last executing test programs: 1m37.297050831s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r4, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xe, 0x5f, &(0x7f00000002c0)=""/95, 0x100, 0x28, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r8, r1, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05000000020000000500"/28], 0x50) 1m36.744017009s ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x25, 0x107, 0x8000000, 0x0, {0x11, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x40080c0) 1m19.924833404s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r4, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xe, 0x5f, &(0x7f00000002c0)=""/95, 0x100, 0x28, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r8, r1, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05000000020000000500"/28], 0x50) 1m18.946129933s ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x25, 0x107, 0x8000000, 0x0, {0x11, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x40080c0) 1m4.946026263s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r4, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xe, 0x5f, &(0x7f00000002c0)=""/95, 0x100, 0x28, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r8, r1, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05000000020000000500"/28], 0x50) 1m3.436925679s ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x25, 0x107, 0x8000000, 0x0, {0x11, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x40080c0) 59.34499557s ago: executing program 4 (id=2226): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x6, 0x4000, @void, @value}, 0x10) r8 = socket$kcm(0x2, 0x1, 0x84) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x10, 0x3}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x0, 0x2, 0x3, 0x2}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044868}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x8, 0x3, @vifc_lcl_ifindex=r11, @empty}, 0x10) setsockopt$sock_attach_bpf(r8, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r8, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) 59.060434063s ago: executing program 4 (id=2229): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x70000000}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$alg(r2, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='[', 0x1}], 0x1, &(0x7f0000000680)=[@assoc={0x18}, @assoc={0x18}], 0x30}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) 58.765325188s ago: executing program 4 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$inet(r5, &(0x7f0000000780)=""/120, 0x78, 0x40002112, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000580)={0x800, 0x7fff, 0x1, 0xaf, 0x8, 0x0, [{0x4, 0xa9e, 0x1c7, '\x00', 0xa00}, {0x1, 0x20, 0x9, '\x00', 0x2000}, {0xd, 0xbc26, 0x8, '\x00', 0x108}, {0x7c, 0x5, 0x1, '\x00', 0x504}, {0x7, 0x6, 0x561, '\x00', 0x104}, {0x40, 0x1000, 0x9, '\x00', 0xc8a}, {0xffffffff9cd9b216, 0x7fffffff, 0x60000000000, '\x00', 0x2802}, {0x8000000000000000, 0x100000000, 0xffffffffffff9a2b, '\x00', 0x5}]}) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000000c0), &(0x7f0000000280)='%+9llu \x00'}, 0x20) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040)) 44.50732176s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r4, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xe, 0x5f, &(0x7f00000002c0)=""/95, 0x100, 0x28, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r8, r1, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05000000020000000500"/28], 0x50) 43.628947836s ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x25, 0x107, 0x8000000, 0x0, {0x11, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x40080c0) 40.113164861s ago: executing program 4 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$inet(r5, &(0x7f0000000780)=""/120, 0x78, 0x40002112, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000580)={0x800, 0x7fff, 0x1, 0xaf, 0x8, 0x0, [{0x4, 0xa9e, 0x1c7, '\x00', 0xa00}, {0x1, 0x20, 0x9, '\x00', 0x2000}, {0xd, 0xbc26, 0x8, '\x00', 0x108}, {0x7c, 0x5, 0x1, '\x00', 0x504}, {0x7, 0x6, 0x561, '\x00', 0x104}, {0x40, 0x1000, 0x9, '\x00', 0xc8a}, {0xffffffff9cd9b216, 0x7fffffff, 0x60000000000, '\x00', 0x2802}, {0x8000000000000000, 0x100000000, 0xffffffffffff9a2b, '\x00', 0x5}]}) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000000c0), &(0x7f0000000280)='%+9llu \x00'}, 0x20) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040)) 28.354155745s ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x25, 0x107, 0x8000000, 0x0, {0x11, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x40080c0) 27.20271641s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r4, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xe, 0x5f, &(0x7f00000002c0)=""/95, 0x100, 0x28, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r8, r1, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05000000020000000500"/28], 0x50) 25.564392203s ago: executing program 4 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$inet(r5, &(0x7f0000000780)=""/120, 0x78, 0x40002112, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000580)={0x800, 0x7fff, 0x1, 0xaf, 0x8, 0x0, [{0x4, 0xa9e, 0x1c7, '\x00', 0xa00}, {0x1, 0x20, 0x9, '\x00', 0x2000}, {0xd, 0xbc26, 0x8, '\x00', 0x108}, {0x7c, 0x5, 0x1, '\x00', 0x504}, {0x7, 0x6, 0x561, '\x00', 0x104}, {0x40, 0x1000, 0x9, '\x00', 0xc8a}, {0xffffffff9cd9b216, 0x7fffffff, 0x60000000000, '\x00', 0x2802}, {0x8000000000000000, 0x100000000, 0xffffffffffff9a2b, '\x00', 0x5}]}) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000000c0), &(0x7f0000000280)='%+9llu \x00'}, 0x20) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040)) 13.34515177s ago: executing program 3 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x25, 0x107, 0x8000000, 0x0, {0x11, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x40080c0) 11.92722914s ago: executing program 2 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r4, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xe, 0x5f, &(0x7f00000002c0)=""/95, 0x100, 0x28, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r8, r1, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05000000020000000500"/28], 0x50) 9.476710545s ago: executing program 4 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$inet(r5, &(0x7f0000000780)=""/120, 0x78, 0x40002112, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000580)={0x800, 0x7fff, 0x1, 0xaf, 0x8, 0x0, [{0x4, 0xa9e, 0x1c7, '\x00', 0xa00}, {0x1, 0x20, 0x9, '\x00', 0x2000}, {0xd, 0xbc26, 0x8, '\x00', 0x108}, {0x7c, 0x5, 0x1, '\x00', 0x504}, {0x7, 0x6, 0x561, '\x00', 0x104}, {0x40, 0x1000, 0x9, '\x00', 0xc8a}, {0xffffffff9cd9b216, 0x7fffffff, 0x60000000000, '\x00', 0x2802}, {0x8000000000000000, 0x100000000, 0xffffffffffff9a2b, '\x00', 0x5}]}) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000000c0), &(0x7f0000000280)='%+9llu \x00'}, 0x20) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040)) 1.423872401s ago: executing program 1 (id=2501): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000380)="71863ebba534e060bd39e4f6692c84c08a63b64ac56c694ef54a47d3ba2f226be8861c48495c1721de513739e949ca4456c704767db81fa6f2c03b1db7df459a57e6b83e6f4d5f5dd11caaccff87143af4f5fcec8ee13f2fe93697c1a334323edb74a423b352b58208ef5894173ed8022b7b739b73e7f7f3a65ba5e3ef3a0b90d42146e1eb9b9dba0e1e3c106fd0f5c84cf17ef1c8e0fa6e54d8df63ae341b3c83abbe70423084a847d835720886ec3645dcc240b6577a1a7d828b1fc576c942286bd05974db6e7182fca8fc26449e3d370083dd07e4d6bde6c732e9762196e2ca29aa694ffae640be0979e7b5da43606e573a325097f544683d302e3c1462c40be3725d603d7f0bdfb8c1fede018a4007cd89bfbc1944df174ff8c72245403ce1b8523cd620fbdc64682c5a1b5c3bad73e033d09bb0de8065bbac983b3dbaad29c0ca9eac69b242f164552b8f03a1462282035ff2ced1c94c5e7335e7cbb8d3fe489490d94b5b67a02eb0a5ed02db239a24414442ec30b088d405b1aff4cfe784ec9beb6d9155769442b6cf197198e7c0426117b0714b7a5d36908ef899c1453b2c2a926e2af59ddbaf8996d7231af75af8698ca00ea800ab75b6aa29443126514c00beda15d70c2465521582b66cec9d4ba839621ade2bbf4b80a546cf59e3b9adcffb77aab166c3e2b21d176fda911144cb2e34d2ded0ab98ff8724eb4d000dbb250e94fa95be6961e2080407ca3f541687335c7bd68b5439901b2802c611d1de85808adad84882679df6093e246d70c656a2c53b3461031bb4a40b3ef36ef51bfc995bc5f1e87e649ef774a0d6bb897f6056c5fc73281d78f2b830624e12cc613ea894d22e8e023155dc616b8c4237b4925afd439a51b2e8026ad40f6ec4aab66d8ba0590d0f02bf0deffa7a3925ae896318a38c374736cf606daf5f0bf0ce7981d0650fce1c9608028f160cd4b63a3718b974ad5aded472702ccb0962f56cfe1b1cdf5591b1ef040acee901465ca2c5e773a6d1097d68ca4941508d47410de42d93d5ffd4ec49fc5bef753b97a6d5379f97db7219063ea246605132ab5e3cd0b40d5eb87b26a9e00b080e112192ddcffbdc660f151241f481a87ece4af3ab246ffb0fcbed5887fd36b760c640fd1154bb8c656098bf0fb55014179f20ef971a2fa59dab7cf36a7d02697f4e9e61c5304e4c30500a5a26ae93da0bd665e29ffbddc094440752e0df77d0babba355e05520fbc1d8b245defaf87721a2a76efb89f1687af81ffeb9df421dc70fbde1a4dd87083c7ed973caae57492cb42762e57827108156ce29ab8cfaef7150a62e73d1d8739e36d91b7b0a3de95bcee0d2fecfc8f204d015fa0d84185d2fa72dfc1aae435e0910061986f5b5b9c2b9e8cb483db15405fb489dbf1e9a62b2e87407846efbde0520793222da8b53893780d3d2ffc90ec1d10ff4b5c8391d846b2a0656a65d541c07b8279c5f8b344c3f3873dedd8dd5f23d1b39789409035eebbae83e535ed116edf6ada407a27d86b9aaf9abe050333716c75ba2c1d26883f2313233634863787c7c288b69052754cc4eab1deb3fe247c60f73bc09b698e2d616b9f8262f3a3c6ad05c8c71fb9fd380cc743465d6aad69a2034ad7bf101b546101734512cb6a4ae5a231a6e834e5cba7eb2fda176e2ce2d6758d868a6ccea036fb1e246cfed0cf47eeca19e452b52c062728fb17a6d46ccc5db4cd0e79f54e81117879129c5359e21c7e310efec6d9d6bd7b38739e3b8171f08d993e4af33fbdf9754ac5555e13c427e6c1f8c49c2bed94381053e60eed33d103a256aa1605dedbb0beab93dbb1cb0e46725f50427e660960572c23caaadb9a82ba62d7535939bda39c65033a7fbba8403c1d55a90a62cc7cc6ce733d1eada40a9fff718b81e607f304a782ca5501c05fde822239a2f506e03e771a71cf3a2250996721338765f2b7b19c8a5f15cd950673db135662cc9c1dd68213e0529c35759c3285b65147eddc8eff23c0b6e592fe9fe8f09a1d636a83164f7c96220a2c4a01cd7029cfb1c44e34beda733d8878e066b42b2a34fe60facc007643214475fcb196fffe6f51643c8afad3b45f912a3d645470942fc560ca078f9a3bd559ddba6262db6fc2a7f10b53b8f7562918aeab631dd11635b5ec4107cbdd7abb066ed0a670ffd9968ec4c145a79dd97c7efb81b780ec56f4030eb8ad3ddbd0dd117be697f8324ab55e37a4448d0cc4cb0c73f9de05ff02e1e5fe417ea1b552eef9879a29d24884305adb036c74aec534b1dfc1b3453804f39f2327ffa5839fdb544d2ce3606a68fc435a714603c8dafd51a3e8594cabe5370e93e0908eebae20d9651e571401020211408153b39382bfcd6675ffc40af15100e29be18222953d2c9fbf1bc6613fbd208690b7ac86f45df492d2ea5442ccfeba7392f222e356d434b4397bd032488b908de35dcfa44ce0270d4d0c6b84380b2694aa89f5a83d6662ec01ec746fd5052138b5ecd2f9e521878b7492a748a707add7db12b1e5da2c9ea63525dfdc714d30c410be069c9cc2a9c088c4f9361befcdb7bfe8ec7bfa95ca23c88021863ad8157b87cb498125c2f99face586bf0c2162c96017d2b88e36bb8a0d2819093ec0db6b4916d3ffc92706d05992ee7e7461c482eb5742838c0905c572285d5b3de3df5fd1d38371456ae99acf7c33b2d8cef5b3a19d79ce63b687d46e5b20a0052ef4a23045a3c96b59d919a13bbcbd1b64de9e174fc6f0b22053d80675715f9ce758f3e743644c87970d8c7e413df01424c410c517d22e563e80552c4a0b97da32e172252f7c720924693b38149f36a51517be646571a006d925aca98f9211e57ff9032399adc65f12f9617bfaed0e8d386fb45f0559692bff4dc19d4212c11858dbfc0c89fd351362a58f1ce950fa116fbe2b90213449cde14896721fb4f7957d43fa42aabca0db8bc007981d00c5a60048ef83076585667fa0a3f20fb0f681b4226e1d291f38d1a6e566fd1b093f3ee4bd2c7304e44eaacf95e786da82c805033695d882e51c0ffaf4977d0304a45f30f287fd0faf645e66d6c022b7ae8e682706a9f83eaa3e89702a71a2645a3381fb1d4620d20af6b854e16343838430fd764fe1fa9bee9c2563f0258b5bad76532c0a80e39cd6f427dbe42a6fdeab96ec577f4556c8e0ad1ba7d268ae78f5f0dee8c6c212b41b1aa2e29987925c25a148c65599122808f46fc44f9bac7d8a8372e65294e4b5cc32f38bb2b87d425c1ccbbdcf006c0b8c5db7108220abe194dfcfd2cc6eee3f7d44094816ef0aed2ba975b1fd91895fc57139e4fe9592dda3ed02cc11ee743852fa073e77d1f40c7cd5cad738fecc56015aa6ee0b25469958680e2f8bfd70df0ef965704d1a8cdcf77a8c7fb8cdda79a1811144801ebc8000aea7c2bae67ec50eefb1da2ebd17ae894f8c74bc7a534680d53757f673a5b976babfdaf076c1daf73875450a37a9cb6d88f46d56665cf4c1d42dcf354b0621f1f8a2b1f93b494d1f6a953b39724dd8b6eb6a227bec64770e2c6f0176a39693818465e21b20d2c0875463937c40c3df190b1fc39b0717b67d76747bfc3ab34f19411617546cd8e918cb14c39c46011dcd177adbea49d8490243d9f10820f9bb3260419fce84283e29d28c3765ae7ab7896f02a144e19e6ab1866872835f039a13d0be8d706206fb0fcc4a5f81981534ff996cfbcf457821fea20d009ff3ccd11b0a1e3a8b97f425cf2d49f4af9877596a60b0da2b98876e04225c0b0f6a03edc718ea3aab58ff0ec36f6269eb023e7187962bebccfd913b65da7b81d1b6da18743f4fc5543f71c8cbe754d7fbe88366aff86ed2391d9fe103c8ef5aac0752a2faac7da189c96b41437ca3b3a6cc1588fa06fbd947d1ce3e692f5589c2a685528d061c5cba78ec13db6c8335d1a96b4521f9bb7c9c136f8cff00c49e051ea51e129af63d09bbd922bd25db55ef4fce377006b755f95f08b7754e2f14e917a1be841043755ccdd6bf4d3a2fce2b680fa5422ec7c0d5155d08eb358a6ea0142770a85847d9735795b985546901fa15ab294b5c971426828a1fef6f9099fb2e05afb8728fbf80a3fb3464f23dcfc91d3628fdd6b7ed3af7938073863ddc255b8a0c393a438d4909c7f4b21d7a72fa0a473f973ccad7cc34a8b4800d54510f8ddfd26e8a623dca3135e4257d08e363c5b356fe3f0688c41095831372d5500d4281ebceae27facfb9ecaeda79493c7538d45a1d772c267f64431cc254c123d2634c163791d9a6cfc696cd2e2af97446ea551ea2197ac8c70dbf7ce902b479b97752d1ffd1c4abe36dee56c57455cec5aeea12a706f85c9356a0aaf6dae50090f561c03022b8b09142ac18120a89689736f05899fe42cf61c134e4dbac4b9661b20b9129b810e2f1b7d5d46d4ed8f6af73f3307bc81bd2d09b1e132009d0654cbd64b46a5173fb80ff6b92db04232ce00c4bd2c7234e6a0968fcfd883ef335e0c2c868993f7686716325cd630fbda38aa003036b4bdb886ee774897b2a800dc1fda46b0045ca3b39d32fa880ca6ce5f924b2df7bcb76217342633496328da8d720a6de510c798220b84654a06d7784e8749bfc5c8f8843835727f0c13674589689169b6307b1d78f6e73168c24ceac3600d4c3bc538d96a450f1fca799acdb2b1102c94df1dedf0848c68b644deab0624cee02ca6eb40db9734ef22fa4def1d62851e4bf14a882260e97e4179a9e9bdcb68e6bc72bfc00825f71054777944c1f2c998d5eb64afd384dd510516ed21d3fcd073d8ad534bcf65144d4e531dcde15448205cb71f5258eb9bdcb48fb6fcfa50af4e4bb21a77d5a89b6d0e10a291c4481bacfe31aa8ab27d0184a37a7fd1eadf0681a9760f04b9bce7c1102ed6e6dc7a220bb6ba3255ee0049109ede42c8a236d26efc7a769e0cdc3e31f1821645813fec47b41fb8b06d57e86c826c3f246b60d59a4a518e9b479c438c9dade49acd06270c526900cc15d5b4bea1e3ba97e52edb8add83ddf8e0c2822f313e085ce3a05e3335e1e9157d7ea452779a08d10a0ee67f108548aa2ff9dcbe9fe399de7f2f428acb0f25973b7a612296b78e1442aaa727f6beb4b27e6792b6a48e8ce610f18dcb60da0d2cbc7292c9f3040fbeb36643b3b96d98f11faf7bace2305e89b9482af070f4f81181ad4a80a493b00a28d0f67290cc3de988c2f54a4962e0bf0b516db250773d238bff6a1c8eb6a62c04344da44ce25da0a6c6cc4f3e6733e6ed0b98191d2b843e2037192d96fdbd40dd1bad2ac738775f5e9fe27b103ce496937882181313ba2fad02956ce133b5e44545fd19bae9055846fd27c0f0729f9e3198e75e2e42b9f6b17af81abc99881c44ce375dc1102186ba8c1d4c704ae397b7bf748c8f3927919512bd0b3cd80c67ee2ece55efed44004aa3b1edb69f759644147bcc90d81d6ab5b35f26c4765be865c9ef0752c3935dccaefa6e36fefc177dd4135e5771db2ca86598fb79f1794f471d3ec89198b37871cc91", 0xf50}], 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6cc7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) close(r1) close(r0) 1.225298594s ago: executing program 1 (id=2503): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) 1.193805546s ago: executing program 1 (id=2504): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006000340000200001400018008000200ffffffff08000440000000075c000a8008000140000000015000028014000180080001007f08000108000200640164b778bae127999101002f000000b1f30180140003002001000000000000000000000017000214000400"/168], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 997.511571ms ago: executing program 0 (id=2506): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x64, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x36}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xf}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711204000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x58, r5, 0x1, 0x70bd25, 0x25df5bfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x14, r3, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x4000080) (async) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x47, &(0x7f0000000380), &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x0, 'nr0\x00', {}, 0xff}) 970.26989ms ago: executing program 1 (id=2507): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff0000060000000008000100ac1414"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x4081) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x7, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x170, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc6, 0xa9, @random="9bab420cc3227ed2fa57d0c31e252ad01f7d445678092e5a713ac62b39f96227df8cd797fbe9e69c0a0c4c20050b2133304b2e4211aa7899a89006424e09964bdad6e52f5e022e75514ac4dcbf15bf2a2cbb65b17a1cc210cf79030701b85960e2fb50d6aabbe5ec9e315c7471795c9574a643961a208d8fb1b41f00c47282ef84e0698728b49b06b66544652ca61a1d15788b020abc8f9f342175f16b77d1aa1182a4aa90c22d032a6bc49a668e6632c9741475b2f7c2df77d97eb8fbe11639084f"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x101}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5b, 0xa9, @random="55358e6ce6cd422c3a052e23b3cdae3e0b326a1cf7764ebe5a596e58f655cc69134233fefa44b17b948fcbe85ceb23a39662f91bc3ce6ded380856a7430104926808bc657d286c711157006207baa3bb0107cda2ebf26e"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x170}, 0x1, 0x0, 0x0, 0x8400}, 0x8080) 922.751366ms ago: executing program 0 (id=2508): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0xb, 0x28, 0x0, @void, @void, @void, @value}, 0x20) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000700)={0x27, @short={0x2, 0x2, 0xaaa0}}, 0xfffffffffffffeba) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xe9, 0x7fff, 0x8000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = accept(r1, &(0x7f0000000400)=@sco, &(0x7f0000000280)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x51, 0x30]}}, &(0x7f0000000200)=""/39, 0x2d, 0x27, 0x1, 0x6, 0x10000, @value=r9}, 0x28) getsockopt$sock_buf(r7, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002b000b00000000ff0f00000007000000040003000c00018006000000e948ef000c000200070001"], 0x30}}, 0x4000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000815) 713.213683ms ago: executing program 0 (id=2509): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=@flushsa={0x3f4, 0x1c, 0x20, 0x70bd2b, 0x25dfdbfc, {0x33}, [@policy_type={0xa}, @replay_thresh={0x8, 0xb, 0xc1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @offload={0xc, 0x1c, {r2, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@private2, @in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3c, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in=@remote, @in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010100, 0x2b, 0x3, 0x0, 0x3505, 0x0, 0xa}, {@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, @in=@local, 0x6c, 0x4, 0x0, 0x3503, 0xa, 0x2}, {@in=@empty, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x2b, 0x4, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x64, 0x53a61f4b453fc85b, 0x0, 0x3506, 0x2, 0x2}, {@in=@private=0xa010100, @in=@remote, @in=@multicast2, @in=@empty, 0x2b, 0x1, 0x0, 0x3503, 0xa, 0x5}]}, @lifetime_val={0x24, 0x9, {0x9, 0x1, 0x2, 0x9}}, @sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x1, 0xf8, 0xfe, "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"}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0xf, 