last executing test programs: 1m59.235171612s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1f, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) 1m58.110589208s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x14, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x61e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1dd, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000009500000800000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1m53.347828799s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f00000002c0), 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x71, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="ec86a588a88843e00926d6", 0xb}], 0x1, &(0x7f0000000680)=[{0xb8, 0x84, 0xe, "3d58792a55e0f80e40547f62a4f3770c770aa757625cf6e72aad6992961ab1848a0c70c0f7da7b8f50b5b5d1c2c7f2e7c68a8f5e3af90bb217880b1c3fbbe72257c8c92d855935fb7355787469dc484e65f19eac11f332fd01419f1c7190fc621a03a2bc4a5624108d5242ed61091e50a0628030ea5ea1389d6aa9437f1a6904804d64323e5dc9d0deab0a4ab4ae3f8020cedba5844a7ea4f781a40f3b758427b0f2bcdb05b6ca"}, {0xb0, 0x1b, 0x3, "9baf773f47e925aa165cd52c7441f78982bfe2d03c3789523b6b96a9fb16940ace408ce8051ed9cf4fe6cd75d7953c8573240ea0add453f96c800beff79313ecb00b21ba61dc98e4df2cd6677b6c8df88bb523ed41ac827d0b631ff8fc2aba97516b8701d3daaf1954480e50db13e4d450217e6a420d39dbae643801203f37c7d6d0655055755e5779baed493ed57d2ee8af8fac17d934a6491931c1db81b62e"}, {0x38, 0x104, 0x481d, "bfa23dfb8ce945ba110e4a889b695130a099ce367506b885a1f339310f4e047c4e74cb583aa3d4"}, {0x88, 0x110, 0x4, "2f4bc3c3fbc105b8b6392810fcc469e1a3c348c25d5eea7d1ecf46a77ee2a0961aebe89b38289e82ccb348508c42478eec3f979369d3b67ca81d152b5003fe3d1e3684a465820dd93b3aca456e727c6df47ea64436fc4e99ac124e08597c4fc5856e54083a669ab23b1b3c7034178e97d5b64dca911ab7"}, {0x70, 0x116, 0x101, "06169a04da5b5d58d9060917b76b00d6353f6bcc9fcb23d253326739d0d038c77f20186c605f3d9338ed822c2bbd6d5e79ee94357f842dac0b75c653d076f675f22f08d715dbe4a1925b17bb79c46e53da84cf4e20ba20087f3017011d"}, {0xb0, 0x111, 0x0, "57f95c602cab30e984eb46c87f7888bac3c16e88fe88008b536356e28f8cd6106e847b5f892d73a2a03b38659d4d061c2ac6bc0db89cdea404e7dfceefe6df38d2e964c839c5a6a73e2b889932bcd26c16c88076a1e9c789aa40d7e8ee1f81286b7a5d8f61c70efde18eee19314c595b09a5eaf2bdfa11eb004b537171d2c15d050be45f331add9ed5565d5019589f9186e94424f52e32852d"}, {0xb8, 0xff, 0x4, "c76cebc917cf2e434e235716c6f301d51c9d2185ab8cbf3a5e459ceeb2f1472bc8a3be43f446682cf56c65ccdf498330809518dcc98e19daca2c1a5eb1041387e1544b5c2c1a6234dc8a55213e049a8f86d153cb30f655ae5f7e6775032e585b43fcd56ec84b54a72cb93c1afad158199b97f381014fd541bc26d7f143a80dff43052c70af1a007b301636d5ef41305ffd15b72ccec4cb96e113464adff5e06be4"}], 0x400}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2d99e0fd3168d43b3b9469d294dc1d44e30e3a25f6037c64cdfdc515b41fc34d157c9ca6c53d7745ab55079013d1c0dd50f4d1e885816c056a54d360be5aae5da93eee90a2080483ee85f54e06c6390d7efcd2e60ce8e1132c8cb2e16ec9189761c8f8e87f749cac90a0058b214ebc34b050275f92e00c6274528992a02cefc2bb89f8f1ae3dbb4ac47b8d292d98fd81cec7a7a78008507e9abe176bce2a9420339213409fbede8a88e929ac38b93330fc39b7e5b379180aa3a63d3d53a16536c17bfe4a8b475660bf9413cd0d35476c6c138c187aae32bfda46c75560e07a3d69773bab059d4e1dd452147c23e5", 0xee}, {&(0x7f00000004c0)="5346f21b77829d47", 0x8}, {&(0x7f0000000500)="267fa9499ae502cd66535f25f86c017427c33f506e8e0477968862319c673f9abc18c8640d6386c3e0b9c4ebeccb85c5a008831a30a40872b633c1f2a434827a33b40df842ee41d805b048291222f0b205c3428d2c9924cec975f2684c274a9cf644f1c2a7b1b9a55222b0628acd757a6b180af07f4fe87910ebeefa3cf167138902ddaa4ee19d81bb9b86f754314d9b7ea17843342c5bb94eb4499faaf7966bc702ee5bd1e81f463907f195a290ec4af0fcb8a69c73f471b2fb4a8051f5d5f2c407e8767f2090cdaca77aee2641c8c3e8df61a0940617ecfc7c", 0xda}, {&(0x7f0000000a80)="635357c2549e7461d97959f8c4316240705ea31feff955089591995c0ab0d6ff289e71a83d48d626", 0x28}, {&(0x7f0000000ac0)="301f111123196f420a1dd557a8194d78d195abba69f441703c7318e67d27cb1e7268e07ccd345bc19b0bee0920343b780688c7c42ff2f7f675bb09ff4b46dbde62f86421f0baecae48f77fa4da55348cb8fa90b30de07dc98c36b170260d9755379db12dfcb5fa", 0x67}, {&(0x7f0000000b40)="89d5d0e1d7afa8cf877e604fe22a992f66206c", 0x13}, {&(0x7f0000000b80)="b68730994f43827ae549e02d9e20c9220327a0f04b28910bf52cff228123bdfdc153383724a0459c3101106d58a4ce2c2e1b1a1d2155715a140994196f945b74e54fa8db205781f641803c98c6a68023adb809ee40b0d369f0d8a21c298cf8c62ab7c753fdb68c81efc0d56d3c0880f9624942cc2057db2dcdb4102de81bd630583b9539c028d5d62bdb6e450fdd795de14929b5b86156c2e4705396d2a763d8c028f66b4f7dc14fa684df85fa", 0xad}], 0x7}}], 0x2, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r8, 0x35, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1m38.917675148s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x14, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x61e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1dd, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000009500000800000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1m37.685082854s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1f, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) 1m34.712138015s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f00000002c0), 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x71, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="ec86a588a88843e00926d6", 0xb}], 0x1, &(0x7f0000000680)=[{0xb8, 0x84, 0xe, "3d58792a55e0f80e40547f62a4f3770c770aa757625cf6e72aad6992961ab1848a0c70c0f7da7b8f50b5b5d1c2c7f2e7c68a8f5e3af90bb217880b1c3fbbe72257c8c92d855935fb7355787469dc484e65f19eac11f332fd01419f1c7190fc621a03a2bc4a5624108d5242ed61091e50a0628030ea5ea1389d6aa9437f1a6904804d64323e5dc9d0deab0a4ab4ae3f8020cedba5844a7ea4f781a40f3b758427b0f2bcdb05b6ca"}, {0xb0, 0x1b, 0x3, "9baf773f47e925aa165cd52c7441f78982bfe2d03c3789523b6b96a9fb16940ace408ce8051ed9cf4fe6cd75d7953c8573240ea0add453f96c800beff79313ecb00b21ba61dc98e4df2cd6677b6c8df88bb523ed41ac827d0b631ff8fc2aba97516b8701d3daaf1954480e50db13e4d450217e6a420d39dbae643801203f37c7d6d0655055755e5779baed493ed57d2ee8af8fac17d934a6491931c1db81b62e"}, {0x38, 0x104, 0x481d, "bfa23dfb8ce945ba110e4a889b695130a099ce367506b885a1f339310f4e047c4e74cb583aa3d4"}, {0x88, 0x110, 0x4, "2f4bc3c3fbc105b8b6392810fcc469e1a3c348c25d5eea7d1ecf46a77ee2a0961aebe89b38289e82ccb348508c42478eec3f979369d3b67ca81d152b5003fe3d1e3684a465820dd93b3aca456e727c6df47ea64436fc4e99ac124e08597c4fc5856e54083a669ab23b1b3c7034178e97d5b64dca911ab7"}, {0x70, 0x116, 0x101, "06169a04da5b5d58d9060917b76b00d6353f6bcc9fcb23d253326739d0d038c77f20186c605f3d9338ed822c2bbd6d5e79ee94357f842dac0b75c653d076f675f22f08d715dbe4a1925b17bb79c46e53da84cf4e20ba20087f3017011d"}, {0xb0, 0x111, 0x0, "57f95c602cab30e984eb46c87f7888bac3c16e88fe88008b536356e28f8cd6106e847b5f892d73a2a03b38659d4d061c2ac6bc0db89cdea404e7dfceefe6df38d2e964c839c5a6a73e2b889932bcd26c16c88076a1e9c789aa40d7e8ee1f81286b7a5d8f61c70efde18eee19314c595b09a5eaf2bdfa11eb004b537171d2c15d050be45f331add9ed5565d5019589f9186e94424f52e32852d"}, {0xb8, 0xff, 0x4, "c76cebc917cf2e434e235716c6f301d51c9d2185ab8cbf3a5e459ceeb2f1472bc8a3be43f446682cf56c65ccdf498330809518dcc98e19daca2c1a5eb1041387e1544b5c2c1a6234dc8a55213e049a8f86d153cb30f655ae5f7e6775032e585b43fcd56ec84b54a72cb93c1afad158199b97f381014fd541bc26d7f143a80dff43052c70af1a007b301636d5ef41305ffd15b72ccec4cb96e113464adff5e06be4"}], 0x400}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2d99e0fd3168d43b3b9469d294dc1d44e30e3a25f6037c64cdfdc515b41fc34d157c9ca6c53d7745ab55079013d1c0dd50f4d1e885816c056a54d360be5aae5da93eee90a2080483ee85f54e06c6390d7efcd2e60ce8e1132c8cb2e16ec9189761c8f8e87f749cac90a0058b214ebc34b050275f92e00c6274528992a02cefc2bb89f8f1ae3dbb4ac47b8d292d98fd81cec7a7a78008507e9abe176bce2a9420339213409fbede8a88e929ac38b93330fc39b7e5b379180aa3a63d3d53a16536c17bfe4a8b475660bf9413cd0d35476c6c138c187aae32bfda46c75560e07a3d69773bab059d4e1dd452147c23e5", 0xee}, {&(0x7f00000004c0)="5346f21b77829d47", 0x8}, {&(0x7f0000000500)="267fa9499ae502cd66535f25f86c017427c33f506e8e0477968862319c673f9abc18c8640d6386c3e0b9c4ebeccb85c5a008831a30a40872b633c1f2a434827a33b40df842ee41d805b048291222f0b205c3428d2c9924cec975f2684c274a9cf644f1c2a7b1b9a55222b0628acd757a6b180af07f4fe87910ebeefa3cf167138902ddaa4ee19d81bb9b86f754314d9b7ea17843342c5bb94eb4499faaf7966bc702ee5bd1e81f463907f195a290ec4af0fcb8a69c73f471b2fb4a8051f5d5f2c407e8767f2090cdaca77aee2641c8c3e8df61a0940617ecfc7c", 0xda}, {&(0x7f0000000a80)="635357c2549e7461d97959f8c4316240705ea31feff955089591995c0ab0d6ff289e71a83d48d626", 0x28}, {&(0x7f0000000ac0)="301f111123196f420a1dd557a8194d78d195abba69f441703c7318e67d27cb1e7268e07ccd345bc19b0bee0920343b780688c7c42ff2f7f675bb09ff4b46dbde62f86421f0baecae48f77fa4da55348cb8fa90b30de07dc98c36b170260d9755379db12dfcb5fa", 0x67}, {&(0x7f0000000b40)="89d5d0e1d7afa8cf877e604fe22a992f66206c", 0x13}, {&(0x7f0000000b80)="b68730994f43827ae549e02d9e20c9220327a0f04b28910bf52cff228123bdfdc153383724a0459c3101106d58a4ce2c2e1b1a1d2155715a140994196f945b74e54fa8db205781f641803c98c6a68023adb809ee40b0d369f0d8a21c298cf8c62ab7c753fdb68c81efc0d56d3c0880f9624942cc2057db2dcdb4102de81bd630583b9539c028d5d62bdb6e450fdd795de14929b5b86156c2e4705396d2a763d8c028f66b4f7dc14fa684df85fa", 0xad}], 0x7}}], 0x2, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r8, 0x35, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1m18.336939509s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x14, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x61e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1dd, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000009500000800000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1m17.417226057s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1f, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) 1m15.051016401s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f00000002c0), 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x71, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="ec86a588a88843e00926d6", 0xb}], 0x1, &(0x7f0000000680)=[{0xb8, 0x84, 0xe, "3d58792a55e0f80e40547f62a4f3770c770aa757625cf6e72aad6992961ab1848a0c70c0f7da7b8f50b5b5d1c2c7f2e7c68a8f5e3af90bb217880b1c3fbbe72257c8c92d855935fb7355787469dc484e65f19eac11f332fd01419f1c7190fc621a03a2bc4a5624108d5242ed61091e50a0628030ea5ea1389d6aa9437f1a6904804d64323e5dc9d0deab0a4ab4ae3f8020cedba5844a7ea4f781a40f3b758427b0f2bcdb05b6ca"}, {0xb0, 0x1b, 0x3, "9baf773f47e925aa165cd52c7441f78982bfe2d03c3789523b6b96a9fb16940ace408ce8051ed9cf4fe6cd75d7953c8573240ea0add453f96c800beff79313ecb00b21ba61dc98e4df2cd6677b6c8df88bb523ed41ac827d0b631ff8fc2aba97516b8701d3daaf1954480e50db13e4d450217e6a420d39dbae643801203f37c7d6d0655055755e5779baed493ed57d2ee8af8fac17d934a6491931c1db81b62e"}, {0x38, 0x104, 0x481d, "bfa23dfb8ce945ba110e4a889b695130a099ce367506b885a1f339310f4e047c4e74cb583aa3d4"}, {0x88, 0x110, 0x4, "2f4bc3c3fbc105b8b6392810fcc469e1a3c348c25d5eea7d1ecf46a77ee2a0961aebe89b38289e82ccb348508c42478eec3f979369d3b67ca81d152b5003fe3d1e3684a465820dd93b3aca456e727c6df47ea64436fc4e99ac124e08597c4fc5856e54083a669ab23b1b3c7034178e97d5b64dca911ab7"}, {0x70, 0x116, 0x101, "06169a04da5b5d58d9060917b76b00d6353f6bcc9fcb23d253326739d0d038c77f20186c605f3d9338ed822c2bbd6d5e79ee94357f842dac0b75c653d076f675f22f08d715dbe4a1925b17bb79c46e53da84cf4e20ba20087f3017011d"}, {0xb0, 0x111, 0x0, "57f95c602cab30e984eb46c87f7888bac3c16e88fe88008b536356e28f8cd6106e847b5f892d73a2a03b38659d4d061c2ac6bc0db89cdea404e7dfceefe6df38d2e964c839c5a6a73e2b889932bcd26c16c88076a1e9c789aa40d7e8ee1f81286b7a5d8f61c70efde18eee19314c595b09a5eaf2bdfa11eb004b537171d2c15d050be45f331add9ed5565d5019589f9186e94424f52e32852d"}, {0xb8, 0xff, 0x4, "c76cebc917cf2e434e235716c6f301d51c9d2185ab8cbf3a5e459ceeb2f1472bc8a3be43f446682cf56c65ccdf498330809518dcc98e19daca2c1a5eb1041387e1544b5c2c1a6234dc8a55213e049a8f86d153cb30f655ae5f7e6775032e585b43fcd56ec84b54a72cb93c1afad158199b97f381014fd541bc26d7f143a80dff43052c70af1a007b301636d5ef41305ffd15b72ccec4cb96e113464adff5e06be4"}], 0x400}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2d99e0fd3168d43b3b9469d294dc1d44e30e3a25f6037c64cdfdc515b41fc34d157c9ca6c53d7745ab55079013d1c0dd50f4d1e885816c056a54d360be5aae5da93eee90a2080483ee85f54e06c6390d7efcd2e60ce8e1132c8cb2e16ec9189761c8f8e87f749cac90a0058b214ebc34b050275f92e00c6274528992a02cefc2bb89f8f1ae3dbb4ac47b8d292d98fd81cec7a7a78008507e9abe176bce2a9420339213409fbede8a88e929ac38b93330fc39b7e5b379180aa3a63d3d53a16536c17bfe4a8b475660bf9413cd0d35476c6c138c187aae32bfda46c75560e07a3d69773bab059d4e1dd452147c23e5", 0xee}, {&(0x7f00000004c0)="5346f21b77829d47", 0x8}, {&(0x7f0000000500)="267fa9499ae502cd66535f25f86c017427c33f506e8e0477968862319c673f9abc18c8640d6386c3e0b9c4ebeccb85c5a008831a30a40872b633c1f2a434827a33b40df842ee41d805b048291222f0b205c3428d2c9924cec975f2684c274a9cf644f1c2a7b1b9a55222b0628acd757a6b180af07f4fe87910ebeefa3cf167138902ddaa4ee19d81bb9b86f754314d9b7ea17843342c5bb94eb4499faaf7966bc702ee5bd1e81f463907f195a290ec4af0fcb8a69c73f471b2fb4a8051f5d5f2c407e8767f2090cdaca77aee2641c8c3e8df61a0940617ecfc7c", 0xda}, {&(0x7f0000000a80)="635357c2549e7461d97959f8c4316240705ea31feff955089591995c0ab0d6ff289e71a83d48d626", 0x28}, {&(0x7f0000000ac0)="301f111123196f420a1dd557a8194d78d195abba69f441703c7318e67d27cb1e7268e07ccd345bc19b0bee0920343b780688c7c42ff2f7f675bb09ff4b46dbde62f86421f0baecae48f77fa4da55348cb8fa90b30de07dc98c36b170260d9755379db12dfcb5fa", 0x67}, {&(0x7f0000000b40)="89d5d0e1d7afa8cf877e604fe22a992f66206c", 0x13}, {&(0x7f0000000b80)="b68730994f43827ae549e02d9e20c9220327a0f04b28910bf52cff228123bdfdc153383724a0459c3101106d58a4ce2c2e1b1a1d2155715a140994196f945b74e54fa8db205781f641803c98c6a68023adb809ee40b0d369f0d8a21c298cf8c62ab7c753fdb68c81efc0d56d3c0880f9624942cc2057db2dcdb4102de81bd630583b9539c028d5d62bdb6e450fdd795de14929b5b86156c2e4705396d2a763d8c028f66b4f7dc14fa684df85fa", 0xad}], 0x7}}], 0x2, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r8, 0x35, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 56.34323266s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x14, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x61e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1dd, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000009500000800000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 51.984157972s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1f, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) 50.626804574s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f00000002c0), 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x71, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="ec86a588a88843e00926d6", 0xb}], 0x1, &(0x7f0000000680)=[{0xb8, 0x84, 0xe, "3d58792a55e0f80e40547f62a4f3770c770aa757625cf6e72aad6992961ab1848a0c70c0f7da7b8f50b5b5d1c2c7f2e7c68a8f5e3af90bb217880b1c3fbbe72257c8c92d855935fb7355787469dc484e65f19eac11f332fd01419f1c7190fc621a03a2bc4a5624108d5242ed61091e50a0628030ea5ea1389d6aa9437f1a6904804d64323e5dc9d0deab0a4ab4ae3f8020cedba5844a7ea4f781a40f3b758427b0f2bcdb05b6ca"}, {0xb0, 0x1b, 0x3, "9baf773f47e925aa165cd52c7441f78982bfe2d03c3789523b6b96a9fb16940ace408ce8051ed9cf4fe6cd75d7953c8573240ea0add453f96c800beff79313ecb00b21ba61dc98e4df2cd6677b6c8df88bb523ed41ac827d0b631ff8fc2aba97516b8701d3daaf1954480e50db13e4d450217e6a420d39dbae643801203f37c7d6d0655055755e5779baed493ed57d2ee8af8fac17d934a6491931c1db81b62e"}, {0x38, 0x104, 0x481d, "bfa23dfb8ce945ba110e4a889b695130a099ce367506b885a1f339310f4e047c4e74cb583aa3d4"}, {0x88, 0x110, 0x4, "2f4bc3c3fbc105b8b6392810fcc469e1a3c348c25d5eea7d1ecf46a77ee2a0961aebe89b38289e82ccb348508c42478eec3f979369d3b67ca81d152b5003fe3d1e3684a465820dd93b3aca456e727c6df47ea64436fc4e99ac124e08597c4fc5856e54083a669ab23b1b3c7034178e97d5b64dca911ab7"}, {0x70, 0x116, 0x101, "06169a04da5b5d58d9060917b76b00d6353f6bcc9fcb23d253326739d0d038c77f20186c605f3d9338ed822c2bbd6d5e79ee94357f842dac0b75c653d076f675f22f08d715dbe4a1925b17bb79c46e53da84cf4e20ba20087f3017011d"}, {0xb0, 0x111, 0x0, "57f95c602cab30e984eb46c87f7888bac3c16e88fe88008b536356e28f8cd6106e847b5f892d73a2a03b38659d4d061c2ac6bc0db89cdea404e7dfceefe6df38d2e964c839c5a6a73e2b889932bcd26c16c88076a1e9c789aa40d7e8ee1f81286b7a5d8f61c70efde18eee19314c595b09a5eaf2bdfa11eb004b537171d2c15d050be45f331add9ed5565d5019589f9186e94424f52e32852d"}, {0xb8, 0xff, 0x4, "c76cebc917cf2e434e235716c6f301d51c9d2185ab8cbf3a5e459ceeb2f1472bc8a3be43f446682cf56c65ccdf498330809518dcc98e19daca2c1a5eb1041387e1544b5c2c1a6234dc8a55213e049a8f86d153cb30f655ae5f7e6775032e585b43fcd56ec84b54a72cb93c1afad158199b97f381014fd541bc26d7f143a80dff43052c70af1a007b301636d5ef41305ffd15b72ccec4cb96e113464adff5e06be4"}], 0x400}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2d99e0fd3168d43b3b9469d294dc1d44e30e3a25f6037c64cdfdc515b41fc34d157c9ca6c53d7745ab55079013d1c0dd50f4d1e885816c056a54d360be5aae5da93eee90a2080483ee85f54e06c6390d7efcd2e60ce8e1132c8cb2e16ec9189761c8f8e87f749cac90a0058b214ebc34b050275f92e00c6274528992a02cefc2bb89f8f1ae3dbb4ac47b8d292d98fd81cec7a7a78008507e9abe176bce2a9420339213409fbede8a88e929ac38b93330fc39b7e5b379180aa3a63d3d53a16536c17bfe4a8b475660bf9413cd0d35476c6c138c187aae32bfda46c75560e07a3d69773bab059d4e1dd452147c23e5", 0xee}, {&(0x7f00000004c0)="5346f21b77829d47", 0x8}, {&(0x7f0000000500)="267fa9499ae502cd66535f25f86c017427c33f506e8e0477968862319c673f9abc18c8640d6386c3e0b9c4ebeccb85c5a008831a30a40872b633c1f2a434827a33b40df842ee41d805b048291222f0b205c3428d2c9924cec975f2684c274a9cf644f1c2a7b1b9a55222b0628acd757a6b180af07f4fe87910ebeefa3cf167138902ddaa4ee19d81bb9b86f754314d9b7ea17843342c5bb94eb4499faaf7966bc702ee5bd1e81f463907f195a290ec4af0fcb8a69c73f471b2fb4a8051f5d5f2c407e8767f2090cdaca77aee2641c8c3e8df61a0940617ecfc7c", 0xda}, {&(0x7f0000000a80)="635357c2549e7461d97959f8c4316240705ea31feff955089591995c0ab0d6ff289e71a83d48d626", 0x28}, {&(0x7f0000000ac0)="301f111123196f420a1dd557a8194d78d195abba69f441703c7318e67d27cb1e7268e07ccd345bc19b0bee0920343b780688c7c42ff2f7f675bb09ff4b46dbde62f86421f0baecae48f77fa4da55348cb8fa90b30de07dc98c36b170260d9755379db12dfcb5fa", 0x67}, {&(0x7f0000000b40)="89d5d0e1d7afa8cf877e604fe22a992f66206c", 0x13}, {&(0x7f0000000b80)="b68730994f43827ae549e02d9e20c9220327a0f04b28910bf52cff228123bdfdc153383724a0459c3101106d58a4ce2c2e1b1a1d2155715a140994196f945b74e54fa8db205781f641803c98c6a68023adb809ee40b0d369f0d8a21c298cf8c62ab7c753fdb68c81efc0d56d3c0880f9624942cc2057db2dcdb4102de81bd630583b9539c028d5d62bdb6e450fdd795de14929b5b86156c2e4705396d2a763d8c028f66b4f7dc14fa684df85fa", 0xad}], 0x7}}], 0x2, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r8, 0x35, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 37.725948652s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x14, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x61e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1dd, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000009500000800000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 36.584066684s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1f, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) 33.636647468s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f00000002c0), 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x71, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="ec86a588a88843e00926d6", 0xb}], 0x1, &(0x7f0000000680)=[{0xb8, 0x84, 