.553092][T12005] bond0 (unregistering): Released all slaves [ 245.652943][T12004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.796846][T12004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.977851][T12004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.123162][ T6780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.217526][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.245866][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.268425][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.295437][ T6276] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.361878][T12012] lo speed is unknown, defaulting to 1000 [ 246.617966][ T6780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.710741][ T6780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.816389][ T6780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.980699][ T6780] bridge_slave_1: left allmulticast mode [ 246.989488][ T6780] bridge_slave_1: left promiscuous mode [ 246.995317][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.006527][ T6780] bridge_slave_0: left allmulticast mode [ 247.012169][ T6780] bridge_slave_0: left promiscuous mode [ 247.017856][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.241610][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.251801][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.261966][ T6780] bond0 (unregistering): Released all slaves [ 247.470893][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 247.474838][T12036] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 247.508359][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 247.531000][T12036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1544'. [ 247.534191][T12042] smc: removing ib device syz0 [ 247.564741][T12039] xt_CT: No such helper "snmp" [ 247.690089][T12053] netlink: 'syz.2.1549': attribute type 2 has an invalid length. [ 247.803336][T12053] : entered promiscuous mode [ 247.940577][T12060] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1550'. [ 248.022147][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 248.065199][T12059] tc_dump_action: action bad kind [ 248.085685][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.099817][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.108374][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.119774][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.127771][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.668718][T12074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1552'. [ 248.684849][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.767204][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.833600][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.500244][T12062] chnl_net:caif_netlink_parms(): no params data found [ 249.669926][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.685183][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.719669][T12062] bridge_slave_0: entered allmulticast mode [ 249.744190][T12096] netlink: 'syz.0.1556': attribute type 13 has an invalid length. [ 249.750008][T12062] bridge_slave_0: entered promiscuous mode [ 249.752394][T12096] netlink: 'syz.0.1556': attribute type 17 has an invalid length. [ 249.853277][T12096] erspan0: left allmulticast mode [ 249.931037][T12096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.997975][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.014695][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.021920][T12062] bridge_slave_1: entered allmulticast mode [ 250.045076][T12062] bridge_slave_1: entered promiscuous mode [ 250.046017][T12096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.083472][ T6780] hsr_slave_0: left promiscuous mode [ 250.089274][ T6780] hsr_slave_1: left promiscuous mode [ 250.104164][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.111579][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.120490][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.128162][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.129271][T12098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.159868][ T6780] veth1_macvtap: left promiscuous mode [ 250.166195][ T6780] veth0_macvtap: left promiscuous mode [ 250.171814][ T6780] veth1_vlan: left promiscuous mode [ 250.177660][ T6780] veth0_vlan: left promiscuous mode [ 250.208021][T12096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.243674][ T5852] Bluetooth: hci2: command tx timeout [ 250.498549][ T6780] team0 (unregistering): Port device team_slave_1 removed [ 250.530138][ T6780] team0 (unregistering): Port device team_slave_0 removed [ 250.858839][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.938839][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.968610][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.017299][T12062] team0: Port device team_slave_0 added [ 251.036845][T12062] team0: Port device team_slave_1 added [ 251.089524][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.096686][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.122867][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.151856][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.164532][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.197102][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.298066][T12062] hsr_slave_0: entered promiscuous mode [ 251.305489][T12062] hsr_slave_1: entered promiscuous mode [ 252.032417][T12104] __nla_validate_parse: 2 callbacks suppressed [ 252.032447][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1557'. [ 252.329604][ T5852] Bluetooth: hci2: command tx timeout [ 252.610414][T12110] netlink: 'syz.0.1559': attribute type 4 has an invalid length. [ 252.729201][T12119] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1559'. [ 252.752602][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 252.791533][T12062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.813147][T12062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.831763][T12062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.861736][T12062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.923591][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 253.002910][T12134] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1562'. [ 253.088771][T12140] netlink: 'syz.0.1565': attribute type 5 has an invalid length. [ 253.113868][T12140] netlink: 'syz.0.1565': attribute type 7 has an invalid length. [ 253.139809][T12140] : entered promiscuous mode [ 253.447870][T12152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.531882][T12062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.574938][T12152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.658157][T12062] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.670329][T12152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.720984][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.728159][ T6276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.761231][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.768439][ T6276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.011506][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 254.079198][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1569'. [ 254.396904][T12062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.404262][ T5852] Bluetooth: hci2: command tx timeout [ 254.436705][T12174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1571'. [ 254.470366][T12174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 254.497305][T12062] veth0_vlan: entered promiscuous mode [ 254.507041][T12178] netlink: 'syz.2.1573': attribute type 2 has an invalid length. [ 254.528407][T12178] k›*·]‘: entered promiscuous mode [ 254.549210][T12062] veth1_vlan: entered promiscuous mode [ 254.599625][T12062] veth0_macvtap: entered promiscuous mode [ 254.610966][T12062] veth1_macvtap: entered promiscuous mode [ 254.642253][T12062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.659924][T12062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.679747][T12183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1574'. [ 254.681014][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.700763][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.709679][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.720556][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.880148][ T6276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.888594][ T6780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.899862][ T6276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.907372][ T6780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.963700][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.205907][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.232738][T12191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.469667][T12203] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 255.495693][T12201] netlink: 'syz.2.1577': attribute type 13 has an invalid length. [ 255.579108][T12203] batadv0: entered promiscuous mode [ 255.585171][T12203] batadv0: entered allmulticast mode [ 255.592279][T12203] bridge0: port 1(batadv0) entered blocking state [ 255.609430][T12203] bridge0: port 1(batadv0) entered disabled state [ 255.636385][T12201] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 256.025250][T12215] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 256.075624][ T6183] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 256.085416][ T6183] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 256.236315][T12222] veth0_macvtap: left promiscuous mode [ 256.849613][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.216672][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.296934][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.354324][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.420673][ T36] bridge_slave_1: left allmulticast mode [ 257.426378][ T36] bridge_slave_1: left promiscuous mode [ 257.432007][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.441943][ T36] bridge_slave_0: left allmulticast mode [ 257.448594][ T36] bridge_slave_0: left promiscuous mode [ 257.454254][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.815265][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.844057][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.866834][ T36] bond0 (unregistering): Released all slaves [ 257.881624][T12236] __nla_validate_parse: 4 callbacks suppressed [ 257.881641][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 257.907181][T12228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 258.012311][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 258.073564][T12245] !: renamed from dummy0 [ 258.078280][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.094810][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.102668][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.112216][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.129784][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.240396][T12259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1589'. [ 258.649721][T12233] delete_channel: no stack [ 258.864567][T12289] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1594'. [ 258.890074][T12290] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1593'. [ 259.459292][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 259.642207][T12306] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.696319][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 259.725840][T12306] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 259.757311][T12306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.842507][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1601'. [ 259.909132][T12318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.994613][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.079239][T12317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.186322][T12328] xt_hashlimit: size too large, truncated to 1048576 [ 260.243937][ T5852] Bluetooth: hci2: command tx timeout [ 260.602450][ T36] hsr_slave_0: left promiscuous mode [ 260.625214][ T36] hsr_slave_1: left promiscuous mode [ 260.630877][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.641827][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.653210][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.660963][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.681911][ T36] veth1_macvtap: left promiscuous mode [ 260.687736][ T36] veth0_macvtap: left promiscuous mode [ 260.693281][ T36] veth1_vlan: left promiscuous mode [ 260.699030][ T36] veth0_vlan: left promiscuous mode [ 261.149999][ T36] team0 (unregistering): Port device team_slave_1 removed [ 261.179096][ T36] team0 (unregistering): Port device team_slave_0 removed [ 261.492478][T12344] C: renamed from lo [ 261.498211][T12344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.527185][T12247] chnl_net:caif_netlink_parms(): no params data found [ 261.679487][T12370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1611'. [ 261.699944][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.706110][T12371] sctp: [Deprecated]: syz.4.1612 (pid 12371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.706110][T12371] Use struct sctp_sack_info instead [ 261.713487][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.741479][T12247] bridge_slave_0: entered allmulticast mode [ 261.758606][T12247] bridge_slave_0: entered promiscuous mode [ 261.782189][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.813796][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.841984][T12247] bridge_slave_1: entered allmulticast mode [ 261.877933][T12247] bridge_slave_1: entered promiscuous mode [ 261.979015][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.048161][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.089622][T12247] team0: Port device team_slave_0 added [ 262.106674][T12247] team0: Port device team_slave_1 added [ 262.120934][T12378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1613'. [ 262.156096][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.163052][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.197857][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.238293][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.246818][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.285318][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.334092][ T5852] Bluetooth: hci2: command tx timeout [ 262.358764][T12247] hsr_slave_0: entered promiscuous mode [ 262.369947][T12247] hsr_slave_1: entered promiscuous mode [ 262.883512][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.949144][T12401] __nla_validate_parse: 1 callbacks suppressed [ 262.949160][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 262.976563][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1619'. [ 263.077866][T12247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.099764][T12247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.150372][T12247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.170247][T12247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.542783][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1624'. [ 263.586607][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.599163][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.660454][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.723864][T12424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.773111][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.780244][ T6183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.791502][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 263.804878][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 263.822017][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.829131][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.846760][T12424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.889265][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 263.902347][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1626'. [ 264.006189][ T1104] tipc: Subscription rejected, illegal request [ 264.368071][T12452] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1631'. [ 264.377330][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 264.390440][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 264.403649][ T5846] Bluetooth: hci2: command tx timeout [ 264.427097][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.675804][T12247] veth0_vlan: entered promiscuous mode [ 264.686603][T12247] veth1_vlan: entered promiscuous mode [ 264.809224][T12247] veth0_macvtap: entered promiscuous mode [ 264.828818][T12247] veth1_macvtap: entered promiscuous mode [ 264.900831][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.929971][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.962045][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.000083][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.073114][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.138832][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.324617][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.337694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.384385][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.406628][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.864813][T12497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.887288][T12500] bond0: Unable to set down delay as MII monitoring is disabled [ 265.895381][T12499] bond0: Unable to set down delay as MII monitoring is disabled [ 265.953788][T12504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.017465][T12500] netlink: 'syz.1.1645': attribute type 12 has an invalid length. [ 266.102445][T12501] netlink: 'syz.1.1645': attribute type 12 has an invalid length. [ 266.185467][T12504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.466003][ T6276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.981929][ T6276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.349757][ T6276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.396354][ T6276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.463876][ T6276] bridge_slave_1: left allmulticast mode [ 267.469555][ T6276] bridge_slave_1: left promiscuous mode [ 267.475249][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.486595][ T6276] bridge_slave_0: left allmulticast mode [ 267.492661][ T6276] bridge_slave_0: left promiscuous mode [ 267.498394][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.711041][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.721160][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.730771][ T6276] bond0 (unregistering): Released all slaves [ 268.008856][T12535] xt_hashlimit: size too large, truncated to 1048576 [ 268.210696][T12546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.446246][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.454881][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.464135][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.472313][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.480438][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.683604][ T6276] hsr_slave_0: left promiscuous mode [ 268.703796][ T6276] hsr_slave_1: left promiscuous mode [ 268.709720][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.721634][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.737480][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.753525][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.791923][ T6276] veth1_macvtap: left promiscuous mode [ 268.806579][ T6276] veth0_macvtap: left promiscuous mode [ 268.822339][T12565] __nla_validate_parse: 6 callbacks suppressed [ 268.822352][T12565] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1662'. [ 268.829239][ T6276] veth1_vlan: left promiscuous mode [ 268.869770][ T6276] veth0_vlan: left promiscuous mode [ 269.011848][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 269.068458][T12580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.196633][T12580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.262387][T12592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.466278][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 269.505038][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 270.323323][T12626] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96 [ 270.364784][T12552] chnl_net:caif_netlink_parms(): no params data found [ 270.568282][ T5846] Bluetooth: hci2: command tx timeout [ 271.090856][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.133767][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.157157][T12552] bridge_slave_0: entered allmulticast mode [ 271.181580][T12552] bridge_slave_0: entered promiscuous mode [ 271.219929][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.240714][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.254744][T12552] bridge_slave_1: entered allmulticast mode [ 271.303580][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1686'. [ 271.321806][T12552] bridge_slave_1: entered promiscuous mode [ 271.385658][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.539914][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1686'. [ 271.587096][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.599085][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.647884][T12657] syzkaller0: entered promiscuous mode [ 271.657696][T12657] syzkaller0: entered allmulticast mode [ 272.643503][ T5846] Bluetooth: hci2: command tx timeout [ 272.726050][T12552] team0: Port device team_slave_0 added [ 272.733904][T12552] team0: Port device team_slave_1 added [ 272.782616][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.792498][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.824768][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.841086][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.849004][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.875528][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.998017][T12552] hsr_slave_0: entered promiscuous mode [ 273.011055][T12552] hsr_slave_1: entered promiscuous mode [ 273.029534][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 273.118842][T12677] geneve3: entered promiscuous mode [ 273.425124][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1696'. [ 273.546145][T12707] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1701'. [ 273.560192][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 273.569284][T12705] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.609257][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1701'. [ 273.762860][T12552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.833708][T12552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.878367][T12552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.947999][T12552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.020602][T12735] netlink: 'syz.2.1709': attribute type 2 has an invalid length. [ 274.046642][T12735] openvswitch: netlink: Flow key attribute not present in set flow. [ 274.107472][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.128332][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.158769][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.165936][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.192544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.199716][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.289828][T12750] sctp: [Deprecated]: syz.2.1711 (pid 12750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.289828][T12750] Use struct sctp_sack_info instead [ 274.393313][T12755] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1714'. [ 274.506407][T12760] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1715'. [ 274.725203][ T5846] Bluetooth: hci2: command tx timeout [ 274.764315][T12771] netlink: 'syz.4.1718': attribute type 10 has an invalid length. [ 274.765476][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.832167][T12552] veth0_vlan: entered promiscuous mode [ 274.866786][T12552] veth1_vlan: entered promiscuous mode [ 274.981048][T12552] veth0_macvtap: entered promiscuous mode [ 275.005464][T12552] veth1_macvtap: entered promiscuous mode [ 275.017446][T12782] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 275.033661][T12782] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 275.057136][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.086008][T12782] tipc: Enabling of bearer rejected, already enabled [ 275.114414][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.135157][T12785] netlink: 'syz.2.1723': attribute type 1 has