last executing test programs: 1m7.849913873s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) socket(0x10, 0x80002, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000dc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x8, 0x8000004, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) 56.309939344s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) socket(0x10, 0x80002, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000dc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x8, 0x8000004, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) 45.333815797s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) socket(0x10, 0x80002, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000dc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x8, 0x8000004, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) 33.946603093s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) socket(0x10, 0x80002, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000dc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x8, 0x8000004, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) 26.205416585s ago: executing program 3 (id=1800): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1400003cc40001000000000000000000050000004b4fb195672d6221b6cffeab0d143e4f5d51398ea5f7ae9e6c263e53823ae1fee8d09987cdb4fe139e779d5e53c0b272d120735bbc4f"], 0x14}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3a242338fc7b811b3fcdd3dc7c478264dd9b7800ca42d82476160794718f3d84399a96c8197d77d3c07419f2d33ba1fe3f2a10fbed169d992615da0ac8c7c51d0ec5be5347a055e0c7f4ccd47db589f642dc7125d26d800cffeb1d8617c9d254b724dfca8aaab9deddfa27894cfbd090e8467423b828", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2517000000480006804400040067636d28616573290000000000000000000000000000000000000000000000001c0000000891cf24bbf0bb912cb1bdef7326e0a236ef46d304afd01e815628b9340004800900010073797a31000000000900010073797a31000000000900010073797a30000000000900010073797a3100000000"], 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x4090) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0005d70000fe0806000108000604"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000500)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x19, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@broadcast, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 0xe, 0x81, {@empty, {[0xff, 0x0, 0x0, 0x5a2c9a4db567792d, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0x10, 0x2, 0x60f, 0x4, 0x401, 'vxcan1\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x39}}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x1, 0x3}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'veth0_to_bridge\x00', {}, {0x1fe}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x22e}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async, rerun: 32) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) (async) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000005200000008000300215bfcf8e954da74c5f26d4fcb1583b299c252e9a1e189c1a3e8e2b74072b8b1f53bb998f3392a7073417da37d1c5f83a58fa13651dcee7e2316a5d75c6e65bccd46147bfce1c9ea5d3a93f9407e3455a82f80a8dbfe6dd635e229f483b7f4b54fe02a99a629dfb1d4c363acf054c3a20853c015a1aa5e8c1c06cdcc84677aee017853eac8e607c6c300524c4d11ca7007", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000800118004000200"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4004084) (async) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x6) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0xfffffffffffffcfe) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 32) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r12) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r12, 