0xe, "3d58792a55e0f80e40547f62a4f3770c770aa757625cf6e72aad6992961ab1848a0c70c0f7da7b8f50b5b5d1c2c7f2e7c68a8f5e3af90bb217880b1c3fbbe72257c8c92d855935fb7355787469dc484e65f19eac11f332fd01419f1c7190fc621a03a2bc4a5624108d5242ed61091e50a0628030ea5ea1389d6aa9437f1a6904804d64323e5dc9d0deab0a4ab4ae3f8020cedba5844a7ea4f781a40f3b758427b0f2bcdb05b6ca"}, {0xb0, 0x1b, 0x3, "9baf773f47e925aa165cd52c7441f78982bfe2d03c3789523b6b96a9fb16940ace408ce8051ed9cf4fe6cd75d7953c8573240ea0add453f96c800beff79313ecb00b21ba61dc98e4df2cd6677b6c8df88bb523ed41ac827d0b631ff8fc2aba97516b8701d3daaf1954480e50db13e4d450217e6a420d39dbae643801203f37c7d6d0655055755e5779baed493ed57d2ee8af8fac17d934a6491931c1db81b62e"}, {0x38, 0x104, 0x481d, "bfa23dfb8ce945ba110e4a889b695130a099ce367506b885a1f339310f4e047c4e74cb583aa3d4"}, {0x88, 0x110, 0x4, "2f4bc3c3fbc105b8b6392810fcc469e1a3c348c25d5eea7d1ecf46a77ee2a0961aebe89b38289e82ccb348508c42478eec3f979369d3b67ca81d152b5003fe3d1e3684a465820dd93b3aca456e727c6df47ea64436fc4e99ac124e08597c4fc5856e54083a669ab23b1b3c7034178e97d5b64dca911ab7"}, {0x70, 0x116, 0x101, "06169a04da5b5d58d9060917b76b00d6353f6bcc9fcb23d253326739d0d038c77f20186c605f3d9338ed822c2bbd6d5e79ee94357f842dac0b75c653d076f675f22f08d715dbe4a1925b17bb79c46e53da84cf4e20ba20087f3017011d"}, {0xb0, 0x111, 0x0, "57f95c602cab30e984eb46c87f7888bac3c16e88fe88008b536356e28f8cd6106e847b5f892d73a2a03b38659d4d061c2ac6bc0db89cdea404e7dfceefe6df38d2e964c839c5a6a73e2b889932bcd26c16c88076a1e9c789aa40d7e8ee1f81286b7a5d8f61c70efde18eee19314c595b09a5eaf2bdfa11eb004b537171d2c15d050be45f331add9ed5565d5019589f9186e94424f52e32852d"}, {0xb8, 0xff, 0x4, "c76cebc917cf2e434e235716c6f301d51c9d2185ab8cbf3a5e459ceeb2f1472bc8a3be43f446682cf56c65ccdf498330809518dcc98e19daca2c1a5eb1041387e1544b5c2c1a6234dc8a55213e049a8f86d153cb30f655ae5f7e6775032e585b43fcd56ec84b54a72cb93c1afad158199b97f381014fd541bc26d7f143a80dff43052c70af1a007b301636d5ef41305ffd15b72ccec4cb96e113464adff5e06be4"}], 0x400}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2d99e0fd3168d43b3b9469d294dc1d44e30e3a25f6037c64cdfdc515b41fc34d157c9ca6c53d7745ab55079013d1c0dd50f4d1e885816c056a54d360be5aae5da93eee90a2080483ee85f54e06c6390d7efcd2e60ce8e1132c8cb2e16ec9189761c8f8e87f749cac90a0058b214ebc34b050275f92e00c6274528992a02cefc2bb89f8f1ae3dbb4ac47b8d292d98fd81cec7a7a78008507e9abe176bce2a9420339213409fbede8a88e929ac38b93330fc39b7e5b379180aa3a63d3d53a16536c17bfe4a8b475660bf9413cd0d35476c6c138c187aae32bfda46c75560e07a3d69773bab059d4e1dd452147c23e5", 0xee}, {&(0x7f00000004c0)="5346f21b77829d47", 0x8}, {&(0x7f0000000500)="267fa9499ae502cd66535f25f86c017427c33f506e8e0477968862319c673f9abc18c8640d6386c3e0b9c4ebeccb85c5a008831a30a40872b633c1f2a434827a33b40df842ee41d805b048291222f0b205c3428d2c9924cec975f2684c274a9cf644f1c2a7b1b9a55222b0628acd757a6b180af07f4fe87910ebeefa3cf167138902ddaa4ee19d81bb9b86f754314d9b7ea17843342c5bb94eb4499faaf7966bc702ee5bd1e81f463907f195a290ec4af0fcb8a69c73f471b2fb4a8051f5d5f2c407e8767f2090cdaca77aee2641c8c3e8df61a0940617ecfc7c", 0xda}, {&(0x7f0000000a80)="635357c2549e7461d97959f8c4316240705ea31feff955089591995c0ab0d6ff289e71a83d48d626", 0x28}, {&(0x7f0000000ac0)="301f111123196f420a1dd557a8194d78d195abba69f441703c7318e67d27cb1e7268e07ccd345bc19b0bee0920343b780688c7c42ff2f7f675bb09ff4b46dbde62f86421f0baecae48f77fa4da55348cb8fa90b30de07dc98c36b170260d9755379db12dfcb5fa", 0x67}, {&(0x7f0000000b40)="89d5d0e1d7afa8cf877e604fe22a992f66206c", 0x13}, {&(0x7f0000000b80)="b68730994f43827ae549e02d9e20c9220327a0f04b28910bf52cff228123bdfdc153383724a0459c3101106d58a4ce2c2e1b1a1d2155715a140994196f945b74e54fa8db205781f641803c98c6a68023adb809ee40b0d369f0d8a21c298cf8c62ab7c753fdb68c81efc0d56d3c0880f9624942cc2057db2dcdb4102de81bd630583b9539c028d5d62bdb6e450fdd795de14929b5b86156c2e4705396d2a763d8c028f66b4f7dc14fa684df85fa", 0xad}], 0x7}}], 0x2, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r8, 0x35, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 19.258363617s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x14, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x61e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1dd, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000009500000800000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 17.040242154s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1f, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) 13.191935542s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f00000002c0), 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x71, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="ec86a588a88843e00926d6", 0xb}], 0x1, &(0x7f0000000680)=[{0xb8, 0x84, 0xe, "3d58792a55e0f80e40547f62a4f3770c770aa757625cf6e72aad6992961ab1848a0c70c0f7da7b8f50b5b5d1c2c7f2e7c68a8f5e3af90bb217880b1c3fbbe72257c8c92d855935fb7355787469dc484e65f19eac11f332fd01419f1c7190fc621a03a2bc4a5624108d5242ed61091e50a0628030ea5ea1389d6aa9437f1a6904804d64323e5dc9d0deab0a4ab4ae3f8020cedba5844a7ea4f781a40f3b758427b0f2bcdb05b6ca"}, {0xb0, 0x1b, 0x3, "9baf773f47e925aa165cd52c7441f78982bfe2d03c3789523b6b96a9fb16940ace408ce8051ed9cf4fe6cd75d7953c8573240ea0add453f96c800beff79313ecb00b21ba61dc98e4df2cd6677b6c8df88bb523ed41ac827d0b631ff8fc2aba97516b8701d3daaf1954480e50db13e4d450217e6a420d39dbae643801203f37c7d6d0655055755e5779baed493ed57d2ee8af8fac17d934a6491931c1db81b62e"}, {0x38, 0x104, 0x481d, "bfa23dfb8ce945ba110e4a889b695130a099ce367506b885a1f339310f4e047c4e74cb583aa3d4"}, {0x88, 0x110, 0x4, "2f4bc3c3fbc105b8b6392810fcc469e1a3c348c25d5eea7d1ecf46a77ee2a0961aebe89b38289e82ccb348508c42478eec3f979369d3b67ca81d152b5003fe3d1e3684a465820dd93b3aca456e727c6df47ea64436fc4e99ac124e08597c4fc5856e54083a669ab23b1b3c7034178e97d5b64dca911ab7"}, {0x70, 0x116, 0x101, "06169a04da5b5d58d9060917b76b00d6353f6bcc9fcb23d253326739d0d038c77f20186c605f3d9338ed822c2bbd6d5e79ee94357f842dac0b75c653d076f675f22f08d715dbe4a1925b17bb79c46e53da84cf4e20ba20087f3017011d"}, {0xb0, 0x111, 0x0, "57f95c602cab30e984eb46c87f7888bac3c16e88fe88008b536356e28f8cd6106e847b5f892d73a2a03b38659d4d061c2ac6bc0db89cdea404e7dfceefe6df38d2e964c839c5a6a73e2b889932bcd26c16c88076a1e9c789aa40d7e8ee1f81286b7a5d8f61c70efde18eee19314c595b09a5eaf2bdfa11eb004b537171d2c15d050be45f331add9ed5565d5019589f9186e94424f52e32852d"}, {0xb8, 0xff, 0x4, "c76cebc917cf2e434e235716c6f301d51c9d2185ab8cbf3a5e459ceeb2f1472bc8a3be43f446682cf56c65ccdf498330809518dcc98e19daca2c1a5eb1041387e1544b5c2c1a6234dc8a55213e049a8f86d153cb30f655ae5f7e6775032e585b43fcd56ec84b54a72cb93c1afad158199b97f381014fd541bc26d7f143a80dff43052c70af1a007b301636d5ef41305ffd15b72ccec4cb96e113464adff5e06be4"}], 0x400}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2d99e0fd3168d43b3b9469d294dc1d44e30e3a25f6037c64cdfdc515b41fc34d157c9ca6c53d7745ab55079013d1c0dd50f4d1e885816c056a54d360be5aae5da93eee90a2080483ee85f54e06c6390d7efcd2e60ce8e1132c8cb2e16ec9189761c8f8e87f749cac90a0058b214ebc34b050275f92e00c6274528992a02cefc2bb89f8f1ae3dbb4ac47b8d292d98fd81cec7a7a78008507e9abe176bce2a9420339213409fbede8a88e929ac38b93330fc39b7e5b379180aa3a63d3d53a16536c17bfe4a8b475660bf9413cd0d35476c6c138c187aae32bfda46c75560e07a3d69773bab059d4e1dd452147c23e5", 0xee}, {&(0x7f00000004c0)="5346f21b77829d47", 0x8}, {&(0x7f0000000500)="267fa9499ae502cd66535f25f86c017427c33f506e8e0477968862319c673f9abc18c8640d6386c3e0b9c4ebeccb85c5a008831a30a40872b633c1f2a434827a33b40df842ee41d805b048291222f0b205c3428d2c9924cec975f2684c274a9cf644f1c2a7b1b9a55222b0628acd757a6b180af07f4fe87910ebeefa3cf167138902ddaa4ee19d81bb9b86f754314d9b7ea17843342c5bb94eb4499faaf7966bc702ee5bd1e81f463907f195a290ec4af0fcb8a69c73f471b2fb4a8051f5d5f2c407e8767f2090cdaca77aee2641c8c3e8df61a0940617ecfc7c", 0xda}, {&(0x7f0000000a80)="635357c2549e7461d97959f8c4316240705ea31feff955089591995c0ab0d6ff289e71a83d48d626", 0x28}, {&(0x7f0000000ac0)="301f111123196f420a1dd557a8194d78d195abba69f441703c7318e67d27cb1e7268e07ccd345bc19b0bee0920343b780688c7c42ff2f7f675bb09ff4b46dbde62f86421f0baecae48f77fa4da55348cb8fa90b30de07dc98c36b170260d9755379db12dfcb5fa", 0x67}, {&(0x7f0000000b40)="89d5d0e1d7afa8cf877e604fe22a992f66206c", 0x13}, {&(0x7f0000000b80)="b68730994f43827ae549e02d9e20c9220327a0f04b28910bf52cff228123bdfdc153383724a0459c3101106d58a4ce2c2e1b1a1d2155715a140994196f945b74e54fa8db205781f641803c98c6a68023adb809ee40b0d369f0d8a21c298cf8c62ab7c753fdb68c81efc0d56d3c0880f9624942cc2057db2dcdb4102de81bd630583b9539c028d5d62bdb6e450fdd795de14929b5b86156c2e4705396d2a763d8c028f66b4f7dc14fa684df85fa", 0xad}], 0x7}}], 0x2, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=r8, 0x35, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.515819192s ago: executing program 0 (id=1795): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYBLOB="2f96861c61b6c784bfbda1dc6ce77140954ba54af41bc1af0ac73c55ea876705a22a13ceb8dc8af5d5fb90e31dd6f0de7ba457728075895a9f7de58f96607feab08c888e687666327d9f819fc3b25ca53cbfa3ab66fc", @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.346738165s ago: executing program 0 (id=1796): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x1, 0x40, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @local, @empty}}}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000061000000080000000900000000040000", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000000000040100e4ff0e00"/28], 0x14) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200e0000002"], 0x3c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.147907077s ago: executing program 0 (id=1797): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) socket$inet(0x2, 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x4, 0x4) accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@remote, @bcast, @remote, @bcast, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000100)=0x48, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000580)={'vxcan1\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfc00}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40011) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000019000100feffffff000008001d01070008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08000500fc0402ccf5690c053bc198f7f03c535b47f58b69de0662315e949ea96c07777e9c808f3869a223852c84b05cd132633ecf7042cef42f924c3742a8380c982ad2b84c7e11e4"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x34}}, 0xc) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r13 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) sendfile(r13, r13, &(0x7f0000000440)=0x9400, 0x7ffff000) 1.064206229s ago: executing program 3 (id=1798): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000700), 0x4) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x9) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000040)) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x2fe, 0x70bd30, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 733.307644ms ago: executing program 3 (id=1799): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x1c, 0x0, 0x0, r7, 0x80, 0x801076469c94fa07}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}}, 0x48080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000ad41c39999210000009510000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) pipe(&(0x7f0000000480)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x1c, 0x0, 0x0, r7, 0x80, 0x801076469c94fa07}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}}, 0x48080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000ad41c39999210000009510000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) (async) 623.986133ms ago: executing program 0 (id=1800): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x1, @dev, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt(r0, 0x0, 0x2c, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r3, @ANYRES64=r3], 0x34}}, 0x0) 585.837496ms ago: executing program 3 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@ipv4_newrule={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x27, 0x40, &(0x7f0000000000)="c2ff722e92b69123e2c44b5ab14a633853b85c8bec491a64b52141baad9ef788e46fd7f961cd1f", &(0x7f0000000180)=""/64, 0xc, 0x0, 0x97, 0x96, &(0x7f00000001c0)="37e23d64327441935364ffcf0d55d17429869e5a51d6e925a194bf1d919b28e4009b362133437318d7d5042caa8d24e18ccebf692d6b40ba1af4477e7bcd8a9bedb0ac69381db38c3bc24428f23baf61d765100eefabec6665edf946f5c098b32b981a863082b4b42d7de604b02ee866cc2e4f4c8014a21c954839518eabc58c68af0c2dbc50727f49bdfe22026e45771767fd59a3c58e", &(0x7f0000000280)="0f195eea9546ba2a2f0836a75e2c8d3b1d04f7b4eac4ac6c0cdd3b996cf0d018cc2a6a8d4e396b787bb4e1a2fa570df1b79eb1fa59f69e0cfdaa801d9d80b96ad8296c55cc1a01b4cfa55ba4c8481c5a602b2f60aaaa49a7a95a2d633b9816d89df0c289218215fe483c0409d37a6dcc75a7305b675581e3c29aba832559c153e061c9b9e8daea3ec2ef62b0b85df002a4c6b6c708d3", 0x0, 0x0, 0xfdf8}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) syz_emit_ethernet(0x213, &(0x7f0000000640)={@multicast, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "e91cd0", 0x1dd, 0x6, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, {[@fragment={0x8, 0x0, 0x40, 0x0, 0x0, 0x2, 0x64}, @routing={0xa6, 0x10, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x18af17b0}, @calipso={0x7, 0x38, {0x1, 0xc, 0xeb, 0x1, [0x8, 0x0, 0x1, 0x0, 0x4, 0x2]}}, @pad1]}, @srh={0x4, 0x12, 0x4, 0x9, 0x6, 0x40, 0xffff, [@empty, @private2, @remote, @private1, @local, @ipv4={'\x00', '\xff\xff', @local}, @local, @remote, @private2]}, @dstopts={0xc, 0x5, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x2, [0x5, 0x8]}}, @hao={0xc9, 0x10, @empty}]}], @payload_conn={{{0x1d, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x5, 0x0, 0x7, 0x7, 0x3, 0x4e23, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="f9688903af3d7863ec8dff67cbcce4c1b304744f560aa9874916907e8a062cd26a981056e66e66120863156302fe789da5548d39fb9f2732dc6b319cdb0824c92b166da1d0e6d127fc130e3a65dc196e2493bf3855ec7637fd641fb5312bbb02d795abad6d7face081fa32fa24789d50d6294f5b566c9ab0e39b6834bd33ff47420641bd4d0cd3230549ac", 0x8b}, {&(0x7f0000000080)="efcd1c334a0c036a6419ab0ddeec7862b6dd42dca2ed1df401de4b8230cc97e39dede4893b74ef167260587a93e41dea08f51455041270", 0x37}], 0x2, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x38}, 0x10004000) 434.203192ms ago: executing program 0 (id=1802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000d30fe7af00240012800b0001006d616373656300001400028005000c000b"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b0000000000000000050000000800030089"], 0x1c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fcdbdf250f000000080034000300000008000600", @ANYRES32=r7, @ANYBLOB="0500290001deff000508370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) 304.074813ms ago: executing program 3 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000180)=0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x8d, 0xc8, &(0x7f0000000600)="7f8d1cd450bd580b6d3953a295f8fa230aa3881d12d9fd7779246949ea87e64248998920a8dac180c74afbb07222ffc5ffe978b852c62dd271ddde21e2241738887816206e14799e5549a1850137da419baf80fe18a98dab7f7e3cf7adb38e8fb18c1592c7e4bcb26608551e655669d77497f4905ab67e37c7fbfe1acd548e8621f179fc525314eaadb355c353", &(0x7f00000006c0)=""/200, 0x1, 0x0, 0x15, 0x92, &(0x7f0000000480)="cef83494fa865b8d7f5f180902f67e5b74b6546276", &(0x7f0000000900)="73955311ee0114a2abc560c249eefc5839dac59d708a318d6f2e69ce6b832478e5b9d49681f0d15ba25167243f3f5557b2090b00175dcb01e3f335e503ca6754ffb21a628b7485a95a935d879edab9d42a31ede4c1c836d05e55852d4d9664a66f20699631df8af06fc429c1645069d0665a286047b0412de3faee0d8291055b829e895126f30ddb9ae93998ec6ca41f60d6", 0x1, 0x0, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x95, 0x9b, &(0x7f0000000180)="2a70d5f4832b0c43d24eea2fc61454589a80692f229c66fd8550649172e7707534aea62ffa2dcc6e9cfcbb6df280f3c92e2faa34628b430b9e7ce7984e975e3b0e1c4e1927b20e76850a7fded95a572f979c3295df75dc15bc1c1bc6b41bef791ea27bbafc0a48958471c880d69dc47e5f6afaea2f0098bd4009f1ebe651b33f02907ae717673a123f8f1b9375f7c4947f5fec23a2", &(0x7f0000000240)=""/155, 0xdf44, 0x0, 0x93, 0x9a, &(0x7f00000003c0)="ea08140b393317b9bb8810aed4d86b371dbcbf932e53e68274e919481ad49b5b40b79dd36500d969724df0bb31fd601192df4103f77375986abd8af3aea174cf6975103290bca5b3596429d3ff2945466464f99385e69bf2d6b9a0c840c59bfc49cbb2f6f63f543ddd2d223f12b530ff96fd36067af5ef5338cc78ae3930e54ad86f456222794020d3633236791f5f4eb6b088", &(0x7f0000000540)="f39eac88ef38ff6397c9b40737573d20e83024dcc03e669fa370654d72ace9dccc380578fbf306b8c2575feb568f994921e2dbe378ce1a7866140332e178d23cc7a17992925f4fb4e3a777b272bcf7cfbb13df33768356473ae93cf29d1ca14582e8ef97cdc19ca830bdfaae1bd05213a21a4f94aa59433d199977a73bd63189e64da27ad6f8480e21d017c50dc1d90149feb11627516f37334a", 0x1, 0x0, 0xd4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)="6a6e9ca738da1e4746632fb8e7ff60de1b5271b80dad2f26fcc8551c02c809037bb6200f52bec14a133078db6a365986bfb628370ee319db0de5214da918a738af6291cd2d8768a3c70c14f623dcbb989847d7ae9c91162bd1193ae9ab84dcf2b942261463e0e1cf10436d6bf522fb8d309c6fd9c34b2ef9856a547170586d2f2d2ec22b3679d141d2275673e5c728e1f589692a58ec21b1aebc95a4b6505ec8b124e8f896a334f46bd4964b02e5d75d71731f1f4084"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) 247.397277ms ago: executing program 3 (id=1804): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000800)=0x36) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 166.882985ms ago: executing program 0 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000004c0)={0x0, 0x60000, 0x5, 0xfce1bb4c503971f1}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="60ffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000"], 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x48, r7, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x5, 0x0, {0x8, 0xa83, 0x0, 0xa6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x7f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x12c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x9, 0x2a, [@tim={0x5, 0x3, {0x6, 0x67, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0xb2, 0xf, [@random={0x1, 0xac, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55ddee251072d02b6a7f03a6d61ee618f5efe2f7ff585d9ccaa6ef9c6f48c38f0792664da7bcb82532f722093d07aac081a582e6c7886c56e0b88e21e2960aa5cea4682ce342c3212979b86a7647290ff33f00d9946d6b17e1a248068a22d94413cf73498a890c86349bdc7244ba637abe0a59b114d9d9c1bc5368580c4ff164261a39e57"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x3c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a41d24fdcbaf001eb7730b6033d07d4f235b9ab6a421134f"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13d580e8e84548b9449a0ae5bf27dd5845c906becffb3a53"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004805}, 0x11) 0s ago: executing program 3 (id=1806): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x210f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x3c}}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r6, &(0x7f0000000980)={&(0x7f0000000340), 0x6e, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/106, 0x6a}, {&(0x7f0000000800)=""/60, 0x3c}], 0x9, &(0x7f0000000900)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x10000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) kernel console output (not intermixed with test programs): 747430][ T5838] Bluetooth: hci4: command tx timeout [ 305.902461][T12143] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.916013][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.924979][T12143] bridge_slave_0: entered allmulticast mode [ 305.934960][T12143] bridge_slave_0: entered promiscuous mode [ 