an invalid length. [ 275.136473][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.268779][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.349827][T12785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.363861][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.401174][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.646887][T12796] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 275.723567][T12796] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 275.876101][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.891879][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.026714][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1728'. [ 276.047196][T12814] Bluetooth: MGMT ver 1.23 [ 276.128265][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.146541][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.696231][T12828] netlink: 'syz.0.1731': attribute type 2 has an invalid length. [ 276.771500][T12829] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1731'. [ 276.855218][T12832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'. [ 277.107895][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 277.291408][T12840] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.598839][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.961694][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.018806][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.107672][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.203004][ T36] bridge_slave_1: left allmulticast mode [ 278.208684][ T36] bridge_slave_1: left promiscuous mode [ 278.214592][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.223048][ T36] bridge_slave_0: left allmulticast mode [ 278.228861][ T36] bridge_slave_0: left promiscuous mode [ 278.234812][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.243885][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.461581][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.471848][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.482256][ T36] bond0 (unregistering): Released all slaves [ 278.832180][ T36] hsr_slave_0: left promiscuous mode [ 278.838412][ T36] hsr_slave_1: left promiscuous mode [ 278.847120][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.854676][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.862224][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.869755][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.885066][ T36] veth1_macvtap: left promiscuous mode [ 278.890582][ T36] veth0_macvtap: left promiscuous mode [ 278.898651][ T36] veth1_vlan: left promiscuous mode [ 278.903934][ T36] veth0_vlan: left promiscuous mode [ 279.179084][ T36] team0 (unregistering): Port device team_slave_1 removed [ 279.254950][T12848] x_tables: duplicate underflow at hook 1 [ 279.284304][T12848] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.316152][ T36] team0 (unregistering): Port device team_slave_0 removed [ 279.356045][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'. [ 279.406449][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.490083][T12868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.561421][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.580525][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.592778][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.600841][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.615897][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.624437][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.786771][T12855] bridge3: entered allmulticast mode [ 279.880949][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 280.126006][T12895] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 280.137252][T12895] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1749'. [ 280.207539][T12898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1750'. [ 280.219568][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1750'. [ 280.228911][T12898] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1750'. [ 280.241080][T12898] netlink: 'syz.0.1750': attribute type 3 has an invalid length. [ 280.267388][T12898] netlink: 'syz.0.1750': attribute type 2 has an invalid length. [ 280.278373][T12898] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1750'. [ 280.287563][T12898] netlink: 'syz.0.1750': attribute type 2 has an invalid length. [ 280.372832][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 280.667702][T12907] x_tables: duplicate underflow at hook 2 [ 280.673242][T12909] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.681873][T12907] netlink: 'syz.0.1751': attribute type 2 has an invalid length. [ 280.738285][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 280.755473][T12912] macvtap2: entered promiscuous mode [ 280.763387][T12912] syz_tun: entered promiscuous mode [ 280.769646][T12912] macvtap2: entered allmulticast mode [ 280.788329][T12912] syz_tun: entered allmulticast mode [ 280.798655][T12879] delete_channel: no stack [ 280.806737][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 280.995609][T12923] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 281.019858][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 281.157740][T12935] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 281.407737][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.471616][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.557866][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.684242][ T5852] Bluetooth: hci2: command tx timeout [ 281.729115][T12944] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 281.739243][T12944] openvswitch: netlink: Flow key attr not present in new flow. [ 281.749948][T12944] sctp: [Deprecated]: syz.2.1764 (pid 12944) Use of int in max_burst socket option deprecated. [ 281.749948][T12944] Use struct sctp_assoc_value instead [ 281.781407][T12944] pim6reg: entered allmulticast mode [ 281.790389][T12944] pim6reg: left allmulticast mode [ 282.702715][T12873] chnl_net:caif_netlink_parms(): no params data found [ 282.755363][T12963] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 282.836573][T12963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.921436][T12963] bond2: (slave gretap1): making interface the new active one [ 282.933101][T12963] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 282.959309][T12962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.148382][T12873] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.155591][T12873] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.162770][T12873] bridge_slave_0: entered allmulticast mode [ 283.170297][T12873] bridge_slave_0: entered promiscuous mode [ 283.178800][T12873] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.186065][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.189306][T12970] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 283.193190][T12873] bridge_slave_1: entered allmulticast mode [ 283.208114][T12873] bridge_slave_1: entered promiscuous mode [ 283.242157][T12873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.258428][T12873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.297386][T12873] team0: Port device team_slave_0 added [ 283.305250][T12873] team0: Port device team_slave_1 added [ 283.344134][T12873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.351137][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.380045][T12873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.414301][T12873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.421245][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.451207][T12873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.549091][T12873] hsr_slave_0: entered promiscuous mode [ 283.556653][T12873] hsr_slave_1: entered promiscuous mode [ 283.764940][ T5852] Bluetooth: hci2: command tx timeout [ 283.975169][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.060350][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.198133][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.249451][T13012] FAULT_INJECTION: forcing a failure. [ 284.249451][T13012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.276106][T13012] CPU: 1 UID: 0 PID: 13012 Comm: syz.0.1782 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 284.276128][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.276135][T13012] Call Trace: [ 284.276140][T13012] [ 284.276146][T13012] dump_stack_lvl+0x189/0x250 [ 284.276166][T13012] ? __pfx____ratelimit+0x10/0x10 [ 284.276181][T13012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.276196][T13012] ? __pfx__printk+0x10/0x10 [ 284.276222][T13012] should_fail_ex+0x414/0x560 [ 284.276243][T13012] _copy_to_user+0x31/0xb0 [ 284.276260][T13012] do_ip6t_get_ctl+0x981/0x1180 [ 284.276286][T13012] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 284.276302][T13012] ? __lock_acquire+0xab9/0xd20 [ 284.276321][T13012] ? __mutex_trylock_common+0x153/0x260 [ 284.276338][T13012] ? __pfx___mutex_trylock_common+0x10/0x10 [ 284.276356][T13012] ? rcu_is_watching+0x15/0xb0 [ 284.276382][T13012] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 284.276403][T13012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.276422][T13012] ? __might_fault+0xb0/0x130 [ 284.276444][T13012] nf_getsockopt+0x26e/0x290 [ 284.276469][T13012] ipv6_getsockopt+0x1ed/0x290 [ 284.276484][T13012] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 284.276500][T13012] ? __might_fault+0xb0/0x130 [ 284.276516][T13012] rawv6_getsockopt+0x298/0x580 [ 284.276532][T13012] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 284.276547][T13012] ? sock_common_getsockopt+0x2d/0xb0 [ 284.276564][T13012] do_sock_getsockopt+0x35d/0x650 [ 284.276585][T13012] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 284.276602][T13012] ? do_syscall_64+0x40/0x3b0 [ 284.276629][T13012] ? ksys_write+0x1e1/0x250 [ 284.276648][T13012] __x64_sys_getsockopt+0x1a5/0x250 [ 284.276665][T13012] ? do_syscall_64+0x40/0x3b0 [ 284.276681][T13012] ? do_syscall_64+0x40/0x3b0 [ 284.276699][T13012] do_syscall_64+0xfa/0x3b0 [ 284.276713][T13012] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.276727][T13012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.276739][T13012] ? clear_bhb_loop+0x60/0xb0 [ 284.276754][T13012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.276765][T13012] RIP: 0033:0x7f84eab8e929 [ 284.276776][T13012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.276787][T13012] RSP: 002b:00007f84e89d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 284.276801][T13012] RAX: ffffffffffffffda RBX: 00007f84eadb6160 RCX: 00007f84eab8e929 [ 284.276810][T13012] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 284.276816][T13012] RBP: 00007f84e89d5090 R08: 00002000000000c0 R09: 0000000000000000 [ 284.276824][T13012] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 284.276831][T13012] R13: 0000000000000000 R14: 00007f84eadb6160 R15: 00007ffcb023d8e8 [ 284.276851][T13012] [ 284.965962][T12873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.973689][T13009] delete_channel: no stack [ 284.975978][T12873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.005697][T12873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.026401][T12873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.209830][T12873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.234319][T12873] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.249808][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.256956][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.299497][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.306641][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.844213][ T5852] Bluetooth: hci2: command tx timeout [ 286.029047][T12873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.212436][T12873] veth0_vlan: entered promiscuous mode [ 286.247454][T12873] veth1_vlan: entered promiscuous mode [ 286.321860][T12873] veth0_macvtap: entered promiscuous mode [ 286.352007][T12873] veth1_macvtap: entered promiscuous mode [ 286.412308][T12873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.443997][T12873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.468951][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.482493][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.506212][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.522098][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.614596][T13091] __nla_validate_parse: 