0x7, 0x3, 0x2, 0x20, 0x20, 0x88, r3, 0xffffffffffffffff}, {0x8, 0x1, 0x100000001, 0x78c9, 0x7, 0x100000000, 0x4, 0x9}, {0x4, 0x4, 0x400, 0xdbf0}, 0x9, 0x0, 0x1, 0x1, 0x0, 0x2}}, @tfcpad={0x8, 0x16, 0x8}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_genetlink_get_family_id$fou(0x0, r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x9, 0x0, &(0x7f0000001580)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c0000001000030526bd7000000000000000000000010000000e9188342241b1d8a5ad52a6c10fdff9624e8ccfd921c778c00ab42509f3e2817b60bafe3804f36f5235519d7ac95ed733da73acd22e39448370f0eca940d86fd8cef807eac29054d90329135e74a9a0c8ce82e6d8cefa52f2022c82fb503922840a9f9d7f6abe3cfa8d7e5b20659947fa6fcaf70271bb28d8d7d0cce36cd7f9454d9c94f06f0d9563e2", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r6, @ANYBLOB="6800128009000100766c616e000000005800028006000100020000000600050081000000100004800c0001000900000181000000340003800c00010008000000030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa0000"], 0x9c}}, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x9265, 0x1], 0x5}, 0x10) 696.606291ms ago: executing program 1 (id=2510): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000400", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddb"], 0x14}}, 0x20044000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$tun(r1, &(0x7f00000013c0)={@void, @val={0x2, 0x0, 0x6, 0x8, 0xb152, 0xff}, @ipv4=@dccp={{0x37, 0x4, 0x1, 0x21, 0x120, 0x67, 0x0, 0x8, 0x21, 0x0, @empty, @remote, {[@cipso={0x86, 0x39, 0xffffffffffffffff, [{0x0, 0x11, "dd205e587a520c9e38748e3e735348"}, {0x5, 0xe, "8f1c7cfe6b2bd37fdf73b453"}, {0x7, 0x3, 's'}, {0x1, 0x11, "dd9de776e3272a87216d193548cf63"}]}, @cipso={0x86, 0xe, 0x1, [{0x5, 0x8, "df6f6565252c"}]}, @generic={0x83, 0xc, "498632a60db2d598f73e"}, @lsrr={0x83, 0xf, 0x7, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x83, 0x9, "3d5bbc67efc3f7"}, @cipso={0x86, 0x1a, 0x2, [{0x5, 0x11, "dbd399d3567fcfb330dfd5b32ccf94"}, {0x6, 0x3, "b6"}]}, @lsrr={0x83, 0x23, 0x41, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2, @multicast2]}, @lsrr={0x83, 0x1f, 0x41, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x9, 0x7, "eaa378", 0xf6, "bf943c"}, "fd23331caf87a0ce83fa2d34d970f68853ee2feb1f5b8c04200c60f78efeb901f1a07b8be895f47866cd03266e800f3f8873e7ff"}}}, 0x12a) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0x1014, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x1004, 0xd2, 0x0, 0x0, @binary="a65f6c670f2c931513f54ff406ce795646fbe124aed3f0c22308496f5ce489c016705827a68c7937fb2592b0b3fe136874b004144555ff6789bf3ea5d5b07081b264f7145bae3edf78c3da7a2bb75a4694729f06b99612b62eedd6da26f94be0162f7f3656ba71b9903eed668db8dea9f3ca39dd790433e334d0a9cc5326726588c6290c952cf94482e65754c163f443c7e09ed7b5aa4642a64ae19afd365658b64d9980b6963b82d9695d4982b5d61ab97ed8b5af95be4a4214fdc3203a68a1baab9785f047458ec1e2eda8d04dfbb7c1a5a1983814cd07a8d93dad6df6810fd945f7f54618b0a51def7a8b26ed765b6c095f72cf8e9661af328c179081c2a7e681e1752a54dc710e6749ada3b6fdafec134ac77fe0b8d8953c42713b3bcebc6d40fb4943b3b1b1bda21447f5e92fcd870a1c2f360a6e4a265e225d25bc868a8682b711e3c0f2da93b043d271f0a6166343135bd0c490a82c9d1b756d8a98cc26a9225b1e631051ac8a2a35ce09d69e9f252199d2211feb0fdd21dac5a68ea5752987094dec730a865a28977b8e68b53f6f2306c5de5788e5bc8d85321b49e4b7cb5a6bcabad1bbd21e48f4fcf4be94a620d5195ad49dfacc7186a5113ebf830773d1686f90c3a1d53137ea8fd56b6b8b24ed3935e56f65e67611a682f78607b521fbce6c82bcad93a1f4ba8615598d704811e860b8b5c8ab6e556d6de4a74b58c61434e4d85f4252566e3e94722b657d32ba7af59820de1c1e35c502c7989b064b532071ce7a550efdf7acbe51757b85c632cc3cb2cc901b0a11345cea0c1bda1df6c19fce65571c84ed2bcb55e75aeade0664a7727f514d2b117113f68e4c76cfab228763daa49d7c912243e6e1dec808cdd12e0e263459f5fa861a57c9ec0ef84cc7264c581b11a18dd4d8d90e0355793dcd5f4c54fccac5fffe48eb101a1936847fb404bed04cc037b83c8d61dd5656d11302dc70ffa8a9f96eee47d5d5c326572bd4cc8d2e39b9d7135df0e7b34e40504a6ca374f8717efe8a11013bf331b53183662f29f14c3dcad20a763b4ee754f9b079b3c463f8753bf2f1dc6d0fdb0ac8c77e9c3b8f3208b7d82343fe60c9317cc4caa222a15650198f79fc13e51115b8abc23a26e2c10ac60613fd7e5a40a7e48c353ed5222e4caa65a33f604fc07dbb79e4ec57e97f96953722d34579253a8fc64f36301489a99b7ead8efccddbcc5431b884e48eb896d9b52710a57a60c0972b03403b70e0e0eecd5d11a34f1fc3511084e0bfe3d66d3def704a2451f72b2883d294977e7a33ffb3915e6394860d8b208e5127e8ac0d9770eeee02735d2d92544445acea6d6735a443d559888678b1f076122d1d8ad3dfc778c4e575fae4bf294cf4b79c0c5b949db9ec965cdcd5499e37dfadfa529a16791979b67a6354bbf661beb70faed9c2fded535af21941c0c36a4a6f9782406a37e7b0701430b024239b1c970700b8aec916e2c705d49a99eb558d44f7d38e3aa964e4679e0aff4fed9031a00c58d2b149fe9904347c3c76510ef1ec68c42306307afccdd097d1661c329ab40257d503031bc91e9e403a6e749eae78836bf8e730f0d8f37aff964649c9d96201aced5cdc7cc0abacc6b4e109f97d954a6ed88cac1ed38c2915518f8dc35070dbeee7a29ad97c66ff6eeeecc75237ecb302685ecb0978b94d738c7132930da27414bd7eab677c3b7943094f1ab81ee94967ff89788b24b421905449e0ff9c468712845af91f42b0f46e47abe576a510c93e9a306d76c8f0ebd61aa3a8ea8cdc77c052985f652a93d0b1e7d470fa208e03cfe592ff8a4e31b148eb55c2a0da4a17407baf587ebc85333a87dbf9ef294ad0c1d8cc0cb9fd95154525e5068ec986b576d1194caaa0d899543b82b61dba23ed4a23a5bbc039e7ec8875ecf004d354e5ddff15f80de80ca8db5f99e4b86d29e70b0fad26471a2ae8cfbcfe3917c150ced38488612c04be0590b8410883efbb240c73f46fd9fb1bec53aa401648cea0c496193d2fec7e224ca7d0ca747a1a3af071841ec46d1ff68b3afeb43bfd824b765d9ee60b590646941ac7bd29b6789c5a0bed72a6bc0cf69b3ada34525af48fca2955cce7892f73d3e4e165cec0be801cf55073ca434493a71f96ca7d7a0d238afc3e4ec1ccd95c76f8613b31fa1274888457c2864e689df1fd433c18b5a60bfb6b058ad5d4e4d6b829fadcccd4cef7d4ea1f43281d64328017fab128eda7c6572b567586f8505971eb8fc31ce63cc4d8508c4b32c5611b3bee0f32e474d4c9d2c60d21930f1b2c012e4839573a736ad6264737fca87dfd3c58ff8234014f742aa0b9d9c3080e1ffe8269a753c65bb8235d0e2dec4594a3c804dfa6d23a24fc14f7bdbcf209de2f9729cafc4e07353764e79c4ab82cb94fba1e0dedfc0f2f1d92c675873a8e8bbe36c5a97252ea7606b76f44ced7e34d80462a61108702197a494867c9ef6667b8bd4f1be42dcfef3efda2b602ebbb16588924746f281f319a6e0397ea4d46a94401960c5e1cb566c126f25a09573a8527cf036a94cf3f9c8788460302290389e1e0fa4c5df4369ff072fbf57d16fa8805670c73dbdb681b560a584418636acd58a0c7c3df28cdfd7005f15bc3eb4ee93c308b8f38aea8c2b4842ae9ecb15c5932cc23c27f2c0402d899b8590dace241cc74ed830bda31858baa52d5a0b6b92eb038c434f8715e4c2036026cc693c19e246524686f361c4c112ef5765ad88d1e2df7038695c38c5e1147379c797d2cf0cab70d15ba00225c1a1464fd9457a138622b19b7f1a56a391629a1739cce54b8738df2c4e28a133a44da3bf7a6fbdba15210fe6c6a9476be3e86bc3dd7a3ea81540c6890312cfc70b3d417e0e6ef6ade62ff5aefe8e94259220cf3225b586d3d357f004a485b9f01dd1ec4d966635d801a4196c0934a47dbf69276b9a9be36fa251bbb2f9fb8e8c6691ac8c8dd07456d5cea4871419c9ae9374b5bcc0f5ca8fd75773792415a35f1886c433f1d8fc5ab5f3591c6c032c01d4b39dbed703a1afa4b2f105fda35d30ffe439f432fe190b9faf66fc94fe0a9295a76ca95fdbd1aecaec832765de61824a34b8c77f3bfe31b0f10f5e7855573e12562bb41a82039a85a1b06356a0a975631d8545930899858f2f900476cf5748c32405c9bfa3dd49f74ba2a9cecf3f5df63b6e37a37a4dd74b7f6f69a17a9e5cc5ea2e869e4ec8f7e6a56f0a43ea4b873d23544792fe08219197ed764df396133d49b71619912a9ba98810d47ecf81960ebe8817a5ce9e42b73fb28739c32d2a5b84c6393b049b1dec645a3a6479664c2243ffa40a81026efb775379f5d6fa726c40cd1cbb3991d9ef7805fb89960ce34583be2461a5506ecff0c8495aff6c1f7187ac74d975715ec7b629f2595ffce48a6923cde1773c4fcdb467c6e5311d5c482f9391d59296a962006694ba4b8fbff34b3bbe3f8688b728d768c129e2be3892994a7506341a81f4b9b9f2d962d182765504ba7f3057a6c757dde86626e0c70f0e931610512ca64cddf7d0c219e7b00378516fd51b46b85d739ef230e4a3f15156523a90df94302dadb5f66d034f6f7fb53184342710abc756ddc8667cb03caba09d2bdf65cd14dd12793926501957c48399806b83a4b0be5b239ffed56312f898d5c1d49b1a258b966bf0afdb06c167ff443098e8beb03eec4b10d3bbe54a249e17cd2e392927bfc1f0569cc59df5bfbdbecb8ba1e77809e517048a2dcbaf0404b5d3e9e88933b6c0056ccf14ef79e15dc542db1f5d72f2e12233270dddbc5da1c4be69d4e6ee91797751c263cd73fde4bc216249f97c6806878abe73ea1334a8f7fca3fa16501eac409cd6cd41c6cf56dd4c4e028ed0754dd62605f564b6460413ebbe20d00c59b86ddb8bc357e0ab48f2c604395cbc45b3da8cceccac8d577011a14ba6ca01a4d09af4c09276fe261a2dd1668f1145312cfc3e4bc44151c59b695c0647b1a64d87ca34790ff2234a20f6202468eb5c346d26e0088da8dc8bca4d492438cdac0c50f4e26f2e23694e66c0894c226265a4eb000d7b4e37ccab8685d27f51d09555adf69f0b2f33226d78d5aacb366acabf9d383e5a22e8cb4f76c3c85cb63d80f02ab985c40bb3da5d8c2c5ba2782b406369473f3fec3f4afeb7970047662d39e75d1b96ac9d4a00004d55df4f6c33d255f4f37d28bce639b4bb01675af423e8e47e021120cb572fa6e2cd69a20458e650d6e59b8c42dcb34e6bcba6c1cf514686af303f7602e9ef1f79c1f552fa609db0b18f430c991fa0004edac868aae2bebcbc4884c85e8c9fc8832e4137c45de2d91da1c4e77edb0987709f2405810105feeb2fc5912d56b7b6ca55e88c6dee88fe2b60205b69d6f121ed471671411f382a3c3de909f03dac44dd3a12646af11b1f9b5325c7031f84cfa0916168d05280135ad17d10caadb771ed1ac9f9900da7ec33665d1bcb5beed30aa4a500885b37dd28d66e9e638aad4ed8f73f4c0166fbdc13bab85b371eac73335e00e6ccada6e6cf69f71a36bda74a32e82fe8f6265c26327def4291d76e9e281a74187883f3a4565b8032b6b2a5e773868d19427c3dddfb728c3efc6a5b345cc6b7422b380fa65633b4a07bccbe1113ae96b61f325437a8d2673d53cf3790e4283bca39d90217380351b6da1d1d84bc604d1262175ac5443706f8a271b148c08fd23b4e247c9f29aa888229459a5064bced2684518643d50125cb05d39cbbcab614096c7a38415bf6fbf3b34a824a24b35b5fde0d54ec04b90cb5b67d851c668e75c92e7c95fbba8013b84e0145aeed7207e07a2583bd0f992d31521c6342eb491101bb364b3fa667ef5d1dfea60fc93ac91dfbd49f950418deec374016779c222b6819bd634cd10619d68ea06d1343bc9a2359224291e6dcd5354203693dc0156781c99b8bfa1cc1891e75b444e763c2d5ba73334390ec94a5b32b81f21cbb3be33356c36c6897814687e2c6c7e750b8692f7d6bab78ed956390dfb6cb65a813f60cd34929a1433f8ef48753cf84f6b377980e1c3ef70aa53c0e9d03d1d88623cb41464afbd8c75567c25fd21894162a21d69424754384b536cb5edc93f62c0b8eac87dad83574048738a4f4f3068dc0090e79fa3ae9c0af039503535ac114fd2bf6329cba113489715b325636184aa7c64a271155b3ad7f6792934798b63e118788f170247edcd53a4a8809c33da8d3d58ee0343476afd6c349241f109356efac1a2d340ecbd2ed12cf19d394f3b1be86966934ccfea006dd2cf613600db4a5157a85d935ad7353edafd2f98556488a1f079f7187bf6069ed447a64874f8c18d35e05ab107c674b23093dd8d0db13ea77f49a42af80134fec8d969f39fb4561af25cd24427ad2d4afaa5e86f10e5dd80cec333f6f5c1f328220dbf5e1e79f6acbe02c01b085429ae7f2b142eb455f133d0dbd7428f75b4394543cbb16756acd7c5d1ea3cadb873965a2981cfda7a4b2c19deedc028117db41daf7ec95d73eb99a42e78c1162fd1255ddb220e81731520f8e1d9d520e484b8223dce39f06981ce3146e93a07f5e25f190d82da7fd731b380bda87b3f97002a0301e24c59de3bced31f92875806d9bca7683a6594556b23f8a1782100374dfa2c94caefffb722777a512ff30878eb3cf1b3e3bb24d8fbc858f901996453690954fbc464c609f699bca3ddab12e174fc6fb332074507a5536df329540148546275a4944406cfd4f5291a1fd9f70963d167b2e03a27da7ef84f8581fb63947b"}]}, 0x1014}], 0x1}, 0x0) 460.181198ms ago: executing program 0 (id=2511): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001e000503", @ANYBLOB], 0x24}, 0x1, 0x8000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbff, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x85}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000c1, 0xa00) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="1059987c357f925a7cf0a300c7d998", 0xf, 0x4000884, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0xfc, 0x6, @multicast}, 0x14) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x8000000000000002, {0x0, 0xf0, 0x4}}, 0x18) getpeername$packet(r0, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002300)=0x14) getsockname$packet(r0, &(0x7f0000002340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002380)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000023c0)={'wg1\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x15, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000026c0)={0xffffffffffffffff, 0xe0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000002440)=[0x0, 0x0], &(0x7f0000002480)=[0x0, 0x0], 0x0, 0xbb, &(0x7f00000024c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002500), &(0x7f0000002540), 0x8, 0x82, 0x8, 0x8, &(0x7f0000002580)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003340)={&(0x7f0000002700)={0xc24, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xcc8a}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf5ee}}, {0x8}}}]}}, {{0x8}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xeedf, 0xb, 0x10}, {0x7, 0x5, 0x87, 0x3}, {0x100, 0x8, 0x12}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x74}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x148, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x8000}, 0x43) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, r14, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000600)={{r0}, "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"}) 213.647207ms ago: executing program 1 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="088000000000000008001b0000000000102d14f4d752b876081a501cd395cef973952fd7ff90243d05bfb94821658e8377f2a9d7e82296c67ee6f3ac406a688b0abb4522eec5a79cffb4fd10986d41f1085798b8fdb8c660e65eae917d98b765818c2ae297b6bbdcbb14c16c53907b0c861ef4d93385c2daf86ae08628f832"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000500)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x40, 0xfffe, 0x0, 0x0, 0x89, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@multicast1}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x3d}}, {@dev}]}, @lsrr={0x83, 0xb, 0x4d, [@remote, @multicast2]}]}}}}}}}, 0x0) 169.187297ms ago: executing program 0 (id=2513): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)="b098", 0x2}], 0x1}, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) 0s ago: executing program 0 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x18}, 0x400c001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0xffffff9b, &(0x7f0000000080)}, 0x0) unshare(0x10000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) pselect6(0x40, &(0x7f0000000540)={0x101, 0x0, 0x8000, 0xa, 0x5, 0x81, 0x2, 0x3}, &(0x7f0000000640)={0xffffffffffff6329, 0xffffffff, 0x7d, 0x4000000000002, 0x4, 0x800, 0x96, 0x7}, &(0x7f0000000680)={0x9, 0xc95e, 0xc, 0x0, 0xc, 0x2, 0x2, 0x7}, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000400)={&(0x7f0000000700)={[0x5505]}, 0x8}) close(0x3) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f00000000c0), 0x4) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/4086, 0xff6}, 0x102) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0000000000000008000500d736d9000000000000000000000000298fd81879c6e598654bd466ec79d28e11e0f039f8970a0031b84da6b9835b27de116b7f1b3cdc07981287cbdd41b419e18bf4af1e2c82"], 0x20}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000180), &(0x7f0000000240)='%-5lx \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f00000001c0)="af4cd7c20f4a85077fb109ea0d78ec41e7feaaad66d1d99d2ebb2cd09c2a1860f85da2b34e10902ad7839bf6d9eb32eca148f1a6bf593a2651f6e31a317e124d72742692563ca816b3dc46d1", &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000300)="9af46eb76c0579a0b7c37c6a6634a573f2be005949248efc67714166dbf6226e6a298e0280e3b7f0c05b5b4c0b976e1fcf45dd80221acd4ee19b350a6da0d0283f7889d43764a10b4112b151f086ad9f9161590a6caeef9b9b3208370240ee5cc308c9cc39e894cb13f94faac7ed379785115a1e1fcfbdbfe23aa7c69e5d01522a155ac035f5483ee47b82baa6ad684b807353662eb65e9bbc7b5f2d492529c816512d0a42107670de2f1dda320077b7fc1181a104cdb678737751080c7192ce5c1bc32da4c6536d5d00"/211, 0x800, r11, 0x4}, 0x38) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.1919'. [ 275.693632][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.714871][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.745400][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.836246][T12551] hsr_slave_0: entered promiscuous mode [ 275.848553][T12551] hsr_slave_1: entered promiscuous mode [ 275.950487][T12632] netlink: 'syz.0.1921': attribute type 4 has an invalid length. [ 276.514899][T12551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.541777][T12551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.570398][T12551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.603566][T12551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.837169][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.887624][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.918157][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.925432][T12193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.966966][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.974225][T12193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.075036][T12689] xt_hashlimit: size too large, truncated to 1048576 [ 277.126694][T12692] C: renamed from lo (while UP) [ 277.215322][T12692] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 277.324186][T12699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1940'. [ 277.518696][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.623526][ T5855] Bluetooth: hci2: command tx timeout [ 277.674093][T12551] veth0_vlan: entered promiscuous mode [ 277.698497][T12551] veth1_vlan: entered promiscuous mode [ 277.768478][T12551] veth0_macvtap: entered promiscuous mode [ 277.795454][T12551] veth1_macvtap: entered promiscuous mode [ 277.844432][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.883831][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.938569][T12551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.956313][T12551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.982490][T12551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.999066][T12551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.142247][T12193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.150644][T12193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.251329][T12193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.266505][T12193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.911430][T12761] xt_CT: No such helper "syz0" [ 279.269043][T12771] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.298804][T12771] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 279.327727][T12773] xfrm0: entered allmulticast mode [ 279.675065][ T1155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.153118][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.167222][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.184305][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.219725][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.228858][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.267270][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1970'. [ 280.342141][T12796] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 280.373561][T12796] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 280.625568][ T1155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.794388][ T1155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.845979][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.867918][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.879040][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.880583][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 280.897074][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.905225][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.912362][T12808] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 280.912386][T12808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1975'. [ 280.912445][T12808] netlink: 'syz.4.1975': attribute