0x9) (async) socket$netlink(0x10, 0x3, 0x8000000004) 25.833474066s ago: executing program 3 (id=1804): setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x3815b000) (async) recvfrom$inet6(r0, &(0x7f00000000c0)=""/240, 0xf0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @remote, 0x7}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fff}, @in6={0xa, 0x4e24, 0x124, @rand_addr=' \x01\x00', 0x9}], 0x38) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x7, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4}, {}, {0xb, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x1}]}, @union={0x2, 0x8, 0x0, 0x5, 0x0, 0x7, [{0xa, 0x2, 0xcf}, {0x3, 0x5, 0x8}, {0xd, 0x5, 0xffffffff}, {0x8, 0x0, 0x4}, {0x9, 0x1, 0x7}, {0x3, 0x0, 0x3ff}, {0x9, 0x2, 0x3}, {0xd, 0x4, 0x2}]}, @datasec={0xe, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x9, 0x5}, {0x2, 0x37, 0x3}], "824ede"}]}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000340)=""/189, 0xef, 0xbd, 0x1, 0x8001, 0x10000, @value=r3}, 0x28) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x5, 0x3, {{0x20, 0x4, 0x2, 0x26, 0x80, 0x64, 0x0, 0xf7, 0x2f, 0x0, @loopback, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x5, [{@loopback, 0x6b7}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@local, 0x124}]}, @timestamp_addr={0x44, 0x44, 0xa9, 0x1, 0xb, [{@empty, 0x800}, {@empty, 0x40}, {@rand_addr=0x64010100, 0x1f}, {@multicast1, 0xfffffffd}, {@multicast2, 0x1}, {@broadcast, 0x80000001}, {@multicast2, 0x592c}, {@remote, 0x1}]}, @end]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, 0x0, 0x30, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r1, 0x23005000) (async) r9 = socket(0x51, 0xa, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000840)='yeah\x00', 0x5) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)=@deltaction={0x2b8, 0x31, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x442}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c5a}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4040800}, 0x80) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c80)={r3, &(0x7f0000000c00)="4933f4ffb8dfffe0f52b116388f0", &(0x7f0000000c40)=""/33}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ec0)={0x5, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1a, 0x4, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000d00)='GPL\x00', 0x4, 0xc8, &(0x7f0000000d40)=""/200, 0x41000, 0x8, '\x00', r7, @tracing=0x17, r4, 0x8, &(0x7f0000000e40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0xf, 0x8}, 0x10, r10, r3, 0x3, &(0x7f0000000fc0)=[r3, r11, r3], &(0x7f0000001000)=[{0x5, 0x8000, 0xe, 0xa}, {0x5, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x6, 0xc}], 0x10, 0x7ff}, 0x94) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001140)={0x1, &(0x7f0000001100)=[{0xff, 0x8, 0x27, 0x2}]}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x60, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x6e}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8ae}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xe38}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x40000) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x5c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}}, 0x4040004) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000024c0)={r11, &(0x7f0000001400)="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", &(0x7f0000002400)=""/151}, 0x20) (async) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r11, 0x80047210, &(0x7f0000002500)) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 25.578268621s ago: executing program 3 (id=1807): r0 = socket(0x11, 