305.990349][T11028] hsr_slave_0: left promiscuous mode [ 306.000922][T11028] hsr_slave_1: left promiscuous mode [ 306.011404][T11028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.019344][T11028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.035653][T11028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.053796][T11028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.077635][T11028] hsr_slave_0: left promiscuous mode [ 306.093217][T11028] hsr_slave_1: left promiscuous mode [ 306.100615][T11028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.108541][T11028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.132572][T11028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.146795][T11028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.213824][T11028] veth1_macvtap: left promiscuous mode [ 306.220442][T11028] veth0_macvtap: left promiscuous mode [ 306.226186][T11028] veth1_vlan: left promiscuous mode [ 306.244491][T11028] veth0_vlan: left promiscuous mode [ 306.250467][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 306.269174][T11028] veth1_macvtap: left promiscuous mode [ 306.276945][T11028] veth0_macvtap: left promiscuous mode [ 306.282737][T11028] veth1_vlan: left promiscuous mode [ 306.288803][T11028] veth0_vlan: left promiscuous mode [ 307.263926][T11028] team0 (unregistering): Port device team_slave_1 removed [ 307.308620][T11028] team0 (unregistering): Port device team_slave_0 removed [ 307.826761][ T5838] Bluetooth: hci4: command tx timeout [ 308.446726][T11028] team0 (unregistering): Port device team_slave_1 removed [ 308.510558][T11028] team0 (unregistering): Port device team_slave_0 removed [ 309.125543][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.134270][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.141562][T12143] bridge_slave_1: entered allmulticast mode [ 309.149578][T12143] bridge_slave_1: entered promiscuous mode [ 309.289259][T12143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.323275][T12143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.484348][T12143] team0: Port device team_slave_0 added [ 309.506005][T12143] team0: Port device team_slave_1 added [ 309.665489][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 309.680383][T12350] netlink: 'syz.0.1400': attribute type 16 has an invalid length. [ 309.689103][T12350] netlink: 'syz.0.1400': attribute type 3 has an invalid length. [ 309.699903][T12143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.716528][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.736086][T12350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1400'. [ 309.767659][T12143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.788041][T12143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.795291][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.828126][T12143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.850181][T11994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.888541][T11994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.908534][ T5838] Bluetooth: hci4: command tx timeout [ 309.944935][T11994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.978849][T12360] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.030221][T11994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.044945][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.054396][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.075149][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.083124][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.091321][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.106863][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.123008][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.130958][T12360] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 310.180742][T12143] hsr_slave_0: entered promiscuous mode [ 310.199645][T12143] hsr_slave_1: entered promiscuous mode [ 310.219248][T12143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.230955][T12143] Cannot create hsr debugfs directory [ 310.430026][T11964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.443209][T12376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1403'. [ 310.446795][T11964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.581269][T11964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.654692][T11964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.706878][T12381] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1404'. [ 310.715990][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 311.021405][T11994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.161463][T11994] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.232444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.239685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.262142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.269395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.362115][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.411712][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 311.431485][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1409'. [ 311.493912][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.528162][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.535404][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.606143][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.613384][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.729213][T12143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.766862][T12143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.801307][T12143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.830731][T12143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.878971][T11964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.043878][T11994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.330321][T11994] veth0_vlan: entered promiscuous mode [ 312.350349][T12143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.370399][T11994] veth1_vlan: entered promiscuous mode [ 312.452849][T12143] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.503009][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.510245][T11028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.566425][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.573629][T11028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.603578][T11994] veth0_macvtap: entered promiscuous mode [ 312.631063][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.659739][T12447] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1417'. [ 312.668624][T11994] veth1_macvtap: entered promiscuous mode [ 312.702556][T12449] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1417'. [ 312.773961][T11994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.806356][T11994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.834898][T11964] veth0_vlan: entered promiscuous mode [ 312.853894][T11994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.865878][T11994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.874987][T11994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.885058][T11994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.933608][T11964] veth1_vlan: entered promiscuous mode [ 312.998514][T12455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1419'. [ 313.223943][T11964] veth0_macvtap: entered promiscuous mode [ 313.324701][T11003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.349844][T11003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.380155][T11964] veth1_macvtap: entered promiscuous mode [ 313.472268][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.485246][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.508664][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.521206][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.534298][T12143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.560378][T11964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.570947][T11964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.596867][T11964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.605631][T11964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.727344][T12466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.089335][T11026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.131353][T12486] 8021q: VLANs not supported on gre0 [ 314.185184][T11001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.224694][T11001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.307941][T11026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.443217][T11026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.480863][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.499289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.538543][T11026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.582949][T12143] veth0_vlan: entered promiscuous mode [ 314.606208][T12143] veth1_vlan: entered promiscuous mode [ 314.694120][T12143] veth0_macvtap: entered promiscuous mode [ 314.705330][T12143] veth1_macvtap: entered promiscuous mode [ 314.724982][T12143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.743736][T12143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.761079][T12143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.770090][T12143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.779756][T12143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.792092][T12143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.991253][T11026] bridge_slave_1: left allmulticast mode [ 315.003376][T11026] bridge_slave_1: left promiscuous mode [ 315.009751][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.024579][T11026] bridge_slave_0: left allmulticast mode [ 315.037748][T11026] bridge_slave_0: left promiscuous mode [ 315.043566][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.523881][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.545471][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.561005][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.580681][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.598345][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.664447][T11026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.680791][T11026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.692084][T11026] bond0 (unregistering): Released all slaves [ 315.723661][T11028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.774388][T11028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.081634][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.108787][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.239764][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.274175][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.347314][T12510] __nla_validate_parse: 4 callbacks suppressed [ 316.347334][T12510] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1428'. [ 316.516451][T11026] hsr_slave_0: left promiscuous mode [ 316.525804][T11026] hsr_slave_1: left promiscuous mode [ 316.544910][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.562871][T11026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.599557][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 316.600808][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.639224][T11026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.657061][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.669649][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.677600][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.685823][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.694312][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.723937][T11026] veth1_macvtap: left promiscuous mode [ 316.730179][T11026] veth0_macvtap: left promiscuous mode [ 316.735933][T11026] veth1_vlan: left promiscuous mode [ 316.741541][T11026] veth0_vlan: left promiscuous mode [ 317.174767][T12536] validate_nla: 25 callbacks suppressed [ 317.174788][T12536] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 317.540951][T11026] team0 (unregistering): Port device team_slave_1 removed [ 317.580204][T11026] team0 (unregistering): Port device team_slave_0 removed [ 317.666881][ T5152] Bluetooth: hci1: command tx timeout [ 318.043674][T12536] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 318.080586][T12540] ip6erspan0: entered promiscuous mode [ 318.139889][T12543] veth11: entered allmulticast mode [ 318.699607][T12498] chnl_net:caif_netlink_parms(): no params data found [ 318.786971][ T5152] Bluetooth: hci2: command tx timeout [ 318.815944][T12520] chnl_net:caif_netlink_parms(): no params data found [ 318.990714][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.005041][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.013097][T12498] bridge_slave_0: entered allmulticast mode [ 319.021360][T12498] bridge_slave_0: entered promiscuous mode [ 319.032230][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.039792][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.049733][T12498] bridge_slave_1: entered allmulticast mode [ 319.062913][T12498] bridge_slave_1: entered promiscuous mode [ 319.213754][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.234399][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.241831][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.252570][T12520] bridge_slave_0: entered allmulticast mode [ 319.260935][T12520] bridge_slave_0: entered promiscuous mode [ 319.276856][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.311190][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.322626][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.329963][T12520] bridge_slave_1: entered allmulticast mode [ 319.338087][T12520] bridge_slave_1: entered promiscuous mode [ 319.413122][T11026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.447380][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.461116][T12498] team0: Port device team_slave_0 added [ 319.472183][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.499288][T12498] team0: Port device team_slave_1 added [ 319.534302][T11026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.621702][T12520] team0: Port device team_slave_0 added [ 319.645433][T12520] team0: Port device team_slave_1 added [ 319.673014][T11026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.708853][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.715867][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.773980][ T5152] Bluetooth: hci1: command tx timeout [ 319.808576][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.823715][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.831780][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.886504][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.995824][T11026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.033608][T12520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.040888][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.071719][T12520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.111325][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.122120][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.131648][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.140912][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.151114][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.164857][T12520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.172675][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.206056][T12520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.294784][T12498] hsr_slave_0: entered promiscuous mode [ 320.302423][T12498] hsr_slave_1: entered promiscuous mode [ 320.309069][T12498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.316745][T12498] Cannot create hsr debugfs directory [ 320.535057][T12520] hsr_slave_0: entered promiscuous mode [ 320.558369][T12520] hsr_slave_1: entered promiscuous mode [ 320.565179][T12520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.582736][T12520] Cannot create hsr debugfs directory [ 320.868921][ T5838] Bluetooth: hci2: command tx timeout [ 320.994754][T11026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.192775][T12612] bridge_slave_0: left allmulticast mode [ 321.211465][T12612] bridge_slave_0: left promiscuous mode [ 321.232226][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.270963][T12612] bridge_slave_1: left promiscuous mode [ 321.277024][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.305310][T12612] team0: Port device team_slave_0 removed [ 321.336137][T12612] team0: Port device team_slave_1 removed [ 321.375752][T12612] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 321.460724][T11026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.571866][T11026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.655060][T12629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 321.725859][T11026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.836622][ T5838] Bluetooth: hci1: command tx timeout [ 321.934615][T12641] can: request_module (can-proto-3) failed. [ 322.227945][ T5838] Bluetooth: hci4: command tx timeout [ 322.343875][T12656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.537270][T11026] bridge_slave_1: left allmulticast mode [ 322.542984][T11026] bridge_slave_1: left promiscuous mode [ 322.579099][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.611080][T11026] bridge_slave_0: left allmulticast mode [ 322.634349][T11026] bridge_slave_0: left promiscuous mode [ 322.642894][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.658481][T11026] bridge_slave_1: left allmulticast mode [ 322.664198][T11026] bridge_slave_1: left promiscuous mode [ 322.670543][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.685381][T11026] bridge_slave_0: left allmulticast mode [ 322.691551][T11026] bridge_slave_0: left promiscuous mode [ 322.706817][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.879519][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 322.946842][ T5838] Bluetooth: hci2: command tx timeout [ 323.451032][T11026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.469458][T11026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.480475][T11026] bond0 (unregistering): Released all slaves [ 323.726705][T11026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.745366][T11026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.759101][T11026] bond0 (unregistering): Released all slaves [ 323.780637][T12586] chnl_net:caif_netlink_parms(): no params data found [ 323.801325][T12663] veth0: entered promiscuous mode [ 323.806847][T12668] veth0: left promiscuous mode [ 323.825637][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1458'. [ 323.909746][ T5838] Bluetooth: hci1: command tx timeout [ 324.309978][ T5838] Bluetooth: hci4: command tx timeout [ 324.319822][T12586] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.333988][T12586] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.344896][T12714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1461'. [ 324.367213][T12586] bridge_slave_0: entered allmulticast mode [ 324.375365][T12586] bridge_slave_0: entered promiscuous mode [ 324.383336][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 