type 5 has an invalid length. [ 280.913569][T12808] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1975'. [ 280.961073][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.973225][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.982513][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.982577][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.000976][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.027129][ T1155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.371188][T12831] netlink: 'syz.4.1979': attribute type 5 has an invalid length. [ 281.523056][ T1155] bridge_slave_1: left allmulticast mode [ 281.528836][ T1155] bridge_slave_1: left promiscuous mode [ 281.545809][T12841] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 281.556920][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.594259][ T1155] bridge_slave_0: left allmulticast mode [ 281.604635][ T1155] bridge_slave_0: left promiscuous mode [ 281.620948][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.068419][T12858] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 282.228621][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.244242][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.256965][ T1155] bond0 (unregistering): Released all slaves [ 282.527943][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 282.679730][T12875] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 283.057825][T12813] chnl_net:caif_netlink_parms(): no params data found [ 283.065487][ T5839] Bluetooth: hci2: command tx timeout [ 283.071468][ T5844] Bluetooth: hci4: command tx timeout [ 283.641669][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.657775][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.668021][T12813] bridge_slave_0: entered allmulticast mode [ 283.682460][T12813] bridge_slave_0: entered promiscuous mode [ 283.726248][ T1155] hsr_slave_0: left promiscuous mode [ 283.735484][ T1155] hsr_slave_1: left promiscuous mode [ 283.741879][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.750095][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.760327][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.767763][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.804999][ T1155] veth1_macvtap: left promiscuous mode [ 283.811173][ T1155] veth0_macvtap: left promiscuous mode [ 283.818535][ T1155] veth1_vlan: left promiscuous mode [ 283.824170][ T1155] veth0_vlan: left promiscuous mode [ 284.371715][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 284.415319][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 284.835092][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.844473][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.855658][T12813] bridge_slave_1: entered allmulticast mode [ 284.867126][T12813] bridge_slave_1: entered promiscuous mode [ 284.916685][T12924] netlink: 'syz.4.2005': attribute type 3 has an invalid length. [ 285.088968][T12813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.112636][T12813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.146491][ T5839] Bluetooth: hci2: command tx timeout [ 285.152613][ T5844] Bluetooth: hci4: command tx timeout [ 285.314035][T12813] team0: Port device team_slave_0 added [ 285.338084][T12813] team0: Port device team_slave_1 added [ 285.410981][T12955] trusted_key: syz.0.2012 sent an empty control message without MSG_MORE. [ 285.416837][T12815] chnl_net:caif_netlink_parms(): no params data found [ 285.443468][T12947] __nla_validate_parse: 6 callbacks suppressed [ 285.443488][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2013'. [ 285.502681][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 285.587203][T12813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.600539][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.627866][T12813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.680192][T12813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.687217][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.720118][T12813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.749167][T12968] netlink: 'syz.1.2016': attribute type 3 has an invalid length. [ 285.769437][T12968] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2016'. [ 286.120365][T12813] hsr_slave_0: entered promiscuous mode [ 286.148220][T12813] hsr_slave_1: entered promiscuous mode [ 286.247144][ T1155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.274881][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.283207][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.310393][T12815] bridge_slave_0: entered allmulticast mode [ 286.318293][T12815] bridge_slave_0: entered promiscuous mode [ 286.348283][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.371387][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.382450][T12815] bridge_slave_1: entered allmulticast mode [ 286.397486][T12815] bridge_slave_1: entered promiscuous mode [ 286.575037][ T1155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.645519][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.728067][T13010] netlink: 'syz.4.2029': attribute type 6 has an invalid length. [ 286.764468][ T1155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.787216][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.796800][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'. [ 286.919921][ T1155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.922604][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 286.948908][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 286.966886][T12815] team0: Port device team_slave_0 added [ 286.973757][T13016] netlink: 'syz.4.2029': attribute type 2 has an invalid length. [ 286.985659][T13016] netlink: 'syz.4.2029': attribute type 6 has an invalid length. [ 286.994369][T13010] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2029'. [ 287.014307][T13010] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2029'. [ 287.076482][T12815] team0: Port device team_slave_1 added [ 287.222825][ T5839] Bluetooth: hci2: command tx timeout [ 287.228317][ T5839] Bluetooth: hci4: command tx timeout [ 287.342188][T12815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.349864][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.376583][T12815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.455949][T12815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.464436][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.482904][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 287.492543][T12815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.645502][T13043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.653191][T13043] IPv6: NLM_F_CREATE should be set when creating new route [ 287.660504][T13043] IPv6: NLM_F_CREATE should be set when creating new route [ 287.693700][T12815] hsr_slave_0: entered promiscuous mode [ 287.704098][T12815] hsr_slave_1: entered promiscuous mode [ 287.718456][T12815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.735772][T12815] Cannot create hsr debugfs directory [ 288.028407][ T1155] gretap0: left allmulticast mode [ 288.036425][ T1155] gretap0: left promiscuous mode [ 288.042345][ T1155] bridge0: port 3(gretap0) entered disabled state [ 288.056398][ T1155] dummy0: left allmulticast mode [ 288.062145][ T1155] dummy0: left promiscuous mode [ 288.067196][ T1155] bridge0: port 2(dummy0) entered disabled state [ 288.076865][ T1155] bridge_slave_0: left allmulticast mode [ 288.082940][ T1155] bridge_slave_0: left promiscuous mode [ 288.088683][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.398451][ T1155] bond1 (unregistering): (slave gretap1): Releasing active interface [ 288.979089][T13072] netlink: 'syz.0.2047': attribute type 7 has an invalid length. [ 289.020536][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.040163][ T1155] bond_slave_0: left allmulticast mode [ 289.054708][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.065669][ T1155] bond_slave_1: left allmulticast mode [ 289.077558][ T1155] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 289.087074][ T1155] bridge_slave_1: left allmulticast mode [ 289.094071][ T1155] bond0 (unregistering): Released all slaves [ 289.208189][ T1155] bond1 (unregistering): Released all slaves [ 289.224392][ T1155] bond2 (unregistering): Released all slaves [ 289.299449][ T5844] Bluetooth: hci2: command tx timeout [ 289.305137][ T5839] Bluetooth: hci4: command tx timeout [ 289.341077][ T1155] bond3 (unregistering): Released all slaves [ 289.398503][T13072] : entered promiscuous mode [ 289.586853][ T1155] : left promiscuous mode [ 289.807827][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2049'. [ 289.886459][T12813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.931711][ T1155] tipc: Disabling bearer [ 289.956040][ T1155] tipc: Disabling bearer [ 289.965448][ T1155] tipc: Left network mode [ 290.014672][T13096] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 290.038411][T12813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.055121][T12813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.091620][T12813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.500170][T13122] __nla_validate_parse: 2 callbacks suppressed [ 290.500189][T13122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2058'. [ 290.528987][T13124] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 290.558103][T13124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'. [ 290.577051][T13122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2058'. [ 290.588981][T13122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2058'. [ 290.878449][T12813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.918301][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.927630][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.935529][T13133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2064'. [ 290.936646][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.948788][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 290.955469][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.985800][ T1155] vlan0: left allmulticast mode [ 290.992656][ T1155] : left allmulticast mode [ 290.997495][ T1155] vlan0: left promiscuous mode [ 291.003306][ T1155] batadv_slave_1: left allmulticast mode [ 291.006080][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 291.009242][ T1155] batadv_slave_1: left promiscuous mode [ 291.026624][ T1155] veth1_macvtap: left promiscuous mode [ 291.032861][ T1155] veth0_macvtap: left promiscuous mode [ 291.040159][ T1155] veth1_vlan: left promiscuous mode [ 291.045549][ T1155] : left promiscuous mode [ 291.542499][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2065'. [ 291.729783][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 291.773067][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 292.058431][T13133] veth11: entered allmulticast mode [ 292.071781][T13135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.205555][T13135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.292221][T13149] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.347182][T12813] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.381912][T12815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.436886][T12815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.478592][T12815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.514991][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.522259][T12189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.541375][T13158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2070'. [ 292.565557][T13158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2070'. [ 292.598648][T12815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.631133][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.638327][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.788394][ T1155] IPVS: stop unused estimator thread 0... [ 293.022082][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.122772][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.183897][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.191129][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.236770][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.244038][T12193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.501796][T12813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.704264][T12813] veth0_vlan: entered promiscuous mode [ 293.753781][T12813] veth1_vlan: entered promiscuous mode [ 293.881993][T12813] veth0_macvtap: entered promiscuous mode [ 293.922877][T12813] veth1_macvtap: entered promiscuous mode [ 294.020951][T12813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.077835][T12813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.133920][T12813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.169722][T12813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.178600][T12813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.220306][T12813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.232583][T13227] veth0: entered promiscuous mode [ 294.249164][T13225] veth0: left promiscuous mode [ 294.368103][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.498340][T13234] lo: entered allmulticast mode [ 294.544580][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.561320][T13232] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 294.569762][T13232] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 294.594803][T12191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.603450][T12191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.721050][T12815] veth0_vlan: entered promiscuous mode [ 294.736166][T13233] lo: left allmulticast mode [ 294.748022][T12189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.764383][T12189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.811771][T12815] veth1_vlan: entered promiscuous mode [ 294.975136][T12815] veth0_macvtap: entered promiscuous mode [ 296.613364][T12815] veth1_macvtap: entered promiscuous mode [ 296.703891][T12815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.727884][T12815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.748463][T12815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.762045][T12815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.776204][T12815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.789282][T12815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.064436][T12193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.163449][T12193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.219795][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.227767][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.313459][T12191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.322259][T12191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.352490][T12193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.763779][T12193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.985800][T13286] __nla_validate_parse: 2 callbacks suppressed [ 297.985821][T13286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2104'. [ 298.009521][T13286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2104'. [ 298.037008][T13287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2102'. [ 298.079282][T13287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2102'. [ 298.145872][T12193] bridge_slave_1: left allmulticast mode [ 298.169416][T12193] bridge_slave_1: left promiscuous mode [ 298.175405][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.263465][T12193] bridge_slave_0: left allmulticast mode [ 298.279669][T12193] bridge_slave_0: left promiscuous mode [ 298.290292][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.794231][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.805126][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.814013][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.825405][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.834456][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.859693][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.879082][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.889709][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.898942][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.911343][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.148348][T12193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.160143][T12193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.175315][T12193] bond0 (unregistering): Released all slaves [ 299.894621][T13326] netlink: 54 bytes leftover after parsing attributes in process `syz.1.2112'. [ 300.208042][T13337] netlink: 'syz.1.2113': attribute type 3 has an invalid length. [ 300.567397][T13298] chnl_net:caif_netlink_parms(): no params data found [ 300.646499][T13349] openvswitch: netlink: Multiple metadata blocks provided [ 300.904231][ T5839] Bluetooth: hci2: command tx timeout [ 300.944374][T12193] hsr_slave_0: left promiscuous mode [ 300.951316][T12193] hsr_slave_1: left promiscuous mode [ 300.957526][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.965308][T12193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.974847][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.983928][ T5839] Bluetooth: hci4: command tx timeout [ 300.984920][T12193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.028846][T12193] veth1_macvtap: left promiscuous mode [ 301.039931][T12193] veth0_macvtap: left promiscuous mode [ 301.045682][T12193] veth1_vlan: left promiscuous mode [ 301.051271][T12193] veth0_vlan: left promiscuous mode [ 301.584155][T12193] team0 (unregistering): Port device team_slave_1 removed [ 301.629981][T12193] team0 (unregistering): Port device team_slave_0 removed [ 302.064254][T13363] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 302.255603][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.277935][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.287641][T13298] bridge_slave_0: entered allmulticast mode [ 302.296222][T13298] bridge_slave_0: entered promiscuous mode [ 302.337605][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.355637][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.363999][T13298] bridge_slave_1: entered allmulticast mode [ 302.373090][T13298] bridge_slave_1: entered promiscuous mode [ 302.592496][T13298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.611096][T13383] bridge: RTM_NEWNEIGH with invalid ether address [ 302.623902][T13298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.738490][T13298] team0: Port device team_slave_0 added [ 302.763281][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 302.787138][T13299] chnl_net:caif_netlink_parms(): no params data found [ 302.817898][T13298] team0: Port device team_slave_1 added [ 302.867246][T13397] sctp: [Deprecated]: syz.4.2130 (pid 13397) Use of int in maxseg socket option. [ 302.867246][T13397] Use struct sctp_assoc_value instead [ 302.980789][ T5839] Bluetooth: hci2: command tx timeout [ 302.995172][T13298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.015834][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.043729][T13298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.060048][ T5839] Bluetooth: hci4: command tx timeout [ 