0x800000003, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="e504039ca987c4bfdc3b514ca85771abd0f491c6d10d9d2cf058428970b5a25b6ae9b1577ff34b7430ab1e8216b9528173e89fd8f5b94906abf6abcf92e4f440962bfef43c3095da5ba2b303a76ceed5101278c84be37e8411457d2019", @ANYRES64=0x0], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="f2fdb02abc611500ab48b94bc4248f060b63d85178c240ca3f1bb359486cce7d16ef84034ad28a4508559425666d622ac357c0f99325a643db275a46b42b7049173d7d1a030a18859d4c00872175e535e2020af0681354c3f56f77c8bee1cefa0b5616b53f7bbfd42342f78666dfc810ddd3ac85bc98b85a6cff10755cb92d37f31f7402b152a809bfe8133001a7a9707e8fcf75bf1ca18706ba2c10f5da6d4bdfe9dd19d234e078c7b55fd20d12e637380c5979744605b97777960e215c94aef72da3763d5d139a59f99dc7177ef6ab5d5c62e45d250491a23d37c24508ed49ff6f39e9cf0aa831944d1a", @ANYRES64=0x0], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000005aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000121400d488bd7000fcdbdf2508004f000a00000008004f0003000000080d4f000b000000080001000f00000008001507000000000800030002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r6, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x1) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r9, 0x7) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0x100) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) 25.486543374s ago: executing program 3 (id=1810): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xefff}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="ffaaaaaacff58a000000000086dd60000000b31e42d59f524f8054fc2edac70028060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="88c2ffff90780000080a00000025000000010000"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRESHEX=r0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 24.838063597s ago: executing program 3 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48cce32a5c1ac80c5b3f19c255d00000001000010400"/33, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) (async) r4 = socket(0x1d, 0x80000, 0x100) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet(0x2, 0x4, 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xa, 0x800, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008851}, 0x4008001) 18.396492578s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) socket(0x10, 0x80002, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000dc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x8, 0x8000004, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) 11.767528308s ago: executing program 3 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48cce32a5c1ac80c5b3f19c255d00000001000010400"/33, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) (async) r4 = socket(0x1d, 0x80000, 0x100) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet(0x2, 0x4, 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xa, 0x800, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008851}, 0x4008001) 4.65999345s ago: executing program 4 (id=1985): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) unshare(0x68040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0xfffff000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44044) r2 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0xfffffffffffffffe, 0x40007, 0x5, 0x16b7, 0x2835112a]}, &(0x7f0000000240)=0x78) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x5b, 0xdc, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r4, 0x31, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000007c0)={'veth1_to_bridge\x00', @random="9d3d851e92b0"}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0xfffffffc}}, 0x40000000, 0x0, 0x0, 0x0, 0x2c}, 0x9c) 