324.427864][T12498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.474953][T12586] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.484441][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.491889][T12586] bridge_slave_1: entered allmulticast mode [ 324.500704][T12586] bridge_slave_1: entered promiscuous mode [ 324.507957][T12498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.525684][T12498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.537753][T12498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.739741][T12586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.781030][T12586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.903124][T12586] team0: Port device team_slave_0 added [ 324.940127][T12586] team0: Port device team_slave_1 added [ 325.026603][ T5838] Bluetooth: hci2: command tx timeout [ 325.042530][T11026] hsr_slave_0: left promiscuous mode [ 325.049587][T11026] hsr_slave_1: left promiscuous mode [ 325.067863][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.079310][T11026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.110412][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.134580][T11026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.179968][T11026] hsr_slave_0: left promiscuous mode [ 325.189539][T11026] hsr_slave_1: left promiscuous mode [ 325.195645][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.201677][T12735] ip6t_srh: unknown srh match flags 4001 [ 325.214126][T11026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.225507][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.241334][T11026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.296164][T11026] veth1_macvtap: left promiscuous mode [ 325.302015][T11026] veth0_macvtap: left promiscuous mode [ 325.308327][T11026] veth1_vlan: left promiscuous mode [ 325.313819][T11026] veth0_vlan: left promiscuous mode [ 325.320921][T11026] veth1_macvtap: left promiscuous mode [ 325.329668][T11026] veth0_macvtap: left promiscuous mode [ 325.336736][T11026] veth1_vlan: left promiscuous mode [ 325.342225][T11026] veth0_vlan: left promiscuous mode [ 325.495059][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 326.143911][T11026] team0 (unregistering): Port device team_slave_1 removed [ 326.182041][T11026] team0 (unregistering): Port device team_slave_0 removed [ 326.386739][ T5838] Bluetooth: hci4: command tx timeout [ 326.874285][T11026] team0 (unregistering): Port device team_slave_1 removed [ 326.915640][T11026] team0 (unregistering): Port device team_slave_0 removed [ 327.305676][T12586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.312847][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.343606][T12586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.358257][T12586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.365283][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.391745][T12586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.652138][T12755] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 327.714496][T12586] hsr_slave_0: entered promiscuous mode [ 327.721972][T12586] hsr_slave_1: entered promiscuous mode [ 327.737569][T12586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.751791][T12586] Cannot create hsr debugfs directory [ 327.802737][T12755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.833721][T12759] bond0: (slave veth7): Enslaving as an active interface with a down link [ 327.885107][T12520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.900809][T12520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.963967][T12763] openvswitch: netlink: Unknown key attributes 2 [ 327.985171][T12520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.063091][T12520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.124466][T12767] netlink: 'syz.0.1475': attribute type 39 has an invalid length. [ 328.240553][T12774] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1477'. [ 328.466869][ T5838] Bluetooth: hci4: command tx timeout [ 328.499286][T12498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.865294][T12498] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.953862][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.961079][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.013242][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.020495][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.144069][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 329.153937][T12520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.283368][T12498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.314967][T12520] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.333160][T12819] netlink: 'syz.0.1484': attribute type 7 has an invalid length. [ 329.420628][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.427880][T11028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.499384][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.506636][T11028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.557226][T12586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.588198][T12586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.603578][T12586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.638023][T12586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.847748][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.022454][T12498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.036224][T12586] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.122181][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.129439][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.158729][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.166026][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.252592][T12847] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1487'. [ 330.303172][T12498] veth0_vlan: entered promiscuous mode [ 330.352911][T12520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.413362][T12498] veth1_vlan: entered promiscuous mode [ 330.558083][T12498] veth0_macvtap: entered promiscuous mode [ 330.581321][T12498] veth1_macvtap: entered promiscuous mode [ 330.701718][T12856] syzkaller0: entered promiscuous mode [ 330.727849][T12856] syzkaller0: entered allmulticast mode [ 330.762066][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 331.514997][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 332.969022][T12520] veth0_vlan: entered promiscuous mode [ 332.997569][T12498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.051529][T12498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.090975][T12586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.120929][T12520] veth1_vlan: entered promiscuous mode [ 333.144526][T12498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.155908][T12498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.167907][T12498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.183084][T12498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.221940][T12900] tipc: Resetting bearer [ 333.395711][T12520] veth0_macvtap: entered promiscuous mode [ 333.442536][T12520] veth1_macvtap: entered promiscuous mode [ 333.564386][T12520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.593316][T12520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.614907][T12520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.633306][T12520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.652054][T12520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.662407][T12520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.694908][T11000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.728198][T11000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.931302][T11000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.947775][T11001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.952478][T11000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.977766][T11001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.121320][T11001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.148079][T11001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.186069][T12586] veth0_vlan: entered promiscuous mode [ 334.239458][T12586] veth1_vlan: entered promiscuous mode [ 334.251159][T12933] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 334.521273][T12933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.794200][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.939216][T12586] veth0_macvtap: entered promiscuous mode [ 335.039593][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.099759][T12586] veth1_macvtap: entered promiscuous mode [ 335.274415][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.332854][T12586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.376071][T12586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.458674][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.513538][T12586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.542375][T12586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.567260][T12586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.576047][T12586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.836055][T11028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.888218][T11028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.964474][T11001] bridge_slave_1: left allmulticast mode [ 335.978307][T11001] bridge_slave_1: left promiscuous mode [ 335.984150][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.022469][T11001] bridge_slave_0: left allmulticast mode [ 336.036603][T11001] bridge_slave_0: left promiscuous mode [ 336.043335][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.122331][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.131998][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.140663][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.152242][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.160769][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.838087][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.851792][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.860469][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.870461][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.881082][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.165573][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.180810][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.191569][T11001] bond0 (unregistering): Released all slaves [ 337.242028][T11028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.265734][T11028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.484725][T13002] xt_cluster: node mask cannot exceed total number of nodes [ 338.082456][T11001] hsr_slave_0: left promiscuous mode [ 338.106237][T11001] hsr_slave_1: left promiscuous mode [ 338.117364][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.135069][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.156295][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.177530][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.228711][T11001] veth1_macvtap: left promiscuous mode [ 338.234350][T11001] veth0_macvtap: left promiscuous mode [ 338.240513][ T5838] Bluetooth: hci1: command tx timeout [ 338.252995][T11001] veth1_vlan: left promiscuous mode [ 338.258808][T11001] veth0_vlan: left promiscuous mode [ 338.781494][T11001] team0 (unregistering): Port device team_slave_1 removed [ 338.830515][T11001] team0 (unregistering): Port device team_slave_0 removed [ 338.960142][ T5838] Bluetooth: hci2: command tx timeout [ 339.658093][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.668006][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.676211][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.685422][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.693674][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.902754][T13042] syzkaller1: entered promiscuous mode [ 339.915721][T13042] syzkaller1: entered allmulticast mode [ 339.945464][T12964] chnl_net:caif_netlink_parms(): no params data found [ 339.955548][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1511'. [ 340.181959][T12990] chnl_net:caif_netlink_parms(): no params data found [ 340.232888][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 340.254664][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 340.306569][ T5838] Bluetooth: hci1: command tx timeout [ 340.478394][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 340.539782][T13068] netlink: 'syz.3.1513': attribute type 10 has an invalid length. [ 340.615909][T12964] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.630758][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.639267][T12964] bridge_slave_0: entered allmulticast mode [ 340.647343][T12964] bridge_slave_0: entered promiscuous mode [ 340.701623][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.715398][T12964] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.722787][T12964] bridge_slave_1: entered allmulticast mode [ 340.738745][T12964] bridge_slave_1: entered promiscuous mode [ 340.830788][T13078] netlink: zone id is out of range [ 340.837169][T13078] netlink: del zone limit has 4 unknown bytes [ 340.884388][T11001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.931576][T12964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.986877][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.994098][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.005103][T12990] bridge_slave_0: entered allmulticast mode [ 341.028409][T12990] bridge_slave_0: entered promiscuous mode [ 341.036874][ T5838] Bluetooth: hci2: command tx timeout [ 341.043721][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.055881][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.065887][T12990] bridge_slave_1: entered allmulticast mode [ 341.080607][T12990] bridge_slave_1: entered promiscuous mode [ 341.099795][T12964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.355965][T11001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.512238][T12990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.537418][T12990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.613898][T12964] team0: Port device team_slave_0 added [ 341.640641][T12964] team0: Port device team_slave_1 added [ 341.752399][ T5838] Bluetooth: hci4: command tx timeout [ 341.811381][T11001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.924623][T12990] team0: Port device team_slave_0 added [ 342.005444][T13117] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1520'. [ 342.048937][T13115] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1520'. [ 342.111787][T11001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.170067][T12964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.183987][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.231371][T12964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.259370][T12990] team0: Port device team_slave_1 added [ 342.377261][T12964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.386904][ T5838] Bluetooth: hci1: command tx timeout [ 342.411777][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.467087][T12964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.573540][T12990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.595570][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.672164][T12990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.828876][T12990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.835900][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.873593][T12990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.894864][T13035] chnl_net:caif_netlink_parms(): no params data found [ 342.927917][T13153] vlan3: entered promiscuous mode [ 342.933192][T13153] gretap0: entered promiscuous mode [ 342.984539][T12964] hsr_slave_0: entered promiscuous mode [ 342.995357][T12964] hsr_slave_1: entered promiscuous mode [ 343.008463][T12964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.022439][T12964] Cannot create hsr debugfs directory [ 343.031942][T13155] netlink: 'syz.3.1526': attribute type 4 has an invalid length. [ 343.110002][ T5838] Bluetooth: hci2: command tx timeout [ 343.183328][T13169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1530'. [ 343.376885][T13168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.480270][T12990] hsr_slave_0: entered promiscuous mode [ 343.498669][T12990] hsr_slave_1: entered promiscuous mode [ 343.504861][T12990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.524667][T12990] Cannot create hsr debugfs directory [ 343.531395][T13182] netlink: 'syz.3.1532': attribute type 3 has an invalid length. [ 343.541871][T13182] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1532'. [ 343.748338][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.756257][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.765851][T13035] bridge_slave_0: entered allmulticast mode [ 343.774278][T13035] bridge_slave_0: entered promiscuous mode [ 343.825671][T13035] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.827559][ T5838] Bluetooth: hci4: command tx timeout [ 343.833410][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.851353][T13035] bridge_slave_1: entered allmulticast mode [ 343.859129][T13035] bridge_slave_1: entered promiscuous mode [ 343.955604][T11001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.000281][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.020682][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.145250][T11001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.195240][T13035] team0: Port device team_slave_0 added [ 344.220088][T13035] team0: Port device team_slave_1 added [ 344.300273][T11001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.455896][T11001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.466542][ T5838] Bluetooth: hci1: command tx timeout [ 344.488481][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.495618][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.522234][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.528518][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 344.542101][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 344.548195][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.565182][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.597208][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.979324][T13035] hsr_slave_0: entered promiscuous mode [ 345.006507][T13035] hsr_slave_1: entered promiscuous mode [ 345.013018][T13035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.041720][T13035] Cannot create hsr debugfs directory [ 345.161328][T13220] __nla_validate_parse: 1 callbacks suppressed [ 345.161349][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1541'. [ 345.187529][ T5838] Bluetooth: hci2: command tx timeout [ 345.680201][T11001] bridge_slave_1: left allmulticast mode [ 345.685930][T11001] bridge_slave_1: left promiscuous mode [ 345.718652][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.765749][T11001] bridge_slave_0: left allmulticast mode [ 345.777239][T11001] bridge_slave_0: left promiscuous mode [ 345.793289][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.813687][T11001] bridge_slave_1: left allmulticast mode [ 345.831706][T11001] bridge_slave_1: left promiscuous mode [ 345.841998][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.859012][T11001] bridge_slave_0: left allmulticast mode [ 