303.133115][T13298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.164060][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.201750][T13298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.362844][T12193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.449099][T13298] hsr_slave_0: entered promiscuous mode [ 303.456115][T13298] hsr_slave_1: entered promiscuous mode [ 303.562551][T12193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.600434][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.607708][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.615369][T13299] bridge_slave_0: entered allmulticast mode [ 303.626733][T13299] bridge_slave_0: entered promiscuous mode [ 303.648749][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 303.658298][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 303.688896][T12193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.711716][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.722641][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.732242][T13299] bridge_slave_1: entered allmulticast mode [ 303.741861][T13299] bridge_slave_1: entered promiscuous mode [ 303.872353][T12193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.951455][T13299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.012288][T13299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.161841][T13444] sch_fq: defrate 0 ignored. [ 304.235326][T13299] team0: Port device team_slave_0 added [ 304.271272][T13299] team0: Port device team_slave_1 added [ 304.431029][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 304.445613][T13455] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2148'. [ 304.459678][T13299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.480461][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.540228][T13299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.559495][T13299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.609408][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.665494][T13299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.836223][T12193] bridge_slave_1: left allmulticast mode [ 304.849427][T12193] bridge_slave_1: left promiscuous mode [ 304.855475][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.870325][T12193] bridge_slave_0: left allmulticast mode [ 304.876542][T12193] bridge_slave_0: left promiscuous mode [ 304.886472][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.928191][T13479] xt_ecn: cannot match TCP bits for non-tcp packets [ 304.937174][T13479] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 304.952885][T13479] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 305.060248][ T5839] Bluetooth: hci2: command tx timeout [ 305.078552][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 305.139661][ T5839] Bluetooth: hci4: command tx timeout [ 305.368620][T12193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.381247][T12193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.391925][T12193] bond0 (unregistering): Released all slaves [ 305.455807][T13299] hsr_slave_0: entered promiscuous mode [ 305.480456][T13299] hsr_slave_1: entered promiscuous mode [ 305.486990][T13299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.512921][T13299] Cannot create hsr debugfs directory [ 305.585881][T13486] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 305.607848][T13486] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 305.629542][T13486] gretap2: entered promiscuous mode [ 305.635003][T13486] gretap2: entered allmulticast mode [ 305.969440][T13497] SET target dimension over the limit! [ 306.361764][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 306.424540][T12193] hsr_slave_0: left promiscuous mode [ 306.433890][T12193] hsr_slave_1: left promiscuous mode [ 306.446569][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.457685][T12193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.470793][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.478260][T12193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.502692][T12193] veth1_macvtap: left promiscuous mode [ 306.508376][T12193] veth0_macvtap: left promiscuous mode [ 306.515622][T12193] veth1_vlan: left promiscuous mode [ 306.521404][T12193] veth0_vlan: left promiscuous mode [ 306.983202][T12193] team0 (unregistering): Port device team_slave_1 removed [ 307.026230][T12193] team0 (unregistering): Port device team_slave_0 removed [ 307.139575][ T5839] Bluetooth: hci2: command tx timeout [ 307.219997][ T5839] Bluetooth: hci4: command tx timeout [ 307.423823][T13508] tipc: Resetting bearer [ 307.524633][T13508] tipc: Disabling bearer [ 307.877894][T13515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.930257][T13515] bridge0: port 1(bond4) entered blocking state [ 307.941793][T13515] bridge0: port 1(bond4) entered disabled state [ 307.948261][T13515] bond4: entered allmulticast mode [ 308.012610][T13515] bond4: entered promiscuous mode [ 308.063542][T13298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.087411][T13298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.180129][T13298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.219438][T13298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.259103][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2167'. [ 308.282486][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2167'. [ 308.698186][T13299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.740220][T13299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.783554][T13299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.846152][T13299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.916899][T13298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.941280][T13298] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.963468][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.970742][T12193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.985865][T13558] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 309.011338][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.018594][T12193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.485985][T13299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.495918][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 309.571928][T13299] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.615116][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.622389][ T7105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.692281][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.699583][ T7105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.716021][T13586] netlink: 'syz.4.2181': attribute type 1 has an invalid length. [ 309.745508][T13591] netlink: 'syz.4.2181': attribute type 1 has an invalid length. [ 309.906569][T13298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.916331][T13594] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2183'. [ 310.066730][T13602] netlink: 'syz.0.2187': attribute type 11 has an invalid length. [ 310.141964][T13298] veth0_vlan: entered promiscuous mode [ 310.172140][T13298] veth1_vlan: entered promiscuous mode [ 310.266930][T13298] veth0_macvtap: entered promiscuous mode [ 310.312254][T13298] veth1_macvtap: entered promiscuous mode [ 310.378422][T13298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.428450][T13298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.505713][T13298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.524873][T13298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.536865][T13298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.546556][T13298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.572106][T13613] syzkaller1: entered promiscuous mode [ 310.598095][T13613] syzkaller1: entered allmulticast mode [ 310.627451][T13299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.642953][T13613] syzkaller1: left promiscuous mode [ 310.648270][T13613] syzkaller1: left allmulticast mode [ 310.851632][ T7105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.881352][ T7105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.991922][T13299] veth0_vlan: entered promiscuous mode [ 311.030831][ T7105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.058514][ T7105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.083570][T13299] veth1_vlan: entered promiscuous mode [ 311.196372][T13299] veth0_macvtap: entered promiscuous mode [ 311.233140][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 311.245237][T13299] veth1_macvtap: entered promiscuous mode [ 311.708137][T13649] netlink: 'syz.1.2192': attribute type 11 has an invalid length. [ 311.752795][T13649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2192'. [ 311.787962][T13299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.817174][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 311.992689][T13299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.204409][ T2982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.251229][T13299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.265966][T13299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.275422][T13299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.297992][T13299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.313610][T13653] syzkaller1: entered promiscuous mode [ 312.323149][T13653] syzkaller1: entered allmulticast mode [ 312.427990][ T2982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.556681][ T2982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.695073][ T2982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.733697][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.742488][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.776221][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.784328][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.966773][ T2982] bridge_slave_1: left allmulticast mode [ 312.973111][ T2982] bridge_slave_1: left promiscuous mode [ 312.978901][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.993152][ T2982] bridge_slave_0: left allmulticast mode [ 312.998878][ T2982] bridge_slave_0: left promiscuous mode [ 313.005077][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.446806][T13665] netlink: 'syz.1.2195': attribute type 11 has an invalid length. [ 313.733724][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.757130][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.780081][ T2982] bond0 (unregistering): Released all slaves [ 313.818802][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2194'. [ 313.965396][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.974709][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.984405][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.998751][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.009661][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.119088][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.130124][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.138598][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.161260][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.169035][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.380710][T13687] tipc: Can't bind to reserved service type 0 [ 314.471160][T13680] syzkaller1: entered promiscuous mode [ 314.476716][T13680] syzkaller1: entered allmulticast mode [ 314.747662][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 314.795217][T13704] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 315.005162][T13708] IPv6: sit1: Disabled Multicast RS [ 315.030460][T13708] sit1: entered allmulticast mode [ 315.131027][T13716] netlink: 'syz.4.2209': attribute type 21 has an invalid length. [ 315.138974][T13716] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 315.440271][T13669] chnl_net:caif_netlink_parms(): no params data found [ 315.585912][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'. [ 315.681960][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 315.971750][T13753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2218'. [ 315.994738][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 316.028733][ T2982] hsr_slave_0: left promiscuous mode [ 316.038096][ T2982] hsr_slave_1: left promiscuous mode [ 316.052838][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.061044][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.073574][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.081117][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.099434][ T5855] Bluetooth: hci2: command tx timeout [ 316.117052][ T2982] veth1_macvtap: left promiscuous mode [ 316.123071][ T2982] veth0_macvtap: left promiscuous mode [ 316.130067][ T2982] veth1_vlan: left promiscuous mode [ 316.136509][ T2982] veth0_vlan: left promiscuous mode [ 316.266025][ T5855] Bluetooth: hci4: command tx timeout [ 316.630085][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 316.672138][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 317.338374][T13766] sctp: [Deprecated]: syz.4.2224 (pid 13766) Use of int in maxseg socket option. [ 317.338374][T13766] Use struct sctp_assoc_value instead [ 317.360378][T13766] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2224'. [ 317.376276][T13669] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.390816][T13669] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.398774][T13669] bridge_slave_0: entered allmulticast mode [ 317.418084][T13669] bridge_slave_0: entered promiscuous mode [ 317.438630][T13669] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.447358][T13669] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.460019][T13669] bridge_slave_1: entered allmulticast mode [ 317.476024][T13669] bridge_slave_1: entered promiscuous mode [ 317.655233][T13669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.718869][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 317.769079][T13669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.909458][T13669] team0: Port device team_slave_0 added [ 317.924304][T13669] team0: Port device team_slave_1 added [ 318.127945][T13669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.145736][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.175648][T13669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.186636][ T5855] Bluetooth: hci2: command tx timeout [ 318.205986][T13676] chnl_net:caif_netlink_parms(): no params data found [ 318.231775][T13669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.238769][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.265730][T13669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.339743][ T5855] Bluetooth: hci4: command tx timeout [ 318.637089][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.647223][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.668593][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.681841][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.697000][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.724834][T12186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.787555][T13669] hsr_slave_0: entered promiscuous mode [ 318.794573][T13669] hsr_slave_1: entered promiscuous mode [ 318.811922][T13812] wg1: entered promiscuous mode [ 318.830760][T13676] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.838084][T13676] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.857918][T13676] bridge_slave_0: entered allmulticast mode [ 318.866787][T13676] bridge_slave_0: entered promiscuous mode [ 318.900621][T12186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.926456][T13676] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.934579][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.943016][T13676] bridge_slave_1: entered allmulticast mode [ 318.952136][T13676] bridge_slave_1: entered promiscuous mode [ 318.970915][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 319.063408][T12186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.144042][T13676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.185685][T12186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.222454][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'. [ 319.236414][T13676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.264383][T13836] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2241'. [ 319.498861][T13676] team0: Port device team_slave_0 added [ 319.587957][T13676] team0: Port device team_slave_1 added [ 319.735365][T13850] netlink: 'syz.0.2246': attribute type 1 has an invalid length. [ 319.827916][T13676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.835180][T13676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.868959][T13676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.913573][T13853] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 319.930785][T13676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.937789][T13676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.964804][T13676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.013697][T12186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.048207][T13850] veth15: entered promiscuous mode [ 320.056179][T13850] bond4: (slave veth15): Enslaving as a backup interface with a down link [ 320.190815][T12186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.234896][T13676] hsr_slave_0: entered promiscuous mode [ 320.241971][T13676] hsr_slave_1: entered promiscuous mode [ 320.248332][T13676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.256295][T13676] Cannot create hsr debugfs directory [ 320.272001][ T5855] Bluetooth: hci2: command tx timeout [ 320.416349][T12186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.426910][ T5855] Bluetooth: hci4: command tx timeout [ 320.577356][T12186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.739516][ T5855] Bluetooth: hci1: command tx timeout [ 320.934684][T13806] chnl_net:caif_netlink_parms(): no params data found [ 321.120336][T12186] bridge0: port 2(batadv0) entered disabled state [ 321.135187][T12186] bridge_slave_0: left allmulticast mode [ 321.141170][T12186] bridge_slave_0: left promiscuous mode [ 321.146993][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.168507][T12186] bridge_slave_1: left allmulticast mode [ 321.174516][T12186] bridge_slave_1: left promiscuous mode [ 321.180598][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.195531][T12186] bridge_slave_0: left allmulticast mode [ 321.201331][T12186] bridge_slave_0: left promiscuous mode [ 321.207114][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.340639][ T5855] Bluetooth: hci2: command tx timeout [ 322.412312][T12186] bond3 (unregistering): (slave gretap1): Releasing active interface [ 322.504128][ T5855] Bluetooth: hci4: command tx timeout [ 322.745339][T12186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.758841][T12186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.771628][T12186] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 322.783007][T12186] bond0 (unregistering): Released all slaves [ 322.822937][ T5855] Bluetooth: hci1: command tx timeout [ 322.898837][T12186] bond1 (unregistering): Released all slaves [ 322.920268][T12186] bond2 (unregistering): Released all slaves [ 322.936968][T12186] bond3 (unregistering): Released all slaves [ 323.055224][T12186] bond4 (unregistering): Released all slaves [ 323.073727][T12186] bond5 (unregistering): Released all slaves [ 