4.154374789s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) socket(0x10, 0x80002, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000dc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x8, 0x8000004, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) 2.390097705s ago: executing program 2 (id=1989): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x53, 0x200000d, 0x9}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@broadcast, @empty, 0x1, 0x2, [@local, @local]}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 2.389539106s ago: executing program 4 (id=1990): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x80, 0x10, 0x800, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x8}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x2}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x1}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.114111148s ago: executing program 4 (id=1991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500007800000000402f"], 0x0) (async) accept4(r3, 0x0, &(0x7f0000000040), 0x0) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x52, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000084}, 0x48000) 2.022452952s ago: executing program 2 (id=1992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00j\x00\a'], 0x20}}, 0x0) unshare(0x28000600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22481, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00j\x00\a'], 0x20}}, 0x0) (async) unshare(0x28000600) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socket(0x10, 0x800000000080002, 0x6) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) (async) 1.972416752s ago: executing program 0 (id=1993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x0, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff95) 1.919682692s ago: executing program 4 (id=1994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0800080007000800000014000000466f006500660000401190780a010102ac14141a44041c604e204e22004d827804000000020000000800000000200000e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"], 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0800080007000800000014000000466f006500660000401190780a010102ac14141a44041c604e204e22004d827804000000020000000800000000200000e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"], 0x73) (async) 1.799552075s ago: executing program 0 (id=1995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000240), 0x4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) (async) socket(0x2a, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000240), 0x4) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) (async) 843.950959ms ago: executing program 2 (id=1996): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r1, r2, 0x0, 0x7feff000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x360, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0x4}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x2], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) 746.176163ms ago: executing program 0 (id=1997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008204d", 0x0, 0xdfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 614.467734ms ago: executing program 2 (id=1998): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052abd7000fddbdf25022000cb", @ANYRES32=r4, @ANYBLOB="080001007f000001080002007f00000108000100ac141434080044000a010101080009003100000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$PROG_LOAD(0x5, 0x0, 0x0) 424.553581ms ago: executing program 0 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x71}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 318.99151ms ago: executing program 4 (id=2000): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000100)=0x7ff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) bind$can_raw(r2, &(0x7f0000000280), 0x10) bind$can_raw(r2, &(0x7f0000001d00)={0x1d, r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x4, 0x1, 0x9c4bf3fe3c3c2a08, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x46040}, 0x80) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000440)={r2, 0x2, 0x8, 0x4}) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x30) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000001d40)=@delchain={0x1d10, 0x65, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x3}, {0xffe0, 0x2}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x2a, 0x22}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_CHAIN={0x8, 0xb, 0x87ca}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0xffffff00, 0xff, 0xff000000]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c80, 0x2, [@TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x9, 0x0, 0x10, 0x9, 0x9, 0x3, 0x0, 0x7, 0x10001, 0x1, 0x5, 0x40, 0x3, 0x351, 0x1, 0x8, 0xe6c, 0x7, 0x1, 0xde6, 0x1, 0x6, 0x1ff, 0x2, 0x4, 0x3, 0x80000001, 0x4, 0x9, 0xfffffff9, 0x2008, 0x7, 0xc, 0xeb40000, 0x7, 0xdc6, 0x3, 0x2, 0x8, 0x1000, 0x81, 0xfffffffb, 0xf0c, 0x3fdb, 0x1, 0x101, 0x7fffffff, 0x3, 0x1, 0x2, 0x0, 0xffffff74, 0xc, 0x8001, 0x0, 0x6, 0x1, 0x9, 0xb00, 0xfffffffa, 0xa465, 0x7, 0x8, 0x40000000, 0x1, 0x42bfc8dc, 0x3, 0x4, 0x6, 0x7fffffff, 0x8, 0x8000, 0x7, 0x6, 0x7, 0xb, 0x800, 0xaf30, 0x3, 0x7, 0x3, 0x5, 0x0, 0x6, 0x2, 0x9, 0x2, 0x3, 0x400, 0x10, 0x2, 0x5, 0xfffffffc, 0x3ff, 0x7, 0x9, 0x1, 0xa8b, 0x9, 0x12, 0x0, 0x5e1, 0x4, 0x7, 0x5, 0x2, 0xb9, 0x9, 0x6, 0xea4a, 0x7f, 0xe0bd, 0x10000, 0x3, 0xe8b2, 0x9, 0x1000, 0x7fff, 0x5, 0x9, 0x9, 0x0, 0xf, 0x2, 0x0, 0x972, 0x8, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0x8, 0x6, 0x5, 0x6, 0x3, 0x9, 0x45a, 0x0, 0x8, 0x1, 0x53, 0x0, 0x7fffffff, 0x8, 0x49, 0xb52f, 0x3, 0xff, 0x964, 0xfffffc00, 0x10000, 0x4d9, 0xffff, 0x975c, 0x7fffffff, 0xff3, 0x2, 0x1f51, 0x5, 0x0, 0x78deb19a, 0x2, 0x101, 0x4665, 0xffff, 0x562, 0xfffffff9, 0x4080000, 0x7, 0x6, 0x2, 0x101, 0x3, 0x8, 0x37e8, 0x4, 0x5, 0x9, 0x749, 0xd, 0x2, 0x7f, 0x4, 0x205df06, 0x3, 0x5, 0x5, 0x800, 0x100, 0x7, 0x40, 0x3ff, 0x7fff, 0x0, 0x1ff, 0xa, 0x10001, 0x80000000, 0xfff, 0x3c7d5ff6, 0x10000, 0x9, 0x5, 0x8, 0x0, 0xffff, 0x1738b90d, 0x7, 0x1, 0xb, 0x2, 0x4, 0xff, 0x10, 0x5, 0x0, 0x5, 0x5441, 0x3, 0x1, 0x6, 0x401, 0xd, 0x7fffffff, 0x10000, 0x7, 0x5e3, 0x0, 0xe6, 0x228e4f34, 0x4, 0x78823564, 0x3, 0x2, 0x3ff, 0x5, 0x1, 0x9, 0x3, 0x80000000, 0x34, 0x7, 0xb2d, 0x65, 0x6, 0x0, 0xffff, 0x8, 0x8, 0xfffffffe, 0x2, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0xcea, 0x6, 0x7, 0xfffffffc, 0x6, 0x0, 0x7, 0xd116, 0xb, 0x3, 0x1e3, 0x5a3c, 0x1, 0xff, 0x6cc, 0xfffeffff, 0x0, 0x7f, 0x8, 0x6, 0x5, 0x7ff, 0x6, 0x8, 0xfffffffa, 0x0, 0x3, 0x6, 0x7, 0x4, 0x85e, 0x7, 0x2, 0xea, 0x10001, 0x7, 0x9000000, 0x401, 0x0, 0x36, 0x3, 0x2, 0x3ff, 0xff, 0x7, 0x0, 0x0, 0x3, 0x2977e408, 0x31ae, 0x5, 0xa575, 0x2, 0x42, 0x5, 0x1, 0x86c0, 0xc1, 0x7, 0x5, 0x10000, 0xc, 0x100, 0x3, 0x4, 0x10000000, 0x3, 0x1, 0x7fff, 0x4, 0x0, 0xffff, 0xffffff81, 0x3e, 0x6, 0xe, 0x800, 0x9, 0x7fff, 0xf09c, 0x40, 0x1000, 0x1, 0x1, 0x3ff, 0x2, 0x5db, 0xb31, 0x1000, 0x20000, 0x4, 0x800, 0x400, 0x6, 0x100, 0x0, 0x2, 0x1, 0x8a, 0x8, 0x4dd, 0x9, 0x45e, 0xc498, 0x8, 0x77c, 0x7fffffff, 0x7000, 0x3, 0x200, 0x7e9, 0x0, 0x2, 0x2, 0x5, 0xd, 0x4, 0xde11, 0x7, 0x4, 0xffffffff, 0x9, 0x7, 0x9, 0x1, 0x1000, 0x0, 0x6, 0x6, 0x2, 0x2, 0xfffffffe, 0x1, 0x0, 0x4, 0x3, 0x9, 0x10000, 0x2, 0x7, 0x2, 0xa, 0xffffffff, 0x80, 0x3, 0xffff, 0x6, 0x5, 0x80, 0x6449, 0xe, 0x8001, 0x4, 0x2, 0x3, 0x3, 