345.872629][T11001] bridge_slave_0: left promiscuous mode [ 345.886174][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.894531][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 345.904324][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 345.920256][ T5838] Bluetooth: hci4: command tx timeout [ 346.054216][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 346.074345][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 346.199818][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 346.209196][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 346.433533][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.444876][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.455477][T11001] bond0 (unregistering): Released all slaves [ 346.741163][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.752544][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.762718][T11001] bond0 (unregistering): Released all slaves [ 347.240002][T13268] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 347.248061][T13268] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1549'. [ 347.729186][T11001] hsr_slave_0: left promiscuous mode [ 347.776749][T11001] hsr_slave_1: left promiscuous mode [ 347.782957][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.796869][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.814904][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.822844][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.849997][T11001] hsr_slave_0: left promiscuous mode [ 347.867669][T11001] hsr_slave_1: left promiscuous mode [ 347.873844][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.896804][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.907578][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.924805][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.996860][ T5838] Bluetooth: hci4: command tx timeout [ 348.006758][T11001] veth1_macvtap: left promiscuous mode [ 348.017945][T11001] veth0_macvtap: left promiscuous mode [ 348.030683][T11001] veth1_vlan: left promiscuous mode [ 348.036255][T11001] veth0_vlan: left promiscuous mode [ 348.052457][T11001] veth1_macvtap: left promiscuous mode [ 348.061384][T11001] veth0_macvtap: left promiscuous mode [ 348.074346][T11001] veth1_vlan: left promiscuous mode [ 348.084073][T11001] veth0_vlan: left promiscuous mode [ 349.123128][T11001] team0 (unregistering): Port device team_slave_1 removed [ 349.161231][T11001] team0 (unregistering): Port device team_slave_0 removed [ 349.880040][T11001] team0 (unregistering): Port device team_slave_1 removed [ 349.923046][T11001] team0 (unregistering): Port device team_slave_0 removed [ 350.314761][T12964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.330307][T12964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.345752][T12964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.356187][T12964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.502947][T13306] netlink: 'syz.0.1556': attribute type 4 has an invalid length. [ 350.570005][T13313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1557'. [ 350.644355][T13315] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 350.933271][T12478] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 350.947770][T12478] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 350.966945][T13324] netlink: 'syz.0.1560': attribute type 3 has an invalid length. [ 351.120441][T12964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.219642][T12964] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.275940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.283184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.294902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.302234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.553880][T12990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.574708][T13344] can: request_module (can-proto-5) failed. [ 351.648316][T12990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.689621][T12990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.751320][T12990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.922147][T13352] tipc: Enabled bearer , priority 0 [ 351.949074][T13035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.967413][T13035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.979200][T13035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.026860][T13356] syzkaller0: entered promiscuous mode [ 352.032422][T13356] syzkaller0: entered allmulticast mode [ 352.054634][T13035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.193827][T13356] tipc: Resetting bearer [ 352.265661][T13351] tipc: Resetting bearer [ 352.283032][T13351] tipc: Disabling bearer [ 352.394074][T12964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.662230][T12964] veth0_vlan: entered promiscuous mode [ 352.816293][T13035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.846273][T12964] veth1_vlan: entered promiscuous mode [ 352.952367][T12990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.979621][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 353.070528][T13035] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.101401][T12990] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.150108][T13405] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1572'. [ 353.163511][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.170761][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.221311][T13405] vlan3: entered allmulticast mode [ 353.234638][T13405] erspan0: entered allmulticast mode [ 353.258903][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.266175][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.292457][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.299715][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.309589][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 353.317348][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.325678][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.378630][T12964] veth0_macvtap: entered promiscuous mode [ 353.395289][T12964] veth1_macvtap: entered promiscuous mode [ 353.443538][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 353.528172][T13418] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 353.540094][T12964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.652433][T12964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.704381][T12964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.713945][T12964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.722986][T12964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.732987][T12964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.760725][T12990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.774404][T12990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.131580][T11026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.173421][T11026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.252680][T13436] bridge0: port 1(gretap0) entered blocking state [ 354.261862][T13436] bridge0: port 1(gretap0) entered disabled state [ 354.273276][T13436] gretap0: entered allmulticast mode [ 354.315406][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.355505][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.513980][T13442] syzkaller0: entered promiscuous mode [ 354.525458][T13442] syzkaller0: entered allmulticast mode [ 356.395680][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.445838][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.621032][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1584'. [ 356.638399][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 356.661077][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.811751][T12990] veth0_vlan: entered promiscuous mode [ 356.861373][T12990] veth1_vlan: entered promiscuous mode [ 356.945004][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.069430][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.112042][T12990] veth0_macvtap: entered promiscuous mode [ 357.140957][T12990] veth1_macvtap: entered promiscuous mode [ 357.214299][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.259600][T12990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.315899][T12990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.340219][T12990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.350682][T12990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.359757][T12990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.368876][T12990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.456293][T13035] veth0_vlan: entered promiscuous mode [ 357.474235][T13035] veth1_vlan: entered promiscuous mode [ 357.607233][T11001] bridge_slave_1: left allmulticast mode [ 357.612954][T11001] bridge_slave_1: left promiscuous mode [ 357.625650][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.648184][T11001] bridge_slave_0: left allmulticast mode [ 357.653902][T11001] bridge_slave_0: left promiscuous mode [ 357.668218][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.960641][T13505] netlink: 'syz.0.1585': attribute type 2 has an invalid length. [ 358.050777][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 358.402997][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.430030][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.455159][T11001] bond0 (unregistering): Released all slaves [ 358.591811][T13513] syzkaller1: entered promiscuous mode [ 358.615775][T13513] syzkaller1: entered allmulticast mode [ 358.643877][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.667358][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.677548][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.688976][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.705096][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.756015][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'. [ 358.859460][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 358.863953][T13035] veth0_macvtap: entered promiscuous mode [ 358.972711][T13035] veth1_macvtap: entered promiscuous mode [ 358.982010][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.996648][T13531] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 359.005401][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.063876][T13533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1590'. [ 359.176336][T11001] hsr_slave_0: left promiscuous mode [ 359.201640][T11001] hsr_slave_1: left promiscuous mode [ 359.208375][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.215858][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.235214][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.250210][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.276706][T11001] veth1_macvtap: left promiscuous mode [ 359.282354][T11001] veth0_macvtap: left promiscuous mode [ 359.288729][T11001] veth1_vlan: left promiscuous mode [ 359.294058][T11001] veth0_vlan: left promiscuous mode [ 359.781320][T11001] team0 (unregistering): Port device team_slave_1 removed [ 359.823435][T11001] team0 (unregistering): Port device team_slave_0 removed [ 360.238433][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.273604][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.352552][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 360.383684][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.483283][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.504978][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'. [ 360.533794][T13035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.556415][T13035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.565199][T13035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.578352][T13035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.787671][ T5838] Bluetooth: hci1: command tx timeout [ 360.916082][T13566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1596'. [ 361.330916][T13522] chnl_net:caif_netlink_parms(): no params data found [ 361.419868][T11001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.456237][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.475514][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.611556][T11001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.647670][T11026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.666849][T11026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.809236][T11001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.830984][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.842594][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.850082][T13522] bridge_slave_0: entered allmulticast mode [ 361.858542][T13522] bridge_slave_0: entered promiscuous mode [ 361.888051][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.895250][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.907054][T13522] bridge_slave_1: entered allmulticast mode [ 361.915053][T13522] bridge_slave_1: entered promiscuous mode [ 361.965149][T11001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.093181][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.124973][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.301551][T13522] team0: Port device team_slave_0 added [ 362.332791][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 362.373358][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 362.432912][T13522] team0: Port device team_slave_1 added [ 362.667982][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.689566][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.746060][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.768033][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.775043][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.836597][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.867090][ T5838] Bluetooth: hci1: command tx timeout [ 362.936984][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.952078][T11001] bridge_slave_1: left allmulticast mode [ 362.955540][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.966416][T11001] bridge_slave_1: left promiscuous mode [ 362.973543][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.973594][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.992935][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.003146][T11001] bridge_slave_0: left allmulticast mode [ 363.009594][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.016429][T11001] bridge_slave_0: left promiscuous mode [ 363.025514][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.401787][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.413011][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.423779][T11001] bond0 (unregistering): Released all slaves [ 363.592440][T13522] hsr_slave_0: entered promiscuous mode [ 363.618688][T13522] hsr_slave_1: entered promiscuous mode [ 363.639209][T13522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.669577][T13522] Cannot create hsr debugfs directory [ 364.002661][T13623] vlan2: entered promiscuous mode [ 364.039976][T13623] vlan2: entered allmulticast mode [ 364.045207][T13623] hsr_slave_1: entered allmulticast mode [ 364.054485][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.064967][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.079717][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.090882][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.101902][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.362473][T11001] hsr_slave_0: left promiscuous mode [ 364.375008][T11001] hsr_slave_1: left promiscuous mode [ 364.393937][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.411144][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.425725][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.445646][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.485071][T11001] veth1_macvtap: left promiscuous mode [ 364.491449][T11001] veth0_macvtap: left promiscuous mode [ 364.497452][T11001] veth1_vlan: left promiscuous mode [ 364.502996][T11001] veth0_vlan: left promiscuous mode [ 364.960289][ T5838] Bluetooth: hci1: command tx timeout [ 365.117466][ T5838] Bluetooth: hci2: command tx timeout [ 365.182855][T11001] team0 (unregistering): Port device team_slave_1 removed [ 365.227470][T11001] team0 (unregistering): Port device team_slave_0 removed [ 365.828909][T13660] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 366.148195][ T5838] Bluetooth: hci4: command tx timeout [ 366.221320][T13675] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1612'. [ 366.567540][T13606] chnl_net:caif_netlink_parms(): no params data found [ 366.821210][T11001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.020026][T11001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.031710][ T5838] Bluetooth: hci1: command tx timeout [ 367.079050][T13606] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.087007][T13606] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.094285][T13606] bridge_slave_0: entered allmulticast mode [ 367.102592][T13606] bridge_slave_0: entered promiscuous mode [ 367.187259][T11001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.197858][ T5838] Bluetooth: hci2: command tx timeout [ 367.208368][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.215806][T13606] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.223620][T13606] bridge_slave_1: entered allmulticast mode [ 367.232114][T13606] bridge_slave_1: entered promiscuous mode [ 367.397798][T11001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.411184][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 367.432176][T13712] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1619'. [ 367.474437][T13606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.485378][T13712] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1619'. [ 367.517871][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 367.534748][T13606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.550912][T13522] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 367.726138][T13522] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 367.755711][T13630] chnl_net:caif_netlink_parms(): no params data found [ 367.790683][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 367.825676][T13606] team0: Port device team_slave_0 added [ 367.853653][T13606] team0: Port device team_slave_1 added [ 367.873928][T13522] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.051689][T13522] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.104457][T13606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.111941][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.140754][T13606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.164482][T13606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.182456][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.226479][ T5838] Bluetooth: hci4: command tx timeout [ 368.249961][T13606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.443192][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 368.611984][T13606] hsr_slave_0: entered promiscuous mode [ 368.620752][T13606] hsr_slave_1: entered promiscuous mode [ 368.634169][T13606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.643039][T13770] netlink: 'syz.0.1627': attribute type 10 has an invalid length. [ 368.651272][T13606] Cannot create hsr debugfs directory [ 