323.428375][T12186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.444851][T12186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.455602][T12186] bond0 (unregistering): Released all slaves [ 323.493321][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.506125][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.516372][T13806] bridge_slave_0: entered allmulticast mode [ 323.546586][T13806] bridge_slave_0: entered promiscuous mode [ 323.562219][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.573947][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.593899][T13806] bridge_slave_1: entered allmulticast mode [ 323.606920][T13806] bridge_slave_1: entered promiscuous mode [ 323.613376][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 323.630207][T13893] netlink: 'syz.0.2255': attribute type 14 has an invalid length. [ 323.638894][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 323.703064][T12186] IPVS: stopping master sync thread 11971 ... [ 323.925895][T13806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.948183][T13806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.065751][T13911] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 324.074552][T13911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.187478][T13806] team0: Port device team_slave_0 added [ 324.216063][T13806] team0: Port device team_slave_1 added [ 324.388643][T13806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.396106][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.423626][T13806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.516965][T13806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.528443][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.563796][T13806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.576734][T13918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.779656][T13806] hsr_slave_0: entered promiscuous mode [ 324.787458][T13806] hsr_slave_1: entered promiscuous mode [ 324.853209][T13806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.869340][T13806] Cannot create hsr debugfs directory [ 324.900577][ T5855] Bluetooth: hci1: command tx timeout [ 325.086118][T13930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 325.227701][T13935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2266'. [ 325.333628][T12186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.341329][T12186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.349357][T12186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.356906][T12186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.370007][T12186] hsr_slave_0: left promiscuous mode [ 325.376247][T12186] hsr_slave_1: left promiscuous mode [ 325.382651][T12186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.390546][T12186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.398527][T12186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.406419][T12186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.438530][T12186] veth1_macvtap: left promiscuous mode [ 325.444271][T12186] veth0_macvtap: left promiscuous mode [ 325.451346][T12186] veth1_macvtap: left promiscuous mode [ 325.456884][T12186] veth0_macvtap: left promiscuous mode [ 325.464509][T12186] veth1_vlan: left promiscuous mode [ 325.470103][T12186] veth0_vlan: left promiscuous mode [ 326.128651][ T611] smc: removing ib device syz2 [ 326.634890][T12186] team0 (unregistering): Port device team_slave_1 removed [ 326.683236][T12186] team0 (unregistering): Port device team_slave_0 removed [ 326.982921][ T5855] Bluetooth: hci1: command tx timeout [ 327.128103][ T5900] syz2: Port: 1 Link DOWN [ 327.154499][T13676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.216478][T13676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.257206][T13676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.353751][T13676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.633730][T13669] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.722665][T13952] IPVS: set_ctl: invalid protocol: 29 172.20.20.38:1 [ 327.830271][T13669] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.868019][T13669] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.024578][T13669] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.048415][T13960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.081765][T13960] netlink: 'syz.0.2274': attribute type 28 has an invalid length. [ 328.108634][T13960] netlink: 'syz.0.2274': attribute type 3 has an invalid length. [ 328.128249][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2274'. [ 328.171260][T13959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'. [ 328.307487][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2273'. [ 328.487962][T13676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.573422][T13676] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.639339][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2275'. [ 328.639728][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.655525][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.900529][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.907747][T12189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.096457][T13986] vlan0: entered promiscuous mode [ 329.113692][T13986] bridge0: entered promiscuous mode [ 329.119157][T13986] vlan0: entered allmulticast mode [ 329.129310][T13986] bridge0: entered allmulticast mode [ 329.245068][T13669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.273972][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 329.296552][T13806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.306136][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 329.323976][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 329.375047][T13806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.446187][T13806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.543575][T13669] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.574305][T13806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.666842][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.674078][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.717865][T14002] netlink: 'syz.0.2281': attribute type 4 has an invalid length. [ 329.734893][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.742108][T12189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.753624][T14002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2281'. [ 329.801820][T14002] wlan1: mtu less than device minimum [ 330.103951][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.160574][T13676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.173637][T13806] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.217486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.224824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.308360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.315616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.522183][T13676] veth0_vlan: entered promiscuous mode [ 330.563653][T13676] veth1_vlan: entered promiscuous mode [ 330.654801][T13669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.708039][T13676] veth0_macvtap: entered promiscuous mode [ 330.768227][T13676] veth1_macvtap: entered promiscuous mode [ 330.914400][T13676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.960806][T13669] veth0_vlan: entered promiscuous mode [ 331.029672][T13676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.060221][T13669] veth1_vlan: entered promiscuous mode [ 331.073131][T13676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.100893][T13676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.113250][T13676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.126584][T13676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.286297][T13806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.336100][T13669] veth0_macvtap: entered promiscuous mode [ 331.394080][T13669] veth1_macvtap: entered promiscuous mode [ 331.411980][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2295'. [ 331.462873][T12189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.486041][T12189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.548966][T13669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.594120][T13669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.635920][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.657418][T13669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.677183][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.693933][T13669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.708056][T13669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.720085][T13669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.977355][ T7089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.005883][ T7089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.148867][T12189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.174950][T12189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.238894][T13806] veth0_vlan: entered promiscuous mode [ 332.258499][T13806] veth1_vlan: entered promiscuous mode [ 332.495757][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.717404][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.873387][T13806] veth0_macvtap: entered promiscuous mode [ 332.893971][T13806] veth1_macvtap: entered promiscuous mode [ 332.961241][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.141873][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.196196][T14099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2304'. [ 333.234868][T14098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.281968][T13806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.309872][T14098] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2303'. [ 333.324026][T13806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.406880][T13806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.439258][T13806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.448035][T13806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.466456][T13806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.776804][ T12] bridge_slave_1: left allmulticast mode [ 333.790987][ T12] bridge_slave_1: left promiscuous mode [ 333.796889][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.837647][ T12] bridge_slave_0: left allmulticast mode [ 333.853756][ T12] bridge_slave_0: left promiscuous mode [ 333.867221][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.928760][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.943272][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.958974][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.968638][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.976637][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.367079][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.377022][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.395914][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.414769][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.442352][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.653390][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.664978][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.680416][ T12] bond0 (unregistering): Released all slaves [ 334.726286][ T611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.746575][ T611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.925842][T14140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2313'. [ 335.016622][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.040939][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.318924][T14159] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 335.344660][ T12] hsr_slave_0: left promiscuous mode [ 335.354966][T14159] x_tables: duplicate underflow at hook 2 [ 335.377496][ T12] hsr_slave_1: left promiscuous mode [ 335.393726][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.409465][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.426162][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.454088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.504996][ T12] veth1_macvtap: left promiscuous mode [ 335.510873][ T12] veth0_macvtap: left promiscuous mode [ 335.516741][ T12] veth1_vlan: left promiscuous mode [ 335.522582][ T12] veth0_vlan: left promiscuous mode [ 335.604624][T14167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2322'. [ 335.614853][T14167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2322'. [ 336.026094][ T12] team0 (unregistering): Port device team_slave_1 removed [ 336.032602][ T5839] Bluetooth: hci2: command tx timeout [ 336.073050][ T12] team0 (unregistering): Port device team_slave_0 removed [ 336.514698][ T5839] Bluetooth: hci4: command tx timeout [ 337.096974][T14131] chnl_net:caif_netlink_parms(): no params data found [ 337.111244][T14118] chnl_net:caif_netlink_parms(): no params data found [ 337.193631][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.215172][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2326'. [ 337.268115][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2326'. [ 337.338122][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.532877][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.581330][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 337.594442][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.613175][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.623555][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.636730][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.645750][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.685580][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.815707][T14210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.850807][T14200] hsr_slave_0 (unregistering): left promiscuous mode [ 337.891406][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.898821][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.918069][T14131] bridge_slave_0: entered allmulticast mode [ 337.932051][T14131] bridge_slave_0: entered promiscuous mode [ 337.969924][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.982519][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.991698][T14131] bridge_slave_1: entered allmulticast mode [ 338.005449][T14131] bridge_slave_1: entered promiscuous mode [ 338.015700][T14118] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.025783][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.033446][T14118] bridge_slave_0: entered allmulticast mode [ 338.047223][T14118] bridge_slave_0: entered promiscuous mode [ 338.057377][T14118] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.065019][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.075376][T14118] bridge_slave_1: entered allmulticast mode [ 338.083586][T14118] bridge_slave_1: entered promiscuous mode [ 338.099643][ T5855] Bluetooth: hci2: command tx timeout [ 338.159058][T14219] netlink: 'syz.0.2334': attribute type 10 has an invalid length. [ 338.195941][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.254307][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.300691][T14118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.312617][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2335'. [ 338.317216][T14118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.447329][T14131] team0: Port device team_slave_0 added [ 338.476919][T14118] team0: Port device team_slave_0 added [ 338.502639][T14131] team0: Port device team_slave_1 added [ 338.538558][T14118] team0: Port device team_slave_1 added [ 338.586091][ T5855] Bluetooth: hci4: command tx timeout [ 338.626279][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.636285][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.670399][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.728353][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.750915][T14118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.758016][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.785359][T14118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.799486][T14118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.807431][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.835199][T14118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.860037][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.869024][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.871467][T14230] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2338'. [ 338.939347][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.096500][T14233] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 339.118602][T14233] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.2339'. [ 339.145555][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.251838][T14131] hsr_slave_0: entered promiscuous mode [ 339.258809][T14131] hsr_slave_1: entered promiscuous mode [ 339.273974][T14131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.282119][T14131] Cannot create hsr debugfs directory [ 339.326149][T14118] hsr_slave_0: entered promiscuous mode [ 339.336723][T14118] hsr_slave_1: entered promiscuous mode [ 339.344530][T14118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.352748][T14118] Cannot create hsr debugfs directory [ 339.386539][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.597758][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.700341][ T5855] Bluetooth: hci1: command tx timeout [ 339.729370][T14265] netlink: 'syz.1.2346': attribute type 1 has an invalid length. [ 339.780669][T14203] chnl_net:caif_netlink_parms(): no params data found [ 339.988804][T14272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2348'. [ 340.116412][T14272] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 340.125009][T14272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2348'. [ 340.181489][ T5855] Bluetooth: hci2: command tx timeout [ 340.309588][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 340.383819][ T12] bridge_slave_1: left allmulticast mode [ 340.390640][ T12] bridge_slave_1: left promiscuous mode [ 340.396501][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.418848][ T12] bridge_slave_0: left allmulticast mode [ 340.430429][ T12] bridge_slave_0: left promiscuous mode [ 340.436322][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.454522][ T12] bridge_slave_1: left allmulticast mode [ 340.460647][ T12] bridge_slave_1: left promiscuous mode [ 340.467572][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.486256][ T12] bridge_slave_0: left allmulticast mode [ 340.494796][ T12] bridge_slave_0: left promiscuous mode [ 340.507930][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.669379][ T5855] Bluetooth: hci4: command tx timeout [ 340.931876][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.944080][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.955484][ T12] bond0 (unregistering): Released all slaves [ 341.240311][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.252677][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.263605][ T12] bond0 (unregistering): Released all slaves [ 341.292203][T14203] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.299910][T14203] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.307155][T14203] bridge_slave_0: entered allmulticast mode [ 341.317854][T14203] bridge_slave_0: entered promiscuous mode [ 