9 callbacks suppressed [ 286.614611][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1802'. [ 286.616007][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 286.641646][ T6276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.663812][ T6276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.699464][T13091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.710130][ T6276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.719959][ T6276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.760514][T13091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.839554][T13095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.072081][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 287.114275][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 287.175137][T13113] validate_nla: 1 callbacks suppressed [ 287.175152][T13113] netlink: 'syz.2.1810': attribute type 3 has an invalid length. [ 287.181190][T13109] netlink: 'syz.4.1809': attribute type 2 has an invalid length. [ 287.196573][T13109] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1809'. [ 287.402718][T13115] dummy0: entered promiscuous mode [ 287.413516][T13115] dummy0: entered allmulticast mode [ 287.518726][T13117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1812'. [ 288.503327][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.288664][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.332242][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.378726][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.441064][ T36] bridge_slave_1: left allmulticast mode [ 289.446993][ T36] bridge_slave_1: left promiscuous mode [ 289.452623][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.461901][ T36] bridge_slave_0: left allmulticast mode [ 289.467741][ T36] bridge_slave_0: left promiscuous mode [ 289.473865][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.590917][T13132] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1814'. [ 289.810221][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.823373][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.831499][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.840516][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.854741][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.921121][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.931385][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.941022][ T36] bond0 (unregistering): Released all slaves [ 290.191609][T13154] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.211348][T13154] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 290.565427][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1824'. [ 290.615592][T13170] netlink: 4136 bytes leftover after parsing attributes in process `syz.1.1823'. [ 290.653648][T13171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.732947][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.801867][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.254858][T13147] chnl_net:caif_netlink_parms(): no params data found [ 291.341393][T13181] netlink: 'syz.2.1827': attribute type 10 has an invalid length. [ 291.359399][T13181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1827'. [ 291.394639][T13181] geneve0: entered promiscuous mode [ 291.399980][T13181] geneve0: entered allmulticast mode [ 291.412260][T13181] team0: Port device geneve0 added [ 291.426796][ T1104] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.453546][ T1104] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.522793][ T1104] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.535535][ T1104] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.622102][T13147] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.639641][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.671901][T13147] bridge_slave_0: entered allmulticast mode [ 291.698056][T13192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1828'. [ 291.720061][T13147] bridge_slave_0: entered promiscuous mode [ 291.811134][T13147] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.831986][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.863611][T13147] bridge_slave_1: entered allmulticast mode [ 291.870962][T13147] bridge_slave_1: entered promiscuous mode [ 291.927443][ T5846] Bluetooth: hci2: command tx timeout [ 291.979730][T13147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.011186][T13147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.096275][T13147] team0: Port device team_slave_0 added [ 292.248154][T13147] team0: Port device team_slave_1 added [ 292.517445][T13147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.533445][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.603531][T13147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.645881][T13147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.672144][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.674435][T13195] netlink: 'syz.2.1829': attribute type 1 has an invalid length. [ 292.733841][T13147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.806611][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 293.043733][T13205] x_tables: unsorted entry at hook 3 [ 293.065189][ T36] hsr_slave_0: left promiscuous mode [ 293.072241][ T36] hsr_slave_1: left promiscuous mode [ 293.082601][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.090209][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.104016][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.113809][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 293.124946][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.145482][ T36] veth1_macvtap: left promiscuous mode [ 293.151049][ T36] veth0_macvtap: left promiscuous mode [ 293.156969][ T36] veth1_vlan: left promiscuous mode [ 293.162262][ T36] veth0_vlan: left promiscuous mode [ 293.487759][ T36] team0 (unregistering): Port device team_slave_1 removed [ 293.519598][ T36] team0 (unregistering): Port device team_slave_0 removed [ 293.798516][T13200] syz_tun (unregistering): left allmulticast mode [ 293.805330][T13200] syz_tun (unregistering): left promiscuous mode [ 293.840300][T13147] hsr_slave_0: entered promiscuous mode [ 293.849721][T13147] hsr_slave_1: entered promiscuous mode [ 293.860624][T13205] bridge5: entered promiscuous mode [ 293.868320][T13205] bridge5: entered allmulticast mode [ 293.875755][T13205] team0: Port device bridge5 added [ 293.951523][T13207] team0 (unregistering): left allmulticast mode [ 293.957813][T13207] geneve0: left allmulticast mode [ 293.962866][T13207] bridge0: port 1(team0) entered disabled state [ 293.970856][T13207] geneve0: left promiscuous mode [ 293.977619][T13207] team0 (unregistering): Port device geneve0 removed [ 293.987834][T13207] team0 (unregistering): Port device bridge5 removed [ 294.007621][ T6772] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.016075][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 294.018561][ T6772] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.036453][ T6772] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.077831][ T6772] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.220145][T13217] xt_CT: No such helper "pptp" [ 294.467424][T13235] tipc: Enabling of bearer rejected, failed to enable media [ 294.569352][T13241] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 294.577666][T13241] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 294.586331][T13242] x_tables: duplicate underflow at hook 1 [ 294.613317][T13245] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 294.727458][T13147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 294.739415][T13147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 294.747656][T13249] netlink: 'syz.2.1846': attribute type 11 has an invalid length. [ 294.756218][T13249] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1846'. [ 294.768557][T13147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.779038][T13147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.852948][T13147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.870026][T13147] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.880757][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.887889][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.905951][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.913097][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.018959][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 295.108012][T13147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.152041][T13147] veth0_vlan: entered promiscuous mode [ 295.167231][T13147] veth1_vlan: entered promiscuous mode [ 295.192449][T13274] netlink: 'syz.2.1851': attribute type 11 has an invalid length. [ 295.213599][T13147] veth0_macvtap: entered promiscuous mode [ 295.223163][T13147] veth1_macvtap: entered promiscuous mode [ 295.244744][T13147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.257934][T13147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.272380][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.282702][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.298033][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.332400][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.452193][ T6780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.469387][ T6780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.499137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.499151][T13280] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 295.533459][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.570617][T13280] bond3: (slave veth5): Releasing active interface [ 295.587730][T13280] netlink: 'syz.0.1854': attribute type 10 has an invalid length. [ 295.677881][T13280] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 295.790673][T13285] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 295.880191][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 295.884658][T13285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.918187][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 295.929094][T13285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'. [ 296.024822][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1859'. [ 296.319590][T13306] dvmrp1: entered allmulticast mode [ 296.363211][T13306] dvmrp1: left allmulticast mode [ 296.605045][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1871'. [ 296.627649][T13330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 296.682226][T13330] netlink: 'syz.0.1870': attribute type 7 has an invalid length. [ 296.735096][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1870'. [ 296.772957][T13341] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 296.829039][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 296.860614][T13341] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 296.925913][T13346] netlink: 'syz.4.1875': attribute type 13 has an invalid length. [ 296.936463][T13346] netlink: 'syz.4.1875': attribute type 17 has an invalid length. [ 296.945576][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1876'. [ 296.975729][T13346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.987256][T13346] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.011002][T13351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1876'. [ 297.011532][T13346] dummy0: left promiscuous mode [ 297.058359][T13346] dummy0: left allmulticast mode [ 297.077763][T13346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.131835][T13354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1875'. [ 297.157610][T13346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.187446][T13350] netlink: 'syz.4.1875': attribute type 12 has an invalid length. [ 297.212995][T13350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1875'. [ 297.636409][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.846405][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.915895][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.015691][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.217274][T13378] sock: sock_timestamping_bind_phc: sock not bind to device [ 