368.683789][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1627'. [ 368.723879][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.732184][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.740201][T13630] bridge_slave_0: entered allmulticast mode [ 368.748659][T13630] bridge_slave_0: entered promiscuous mode [ 368.831793][T13630] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.846818][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.854118][T13630] bridge_slave_1: entered allmulticast mode [ 368.865264][T13630] bridge_slave_1: entered promiscuous mode [ 369.006702][T11001] bridge_slave_1: left allmulticast mode [ 369.012414][T11001] bridge_slave_1: left promiscuous mode [ 369.039597][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.058102][T11001] bridge_slave_0: left allmulticast mode [ 369.063979][T11001] bridge_slave_0: left promiscuous mode [ 369.071492][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.266658][ T5838] Bluetooth: hci2: command tx timeout [ 369.532603][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.544582][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.555341][T11001] bond0 (unregistering): Released all slaves [ 369.589094][T13630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.605622][T13630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.650427][T13792] syzkaller1: entered promiscuous mode [ 369.655991][T13792] syzkaller1: entered allmulticast mode [ 369.835766][T13630] team0: Port device team_slave_0 added [ 369.846190][T13630] team0: Port device team_slave_1 added [ 370.035744][T13630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.065359][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.115763][T13630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.131509][T13810] netlink: 'syz.3.1639': attribute type 11 has an invalid length. [ 370.133500][T13630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.139769][T13810] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1639'. [ 370.153419][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.188200][T13630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.316687][ T5838] Bluetooth: hci4: command tx timeout [ 370.356170][T13814] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 370.365840][T11001] hsr_slave_0: left promiscuous mode [ 370.366148][T13814] netlink: 'syz.3.1641': attribute type 8 has an invalid length. [ 370.379494][T11001] hsr_slave_1: left promiscuous mode [ 370.380479][T13814] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.1641'. [ 370.386050][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.403265][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 370.412815][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.420808][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.428493][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.449256][T11001] veth1_macvtap: left promiscuous mode [ 370.455033][T11001] veth0_macvtap: left promiscuous mode [ 370.463170][T11001] veth1_vlan: left promiscuous mode [ 370.469332][T11001] veth0_vlan: left promiscuous mode [ 370.904291][T11001] team0 (unregistering): Port device team_slave_1 removed [ 370.945803][T11001] team0 (unregistering): Port device team_slave_0 removed [ 371.346731][ T5838] Bluetooth: hci2: command tx timeout [ 371.490300][T13630] hsr_slave_0: entered promiscuous mode [ 371.515736][T13630] hsr_slave_1: entered promiscuous mode [ 371.527314][T13630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.545024][T13630] Cannot create hsr debugfs directory [ 371.585848][T13825] netlink: 'syz.0.1643': attribute type 20 has an invalid length. [ 371.904813][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.068129][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.111724][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.118938][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.147115][T13606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.178950][T13606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.197088][T13606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.212653][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.220035][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.296060][T13606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.388899][ T5838] Bluetooth: hci4: command tx timeout [ 372.584529][T13866] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20003 [ 372.873655][T13606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.023377][T13606] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.074205][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.081462][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.096234][T13630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.154596][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.161815][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.200139][T13630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.208708][T13882] xt_CT: No such helper "pptp" [ 373.226045][T13630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.253933][T13885] __nla_validate_parse: 1 callbacks suppressed [ 373.253953][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 373.274869][T13630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.325499][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.449505][T13899] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 373.474456][T13899] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 373.714686][T13522] veth0_vlan: entered promiscuous mode [ 373.795862][T13522] veth1_vlan: entered promiscuous mode [ 373.823936][T13630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.930197][T13522] veth0_macvtap: entered promiscuous mode [ 373.944600][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.977853][T13522] veth1_macvtap: entered promiscuous mode [ 374.001610][T11001] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.008854][T11001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.030960][T13606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.040719][T11001] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.047955][T11001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.109763][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.134914][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.162917][T13522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.174888][T13522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.184711][T13522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.193913][T13522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.241697][T13606] veth0_vlan: entered promiscuous mode [ 374.358351][T13606] veth1_vlan: entered promiscuous mode [ 374.419986][T11000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.444436][T11000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.532616][T13606] veth0_macvtap: entered promiscuous mode [ 374.565529][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.593871][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.620882][T13606] veth1_macvtap: entered promiscuous mode [ 374.721476][T13606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.765923][T13606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.823056][T13606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.833157][T13606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.851906][T13606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.861289][T13606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.876865][T13929] netlink: 'syz.0.1667': attribute type 5 has an invalid length. [ 374.949260][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.180554][T13936] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 375.210778][T13936] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1668'. [ 375.318888][ T2954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.352812][T11025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.376453][T11025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.424059][ T2954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.500296][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.515160][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.566277][ T2954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.683125][ T2954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.769589][T13630] veth0_vlan: entered promiscuous mode [ 375.795231][T13630] veth1_vlan: entered promiscuous mode [ 375.869534][T13630] veth0_macvtap: entered promiscuous mode [ 375.904553][T13630] veth1_macvtap: entered promiscuous mode [ 375.970624][ T2954] bridge_slave_1: left allmulticast mode [ 375.976338][ T2954] bridge_slave_1: left promiscuous mode [ 375.996170][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.012302][ T2954] bridge_slave_0: left allmulticast mode [ 376.021064][ T2954] bridge_slave_0: left promiscuous mode [ 376.029412][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.615765][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.636851][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.650225][ T2954] bond0 (unregistering): Released all slaves [ 376.663512][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.675213][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.690272][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.693519][T13630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.713809][T13630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.733228][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.742025][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.742311][T13630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.761030][T13630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.772598][T13630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.782889][T13630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.121614][ T2954] hsr_slave_0: left promiscuous mode [ 377.128203][ T2954] hsr_slave_1: left promiscuous mode [ 377.134060][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.142435][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.150903][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.158853][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.188486][ T2954] veth1_macvtap: left promiscuous mode [ 377.194113][ T2954] veth0_macvtap: left promiscuous mode [ 377.206777][ T2954] veth1_vlan: left promiscuous mode [ 377.212165][ T2954] veth0_vlan: left promiscuous mode [ 377.717805][T13968] netlink: 'syz.0.1674': attribute type 10 has an invalid length. [ 377.764038][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.773437][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.784021][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.799345][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.808209][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.025496][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 378.065971][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 378.452961][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.475437][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.736100][T13951] chnl_net:caif_netlink_parms(): no params data found [ 378.775434][T11025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.783988][T11025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.802665][ T5838] Bluetooth: hci1: command tx timeout [ 379.111973][T13990] bond3: entered promiscuous mode [ 379.117393][T13990] bond3: entered allmulticast mode [ 379.122878][T13990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.164382][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.171990][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.179476][T13951] bridge_slave_0: entered allmulticast mode [ 379.187592][T13951] bridge_slave_0: entered promiscuous mode [ 379.201740][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.210247][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.226586][T13951] bridge_slave_1: entered allmulticast mode [ 379.252816][T13951] bridge_slave_1: entered promiscuous mode [ 379.307935][T13994] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1680'. [ 379.389033][T13994] hsr_slave_0: left promiscuous mode [ 379.406404][T13994] hsr_slave_1: left promiscuous mode [ 379.452816][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.491488][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.908149][ T5838] Bluetooth: hci2: command tx timeout [ 379.960881][ T2954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.010383][T13951] team0: Port device team_slave_0 added [ 380.021181][T13951] team0: Port device team_slave_1 added [ 380.040073][T13969] chnl_net:caif_netlink_parms(): no params data found [ 380.080649][T13996] infiniband syz!: set down [ 380.096404][T13996] infiniband syz!: added team_slave_0 [ 380.106289][ T2954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.265069][T13996] RDS/IB: syz!: added [ 380.285622][T13996] smc: adding ib device syz! with port count 1 [ 380.310373][T13996] smc: ib device syz! port 1 has pnetid [ 380.320051][ T2954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.348139][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.355156][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.382280][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.435649][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.443440][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.471071][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.527906][ T2954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.666628][T13951] hsr_slave_0: entered promiscuous mode [ 380.690187][T13951] hsr_slave_1: entered promiscuous mode [ 380.727292][T13951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.734923][T13951] Cannot create hsr debugfs directory [ 380.867070][ T5838] Bluetooth: hci1: command tx timeout [ 381.120838][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.146780][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.154098][T13969] bridge_slave_0: entered allmulticast mode [ 381.169496][T13969] bridge_slave_0: entered promiscuous mode [ 381.189590][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.206646][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.224861][T13969] bridge_slave_1: entered allmulticast mode [ 381.233229][T13969] bridge_slave_1: entered promiscuous mode [ 381.282723][T14034] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1684'. [ 381.396296][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.420364][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.438404][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.446261][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.455110][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.463756][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.510164][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.677673][T13969] team0: Port device team_slave_0 added [ 381.720731][T13969] team0: Port device team_slave_1 added [ 381.846284][ T2954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.894616][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.915043][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.973320][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.994389][ T5838] Bluetooth: hci2: command tx timeout [ 382.008855][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.026039][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.077802][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.207285][ T2954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.399714][ T2954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.510809][ T2954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.579506][T13969] hsr_slave_0: entered promiscuous mode [ 382.586978][T13969] hsr_slave_1: entered promiscuous mode [ 382.599033][T13969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.614086][T13969] Cannot create hsr debugfs directory [ 382.789177][T14059] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1687'. [ 382.830684][T14059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.840944][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 382.946829][ T5838] Bluetooth: hci1: command tx timeout [ 383.204506][T14067] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 383.506552][ T5838] Bluetooth: hci4: command tx timeout [ 383.687155][ T2954] bridge_slave_1: left allmulticast mode [ 383.692884][ T2954] bridge_slave_1: left promiscuous mode [ 383.706823][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.768113][ T2954] bridge_slave_0: left allmulticast mode [ 383.786851][ T2954] bridge_slave_0: left promiscuous mode [ 383.792704][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.854068][ T2954] bridge_slave_1: left allmulticast mode [ 383.870162][ T2954] bridge_slave_1: left promiscuous mode [ 383.896522][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.923873][ T2954] bridge_slave_0: left allmulticast mode [ 383.936757][ T2954] bridge_slave_0: left promiscuous mode [ 383.942675][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.066628][ T5838] Bluetooth: hci2: command tx timeout [ 384.500426][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.512215][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.528273][ T2954] bond0 (unregistering): Released all slaves [ 384.828747][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.840335][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.852115][ T2954] bond0 (unregistering): Released all slaves [ 384.880306][T14083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1691'. [ 384.889661][T14083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1691'. [ 385.030074][ T5838] Bluetooth: hci1: command tx timeout [ 385.106096][T13951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.234891][T13951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.305447][T13951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.581913][T13951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.588924][ T5838] Bluetooth: hci4: command tx timeout [ 385.639024][T14035] chnl_net:caif_netlink_parms(): no params data found [ 386.146882][ T5838] Bluetooth: hci2: command tx timeout [ 386.169651][T14139] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 386.410006][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 386.508139][T14035] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.525686][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.538551][T14035] bridge_slave_0: entered allmulticast mode [ 386.596985][T14035] bridge_slave_0: entered promiscuous mode [ 386.831606][T14035] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.870077][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.877992][T14035] bridge_slave_1: entered allmulticast mode [ 386.889956][T14035] bridge_slave_1: entered promiscuous mode [ 386.951965][T14159] syzkaller0: entered promiscuous mode [ 386.961902][T14159] syzkaller0: entered allmulticast mode [ 387.001452][T14164] tipc: Enabled bearer , priority 0 [ 387.104494][ T2954] hsr_slave_0: left promiscuous mode [ 387.110858][ T2954] hsr_slave_1: left promiscuous mode [ 387.123704][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.133440][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.147957][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.155431][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.182060][ T2954] hsr_slave_0: left promiscuous mode [ 387.197292][ T2954] hsr_slave_1: left promiscuous mode [ 387.203434][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.212073][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.222416][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.230090][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.265068][ T2954] veth1_macvtap: left promiscuous mode [ 387.270795][ T2954] veth0_macvtap: left promiscuous mode [ 387.276557][ T2954] veth1_vlan: left promiscuous mode [ 387.281970][ T2954] veth0_vlan: left promiscuous mode [ 387.291453][ T2954] veth1_macvtap: left promiscuous mode [ 387.297099][ T2954] veth0_macvtap: left promiscuous mode [ 387.302787][ T2954] veth1_vlan: left promiscuous mode [ 387.308296][ T2954] veth0_vlan: left promiscuous mode [ 387.666680][ T5838] Bluetooth: hci4: command tx timeout [ 387.865327][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 387.905411][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 388.614217][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 388.656834][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 389.050658][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.064351][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.080274][T14158] tipc: Resetting bearer [ 389.100601][T14158] tipc: Disabling bearer [ 389.200209][T14170] netlink: 'syz.0.1705': attribute type 21 has an invalid length. [ 389.227683][T14035] team0: Port device team_slave_0 added [ 389.256412][T14035] team0: Port device team_slave_1 added [ 389.272955][T13969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.286254][T14170] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1705'. [ 389.386477][T13969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.413146][T14173] openvswitch: netlink: Key type 7942 is out of range max 32 [ 389.433670][T13969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.483540][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.506509][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.541042][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.557328][T13969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.604236][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.626718][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.653820][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.752445][ T5838] Bluetooth: hci4: command tx timeout [ 389.864508][T14035] hsr_slave_0: entered promiscuous mode [ 389.879009][T14035] hsr_slave_1: entered promiscuous mode [ 389.885694][T14035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.896464][T14035] Cannot create hsr debugfs directory [ 390.101066][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.181912][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.281162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.288396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.371081][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.378315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.855310][T13969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.069468][T13969] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.137274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.144529][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.178823][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.186074][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.254624][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.560527][T14035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 391.693452][T14035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 391.728383][T14035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 391.751855][T13951] veth0_vlan: entered promiscuous mode [ 391.786537][T14035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 391.851187][T13951] veth1_vlan: entered promiscuous mode [ 391.994291][T13951] veth0_macvtap: entered promiscuous mode [ 392.038526][T13951] veth1_macvtap: entered promiscuous mode [ 392.146065][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.188583][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.212952][T14035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.224452][T13951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.234206][T13951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.244009][T13951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.256396][T13951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.273985][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.287858][T14261] pim6reg: entered allmulticast mode [ 392.303602][T14262] pim6reg: left allmulticast mode [ 392.415413][T14035] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.466134][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.473396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.582392][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.589636][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.614709][T14266] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 392.627055][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.627778][T14266] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 392.644641][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.665114][T14266] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1719'. [ 392.672996][T13969] veth0_vlan: entered promiscuous mode [ 392.685581][T14266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1719'. [ 392.813183][T13969] veth1_vlan: entered promiscuous mode [ 392.884927][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.913567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.948614][T14275] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 392.977760][T14275] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1721'. [ 393.124930][T13969] veth0_macvtap: entered promiscuous mode [ 393.176000][T13969] veth1_macvtap: entered promiscuous mode [ 393.289826][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.428291][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.463104][T13969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.491104][T13969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.505442][T13969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.523666][T13969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.832173][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.016301][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.158842][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.265874][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.409956][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.473671][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.505351][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.614296][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.655287][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.829211][T11001] bridge_slave_1: left allmulticast mode [ 394.847424][T11001] bridge_slave_1: left promiscuous mode [ 394.861169][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.894694][T11001] bridge_slave_0: left allmulticast mode [ 394.913078][T11001] bridge_slave_0: left promiscuous mode [ 394.923329][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.540477][T11001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.571302][T11001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.603062][T11001] bond0 (unregistering): Released all slaves [ 395.722233][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.731578][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.743257][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.755935][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.767414][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.196064][T14035] veth0_vlan: entered promiscuous mode [ 396.389308][T14035] veth1_vlan: entered promiscuous mode [ 396.461625][T14035] veth0_macvtap: entered promiscuous mode [ 396.481511][T14035] veth1_macvtap: entered promiscuous mode [ 396.535378][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.569018][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.594593][T14035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.607229][T14035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.617014][T14035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.625767][T14035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.791575][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.810871][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.975950][T11028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.994206][T11028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.202196][T11001] hsr_slave_0: left promiscuous mode [ 397.218490][T11001] hsr_slave_1: left promiscuous mode [ 397.239630][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.253709][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.273296][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.281432][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.312012][T11001] veth1_macvtap: left promiscuous mode [ 397.322961][T11001] veth0_macvtap: left promiscuous mode [ 397.347372][T11001] veth1_vlan: left promiscuous mode [ 397.352785][T11001] veth0_vlan: left promiscuous mode [ 397.534960][T14377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1735'. [ 397.827830][ T5838] Bluetooth: hci1: command tx timeout [ 398.228386][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.238909][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.249165][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.257593][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.266891][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.665138][T11001] team0 (unregistering): Port device team_slave_1 removed [ 398.733125][T11001] team0 (unregistering): Port device team_slave_0 removed [ 399.474233][T14398] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 399.651577][T14434] IPVS: Unknown mcast interface: ip6erspan0 [ 399.908227][ T5838] Bluetooth: hci1: command tx timeout [ 400.027065][T14345] chnl_net:caif_netlink_parms(): no params data found [ 400.307198][ T5838] Bluetooth: hci2: command tx timeout [ 400.436570][T14345] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.443877][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.451868][T14345] bridge_slave_0: entered allmulticast mode [ 400.459187][T14345] bridge_slave_0: entered promiscuous mode [ 400.469033][T14345] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.477300][T14345] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.484583][T14345] bridge_slave_1: entered allmulticast mode [ 400.494115][T14345] bridge_slave_1: entered promiscuous mode [ 400.547191][T14345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.588346][ T2918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.619044][T14345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.672048][T14345] team0: Port device team_slave_0 added [ 400.694031][ T2918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.725704][T14345] team0: Port device team_slave_1 added [ 400.809174][ T2918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.834529][T14345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.846962][T14345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.877615][T14345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.911164][T14345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.918605][T14345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.945058][T14345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.045409][ T2918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.172372][T14345] hsr_slave_0: entered promiscuous mode [ 401.184898][T14345] hsr_slave_1: entered promiscuous mode [ 401.192078][T14345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.204526][T14345] Cannot create hsr debugfs directory [ 401.272284][T14401] chnl_net:caif_netlink_parms(): no params data found [ 401.783296][ T2918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.997057][ T5838] Bluetooth: hci1: command tx timeout [ 402.004789][T14486] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 402.013187][ T2918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.046243][T14401] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.057696][T14401] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.065124][T14401] bridge_slave_0: entered allmulticast mode [ 402.074224][T14401] bridge_slave_0: entered promiscuous mode [ 402.122033][ T2918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.166883][T14401] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.174037][T14401] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.197093][T14401] bridge_slave_1: entered allmulticast mode [ 402.219222][T14401] bridge_slave_1: entered promiscuous mode [ 402.235682][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.248304][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.258778][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.267625][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.279239][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.307603][T14489] tipc: Resetting bearer [ 402.339001][ T2918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.388222][ T5838] Bluetooth: hci2: command tx timeout [ 402.405213][T14401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.460703][T14499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1748'. [ 402.478889][T14401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.672892][T14510] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 402.885536][T14401] team0: Port device team_slave_0 added [ 402.917725][T14401] team0: Port device team_slave_1 added [ 403.406956][T14401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.427772][T14401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.459946][T14401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.564165][T14401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.582937][T14401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.625409][T14401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.714409][T14544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1756'. [ 403.770096][ T2918] bridge_slave_1: left allmulticast mode [ 403.781191][ T2918] bridge_slave_1: left promiscuous mode [ 403.789033][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.829592][ T2918] bridge_slave_0: left allmulticast mode [ 403.840252][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 403.846619][ T2918] bridge_slave_0: left promiscuous mode [ 403.855706][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.879206][ T2918] bridge_slave_1: left allmulticast mode [ 403.884930][ T2918] bridge_slave_1: left promiscuous mode [ 403.899795][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.912585][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 403.928435][ T2918] bridge_slave_0: left allmulticast mode [ 403.934225][ T2918] bridge_slave_0: left promiscuous mode [ 403.940095][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.066987][ T5838] Bluetooth: hci1: command tx timeout [ 404.311022][ T5838] Bluetooth: hci4: command tx timeout [ 404.363300][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.374759][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.385395][ T2918] bond0 (unregistering): Released all slaves [ 404.470203][ T5838] Bluetooth: hci2: command tx timeout [ 404.717906][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.732639][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.743306][ T2918] bond0 (unregistering): Released all slaves [ 404.978596][T14401] hsr_slave_0: entered promiscuous mode [ 404.985382][T14401] hsr_slave_1: entered promiscuous mode [ 405.003058][T14401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.013356][T14401] Cannot create hsr debugfs directory [ 405.202252][T14345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.284174][T14345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.386150][T14345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.405453][T14345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.948696][T14607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1773'. [ 406.089742][T14490] chnl_net:caif_netlink_parms(): no params data found [ 406.240461][T14615] netlink: 'syz.3.1775': attribute type 4 has an invalid length. [ 406.344884][T14611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1775'. [ 406.366607][T14611] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1775'. [ 406.391029][ T5838] Bluetooth: hci4: command tx timeout [ 406.547502][ T5838] Bluetooth: hci2: command tx timeout [ 406.615538][T14619] ipvlan2: entered promiscuous mode [ 406.634071][T14619] bridge0: port 1(ipvlan2) entered blocking state [ 406.656086][T14619] bridge0: port 1(ipvlan2) entered disabled state [ 406.663180][T14619] ipvlan2: entered allmulticast mode [ 406.674348][T14619] bridge0: entered allmulticast mode [ 406.681913][T14619] ipvlan2: left allmulticast mode [ 406.691370][T14619] bridge0: left allmulticast mode [ 406.730308][ T2918] hsr_slave_0: left promiscuous mode [ 406.736302][ T2918] hsr_slave_1: left promiscuous mode [ 406.742658][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.750789][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.760813][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.768691][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.781419][ T2918] hsr_slave_0: left promiscuous mode [ 406.790452][ T2918] hsr_slave_1: left promiscuous mode [ 406.798116][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.805554][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.813769][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.821811][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.856732][ T2918] veth1_macvtap: left promiscuous mode [ 406.862324][ T2918] veth0_macvtap: left promiscuous mode [ 406.869071][ T2918] veth1_vlan: left promiscuous mode [ 406.874468][ T2918] veth0_vlan: left promiscuous mode [ 406.881229][ T2918] veth1_macvtap: left promiscuous mode [ 406.886895][ T2918] veth0_macvtap: left promiscuous mode [ 406.892515][ T2918] veth1_vlan: left promiscuous mode [ 406.898006][ T2918] veth0_vlan: left promiscuous mode [ 407.503089][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 407.545924][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 408.275108][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 408.318801][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 408.472407][ T5838] Bluetooth: hci4: command tx timeout [ 408.788620][T14624] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 408.823477][T14490] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.845152][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.860702][T14490] bridge_slave_0: entered allmulticast mode [ 408.872360][T14490] bridge_slave_0: entered promiscuous mode [ 408.910864][T14490] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.957225][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.982963][T14490] bridge_slave_1: entered allmulticast mode [ 409.008353][T14490] bridge_slave_1: entered promiscuous mode [ 