341.415744][T14203] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.423099][T14203] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.430918][T14203] bridge_slave_1: entered allmulticast mode [ 341.438285][T14203] bridge_slave_1: entered promiscuous mode [ 341.572151][T14203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.642402][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 341.666722][T14203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.779591][ T5855] Bluetooth: hci1: command tx timeout [ 342.050890][T14203] team0: Port device team_slave_0 added [ 342.063166][T14203] team0: Port device team_slave_1 added [ 342.215368][T14203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.229352][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.269543][ T5855] Bluetooth: hci2: command tx timeout [ 342.271712][T14203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.336078][ T12] hsr_slave_0: left promiscuous mode [ 342.343835][ T12] hsr_slave_1: left promiscuous mode [ 342.359384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.366843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.377668][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.386554][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.401695][ T12] hsr_slave_0: left promiscuous mode [ 342.414029][ T12] hsr_slave_1: left promiscuous mode [ 342.421083][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.428525][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.439546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.446994][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.481529][ T12] veth1_macvtap: left promiscuous mode [ 342.487102][ T12] veth0_macvtap: left promiscuous mode [ 342.493827][ T12] veth1_vlan: left promiscuous mode [ 342.499202][ T12] veth0_vlan: left promiscuous mode [ 342.507369][ T12] veth1_macvtap: left promiscuous mode [ 342.513013][ T12] veth0_macvtap: left promiscuous mode [ 342.518657][ T12] veth1_vlan: left promiscuous mode [ 342.524418][ T12] veth0_vlan: left promiscuous mode [ 342.742237][ T5855] Bluetooth: hci4: command tx timeout [ 343.207364][ T12] team0 (unregistering): Port device team_slave_1 removed [ 343.250188][ T12] team0 (unregistering): Port device team_slave_0 removed [ 343.860712][ T5855] Bluetooth: hci1: command tx timeout [ 343.987913][ T12] team0 (unregistering): Port device team_slave_1 removed [ 344.028324][ T12] team0 (unregistering): Port device team_slave_0 removed [ 344.408399][T14203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.416339][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.443096][T14203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.560636][T14203] hsr_slave_0: entered promiscuous mode [ 344.567382][T14203] hsr_slave_1: entered promiscuous mode [ 344.587007][T14317] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 344.724485][T14131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.835474][T14131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.861470][T14131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.913441][T14131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.088534][T14337] openvswitch: netlink: Message has 24 unknown bytes. [ 345.218860][T14339] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 345.267108][T14131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.326231][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.354414][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.361729][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.392806][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.400055][T12189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.642615][T14118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.680602][T14118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.715528][T14118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.746213][T14118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.811298][T14203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.842196][T14203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.874192][T14203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.888161][T14203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.940040][ T5855] Bluetooth: hci1: command tx timeout [ 345.987393][T14131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.329807][T14131] veth0_vlan: entered promiscuous mode [ 346.368777][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.384731][T14118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.411296][T14131] veth1_vlan: entered promiscuous mode [ 346.419126][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 346.430186][T14203] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.444718][T14377] nbd: must specify a device to reconfigure [ 346.475121][T14377] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2371'. [ 346.495076][T14118] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.514101][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.521329][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.578973][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.586251][ T7089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.612032][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.619364][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.646683][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.654024][ T7089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.719012][T14131] veth0_macvtap: entered promiscuous mode [ 346.722446][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 346.792373][T14131] veth1_macvtap: entered promiscuous mode [ 346.815685][T14388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 346.830004][T14203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.865584][T14131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.897004][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 346.925776][T14131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.933456][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 346.944092][T14388] netlink: 'syz.0.2374': attribute type 12 has an invalid length. [ 346.953364][T14388] netlink: 'syz.0.2374': attribute type 11 has an invalid length. [ 346.976662][T14131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.991766][T14131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.004984][T14131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.016692][T14131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.399939][ T7089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.407836][ T7089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.541571][T12186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.576785][T14203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.577878][T12186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.622039][T14419] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2381'. [ 347.661241][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 347.750042][T14118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.009731][T14118] veth0_vlan: entered promiscuous mode [ 348.045700][T14118] veth1_vlan: entered promiscuous mode [ 348.175899][T14118] veth0_macvtap: entered promiscuous mode [ 348.195884][T14118] veth1_macvtap: entered promiscuous mode [ 348.257708][T14439] team0: entered promiscuous mode [ 348.266991][T14439] team_slave_0: entered promiscuous mode [ 348.285860][T14439] team_slave_1: entered promiscuous mode [ 348.305376][T14438] team0: left promiscuous mode [ 348.315655][T14438] team_slave_0: left promiscuous mode [ 348.323379][T14438] team_slave_1: left promiscuous mode [ 348.336236][T14118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.350604][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2387'. [ 348.393200][T14118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.417574][T14203] veth0_vlan: entered promiscuous mode [ 348.436695][T14445] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 348.566743][T14453] netlink: 'syz.1.2390': attribute type 9 has an invalid length. [ 348.596542][ T611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.726400][T14118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.735730][T14118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.750231][T14118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.758990][T14118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.855948][ T611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.896348][T14203] veth1_vlan: entered promiscuous mode [ 348.919463][ T611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.000383][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.009857][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.034853][ T611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.076816][T14203] veth0_macvtap: entered promiscuous mode [ 349.105665][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.111886][T14203] veth1_macvtap: entered promiscuous mode [ 349.124068][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.168561][T14203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.195029][T14203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.214226][T14203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.225976][T14203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.235373][T14203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.244735][T14203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.425486][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 349.429669][T14460] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 349.450270][T14460] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 349.501258][ T7094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.509122][ T7094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.577263][ T611] bridge_slave_1: left allmulticast mode [ 349.592042][ T611] bridge_slave_1: left promiscuous mode [ 349.608242][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.636689][ T611] bridge_slave_0: left allmulticast mode [ 349.648957][ T611] bridge_slave_0: left promiscuous mode [ 349.656535][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.942951][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.956102][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.973383][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.984362][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.992601][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.297282][ T611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.308592][ T611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.319479][ T611] bond0 (unregistering): Released all slaves [ 350.378327][ T7094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.408295][ T7094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.714381][ T611] hsr_slave_0: left promiscuous mode [ 350.727218][ T611] hsr_slave_1: left promiscuous mode [ 350.734521][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.744432][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.753008][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.761066][ T611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.782144][ T611] veth1_macvtap: left promiscuous mode [ 350.788440][ T611] veth0_macvtap: left promiscuous mode [ 350.794344][ T611] veth1_vlan: left promiscuous mode [ 350.802709][ T611] veth0_vlan: left promiscuous mode [ 351.711187][ T611] team0 (unregistering): Port device team_slave_1 removed [ 351.840423][ T611] team0 (unregistering): Port device team_slave_0 removed [ 351.885154][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.897292][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.905417][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.915895][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.925350][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.988671][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.998416][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.013389][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.032296][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.043000][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.102008][ T5839] Bluetooth: hci2: command tx timeout [ 352.442388][T14466] chnl_net:caif_netlink_parms(): no params data found [ 352.726545][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2399'. [ 352.818056][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.836119][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.843747][T14466] bridge_slave_0: entered allmulticast mode [ 352.852514][T14466] bridge_slave_0: entered promiscuous mode [ 352.867707][T14510] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 352.883954][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.892115][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.903087][T14466] bridge_slave_1: entered allmulticast mode [ 352.911722][T14466] bridge_slave_1: entered promiscuous mode [ 352.978649][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.005296][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.103895][ T611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.180768][T14466] team0: Port device team_slave_0 added [ 353.197565][T14466] team0: Port device team_slave_1 added [ 353.228323][ T611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.322715][T14493] chnl_net:caif_netlink_parms(): no params data found [ 353.341483][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.350638][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.377480][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.434524][ T611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.451588][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.458798][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.486966][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.596548][T14491] chnl_net:caif_netlink_parms(): no params data found [ 353.667166][ T611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.714108][T14466] hsr_slave_0: entered promiscuous mode [ 353.721875][T14466] hsr_slave_1: entered promiscuous mode [ 353.728080][T14466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.760769][T14466] Cannot create hsr debugfs directory [ 353.796643][T14526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.932613][T14493] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.940301][ T5839] Bluetooth: hci1: command tx timeout [ 353.950391][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.958173][T14493] bridge_slave_0: entered allmulticast mode [ 353.976325][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'. [ 353.984910][T14493] bridge_slave_0: entered promiscuous mode [ 354.089413][T14493] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.096669][T14493] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.109824][ T5839] Bluetooth: hci4: command tx timeout [ 354.118306][T14493] bridge_slave_1: entered allmulticast mode [ 354.134387][T14493] bridge_slave_1: entered promiscuous mode [ 354.186248][ T5839] Bluetooth: hci2: command tx timeout [ 354.358288][T14493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.388361][T14491] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.398609][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.415009][T14491] bridge_slave_0: entered allmulticast mode [ 354.425627][T14491] bridge_slave_0: entered promiscuous mode [ 354.461202][T14493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.477876][T14549] netlink: 'syz.1.2408': attribute type 3 has an invalid length. [ 354.486207][T14549] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2408'. [ 354.496118][T14491] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.531837][T14491] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.543377][T14491] bridge_slave_1: entered allmulticast mode [ 354.552662][T14491] bridge_slave_1: entered promiscuous mode [ 354.668154][T14491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.805639][T14561] team0 (unregistering): Port device team_slave_0 removed [ 354.822191][T14561] team0 (unregistering): Port device team_slave_1 removed [ 354.834793][T14561] team0 (unregistering): Port device geneve0 removed [ 354.875730][T14493] team0: Port device team_slave_0 added [ 354.886948][T14491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.933396][T14493] team0: Port device team_slave_1 added [ 355.054045][T14491] team0: Port device team_slave_0 added [ 355.102363][ T611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.251337][T14491] team0: Port device team_slave_1 added [ 355.284810][ T611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.306930][T14493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.318107][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.345185][T14493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.373689][T14574] netlink: 'syz.0.2413': attribute type 3 has an invalid length. [ 355.393671][T14565] 8021q: VLANs not supported on syzkaller1 [ 355.433057][ T611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.461197][T14493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.468682][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.485097][T14578] delete_channel: no stack [ 355.497250][T14493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.614562][ T611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.655936][T14491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.664697][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.697465][T14491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.764451][T14491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.779233][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.811235][T14491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.904238][T14493] hsr_slave_0: entered promiscuous mode [ 355.925046][T14493] hsr_slave_1: entered promiscuous mode [ 355.933092][T14493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.941711][T14493] Cannot create hsr debugfs directory [ 355.986513][T14589] netlink: 'syz.0.2420': attribute type 1 has an invalid length. [ 356.017539][T14491] hsr_slave_0: entered promiscuous mode [ 356.023513][ T5839] Bluetooth: hci1: command tx timeout [ 356.030731][T14491] hsr_slave_1: entered promiscuous mode [ 356.037483][T14491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.047237][T14491] Cannot create hsr debugfs directory [ 356.105793][T14589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.124439][T14590] ip6erspan0: entered promiscuous mode [ 356.193590][ T5839] Bluetooth: hci4: command tx timeout [ 356.279513][ T5839] Bluetooth: hci2: command tx timeout [ 356.430296][ T611] bridge_slave_1: left allmulticast mode [ 356.444984][ T611] bridge_slave_1: left promiscuous mode [ 356.457438][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.482681][ T611] bridge_slave_0: left allmulticast mode [ 356.488403][ T611] bridge_slave_0: left promiscuous mode [ 356.511001][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.533887][ T611] bridge_slave_1: left allmulticast mode [ 356.539756][ T611] bridge_slave_1: left promiscuous mode [ 356.545548][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.556252][ T611] bridge_slave_0: left allmulticast mode [ 356.562559][ T611] bridge_slave_0: left promiscuous mode [ 