299.232689][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.242151][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.254468][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.272799][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.282869][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.373084][ T13] bridge_slave_1: left allmulticast mode [ 299.391869][ T13] bridge_slave_1: left promiscuous mode [ 299.410724][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.422569][ T13] bridge_slave_0: left allmulticast mode [ 299.431334][ T13] bridge_slave_0: left promiscuous mode [ 299.437171][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.767752][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.778149][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.788717][ T13] bond0 (unregistering): Released all slaves [ 299.899310][T13409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1891'. [ 299.913251][T13410] netlink: 'syz.4.1890': attribute type 1 has an invalid length. [ 299.953073][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 300.107367][T13425] RDS: rds_bind could not find a transport for fe80::2d, load rds_tcp or rds_rdma? [ 300.209613][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 300.387056][T13445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1898'. [ 300.554133][T13457] netlink: 'syz.1.1902': attribute type 1 has an invalid length. [ 300.649493][ T30] audit: type=1800 audit(1751677289.229:7): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1903" name="memory.events" dev="tmpfs" ino=2123 res=0 errno=0 [ 300.708081][ T30] audit: type=1804 audit(1751677289.269:8): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1903" name="/newroot/410/memory.events" dev="tmpfs" ino=2123 res=1 errno=0 [ 300.756499][ T30] audit: type=1804 audit(1751677289.279:9): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1903" name="/newroot/410/memory.events" dev="tmpfs" ino=2123 res=1 errno=0 [ 300.793947][ T30] audit: type=1800 audit(1751677289.279:10): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1903" name="memory.events" dev="tmpfs" ino=2123 res=0 errno=0 [ 300.897916][T13466] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 300.950448][T13466] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 301.333969][T13379] chnl_net:caif_netlink_parms(): no params data found [ 301.363739][ T5846] Bluetooth: hci2: command tx timeout [ 301.929340][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.948307][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.974517][T13379] bridge_slave_0: entered allmulticast mode [ 301.981277][T13379] bridge_slave_0: entered promiscuous mode [ 301.999221][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.042319][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.055672][T13379] bridge_slave_1: entered allmulticast mode [ 302.074757][T13379] bridge_slave_1: entered promiscuous mode [ 302.085908][ T13] hsr_slave_0: left promiscuous mode [ 302.091864][ T13] hsr_slave_1: left promiscuous mode [ 302.100143][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.110347][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.124632][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.132245][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.159408][ T13] veth1_macvtap: left promiscuous mode [ 302.166673][ T13] veth0_macvtap: left promiscuous mode [ 302.172270][ T13] veth1_vlan: left promiscuous mode [ 302.177868][ T13] veth0_vlan: left promiscuous mode [ 302.219067][T13517] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 302.291326][T13518] __nla_validate_parse: 8 callbacks suppressed [ 302.291342][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 302.509291][ T13] team0 (unregistering): Port device team_slave_1 removed [ 302.539458][ T13] team0 (unregistering): Port device team_slave_0 removed [ 302.884298][T13379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.927712][T13379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.060551][T13532] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1918'. [ 303.146414][T13379] team0: Port device team_slave_0 added [ 303.169802][T13379] team0: Port device team_slave_1 added [ 303.448819][ T5846] Bluetooth: hci2: command tx timeout [ 303.770642][T13379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.797772][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.884074][T13379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.932201][T13379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.942497][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.987966][T13379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.171252][T13379] hsr_slave_0: entered promiscuous mode [ 304.186237][T13379] hsr_slave_1: entered promiscuous mode [ 304.298007][T13561] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1926'. [ 304.349332][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 304.674438][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 304.683667][T13585] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1932'. [ 304.864233][T13592] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1933'. [ 305.223201][T13379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.254021][T13379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.296154][T13379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.316153][T13379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.435966][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.523697][ T5846] Bluetooth: hci2: command tx timeout [ 305.546351][T13379] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.679760][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.686916][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.720609][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.727764][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.842358][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 305.859267][T13606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1936'. [ 305.906970][T13604] erspan0: entered promiscuous mode [ 305.912511][T13604] vlan3: entered promiscuous mode [ 305.981913][T13379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.064015][T13614] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 306.081714][T13614] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 306.400850][T13379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.420706][T13629] gtp0: entered promiscuous mode [ 306.426209][T13629] gtp0: entered allmulticast mode [ 306.435720][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 306.447373][T13630] gtp1: entered promiscuous mode [ 306.452330][T13630] gtp1: entered allmulticast mode [ 306.511711][T13379] veth0_vlan: entered promiscuous mode [ 306.538877][T13379] veth1_vlan: entered promiscuous mode [ 306.601631][T13379] veth0_macvtap: entered promiscuous mode [ 306.629429][T13379] veth1_macvtap: entered promiscuous mode [ 306.658604][T13379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.677557][T13379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.687455][T13650] netlink: 'syz.2.1948': attribute type 39 has an invalid length. [ 306.718370][ T6276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.744258][ T6276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.756823][ T6276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.766366][ T6276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.880729][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.918792][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.998850][ T6276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.035968][ T6276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.247245][T13674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 307.322382][T13678] __nla_validate_parse: 3 callbacks suppressed [ 307.322400][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 307.350507][T13678] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 307.360788][T13678] siw: device registration error -23 [ 307.457773][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 307.502925][T13690] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1956'. [ 307.580629][T13697] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1958'. [ 307.596476][T13699] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 307.665356][T13706] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1961'. [ 307.695524][T13710] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1961'. [ 307.727097][T13711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1962'. [ 307.802805][ T6183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.323911][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.334693][ T6183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.795023][ T6183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.093813][ T6183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.171642][ T6183] bridge_slave_1: left allmulticast mode [ 309.178149][ T6183] bridge_slave_1: left promiscuous mode [ 309.184204][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.192501][ T6183] bridge_slave_0: left allmulticast mode [ 309.198278][ T6183] bridge_slave_0: left promiscuous mode [ 309.204468][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.411334][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.421695][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.431637][ T6183] bond0 (unregistering): Released all slaves [ 309.810903][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'. [ 309.822295][T13738] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1969'. [ 309.890941][T13735] bridge0: port 2(erspan0) entered blocking state [ 309.923534][T13735] bridge0: port 2(erspan0) entered disabled state [ 309.943733][T13735] erspan0: entered allmulticast mode [ 309.968259][T13735] erspan0: left allmulticast mode [ 310.148900][ T6183] hsr_slave_0: left promiscuous mode [ 310.166964][ T6183] hsr_slave_1: left promiscuous mode [ 310.172911][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.183580][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.196630][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.209596][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.225668][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.236130][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.244567][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.255928][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.264178][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.292368][ T6183] veth1_macvtap: left promiscuous mode [ 310.298280][ T6183] veth0_macvtap: left promiscuous mode [ 310.308516][ T6183] veth1_vlan: left promiscuous mode [ 310.316219][ T6183] veth0_vlan: left promiscuous mode [ 310.323019][T13740] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1968'. [ 310.659309][ T6183] team0 (unregistering): Port device team_slave_1 removed [ 310.689302][ T6183] team0 (unregistering): Port device team_slave_0 removed [ 311.327527][T13779] netlink: 'syz.2.1977': attribute type 1 has an invalid length. [ 311.433163][T13779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.449352][T13791] gretap2: entered promiscuous mode [ 311.459878][T13791] bond3: (slave gretap2): making interface the new active one [ 311.470163][T13791] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 311.596567][T13779] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 311.812904][T13805] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.826187][T13808] bridge0: entered allmulticast mode [ 311.839502][T13808] bridge0: port 1(batadv0) entered disabled state [ 312.212517][T13756] chnl_net:caif_netlink_parms(): no params data found [ 312.324175][ T5852] Bluetooth: hci2: command tx timeout [ 312.438148][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.445888][T13756] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.454534][T13756] bridge_slave_0: entered allmulticast mode [ 312.461756][T13756] bridge_slave_0: entered promiscuous mode [ 312.488376][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.503801][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.510945][T13756] bridge_slave_1: entered allmulticast mode [ 312.535705][T13756] bridge_slave_1: entered promiscuous mode [ 312.542876][T13848] __nla_validate_parse: 