409.181020][T14490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.208360][T14490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.359335][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.364532][T14490] team0: Port device team_slave_0 added [ 409.402643][T14490] team0: Port device team_slave_1 added [ 409.433914][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.463783][T14490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.481440][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.513633][T14490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.534707][T14345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.543540][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.569613][T14490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.582017][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.623917][T14490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.670494][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.700199][T14401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.711984][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.715290][T14345] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.731857][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.763695][T14401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.792009][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.835087][T14490] hsr_slave_0: entered promiscuous mode [ 409.849069][T14490] hsr_slave_1: entered promiscuous mode [ 409.855543][T14490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.867486][T14490] Cannot create hsr debugfs directory [ 409.873157][T14401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.890848][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.893038][T14652] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1786'. [ 409.898093][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.915404][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 409.955272][T14401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.977891][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.985148][T11028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.005630][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 410.309494][T14668] netlink: 'syz.0.1789': attribute type 11 has an invalid length. [ 410.340217][T14345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.354197][T14670] netlink: 'syz.0.1789': attribute type 11 has an invalid length. [ 410.565605][ T5838] Bluetooth: hci4: command tx timeout [ 410.607881][T14680] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 410.820340][T14689] netlink: 'syz.0.1792': attribute type 10 has an invalid length. [ 410.841086][T14401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.850013][T14689] batman_adv: batadv0: Adding interface: team0 [ 410.856260][T14689] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 410.914502][T14692] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 410.957915][T14401] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.981581][T14692] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 411.003849][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.011164][T11028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.035493][T14345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.087662][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.094877][T11028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.354950][T14490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.384136][T14490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.413617][T14490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.435636][T14490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.468996][T14345] veth0_vlan: entered promiscuous mode [ 411.513232][T14345] veth1_vlan: entered promiscuous mode [ 411.672392][T14345] veth0_macvtap: entered promiscuous mode [ 411.699702][T14345] veth1_macvtap: entered promiscuous mode [ 411.790422][T14345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.850852][T14345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.880314][T14345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.883457][T14723] sock: sock_set_timeout: `syz.3.1798' (pid 14723) tries to set negative timeout [ 411.915656][T14345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.927755][T14345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.939171][T14345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.064006][T14490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.183869][T14490] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.205694][T14401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.275128][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.282367][T11003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.323426][T14738] netlink: 'syz.3.1801': attribute type 12 has an invalid length. [ 412.355359][T11003] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.362590][T11003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.436653][T11001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.444550][T11001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.569311][T11003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.596939][T11003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.625932][T14401] veth0_vlan: entered promiscuous mode [ 412.728756][T14401] veth1_vlan: entered promiscuous mode [ 412.944149][T14401] veth0_macvtap: entered promiscuous mode [ 412.954838][ C1] ------------[ cut here ]------------ [ 412.960495][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 412.971689][ C1] WARNING: CPU: 1 PID: 5497 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 412.981929][ C1] Modules linked in: [ 412.986176][ C1] CPU: 1 UID: 0 PID: 5497 Comm: dhcpcd Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 412.997899][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.008045][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 413.014347][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 413.034050][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 413.040227][ C1] RAX: c8b27dad912db000 RBX: 000000000000000c RCX: ffff88802f159e00 [ 413.048302][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 413.056358][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 413.064480][ C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888030f023e8 [ 413.072527][ C1] R13: 0000000000000000 R14: ffff888024720e40 R15: ffff8880247230d8 [ 413.080573][ C1] FS: 00007f3e6c202740(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 413.089670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.096303][ C1] CR2: 00007f08d69fb6b0 CR3: 0000000031e2c000 CR4: 00000000003526f0 [ 413.104455][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.112513][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.120653][ C1] Call Trace: [ 413.123971][ C1] [ 413.126904][ C1] rate_control_send_low+0x194/0x7a0 [ 413.132253][ C1] rate_control_get_rate+0x20b/0x5d0 [ 413.137619][ C1] ieee80211_beacon_get_finish+0x38c/0x6b0 [ 413.143510][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 413.149918][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 413.155361][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 413.161211][ C1] ieee80211_beacon_get_ap+0x1478/0x19e0 [ 413.166937][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 413.172975][ C1] ? __ieee80211_beacon_get+0x36/0x17b0 [ 413.178585][ C1] ? __ieee80211_beacon_get+0x36/0x17b0 [ 413.184269][ C1] __ieee80211_beacon_get+0x1179/0x17b0 [ 413.189860][ C1] ? __ieee80211_beacon_get+0x36/0x17b0 [ 413.195438][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 413.200955][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 413.207073][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 413.212647][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 413.219883][ C1] __iterate_interfaces+0x2a8/0x590 [ 413.225111][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 413.231257][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 413.238525][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 413.244657][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 413.251764][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 413.257020][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.262842][ C1] __hrtimer_run_queues+0x529/0xc60 [ 413.268132][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 413.273896][ C1] ? read_tsc+0x9/0x20 [ 413.278003][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 413.283854][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 413.289023][ C1] handle_softirqs+0x286/0x870 [ 413.293814][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 413.298629][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 413.303952][ C1] __irq_exit_rcu+0xca/0x1f0 [ 413.308612][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 413.313849][ C1] irq_exit_rcu+0x9/0x30 [ 413.318139][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 413.323816][ C1] [ 413.326812][ C1] [ 413.329767][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.335761][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 413.341090][ C1] Code: e8 af de 4f 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 00 ed f5 10 e8 6b be bf 09 89 c3 83 f8 08 73 65 [ 413.360761][ C1] RSP: 0018:ffffc900039df630 EFLAGS: 00000202 [ 413.366939][ C1] RAX: ffffffff825e6cac RBX: ffffffff825e6c7c RCX: 0000000000000000 [ 413.374955][ C1] RDX: ffff88802f159e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 413.382992][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff825e6c7c [ 413.391024][ C1] R10: dffffc0000000000 R11: ffffed100365fe25 R12: ffff8880308df960 [ 413.399044][ C1] R13: ffff888021ec25a0 R14: ffff88801dec7000 R15: dffffc0000000000 [ 413.407054][ C1] ? kernfs_root+0x1c/0x230 [ 413.411569][ C1] ? kernfs_root+0x1c/0x230 [ 413.416082][ C1] ? kernfs_root+0x4c/0x230 [ 413.420619][ C1] kernfs_root+0x55/0x230 [ 413.424964][ C1] kernfs_parent+0x51/0x190 [ 413.429507][ C1] kernfs_iop_get_link+0x139/0x6c0 [ 413.434654][ C1] ? atime_needs_update+0x56b/0x6d0 [ 413.439888][ C1] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 413.445452][ C1] ? __pfx_kernfs_iop_get_link+0x10/0x10 [ 413.451130][ C1] pick_link+0x633/0xe80 [ 413.455398][ C1] step_into+0xc5d/0xf30 [ 413.459683][ C1] ? __pfx_step_into+0x10/0x10 [ 413.464460][ C1] ? lookup_fast+0x3ec/0x5b0 [ 413.469091][ C1] ? inode_permission+0x149/0x470 [ 413.474148][ C1] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 413.480011][ C1] link_path_walk+0x77b/0xea0 [ 413.484726][ C1] path_openat+0x28c/0x3830 [ 413.489301][ C1] ? arch_stack_walk+0xfc/0x150 [ 413.494195][ C1] ? __pfx_path_openat+0x10/0x10 [ 413.499192][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.505325][ C1] do_filp_open+0x1fa/0x410 [ 413.509898][ C1] ? __lock_acquire+0xab9/0xd20 [ 413.514799][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 413.519883][ C1] ? _raw_spin_unlock+0x28/0x50 [ 413.524762][ C1] ? alloc_fd+0x64c/0x6c0 [ 413.529160][ C1] do_sys_openat2+0x121/0x1c0 [ 413.533862][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.539104][ C1] ? ksys_read+0x1e1/0x250 [ 413.543556][ C1] ? __pfx_ksys_read+0x10/0x10 [ 413.548355][ C1] ? rcu_is_watching+0x15/0xb0 [ 413.553146][ C1] __x64_sys_openat+0x138/0x170 [ 413.558065][ C1] do_syscall_64+0xfa/0x3b0 [ 413.562596][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.568691][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 413.574873][ C1] ? clear_bhb_loop+0x60/0xb0 [ 413.579590][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.585499][ C1] RIP: 0033:0x7f3e6c28c407 [ 413.589982][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 413.609623][ C1] RSP: 002b:00007ffe1b208310 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 413.618095][ C1] RAX: ffffffffffffffda RBX: 00007f3e6c202740 RCX: 00007f3e6c28c407 [ 413.626111][ C1] RDX: 0000000000000000 RSI: 00007ffe1b2185c0 RDI: ffffffffffffff9c [ 413.634241][ C1] RBP: 00000000000100a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.642254][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe1b208440 [ 413.650271][ C1] R13: 00007f3e6c2026c8 R14: 0000000000000027 R15: 00007ffe1b218530 [ 413.658297][ C1] [ 413.661338][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.668646][ C1] CPU: 1 UID: 0 PID: 5497 Comm: dhcpcd Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 413.680290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.690366][ C1] Call Trace: [ 413.693659][ C1] [ 413.696521][ C1] dump_stack_lvl+0x99/0x250 [ 413.701139][ C1] ? __asan_memcpy+0x40/0x70 [ 413.705751][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.710976][ C1] ? __pfx__printk+0x10/0x10 [ 413.715596][ C1] panic+0x2db/0x790 [ 413.719523][ C1] ? __pfx_panic+0x10/0x10 [ 413.723985][ C1] __warn+0x31b/0x4b0 [ 413.727987][ C1] ? __rate_control_send_low+0x5df/0x820 [ 413.733635][ C1] ? __rate_control_send_low+0x5df/0x820 [ 413.739285][ C1] report_bug+0x2be/0x4f0 [ 413.743645][ C1] ? __rate_control_send_low+0x5df/0x820 [ 413.749294][ C1] ? __rate_control_send_low+0x5df/0x820 [ 413.754942][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 413.760589][ C1] handle_bug+0x84/0x160 [ 413.764845][ C1] exc_invalid_op+0x1a/0x50 [ 413.769366][ C1] asm_exc_invalid_op+0x1a/0x20 [ 413.774232][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 413.780508][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 413.800131][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 413.806255][ C1] RAX: c8b27dad912db000 RBX: 000000000000000c RCX: ffff88802f159e00 [ 413.814238][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 413.822234][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 413.830238][ C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888030f023e8 [ 413.838238][ C1] R13: 0000000000000000 R14: ffff888024720e40 R15: ffff8880247230d8 [ 413.846252][ C1] ? __rate_control_send_low+0x5de/0x820 [ 413.851922][ C1] rate_control_send_low+0x194/0x7a0 [ 413.857231][ C1] rate_control_get_rate+0x20b/0x5d0 [ 413.862546][ C1] ieee80211_beacon_get_finish+0x38c/0x6b0 [ 413.868411][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 413.874758][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 413.880159][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 413.885914][ C1] ieee80211_beacon_get_ap+0x1478/0x19e0 [ 413.891676][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 413.897694][ C1] ? __ieee80211_beacon_get+0x36/0x17b0 [ 413.903353][ C1] ? __ieee80211_beacon_get+0x36/0x17b0 [ 413.908921][ C1] __ieee80211_beacon_get+0x1179/0x17b0 [ 413.914494][ C1] ? __ieee80211_beacon_get+0x36/0x17b0 [ 413.920077][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 413.925653][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 413.931756][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 413.937346][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 413.944567][ C1] __iterate_interfaces+0x2a8/0x590 [ 413.949785][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 413.955871][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 413.963086][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 413.969179][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 413.976237][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 413.981457][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.987282][ C1] __hrtimer_run_queues+0x529/0xc60 [ 413.992528][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 413.998268][ C1] ? read_tsc+0x9/0x20 [ 414.002358][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 414.008196][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 414.013329][ C1] handle_softirqs+0x286/0x870 [ 414.018118][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 414.022914][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.028237][ C1] __irq_exit_rcu+0xca/0x1f0 [ 414.032849][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 414.038077][ C1] irq_exit_rcu+0x9/0x30 [ 414.042343][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.047998][ C1] [ 414.050941][ C1] [ 414.053882][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.059879][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 414.065193][ C1] Code: e8 af de 4f 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 00 ed f5 10 e8 6b be bf 09 89 c3 83 f8 08 73 65 [ 414.084826][ C1] RSP: 0018:ffffc900039df630 EFLAGS: 00000202 [ 414.090924][ C1] RAX: ffffffff825e6cac RBX: ffffffff825e6c7c RCX: 0000000000000000 [ 414.098919][ C1] RDX: ffff88802f159e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 414.106910][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff825e6c7c [ 414.114898][ C1] R10: dffffc0000000000 R11: ffffed100365fe25 R12: ffff8880308df960 [ 414.122882][ C1] R13: ffff888021ec25a0 R14: ffff88801dec7000 R15: dffffc0000000000 [ 414.130879][ C1] ? kernfs_root+0x1c/0x230 [ 414.135405][ C1] ? kernfs_root+0x1c/0x230 [ 414.139919][ C1] ? kernfs_root+0x4c/0x230 [ 414.144494][ C1] kernfs_root+0x55/0x230 [ 414.148858][ C1] kernfs_parent+0x51/0x190 [ 414.153374][ C1] kernfs_iop_get_link+0x139/0x6c0 [ 414.158520][ C1] ? atime_needs_update+0x56b/0x6d0 [ 414.163737][ C1] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 414.169301][ C1] ? __pfx_kernfs_iop_get_link+0x10/0x10 [ 414.174959][ C1] pick_link+0x633/0xe80 [ 414.179229][ C1] step_into+0xc5d/0xf30 [ 414.183502][ C1] ? __pfx_step_into+0x10/0x10 [ 414.188285][ C1] ? lookup_fast+0x3ec/0x5b0 [ 414.192897][ C1] ? inode_permission+0x149/0x470 [ 414.197935][ C1] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 414.203765][ C1] link_path_walk+0x77b/0xea0 [ 414.208488][ C1] path_openat+0x28c/0x3830 [ 414.213009][ C1] ? arch_stack_walk+0xfc/0x150 [ 414.217909][ C1] ? __pfx_path_openat+0x10/0x10 [ 414.222862][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.228963][ C1] do_filp_open+0x1fa/0x410 [ 414.233485][ C1] ? __lock_acquire+0xab9/0xd20 [ 414.238364][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 414.243440][ C1] ? _raw_spin_unlock+0x28/0x50 [ 414.248310][ C1] ? alloc_fd+0x64c/0x6c0 [ 414.252664][ C1] do_sys_openat2+0x121/0x1c0 [ 414.257360][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 414.262582][ C1] ? ksys_read+0x1e1/0x250 [ 414.267023][ C1] ? __pfx_ksys_read+0x10/0x10 [ 414.271810][ C1] ? rcu_is_watching+0x15/0xb0 [ 414.276600][ C1] __x64_sys_openat+0x138/0x170 [ 414.281474][ C1] do_syscall_64+0xfa/0x3b0 [ 414.286006][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.292098][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 414.298267][ C1] ? clear_bhb_loop+0x60/0xb0 [ 414.302964][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.308872][ C1] RIP: 0033:0x7f3e6c28c407 [ 414.313298][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 414.332924][ C1] RSP: 002b:00007ffe1b208310 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 414.341529][ C1] RAX: ffffffffffffffda RBX: 00007f3e6c202740 RCX: 00007f3e6c28c407 [ 414.349521][ C1] RDX: 0000000000000000 RSI: 00007ffe1b2185c0 RDI: ffffffffffffff9c [ 414.357509][ C1] RBP: 00000000000100a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.365586][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe1b208440 [ 414.373577][ C1] R13: 00007f3e6c2026c8 R14: 0000000000000027 R15: 00007ffe1b218530 [ 414.381585][ C1] [ 414.384962][ C1] Kernel Offset: disabled [ 414.389305][ C1] Rebooting in 86400 seconds..