356.568303][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.985493][ T611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.996929][ T611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.007710][ T611] bond0 (unregistering): Released all slaves [ 357.309617][ T611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.324799][ T611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.335270][ T611] bond0 (unregistering): Released all slaves [ 357.757685][T14466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.770952][T14466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.828610][T14466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.843045][T14466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.979120][T14633] nbd: device at index 1 is going down [ 358.101430][ T5855] Bluetooth: hci1: command tx timeout [ 358.251267][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2433'. [ 358.270149][ T5855] Bluetooth: hci4: command tx timeout [ 358.346260][ T5855] Bluetooth: hci2: command tx timeout [ 358.359056][ T611] hsr_slave_0: left promiscuous mode [ 358.381575][ T611] hsr_slave_1: left promiscuous mode [ 358.396026][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.420027][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.428307][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.436687][ T611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.459515][ T611] hsr_slave_0: left promiscuous mode [ 358.474121][ T611] hsr_slave_1: left promiscuous mode [ 358.483568][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.494825][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.510779][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.524362][ T611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.564720][ T611] veth1_macvtap: left promiscuous mode [ 358.570968][ T611] veth0_macvtap: left promiscuous mode [ 358.577086][ T611] veth1_vlan: left promiscuous mode [ 358.582706][ T611] veth0_vlan: left promiscuous mode [ 358.594570][ T611] veth1_macvtap: left promiscuous mode [ 358.600932][ T611] veth0_macvtap: left promiscuous mode [ 358.606697][ T611] veth1_vlan: left promiscuous mode [ 358.612418][ T611] veth0_vlan: left promiscuous mode [ 359.195525][ T611] team0 (unregistering): Port device team_slave_1 removed [ 359.238747][ T611] team0 (unregistering): Port device team_slave_0 removed [ 359.981940][ T611] team0 (unregistering): Port device team_slave_1 removed [ 360.027395][ T611] team0 (unregistering): Port device team_slave_0 removed [ 360.179553][ T5855] Bluetooth: hci1: command tx timeout [ 360.342230][ T5855] Bluetooth: hci4: command tx timeout [ 360.437044][T14650] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 360.535962][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.686285][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.761467][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.768638][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.786726][T14668] netlink: 'syz.1.2439': attribute type 10 has an invalid length. [ 360.807749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.814961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.312567][T14491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.350696][T14491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.387898][T14491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.408383][T14491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.425820][T14685] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 361.434179][T14685] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 361.584754][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.642901][T14493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.680100][T14493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.695548][T14493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.717613][T14701] veth0: entered promiscuous mode [ 361.726009][T14700] veth0: left promiscuous mode [ 361.731450][T14493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.765634][T14491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.827132][T14491] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.885295][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.892479][ T7089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.944874][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.952150][ T7089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.984327][T14466] veth0_vlan: entered promiscuous mode [ 362.026724][T14466] veth1_vlan: entered promiscuous mode [ 362.144082][T14491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.188032][T14493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.224111][T14466] veth0_macvtap: entered promiscuous mode [ 362.279869][T14466] veth1_macvtap: entered promiscuous mode [ 362.313133][T14493] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.366280][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.373528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.453827][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.475613][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.482912][ T7089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.536206][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.603306][T14466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.622998][T14466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.633688][T14466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.642891][T14466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.815826][T14491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.871402][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.900551][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.987292][ T611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.008217][ T611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.059013][T14491] veth0_vlan: entered promiscuous mode [ 363.108648][T14491] veth1_vlan: entered promiscuous mode [ 363.282619][T14740] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2455'. [ 363.295129][T14740] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2455'. [ 363.321161][T14491] veth0_macvtap: entered promiscuous mode [ 363.343206][T14491] veth1_macvtap: entered promiscuous mode [ 363.413441][T14491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.446177][T14493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.506678][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 363.533540][T14750] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2458'. [ 363.575749][T14750] netlink: 'syz.1.2458': attribute type 5 has an invalid length. [ 363.715776][ T611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.828497][T14491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.888151][T14491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.929605][T14491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.938382][T14491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.969281][T14491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.065103][ T611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.201229][ T611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.263470][ T611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.293368][T12193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.309822][T12193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.356356][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.364599][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.436583][T14493] veth0_vlan: entered promiscuous mode [ 364.540814][T14493] veth1_vlan: entered promiscuous mode [ 364.549873][ T611] bridge_slave_1: left allmulticast mode [ 364.555585][ T611] bridge_slave_1: left promiscuous mode [ 364.561945][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.575951][ T611] bridge_slave_0: left allmulticast mode [ 364.582520][ T611] bridge_slave_0: left promiscuous mode [ 364.588260][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.301074][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.313222][ T611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.319592][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.334415][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.334926][ T611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.343802][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.359727][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.367367][ T611] bond0 (unregistering): Released all slaves [ 365.453705][T14493] veth0_macvtap: entered promiscuous mode [ 365.484388][T14493] veth1_macvtap: entered promiscuous mode [ 365.569203][T14493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.636294][T14493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.653928][T14493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.666581][T14493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.675525][T14493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.687584][T14493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.742510][ T611] hsr_slave_0: left promiscuous mode [ 365.748479][ T611] hsr_slave_1: left promiscuous mode [ 365.754904][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.763599][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.771944][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.780279][ T611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.801058][ T611] veth1_macvtap: left promiscuous mode [ 365.806608][ T611] veth0_macvtap: left promiscuous mode [ 365.812806][ T611] veth1_vlan: left promiscuous mode [ 365.818109][ T611] veth0_vlan: left promiscuous mode [ 366.264712][ T611] team0 (unregistering): Port device team_slave_1 removed [ 366.306021][ T611] team0 (unregistering): Port device team_slave_0 removed [ 366.872722][T12189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.887196][T12189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.901259][T14778] chnl_net:caif_netlink_parms(): no params data found [ 366.946869][T12189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.958011][T12189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.101765][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.108994][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.120011][T14778] bridge_slave_0: entered allmulticast mode [ 367.127702][T14778] bridge_slave_0: entered promiscuous mode [ 367.157070][T14778] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.179019][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.198563][T14778] bridge_slave_1: entered allmulticast mode [ 367.221837][T14778] bridge_slave_1: entered promiscuous mode [ 367.376126][T14778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.389831][ T5855] Bluetooth: hci1: command tx timeout [ 367.512125][ T611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.559242][T14796] netlink: 'syz.1.2464': attribute type 29 has an invalid length. [ 367.582091][T14778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.745699][ T611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.797266][T14778] team0: Port device team_slave_0 added [ 367.834922][ T611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.856000][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.867953][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.868843][T14778] team0: Port device team_slave_1 added [ 367.882500][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.893955][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.902516][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.938367][ T611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.974203][T14778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.981602][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.008707][T14778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.030626][T14778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.037616][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.068300][T14778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.175267][T14778] hsr_slave_0: entered promiscuous mode [ 368.196031][T14778] hsr_slave_1: entered promiscuous mode [ 368.450636][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2468'. [ 368.633185][T14821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2468'. [ 368.747703][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.756827][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.764810][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.773089][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.774664][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 368.791117][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2470'. [ 368.795633][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.942137][ T611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.102814][ T611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.147708][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 369.157885][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 369.194585][ T611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.356186][ T611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.459991][ T5839] Bluetooth: hci1: command tx timeout [ 369.516518][T14848] bond0: (slave wlan1): Releasing backup interface [ 369.661309][T14803] chnl_net:caif_netlink_parms(): no params data found [ 369.950882][ T5839] Bluetooth: hci2: command tx timeout [ 369.971225][ T611] bridge_slave_1: left allmulticast mode [ 369.976956][ T611] bridge_slave_1: left promiscuous mode [ 369.999444][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.013488][ T611] bridge_slave_0: left allmulticast mode [ 370.027779][ T611] bridge_slave_0: left promiscuous mode [ 370.037464][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.055276][ T611] bridge_slave_1: left allmulticast mode [ 370.063573][T14871] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 370.069030][ T611] bridge_slave_1: left promiscuous mode [ 370.077929][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.090360][ T611] bridge_slave_0: left allmulticast mode [ 370.096071][ T611] bridge_slave_0: left promiscuous mode [ 370.120591][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.549339][ T611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.560749][ T611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.571263][ T611] bond0 (unregistering): Released all slaves [ 370.890633][ T611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.900211][ T5839] Bluetooth: hci4: command tx timeout [ 370.910288][ T611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.921048][ T611] bond0 (unregistering): Released all slaves [ 371.035966][T14881] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 371.147752][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.177422][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.199777][T14803] bridge_slave_0: entered allmulticast mode [ 371.208142][T14803] bridge_slave_0: entered promiscuous mode [ 371.311466][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.318813][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.328586][T14803] bridge_slave_1: entered allmulticast mode [ 371.336646][T14803] bridge_slave_1: entered promiscuous mode [ 371.367186][T14778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.442568][T14778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.549986][ T5839] Bluetooth: hci1: command tx timeout [ 371.563033][T14778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.579854][T14902] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2487'. [ 371.600695][T14778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.624346][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.645215][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.668529][T14902] 0ªX¹¦D: entered promiscuous mode [ 371.676474][T14902] 0ªX¹¦D: left allmulticast mode [ 371.811219][T14827] chnl_net:caif_netlink_parms(): no params data found [ 371.841265][T14803] team0: Port device team_slave_0 added [ 371.879702][T14803] team0: Port device team_slave_1 added [ 372.031817][ T5839] Bluetooth: hci2: command tx timeout [ 372.048001][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.055313][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.083556][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.131550][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.138535][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.165521][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.210955][ T611] hsr_slave_0: left promiscuous mode [ 372.217022][ T611] hsr_slave_1: left promiscuous mode [ 372.223452][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.231297][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.239565][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.247072][ T611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.259931][ T611] hsr_slave_0: left promiscuous mode [ 372.266178][ T611] hsr_slave_1: left promiscuous mode [ 372.272479][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.280362][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.289050][ T611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.297461][ T611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.336033][ T611] veth1_macvtap: left promiscuous mode [ 372.342575][ T611] veth0_macvtap: left promiscuous mode [ 372.348294][ T611] veth1_vlan: left promiscuous mode [ 372.353763][ T611] veth0_vlan: left promiscuous mode [ 372.365007][ T611] veth1_macvtap: left promiscuous mode [ 372.371101][ T611] veth0_macvtap: left promiscuous mode [ 372.376877][ T611] veth1_vlan: left promiscuous mode [ 372.382775][ T611] veth0_vlan: left promiscuous mode [ 372.859217][T14928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2491'. [ 372.979401][ T5839] Bluetooth: hci4: command tx timeout [ 373.208517][ T611] team0 (unregistering): Port device team_slave_1 removed [ 373.327215][ T611] team0 (unregistering): Port device team_slave_0 removed [ 373.624220][ T5839] Bluetooth: hci1: command tx timeout [ 374.109674][ T5839] Bluetooth: hci2: command tx timeout [ 374.221505][ T611] team0 (unregistering): Port device team_slave_1 removed [ 374.266408][ T611] team0 (unregistering): Port device team_slave_0 removed [ 374.708809][T14827] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.716910][T14827] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.724516][T14827] bridge_slave_0: entered allmulticast mode [ 374.737190][T14827] bridge_slave_0: entered promiscuous mode [ 374.749053][T14827] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.759098][T14827] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.771021][T14827] bridge_slave_1: entered allmulticast mode [ 374.778311][T14827] bridge_slave_1: entered promiscuous mode [ 374.967197][T14803] hsr_slave_0: entered promiscuous mode [ 374.974400][T14803] hsr_slave_1: entered promiscuous mode [ 374.990975][T14803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.998590][T14803] Cannot create hsr debugfs directory [ 375.059918][ T5839] Bluetooth: hci4: command tx timeout [ 375.103067][T14827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.133176][T14827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.406003][T14827] team0: Port device team_slave_0 added [ 375.440770][T14827] team0: Port device team_slave_1 added [ 