5 callbacks suppressed [ 312.542889][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 312.608061][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.608956][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1997'. [ 312.639254][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.666973][T13856] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1997'. [ 312.746553][T13861] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1998'. [ 312.755863][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 312.765148][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 312.778772][T13756] team0: Port device team_slave_0 added [ 312.802235][T13756] team0: Port device team_slave_1 added [ 312.841921][T13868] raw_sendmsg: syz.2.2001 forgot to set AF_INET. Fix it! [ 312.865536][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.876737][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.905569][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.942693][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.950643][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.977544][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.019987][T13880] netlink: 'syz.2.2007': attribute type 6 has an invalid length. [ 313.028317][T13880] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2007'. [ 313.042526][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2006'. [ 313.071021][T13756] hsr_slave_0: entered promiscuous mode [ 313.079586][T13756] hsr_slave_1: entered promiscuous mode [ 313.102263][T13880] netlink: 'syz.2.2007': attribute type 10 has an invalid length. [ 313.110573][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2007'. [ 313.122380][T13880] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 313.270387][T13892] tap0: tun_chr_ioctl cmd 1074025677 [ 313.275890][T13892] tap0: linktype set to 825 [ 313.291049][T13892] tap0: tun_chr_ioctl cmd 2147767507 [ 313.508182][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 313.658773][T13756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.673295][T13756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.690472][T13756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.744175][T13756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.997220][T13756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.026857][T13756] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.047675][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.054809][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.121297][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.128459][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.235651][T13756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.318468][T13933] erspan0: mtu less than device minimum [ 314.413724][ T5852] Bluetooth: hci2: command tx timeout [ 314.647262][T13958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.888486][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.976885][T13756] veth0_vlan: entered promiscuous mode [ 314.998864][T13756] veth1_vlan: entered promiscuous mode [ 315.040818][T13756] veth0_macvtap: entered promiscuous mode [ 315.110055][T13983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.112846][T13756] veth1_macvtap: entered promiscuous mode [ 315.159603][T13985] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 315.165251][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.184146][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.205914][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.224683][T13987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.235352][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.254285][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.276037][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.324619][T13987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.394561][ T6276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.424936][ T6276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.490630][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.519838][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.641564][T14009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.717484][T14013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.791997][T14009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.878382][T13975] delete_channel: no stack [ 316.646090][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.725332][ T6276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.997016][ T6276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.065501][ T6276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.134677][ T6276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.212135][ T6276] bridge_slave_1: left allmulticast mode [ 318.217871][ T6276] bridge_slave_1: left promiscuous mode [ 318.224068][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.232966][ T6276] bridge_slave_0: left allmulticast mode [ 318.238919][ T6276] bridge_slave_0: left promiscuous mode [ 318.244876][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.524488][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.536453][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.546253][ T6276] bond0 (unregistering): Released all slaves [ 319.072719][T14037] __nla_validate_parse: 9 callbacks suppressed [ 319.072733][T14037] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2047'. [ 319.149583][T14039] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 319.208747][T14051] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2051'. [ 319.303992][T14039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.329178][T14052] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2050'. [ 319.357393][T14057] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2053'. [ 319.364298][T14051] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 319.416619][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 319.474031][T14039] vlan3: entered allmulticast mode [ 319.479304][T14039] bond1: entered allmulticast mode [ 319.549416][T14062] openvswitch: netlink: EtherType 10 is less than min 600 [ 319.702753][ T6276] hsr_slave_0: left promiscuous mode [ 319.725525][ T6276] hsr_slave_1: left promiscuous mode [ 319.726159][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.731383][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.747306][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.748183][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.756089][T14072] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2058'. [ 319.771308][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.780094][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.787842][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.796284][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.806106][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.863079][ T6276] veth1_macvtap: left promiscuous mode [ 319.879907][ T6276] veth0_macvtap: left promiscuous mode [ 319.893678][ T6276] veth1_vlan: left promiscuous mode [ 319.898991][ T6276] veth0_vlan: left promiscuous mode [ 319.938460][T14082] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2059'. [ 320.847861][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 320.877212][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 321.123761][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 321.385624][T14092] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 321.627123][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 321.671894][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 321.847746][ T5846] Bluetooth: hci2: command tx timeout [ 322.038541][T14068] chnl_net:caif_netlink_parms(): no params data found [ 322.383008][T14068] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.404189][T14068] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.427714][T14068] bridge_slave_0: entered allmulticast mode [ 322.436399][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 322.498472][T14068] bridge_slave_0: entered promiscuous mode [ 322.528704][T14068] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.554675][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.561890][T14068] bridge_slave_1: entered allmulticast mode [ 322.591896][T14068] bridge_slave_1: entered promiscuous mode [ 322.730349][T14068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.748693][T14068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.842442][T14146] ip6tnl2: entered promiscuous mode [ 322.850284][T14146] ip6tnl2: entered allmulticast mode [ 322.939720][T14068] team0: Port device team_slave_0 added [ 322.959881][T14068] team0: Port device team_slave_1 added [ 323.089867][T14068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.113570][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.183484][T14068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.205004][T14068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.211964][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.242590][T14068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.374163][T14068] hsr_slave_0: entered promiscuous mode [ 323.381509][T14068] hsr_slave_1: entered promiscuous mode [ 323.459000][T14158] netlink: 'syz.1.2079': attribute type 30 has an invalid length. [ 323.574927][T14163] netlink: 'syz.4.2080': attribute type 1 has an invalid length. [ 323.622365][T14163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.652193][T14164] bond2: (slave veth3): Enslaving as an active interface with a down link [ 323.933460][ T5846] Bluetooth: hci2: command tx timeout [ 324.504312][T14171] delete_channel: no stack [ 324.772052][T14068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.797341][T14068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.830088][T14068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.876126][T14068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.916519][T14192] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 324.935830][T14192] __nla_validate_parse: 1 callbacks suppressed [ 324.935844][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 325.068054][T14068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.122485][T14068] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.141628][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.148784][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.191505][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.198695][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.417863][T14212] bridge6: entered promiscuous mode [ 325.434886][T14212] bridge6: entered allmulticast mode [ 325.600848][T14228] bond2: (slave gretap1): Releasing active interface [ 325.620490][T14228] bond3: (slave gretap2): Releasing active interface [ 325.657944][T14068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.716029][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2099'. [ 325.744572][T14068] veth0_vlan: entered promiscuous mode [ 325.782923][T14239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.797607][T14068] veth1_vlan: entered promiscuous mode [ 325.824546][T14232] netlink: 'syz.1.2100': attribute type 303 has an invalid length. [ 325.848882][T14068] veth0_macvtap: entered promiscuous mode [ 325.858950][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2101'. [ 325.868470][T14241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2101'. [ 325.871428][T14068] veth1_macvtap: entered promiscuous mode [ 325.901640][T14239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.915701][T14068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.926419][T14068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.939466][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 325.987501][T14236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.998207][ T6772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.007570][ T5846] Bluetooth: hci2: command tx timeout [ 326.016548][ T6772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.035876][ T6772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.047011][ T6772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.223938][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.231774][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.262419][T14257] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2105'. [ 