375.582647][T14827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.610055][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.674636][T14827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.687996][T14827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.695679][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.726980][T14827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.795738][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 375.845945][T14778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.916389][T14991] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 375.988162][T14827] hsr_slave_0: entered promiscuous mode [ 375.998182][T14827] hsr_slave_1: entered promiscuous mode [ 376.018103][T14827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.032971][T14827] Cannot create hsr debugfs directory [ 376.192612][ T5839] Bluetooth: hci2: command tx timeout [ 376.210203][T15000] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2510'. [ 376.223612][T15001] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2509'. [ 376.314881][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.372679][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2511'. [ 376.383103][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.390342][T12186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.517196][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.524420][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.536566][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2511'. [ 376.625757][T15009] 0ªX¹¦D: left promiscuous mode [ 376.651038][T15009] sit0: left promiscuous mode [ 376.719306][T15009] wg1: left promiscuous mode [ 376.846835][T15009] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.855562][T15009] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.865816][T15009] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.874919][T15009] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.904804][T15009] ------------[ cut here ]------------ [ 376.910559][T15009] WARNING: CPU: 0 PID: 15009 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 376.920824][T15009] Modules linked in: [ 376.924980][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.1.2512 Not tainted 6.16.0-rc1-syzkaller-00129-gf82727adcf29 #0 PREEMPT(full) [ 376.937129][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.947282][T15009] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 376.953942][T15009] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 13 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 54 31 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 376.973635][T15009] RSP: 0018:ffffc90003f4dfc0 EFLAGS: 00010246 [ 376.979783][T15009] RAX: ffffc90003f4e000 RBX: 0000000000000017 RCX: 0000000000000000 [ 376.987794][T15009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003f4e028 [ 376.995842][T15009] RBP: ffffc90003f4e0b8 R08: ffffc90003f4e027 R09: 0000000000000000 [ 377.003963][T15009] R10: ffffc90003f4e000 R11: fffff520007e9c05 R12: 0000000000000000 [ 377.012023][T15009] R13: 1ffff920007e9bfc R14: 0000000000040920 R15: dffffc0000000000 [ 377.020086][T15009] FS: 00007fab5c4836c0(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 377.029031][T15009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.035695][T15009] CR2: 00007fc1eed5ff98 CR3: 000000005c54c000 CR4: 00000000003526f0 [ 377.043751][T15009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.051821][T15009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.059879][T15009] Call Trace: [ 377.063184][T15009] [ 377.066122][T15009] ? ___sys_sendmsg+0x21f/0x2a0 [ 377.071075][T15009] ? do_syscall_64+0xfa/0x3b0 [ 377.075794][T15009] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.082237][T15009] __alloc_pages_noprof+0xa/0x30 [ 377.087213][T15009] ___kmalloc_large_node+0x85/0x210 [ 377.092505][T15009] __kmalloc_large_node_noprof+0x18/0x90 [ 377.098176][T15009] __kmalloc_noprof+0x36f/0x4f0 [ 377.103116][T15009] ? nsim_fib_event_nb+0x295/0x1080 [ 377.108364][T15009] nsim_fib_event_nb+0x295/0x1080 [ 377.113502][T15009] notifier_call_chain+0x1b3/0x3e0 [ 377.118673][T15009] ? atomic_notifier_call_chain+0x26/0x180 [ 377.124656][T15009] atomic_notifier_call_chain+0xda/0x180 [ 377.130479][T15009] call_fib_notifiers+0x31/0x60 [ 377.135369][T15009] fib6_del+0x104d/0x1550 [ 377.139859][T15009] ? __pfx_fib6_del+0x10/0x10 [ 377.144581][T15009] ? kvm_sched_clock_read+0x11/0x20 [ 377.149421][ T5839] Bluetooth: hci4: command tx timeout [ 377.149873][T15009] fib6_clean_node+0x29f/0x590 [ 377.160056][T15009] ? __pfx_fib6_clean_node+0x10/0x10 [ 377.165441][T15009] ? __lock_acquire+0xab9/0xd20 [ 377.170430][T15009] ? __local_bh_enable_ip+0x12d/0x1c0 [ 377.175853][T15009] fib6_walk_continue+0x67b/0x910 [ 377.180985][T15009] fib6_walk+0x149/0x290 [ 377.185284][T15009] __fib6_clean_all+0x234/0x380 [ 377.190249][T15009] ? __fib6_clean_all+0x9b/0x380 [ 377.195228][T15009] ? __pfx_fib6_ifdown+0x10/0x10 [ 377.200269][T15009] ? __pfx___fib6_clean_all+0x10/0x10 [ 377.205690][T15009] ? __pfx_fib6_clean_node+0x10/0x10 [ 377.211060][T15009] ? __pfx_fib6_ifdown+0x10/0x10 [ 377.216054][T15009] rt6_disable_ip+0x120/0x720 [ 377.220833][T15009] ? rcu_is_watching+0x15/0xb0 [ 377.225643][T15009] ? __pfx_rt6_disable_ip+0x10/0x10 [ 377.230954][T15009] addrconf_ifdown+0x15d/0x1880 [ 377.235843][T15009] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 377.241563][T15009] ? __pfx___mutex_lock+0x10/0x10 [ 377.246623][T15009] ? tls_dev_event+0x717/0xec0 [ 377.251497][T15009] ? __pfx_addrconf_ifdown+0x10/0x10 [ 377.256832][T15009] addrconf_notify+0x1bc/0x1010 [ 377.261782][T15009] notifier_call_chain+0x1b3/0x3e0 [ 377.266943][T15009] __dev_notify_flags+0x18d/0x2e0 [ 377.272054][T15009] ? __pfx___dev_notify_flags+0x10/0x10 [ 377.277640][T15009] ? __dev_change_flags+0x4cc/0x6d0 [ 377.282913][T15009] ? __pfx___dev_change_flags+0x10/0x10 [ 377.288493][T15009] ? netif_state_change+0x256/0x3a0 [ 377.293760][T15009] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 377.299838][T15009] ? __pfx_netif_state_change+0x10/0x10 [ 377.305423][T15009] netif_change_flags+0xe8/0x1a0 [ 377.310509][T15009] do_setlink+0xc55/0x41c0 [ 377.314972][T15009] ? __kernel_text_address+0xd/0x40 [ 377.320249][T15009] ? arch_stack_walk+0xfc/0x150 [ 377.325134][T15009] ? __pfx_do_setlink+0x10/0x10 [ 377.330112][T15009] ? __lock_acquire+0xab9/0xd20 [ 377.335097][T15009] ? osq_unlock+0x92/0x260 [ 377.339599][T15009] ? __pfx_osq_unlock+0x10/0x10 [ 377.344485][T15009] ? rcu_is_watching+0x15/0xb0 [ 377.349333][T15009] ? trace_contention_end+0x39/0x120 [ 377.354650][T15009] ? __mutex_lock+0x330/0xe80 [ 377.359407][T15009] ? __pfx_aa_get_newest_label+0x10/0x10 [ 377.365105][T15009] ? rtnl_newlink+0x8db/0x1c70 [ 377.369962][T15009] ? rcu_is_watching+0x15/0xb0 [ 377.374770][T15009] ? __pfx___mutex_lock+0x10/0x10 [ 377.379893][T15009] ? ns_capable+0x8a/0xf0 [ 377.384273][T15009] ? rtnl_link_get_net_capable+0x16a/0x350 [ 377.390172][T15009] rtnl_newlink+0x149f/0x1c70 [ 377.394889][T15009] ? netlink_sendmsg+0x805/0xb30 [ 377.399928][T15009] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.405008][T15009] ? kasan_quarantine_put+0xdd/0x220 [ 377.410371][T15009] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.415668][T15009] ? nlmon_xmit+0xb0/0x100 [ 377.420171][T15009] ? kmem_cache_free+0x18f/0x400 [ 377.425158][T15009] ? __local_bh_enable_ip+0x12d/0x1c0 [ 377.430718][T15009] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.435962][T15009] ? __local_bh_enable_ip+0x12d/0x1c0 [ 377.441542][T15009] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 377.447311][T15009] ? __dev_queue_xmit+0x27e/0x3a70 [ 377.452548][T15009] ? __lock_acquire+0xab9/0xd20 [ 377.457491][T15009] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.462685][T15009] rtnetlink_rcv_msg+0x7cc/0xb70 [ 377.467670][T15009] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 377.472874][T15009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.478362][T15009] ? ref_tracker_free+0x63a/0x7d0 [ 377.483491][T15009] ? __copy_skb_header+0xa7/0x550 [ 377.488564][T15009] ? __pfx_ref_tracker_free+0x10/0x10 [ 377.494035][T15009] netlink_rcv_skb+0x208/0x470 [ 377.498837][T15009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.504368][T15009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.509765][T15009] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.515000][T15009] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.520293][T15009] netlink_unicast+0x75b/0x8d0 [ 377.525138][T15009] netlink_sendmsg+0x805/0xb30 [ 377.530139][T15009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.535466][T15009] ? aa_sock_msg_perm+0x94/0x160 [ 377.540510][T15009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.545837][T15009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.551218][T15009] __sock_sendmsg+0x21c/0x270 [ 377.555946][T15009] ____sys_sendmsg+0x505/0x830 [ 377.560791][T15009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.566123][T15009] ? import_iovec+0x74/0xa0 [ 377.570706][T15009] ___sys_sendmsg+0x21f/0x2a0 [ 377.575426][T15009] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.580746][T15009] ? __fget_files+0x2a/0x420 [ 377.585396][T15009] ? __fget_files+0x3a0/0x420 [ 377.590164][T15009] __x64_sys_sendmsg+0x19b/0x260 [ 377.595142][T15009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.600701][T15009] ? rcu_is_watching+0x15/0xb0 [ 377.605522][T15009] ? do_syscall_64+0xbe/0x3b0 [ 377.610283][T15009] do_syscall_64+0xfa/0x3b0 [ 377.614818][T15009] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.620105][T15009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.626210][T15009] ? clear_bhb_loop+0x60/0xb0 [ 377.630964][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.636891][T15009] RIP: 0033:0x7fab5b58e929 [ 377.641411][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.661096][T15009] RSP: 002b:00007fab5c483038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.669603][T15009] RAX: ffffffffffffffda RBX: 00007fab5b7b5fa0 RCX: 00007fab5b58e929 [ 377.677630][T15009] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 377.685716][T15009] RBP: 00007fab5b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 377.693768][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.701847][T15009] R13: 0000000000000000 R14: 00007fab5b7b5fa0 R15: 00007ffc0f8336c8 [ 377.709938][T15009] [ 377.713011][T15009] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 377.720335][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.1.2512 Not tainted 6.16.0-rc1-syzkaller-00129-gf82727adcf29 #0 PREEMPT(full) [ 377.732533][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.742617][T15009] Call Trace: [ 377.745914][T15009] [ 377.748857][T15009] dump_stack_lvl+0x99/0x250 [ 377.753476][T15009] ? __asan_memcpy+0x40/0x70 [ 377.758086][T15009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.763307][T15009] ? __pfx__printk+0x10/0x10 [ 377.767925][T15009] panic+0x2db/0x790 [ 377.771886][T15009] ? __pfx_panic+0x10/0x10 [ 377.776324][T15009] ? show_trace_log_lvl+0x4fb/0x550 [ 377.781568][T15009] __warn+0x31b/0x4b0 [ 377.785587][T15009] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 377.791593][T15009] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 377.797589][T15009] report_bug+0x2be/0x4f0 [ 377.801943][T15009] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 377.807945][T15009] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 377.813945][T15009] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 377.819947][T15009] handle_bug+0x84/0x160 [ 377.824208][T15009] exc_invalid_op+0x1a/0x50 [ 377.828727][T15009] asm_exc_invalid_op+0x1a/0x20 [ 377.833596][T15009] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 377.840203][T15009] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 13 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 54 31 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 377.859826][T15009] RSP: 0018:ffffc90003f4dfc0 EFLAGS: 00010246 [ 377.865908][T15009] RAX: ffffc90003f4e000 RBX: 0000000000000017 RCX: 0000000000000000 [ 377.873900][T15009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003f4e028 [ 377.882412][T15009] RBP: ffffc90003f4e0b8 R08: ffffc90003f4e027 R09: 0000000000000000 [ 377.890398][T15009] R10: ffffc90003f4e000 R11: fffff520007e9c05 R12: 0000000000000000 [ 377.898385][T15009] R13: 1ffff920007e9bfc R14: 0000000000040920 R15: dffffc0000000000 [ 377.906392][T15009] ? ___sys_sendmsg+0x21f/0x2a0 [ 377.911261][T15009] ? do_syscall_64+0xfa/0x3b0 [ 377.915956][T15009] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.922321][T15009] __alloc_pages_noprof+0xa/0x30 [ 377.927294][T15009] ___kmalloc_large_node+0x85/0x210 [ 377.932510][T15009] __kmalloc_large_node_noprof+0x18/0x90 [ 377.938160][T15009] __kmalloc_noprof+0x36f/0x4f0 [ 377.943025][T15009] ? nsim_fib_event_nb+0x295/0x1080 [ 377.948271][T15009] nsim_fib_event_nb+0x295/0x1080 [ 377.953350][T15009] notifier_call_chain+0x1b3/0x3e0 [ 377.958505][T15009] ? atomic_notifier_call_chain+0x26/0x180 [ 377.964350][T15009] atomic_notifier_call_chain+0xda/0x180 [ 377.970018][T15009] call_fib_notifiers+0x31/0x60 [ 377.974895][T15009] fib6_del+0x104d/0x1550 [ 377.979268][T15009] ? __pfx_fib6_del+0x10/0x10 [ 377.983973][T15009] ? kvm_sched_clock_read+0x11/0x20 [ 377.989203][T15009] fib6_clean_node+0x29f/0x590 [ 377.993990][T15009] ? __pfx_fib6_clean_node+0x10/0x10 [ 377.999297][T15009] ? __lock_acquire+0xab9/0xd20 [ 378.004179][T15009] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.009598][T15009] fib6_walk_continue+0x67b/0x910 [ 378.014669][T15009] fib6_walk+0x149/0x290 [ 378.018937][T15009] __fib6_clean_all+0x234/0x380 [ 378.023834][T15009] ? __fib6_clean_all+0x9b/0x380 [ 378.028801][T15009] ? __pfx_fib6_ifdown+0x10/0x10 [ 378.033769][T15009] ? __pfx___fib6_clean_all+0x10/0x10 [ 378.039175][T15009] ? __pfx_fib6_clean_node+0x10/0x10 [ 378.044488][T15009] ? __pfx_fib6_ifdown+0x10/0x10 [ 378.049464][T15009] rt6_disable_ip+0x120/0x720 [ 378.054176][T15009] ? rcu_is_watching+0x15/0xb0 [ 378.058961][T15009] ? __pfx_rt6_disable_ip+0x10/0x10 [ 378.064189][T15009] addrconf_ifdown+0x15d/0x1880 [ 378.069058][T15009] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 378.074721][T15009] ? __pfx___mutex_lock+0x10/0x10 [ 378.079758][T15009] ? tls_dev_event+0x717/0xec0 [ 378.084560][T15009] ? __pfx_addrconf_ifdown+0x10/0x10 [ 378.089875][T15009] addrconf_notify+0x1bc/0x1010 [ 378.094754][T15009] notifier_call_chain+0x1b3/0x3e0 [ 378.099900][T15009] __dev_notify_flags+0x18d/0x2e0 [ 378.104947][T15009] ? __pfx___dev_notify_flags+0x10/0x10 [ 378.110513][T15009] ? __dev_change_flags+0x4cc/0x6d0 [ 378.115739][T15009] ? __pfx___dev_change_flags+0x10/0x10 [ 378.121300][T15009] ? netif_state_change+0x256/0x3a0 [ 378.126509][T15009] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 378.132522][T15009] ? __pfx_netif_state_change+0x10/0x10 [ 378.138111][T15009] netif_change_flags+0xe8/0x1a0 [ 378.143087][T15009] do_setlink+0xc55/0x41c0 [ 378.147530][T15009] ? __kernel_text_address+0xd/0x40 [ 378.152766][T15009] ? arch_stack_walk+0xfc/0x150 [ 378.157644][T15009] ? __pfx_do_setlink+0x10/0x10 [ 378.162531][T15009] ? __lock_acquire+0xab9/0xd20 [ 378.167417][T15009] ? osq_unlock+0x92/0x260 [ 378.171853][T15009] ? __pfx_osq_unlock+0x10/0x10 [ 378.176720][T15009] ? rcu_is_watching+0x15/0xb0 [ 378.181510][T15009] ? trace_contention_end+0x39/0x120 [ 378.186810][T15009] ? __mutex_lock+0x330/0xe80 [ 378.191513][T15009] ? __pfx_aa_get_newest_label+0x10/0x10 [ 378.197168][T15009] ? rtnl_newlink+0x8db/0x1c70 [ 378.201946][T15009] ? rcu_is_watching+0x15/0xb0 [ 378.206734][T15009] ? __pfx___mutex_lock+0x10/0x10 [ 378.211777][T15009] ? ns_capable+0x8a/0xf0 [ 378.216128][T15009] ? rtnl_link_get_net_capable+0x16a/0x350 [ 378.221957][T15009] rtnl_newlink+0x149f/0x1c70 [ 378.226652][T15009] ? netlink_sendmsg+0x805/0xb30 [ 378.231626][T15009] ? __pfx_rtnl_newlink+0x10/0x10 [ 378.236692][T15009] ? kasan_quarantine_put+0xdd/0x220 [ 378.241999][T15009] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.247227][T15009] ? nlmon_xmit+0xb0/0x100 [ 378.251681][T15009] ? kmem_cache_free+0x18f/0x400 [ 378.256729][T15009] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.262207][T15009] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.267426][T15009] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.272821][T15009] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 378.278568][T15009] ? __dev_queue_xmit+0x27e/0x3a70 [ 378.283725][T15009] ? __lock_acquire+0xab9/0xd20 [ 378.288638][T15009] ? __pfx_rtnl_newlink+0x10/0x10 [ 378.293682][T15009] rtnetlink_rcv_msg+0x7cc/0xb70 [ 378.298642][T15009] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 378.303855][T15009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 378.309342][T15009] ? ref_tracker_free+0x63a/0x7d0 [ 378.314392][T15009] ? __copy_skb_header+0xa7/0x550 [ 378.319441][T15009] ? __pfx_ref_tracker_free+0x10/0x10 [ 378.324843][T15009] netlink_rcv_skb+0x208/0x470 [ 378.329655][T15009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 378.335128][T15009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.340451][T15009] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.345665][T15009] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.350895][T15009] netlink_unicast+0x75b/0x8d0 [ 378.355686][T15009] netlink_sendmsg+0x805/0xb30 [ 378.360477][T15009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.365785][T15009] ? aa_sock_msg_perm+0x94/0x160 [ 378.370743][T15009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.376045][T15009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.381355][T15009] __sock_sendmsg+0x21c/0x270 [ 378.386077][T15009] ____sys_sendmsg+0x505/0x830 [ 378.390865][T15009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.396176][T15009] ? import_iovec+0x74/0xa0 [ 378.400700][T15009] ___sys_sendmsg+0x21f/0x2a0 [ 378.405397][T15009] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.410649][T15009] ? __fget_files+0x2a/0x420 [ 378.415251][T15009] ? __fget_files+0x3a0/0x420 [ 378.419954][T15009] __x64_sys_sendmsg+0x19b/0x260 [ 378.424920][T15009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.430412][T15009] ? rcu_is_watching+0x15/0xb0 [ 378.435206][T15009] ? do_syscall_64+0xbe/0x3b0 [ 378.439899][T15009] do_syscall_64+0xfa/0x3b0 [ 378.444410][T15009] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.449654][T15009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.455760][T15009] ? clear_bhb_loop+0x60/0xb0 [ 378.460905][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.466816][T15009] RIP: 0033:0x7fab5b58e929 [ 378.471351][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.490995][T15009] RSP: 002b:00007fab5c483038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.499523][T15009] RAX: ffffffffffffffda RBX: 00007fab5b7b5fa0 RCX: 00007fab5b58e929 [ 378.507523][T15009] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 378.515521][T15009] RBP: 00007fab5b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 378.523517][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.531505][T15009] R13: 0000000000000000 R14: 00007fab5b7b5fa0 R15: 00007ffc0f8336c8 [ 378.539514][T15009] [ 378.542850][T15009] Kernel Offset: disabled [ 378.547191][T15009] Rebooting in 86400 seconds..