326.293791][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.301625][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.350867][T14257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2105'. [ 326.360284][T14257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2105'. [ 326.556597][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 326.589190][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 326.657745][T14272] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 326.703657][ T5846] block nbd0: Receive control failed (result -32) [ 328.547272][ T6780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.798508][ T6780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.854694][ T6780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.914743][ T6780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.991001][ T6780] bridge_slave_1: left allmulticast mode [ 328.996696][ T6780] bridge_slave_1: left promiscuous mode [ 329.002326][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.010892][ T6780] bridge_slave_0: left allmulticast mode [ 329.016691][ T6780] bridge_slave_0: left promiscuous mode [ 329.023152][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.241123][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.251452][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.261810][ T6780] bond0 (unregistering): Released all slaves [ 329.587235][ T6780] hsr_slave_0: left promiscuous mode [ 329.593013][ T6780] hsr_slave_1: left promiscuous mode [ 329.598721][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.606289][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.614435][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.621824][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.647637][ T6780] veth1_macvtap: left promiscuous mode [ 329.653152][ T6780] veth0_macvtap: left promiscuous mode [ 329.658806][ T6780] veth1_vlan: left promiscuous mode [ 329.664655][ T6780] veth0_vlan: left promiscuous mode [ 330.101729][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.117567][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.147718][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.176196][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.186350][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.462901][ T6780] team0 (unregistering): Port device team_slave_1 removed [ 330.499548][ T6780] team0 (unregistering): Port device team_slave_0 removed [ 330.813716][T14342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.004387][T14354] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 331.041364][T14354] __nla_validate_parse: 1 callbacks suppressed [ 331.041377][T14354] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2128'. [ 331.091123][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 331.383014][T14374] unknown channel width for channel at 909000KHz? [ 331.423269][T14378] vlan0: entered promiscuous mode [ 331.424400][T14374] unknown channel width for channel at 909000KHz? [ 331.574271][T14391] netlink: 508 bytes leftover after parsing attributes in process `syz.0.2142'. [ 331.584720][T14394] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 331.803784][T14408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2145'. [ 331.905468][T14411] netlink: 'syz.0.2146': attribute type 10 has an invalid length. [ 332.013726][T14415] netlink: 'syz.0.2147': attribute type 3 has an invalid length. [ 332.060184][T14334] chnl_net:caif_netlink_parms(): no params data found [ 332.108311][T14419] syzkaller1: entered promiscuous mode [ 332.114080][T14419] syzkaller1: entered allmulticast mode [ 332.243841][ T5846] Bluetooth: hci2: command tx timeout [ 332.266973][T14334] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.279623][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.287211][T14334] bridge_slave_0: entered allmulticast mode [ 332.298263][T14334] bridge_slave_0: entered promiscuous mode [ 332.324333][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.340772][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.348289][T14334] bridge_slave_1: entered allmulticast mode [ 332.376050][T14334] bridge_slave_1: entered promiscuous mode [ 332.388803][T14440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.482980][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.511930][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.635776][T14334] team0: Port device team_slave_0 added [ 332.675073][T14334] team0: Port device team_slave_1 added [ 332.746466][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.760121][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.786346][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.808113][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.818592][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.847450][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.910019][T14468] atomic_op ffff888057532998 conn xmit_atomic 0000000000000000 [ 332.922600][T14334] hsr_slave_0: entered promiscuous mode [ 332.928764][T14334] hsr_slave_1: entered promiscuous mode [ 332.949699][ T6772] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.961984][ T6772] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.993935][ T6772] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.006246][ T6772] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.047968][T14472] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 333.308653][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 333.485867][T14334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.508135][T14334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.529546][T14334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.542456][T14334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.704137][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2170'. [ 333.714035][T14509] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 333.724466][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2170'. [ 333.734553][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2170'. [ 333.750756][T14334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.790527][T14511] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2171'. [ 333.798200][T14334] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.840663][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.847817][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.869639][T14518] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 333.879162][T14518] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 333.892931][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.900085][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.332561][ T5846] Bluetooth: hci2: command tx timeout [ 334.451670][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.564888][T14334] veth0_vlan: entered promiscuous mode [ 334.585723][T14334] veth1_vlan: entered promiscuous mode [ 334.648817][T14334] veth0_macvtap: entered promiscuous mode [ 334.667352][T14334] veth1_macvtap: entered promiscuous mode [ 334.698055][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.714678][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.739712][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.755648][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.786604][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.796247][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.861977][T14531] delete_channel: no stack [ 335.131407][ T6276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.149957][ T6276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.177413][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.202268][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.308881][T14567] IPv6: NLM_F_REPLACE set, but no existing node found! [ 335.892202][T14575] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 336.170814][T14590] netlink: 'syz.1.2191': attribute type 8 has an invalid length. [ 336.240292][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 336.251032][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 336.260218][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2193'. [ 336.373620][T14608] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 336.421724][T14607] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.2195'. [ 336.433653][T14607] netlink: zone id is out of range [ 336.438769][T14607] netlink: zone id is out of range [ 336.486994][T14610] bridge6: entered promiscuous mode [ 336.505475][T14611] bridge7: entered promiscuous mode [ 336.517436][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 336.526980][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 336.543592][T14607] netlink: zone id is out of range [ 336.548717][T14607] netlink: zone id is out of range [ 336.557582][T14607] netlink: zone id is out of range [ 336.596449][T14607] netlink: zone id is out of range [ 336.613786][T14607] netlink: zone id is out of range [ 336.626938][T14607] netlink: zone id is out of range [ 336.641330][T14607] netlink: zone id is out of range [ 336.791657][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 336.830841][T14619] nbd: illegal input index -381222912 [ 336.831778][ T6276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.962351][T14612] delete_channel: no stack [ 338.085887][ T6276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.155118][ T6276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.203895][ T6276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.271158][ T6276] bridge_slave_1: left allmulticast mode [ 338.277020][ T6276] bridge_slave_1: left promiscuous mode [ 338.282664][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.291912][ T6276] bridge_slave_0: left allmulticast mode [ 338.297850][ T6276] bridge_slave_0: left promiscuous mode [ 338.303593][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.518254][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.528484][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.538079][ T6276] bond0 (unregistering): Released all slaves [ 338.851191][ T6276] hsr_slave_0: left promiscuous mode [ 338.857475][ T6276] hsr_slave_1: left promiscuous mode [ 338.863693][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.871076][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.878757][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.886745][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.901779][ T6276] veth1_macvtap: left promiscuous mode [ 338.907376][ T6276] veth0_macvtap: left promiscuous mode [ 338.912880][ T6276] veth1_vlan: left promiscuous mode [ 338.918290][ T6276] veth0_vlan: left promiscuous mode [ 339.140712][T14633] netlink: 'syz.2.2205': attribute type 13 has an invalid length. [ 339.151352][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 339.313281][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.323201][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.337808][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.351587][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.362970][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.467927][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 339.505377][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 339.858790][T14642] syzkaller1: entered promiscuous mode [ 339.864902][T14642] syzkaller1: entered allmulticast mode [ 340.015975][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 340.082853][T14652] netlink: 'syz.0.2210': attribute type 10 has an invalid length. [ 340.112678][T14652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2210'. [ 340.128945][T14652] dummy0: entered promiscuous mode [ 340.135584][T14652] bridge0: port 1(dummy0) entered blocking state [ 340.143050][T14652] bridge0: port 1(dummy0) entered disabled state [ 340.149838][T14652] dummy0: entered allmulticast mode [ 340.174874][T14652] bridge0: port 1(dummy0) entered blocking state [ 340.181341][T14652] bridge0: port 1(dummy0) entered forwarding state [ 340.708003][T14687] netlink: 'syz.4.2221': attribute type 1 has an invalid length. [ 340.738352][T14687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.176435][T14668] delete_channel: no stack [ 341.428384][T14695] tipc: Enabled bearer , priority 0 [ 341.443440][ T5852] Bluetooth: hci2: command tx timeout [ 341.467707][T14695] D: renamed from syzkaller0 [ 341.481831][T14695] tipc: Disabling bearer [ 341.705251][T14698] net_ratelimit: 4054 callbacks suppressed [ 341.705261][T14698] openvswitch: netlink: EtherType 10 is less than min 600 [ 341.967081][T14646] chnl_net:caif_netlink_parms(): no params data found [ 342.591257][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.600339][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.611911][T14646] bridge_slave_0: entered allmulticast mode [ 342.625464][T14646] bridge_slave_0: entered promiscuous mode [ 342.633634][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.642056][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.651096][T14646] bridge_slave_1: entered allmulticast mode [ 342.666401][T14646] bridge_slave_1: entered promiscuous mode [ 342.820677][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.875382][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.941339][T14718] bridge0: Device is already in use. [ 342.950835][T14646] team0: Port device team_slave_0 added [ 342.958641][T14722] __nla_validate_parse: 9 callbacks suppressed [ 342.958650][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 342.980294][T14722] openvswitch: netlink: Missing key (keys=40, expected=100) [ 342.998853][T14646] team0: Port device team_slave_1 added [ 343.048977][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.063541][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.090032][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 343.095611][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.116831][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.143443][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.146369][T14733] nft_compat: unsupported protocol 5 [ 343.189479][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.255008][T14646] hsr_slave_0: entered promiscuous mode [ 343.266080][T14646] hsr_slave_1: entered promiscuous mode [ 343.281878][T14739] openvswitch: netlink: EtherType 10 is less than min 600 [ 343.524347][ T5852] Bluetooth: hci2: command tx timeout [ 344.059245][T14646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.080062][T14646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.102121][T14646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.121346][T14646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.182639][T14788] openvswitch: netlink: IPv6 tunnel dst address is zero [ 344.207473][T14743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.289592][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.314323][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.329039][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.336210][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.359535][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.366763][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.437882][T14762] delete_channel: no stack [ 344.620474][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.872734][T14798] openvswitch: netlink: EtherType 10 is less than min 600 [ 345.001481][T14646] veth0_vlan: entered promiscuous mode [ 345.206987][T14818] smc: net device bond0 applied user defined pnetid SYZ2 [ 345.217753][T14646] veth1_vlan: entered promiscuous mode [ 345.227047][T14818] smc: net device bond0 erased user defined pnetid SYZ2 [ 345.288330][T14818] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2 [ 345.344523][T14646] veth0_macvtap: entered promiscuous mode [ 345.362268][T14646] veth1_macvtap: entered promiscuous mode [ 345.418879][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.462084][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.500815][ T6780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.541961][ T6780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.586383][ T6780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.595464][ T6780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.614296][ T5846] Bluetooth: hci2: command tx timeout [ 346.205199][ T5851] ------------[ cut here ]------------ [ 346.210794][ T5851] refcount_t: underflow; use-after-free. [ 346.217139][ T5851] WARNING: CPU: 0 PID: 5851 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 346.227054][ T5851] Modules linked in: [ 346.231109][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 346.243976][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.254127][ T5851] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 346.260288][ T5851] Code: 00 45 e2 8b e8 47 3a c2 fc 90 0f 0b 90 90 eb d7 e8 0b 93 fe fc c6 05 5c 2d ca 0a 01 90 48 c7 c7 60 45 e2 8b e8 27 3a c2 fc 90 <0f> 0b 90 90 eb b7 e8 eb 92 fe fc c6 05 39 2d ca 0a 01 90 48 c7 c7 [ 346.280088][ T5851] RSP: 0018:ffffc900041ff7d8 EFLAGS: 00010246 [ 346.286200][ T5851] RAX: b4b1bf6a6d0b8700 RBX: 0000000000000003 RCX: ffff88802f5c9e00 [ 346.294217][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 346.302185][ T5851] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 346.310244][ T5851] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: ffff88802f5f9000 [ 346.318289][ T5851] R13: ffff88802958e460 R14: ffff88802958e478 R15: dffffc0000000000 [ 346.326530][ T5851] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 346.335536][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.342090][ T5851] CR2: 0000001b30c0dff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 346.350074][ T5851] Call Trace: [ 346.353358][ T5851] [ 346.356274][ T5851] klist_dec_and_del+0x3c7/0x3d0 [ 346.361191][ T5851] klist_remove+0x1bd/0x340 [ 346.365688][ T5851] ? __pfx_klist_children_put+0x10/0x10 [ 346.371215][ T5851] ? __pfx_klist_remove+0x10/0x10 [ 346.376235][ T5851] ? __pfx_kobject_move+0x10/0x10 [ 346.381231][ T5851] ? get_device_parent+0x366/0x3a0 [ 346.386349][ T5851] device_move+0x193/0x700 [ 346.390738][ T5851] hci_conn_del_sysfs+0xb8/0x170 [ 346.395668][ T5851] hci_conn_del+0x8ff/0xcb0 [ 346.400146][ T5851] hci_conn_hash_flush+0x191/0x230 [ 346.405621][ T5851] hci_dev_close_sync+0xaef/0x1330 [ 346.410723][ T5851] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 346.416323][ T5851] ? up_write+0x1c4/0x420 [ 346.420627][ T5851] hci_unregister_dev+0x21a/0x510 [ 346.425672][ T5851] vhci_release+0x80/0xd0 [ 346.429986][ T5851] ? __pfx_vhci_release+0x10/0x10 [ 346.435031][ T5851] __fput+0x449/0xa70 [ 346.438995][ T5851] task_work_run+0x1d1/0x260 [ 346.443578][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 346.448692][ T5851] ? kmem_cache_free+0x18f/0x400 [ 346.453647][ T5851] do_exit+0x6b5/0x22e0 [ 346.457790][ T5851] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.463130][ T5851] ? __pfx_do_exit+0x10/0x10 [ 346.467714][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.472880][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.478088][ T5851] do_group_exit+0x21c/0x2d0 [ 346.482651][ T5851] __x64_sys_exit_group+0x3f/0x40 [ 346.487823][ T5851] x64_sys_call+0x21ba/0x21c0 [ 346.492491][ T5851] do_syscall_64+0xfa/0x3b0 [ 346.497095][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.502280][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.508349][ T5851] ? clear_bhb_loop+0x60/0xb0 [ 346.512995][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.518890][ T5851] RIP: 0033:0x7f84eab8e929 [ 346.523276][ T5851] Code: Unable to access opcode bytes at 0x7f84eab8e8ff. [ 346.530286][ T5851] RSP: 002b:00007ffcb023db58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 346.538692][ T5851] RAX: ffffffffffffffda RBX: 00007f84eac1231f RCX: 00007f84eab8e929 [ 346.546669][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 346.554659][ T5851] RBP: 00007f84eac12331 R08: 00007ffcb023b8f7 R09: 00000000000927c0 [ 346.562625][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 346.570821][ T5851] R13: 00000000000927c0 R14: 00000000000544e4 R15: 00007ffcb023dd00 [ 346.578839][ T5851] [ 346.581832][ T5851] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 346.589096][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 346.601208][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.611236][ T5851] Call Trace: [ 346.614496][ T5851] [ 346.617402][ T5851] dump_stack_lvl+0x99/0x250 [ 346.621967][ T5851] ? __asan_memcpy+0x40/0x70 [ 346.626530][ T5851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.631701][ T5851] ? __pfx__printk+0x10/0x10 [ 346.636273][ T5851] panic+0x2db/0x790 [ 346.640142][ T5851] ? __pfx_panic+0x10/0x10 [ 346.644544][ T5851] __warn+0x31b/0x4b0 [ 346.648496][ T5851] ? refcount_warn_saturate+0x11a/0x1d0 [ 346.654014][ T5851] ? refcount_warn_saturate+0x11a/0x1d0 [ 346.659546][ T5851] report_bug+0x2be/0x4f0 [ 346.663851][ T5851] ? refcount_warn_saturate+0x11a/0x1d0 [ 346.669369][ T5851] ? refcount_warn_saturate+0x11a/0x1d0 [ 346.674885][ T5851] ? refcount_warn_saturate+0x11c/0x1d0 [ 346.680403][ T5851] handle_bug+0x84/0x160 [ 346.684624][ T5851] exc_invalid_op+0x1a/0x50 [ 346.689101][ T5851] asm_exc_invalid_op+0x1a/0x20 [ 346.693922][ T5851] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 346.700050][ T5851] Code: 00 45 e2 8b e8 47 3a c2 fc 90 0f 0b 90 90 eb d7 e8 0b 93 fe fc c6 05 5c 2d ca 0a 01 90 48 c7 c7 60 45 e2 8b e8 27 3a c2 fc 90 <0f> 0b 90 90 eb b7 e8 eb 92 fe fc c6 05 39 2d ca 0a 01 90 48 c7 c7 [ 346.719627][ T5851] RSP: 0018:ffffc900041ff7d8 EFLAGS: 00010246 [ 346.725669][ T5851] RAX: b4b1bf6a6d0b8700 RBX: 0000000000000003 RCX: ffff88802f5c9e00 [ 346.733615][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 346.741559][ T5851] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 346.749503][ T5851] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: ffff88802f5f9000 [ 346.757449][ T5851] R13: ffff88802958e460 R14: ffff88802958e478 R15: dffffc0000000000 [ 346.765405][ T5851] ? refcount_warn_saturate+0x119/0x1d0 [ 346.770926][ T5851] klist_dec_and_del+0x3c7/0x3d0 [ 346.775842][ T5851] klist_remove+0x1bd/0x340 [ 346.780321][ T5851] ? __pfx_klist_children_put+0x10/0x10 [ 346.785839][ T5851] ? __pfx_klist_remove+0x10/0x10 [ 346.790839][ T5851] ? __pfx_kobject_move+0x10/0x10 [ 346.795840][ T5851] ? get_device_parent+0x366/0x3a0 [ 346.800927][ T5851] device_move+0x193/0x700 [ 346.805322][ T5851] hci_conn_del_sysfs+0xb8/0x170 [ 346.810232][ T5851] hci_conn_del+0x8ff/0xcb0 [ 346.814713][ T5851] hci_conn_hash_flush+0x191/0x230 [ 346.819796][ T5851] hci_dev_close_sync+0xaef/0x1330 [ 346.824886][ T5851] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 346.830404][ T5851] ? up_write+0x1c4/0x420 [ 346.834716][ T5851] hci_unregister_dev+0x21a/0x510 [ 346.839717][ T5851] vhci_release+0x80/0xd0 [ 346.844018][ T5851] ? __pfx_vhci_release+0x10/0x10 [ 346.849013][ T5851] __fput+0x449/0xa70 [ 346.852974][ T5851] task_work_run+0x1d1/0x260 [ 346.857543][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 346.862633][ T5851] ? kmem_cache_free+0x18f/0x400 [ 346.867548][ T5851] do_exit+0x6b5/0x22e0 [ 346.871684][ T5851] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.877033][ T5851] ? __pfx_do_exit+0x10/0x10 [ 346.881603][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.886774][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.891947][ T5851] do_group_exit+0x21c/0x2d0 [ 346.896516][ T5851] __x64_sys_exit_group+0x3f/0x40 [ 346.901514][ T5851] x64_sys_call+0x21ba/0x21c0 [ 346.906164][ T5851] do_syscall_64+0xfa/0x3b0 [ 346.910642][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.915816][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.921853][ T5851] ? clear_bhb_loop+0x60/0xb0 [ 346.926504][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.932365][ T5851] RIP: 0033:0x7f84eab8e929 [ 346.936755][ T5851] Code: Unable to access opcode bytes at 0x7f84eab8e8ff. [ 346.943741][ T5851] RSP: 002b:00007ffcb023db58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 346.952126][ T5851] RAX: ffffffffffffffda RBX: 00007f84eac1231f RCX: 00007f84eab8e929 [ 346.960068][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 346.968012][ T5851] RBP: 00007f84eac12331 R08: 00007ffcb023b8f7 R09: 00000000000927c0 [ 346.975957][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 346.983898][ T5851] R13: 00000000000927c0 R14: 00000000000544e4 R15: 00007ffcb023dd00 [ 346.991850][ T5851] [ 346.995034][ T5851] Kernel Offset: disabled [ 346.999340][ T5851] Rebooting in 86400 seconds..