0x8, 0x0, 0x0, 0x4, 0xd973, 0xdd97, 0x7af6, 0x4, 0x0, 0x6a8, 0x40, 0x401, 0x3, 0xfffffff1, 0x4, 0xffff3ce4, 0x2, 0x8, 0x80, 0x8, 0xf9, 0x3, 0x7, 0x8, 0x9, 0x6, 0x3, 0xeab, 0xfffffd37, 0xc, 0x3, 0x10, 0x6, 0x7, 0x7, 0x1ff, 0x6, 0x6, 0x7f, 0x0, 0x76b, 0x2, 0xfffff1e7, 0x3, 0x4, 0x9, 0x400, 0xd, 0x4, 0xff, 0x7, 0xd, 0xd, 0x0, 0x0, 0xff, 0x3f9a, 0x0, 0x40, 0x1, 0x4, 0x5, 0x1, 0x1000, 0xfffff800, 0x2, 0x2, 0x7, 0x2, 0xfffffeff, 0x9, 0x4, 0x5, 0x4, 0xff, 0xf, 0x1ff, 0x6, 0x1c, 0x9, 0xc171, 0x400, 0x2, 0x3ff, 0x5a16, 0xe838, 0x57, 0x2, 0x5, 0x18fb83c9, 0x0, 0x80, 0x80000001, 0x10, 0xff, 0x8, 0x21cd, 0x101, 0x63]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x5, 0x40, 0xbb}]}}, @TCA_BPF_ACT={0xec, 0x1, [@m_skbedit={0x78, 0x1f, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf, 0xfffffffa, 0x8, 0x1551, 0xe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x70, 0x1e, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x40, 0x6, "eb2c114eb392a2d9808242725df301879534c096f5ea3d813201838e69221c0323a869b157bc137ef60083cf2077638c27be9ab55d2975a1b61aa14d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BPF_ACT={0x1334, 0x1, [@m_pedit={0xf58, 0x5, 0x0, 0x0, {{0xa}, {0xed8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9b84, 0x7ff, 0x3, 0x4, 0x3}, 0x6, 0x0, [{0xbb, 0x1, 0x1, 0x3ff, 0x80000000, 0x7}, {0x4, 0xffffffff, 0x23, 0x9, 0x7, 0x6}]}, [{0x7fff, 0x425, 0x401, 0xc, 0x9, 0x6}, {0xda, 0x400, 0xe537, 0xd, 0x3, 0x3}, {0x0, 0x1, 0x1, 0x576, 0xfffffff3, 0xefc}, {0x3, 0x9, 0x0, 0x8, 0x5, 0x5}, {0x40, 0x6, 0x1, 0x5, 0x3, 0x5}, {0x4, 0xfffffffb, 0x6, 0x0, 0x5458f510, 0x2}, {0xb2bd, 0x3, 0xfffffff8, 0x328, 0x24, 0x3823f5b6}, {0x88, 0x2af17be3, 0x3, 0x7, 0x6853f010, 0xfffffffc}, {0x7, 0x9, 0x3, 0x2, 0x2, 0x100}, {0x5, 0x0, 0x10001, 0xfffffff8, 0x8000, 0xfffffffb}, {0x0, 0x7, 0x1, 0x3, 0x5, 0xf824}, {0x4, 0xfffffff8, 0x8, 0x0, 0x7ff, 0x5}, {0x81, 0xca4, 0x6, 0x0, 0x40, 0x3}, {0x0, 0x1, 0x1, 0xa790, 0x6, 0xa}, {0x4, 0x9, 0x10, 0x7d2, 0xa6f6, 0x6aa1}, {0xffffff80, 0xfffff800, 0x0, 0x8001, 0xb, 0xffff}, {0x7bc, 0x8, 0x5, 0xfffff887, 0x10001, 0x4}, {0x5, 0x6, 0x3f77aabc, 0x1000000, 0x93}, {0x5, 0x7, 0xf, 0x3, 0x5a8, 0xcc75}, {0xfffffffe, 0x1b72, 0x200, 0x200, 0x0, 0x425}, {0x7, 0xff, 0x9, 0x9, 0x7f, 0x3}, {0x40, 0x4, 0xfffffff7, 0x18, 0x8, 0x10}, {0x7, 0x0, 0x8, 0x0, 0x2, 0x10000}, {0x9, 0x7ff, 0x2, 0x7, 0x3, 0x80000001}, {0x5, 0xff, 0x3, 0x9, 0xffffffff, 0x3}, {0x7363, 0x8001, 0x9, 0x80000000, 0x1, 0x4}, {0xfffffffa, 0x0, 0x3, 0xffff, 0x0, 0x9}, {0x4, 0x10000, 0x36b, 0x7fff, 0x1, 0x1000}, {0x6, 0x21a, 0xfffffffc, 0x81, 0x9, 0x4}, {0x10001, 0xffffff04, 0x8db9, 0x9, 0x94, 0x7}, {0x8, 0x200, 0x1, 0x6, 0xc0676307, 0xeb}, {0x2, 0x495, 0x5, 0x2, 0x10000, 0x5}, {0xf9e, 0xffff, 0xf, 0xffffffff, 0x8, 0xfa37}, {0x3, 0x7f, 0x2, 0x3, 0x9, 0x1b}, {0x4, 0xc48, 0x3, 0x3, 0x8}, {0x8, 0x7fff, 0x4, 0x5, 0x400, 0xbe2}, {0x2a4, 0xc, 0x7, 0xa, 0x0, 0x7}, {0x3, 0x8, 0x3, 0x3, 0xb84, 0x2}, {0x4, 0x9, 0x0, 0x1, 0x0, 0x3}, {0xff, 0x218, 0x8, 0xf3, 0x2, 0x8}, {0x564, 0x2, 0x3, 0x5, 0x9, 0x9}, {0x1, 0xc, 0x501, 0x4, 0x6, 0xffff}, {0x1, 0x2b18, 0x3, 0xfffffff9, 0x3, 0x6}, {0x8, 0x3, 0x7, 0x2, 0xc, 0x6}, {0xf, 0x1925, 0x5, 0x2, 0xffffffff, 0x6}, {0x2, 0x8000, 0xf0000000, 0x40, 0x200, 0xb10292a}, {0x1, 0xd, 0x1, 0x0, 0x1, 0x60000000}, {0x1, 0x800, 0x3fd9, 0xfffffff6, 0x2, 0x7}, {0x7, 0x6e91, 0x7, 0x1000, 0x7f, 0x2}, {0x21ba, 0x10000, 0x1, 0x5, 0x8, 0x7fffffff}, {0x101, 0x8, 0x665, 0x7, 0x7, 0x65}, {0x3, 0xfff, 0x9, 0xc0, 0x7, 0x7}, {0x5, 0x82ba, 0xfffffffb, 0x3, 0x1, 0x401}, {0x5, 0x3, 0x6, 0xb, 0x2, 0x890}, {0x4, 0xffff, 0xc1d, 0x582, 0x60a, 0x6}, {0x1, 0xffff, 0x3, 0x4, 0xffff0001, 0x5}, {0xf, 0x2, 0x10, 0xfffffffb, 0x40, 0xf}, {0x3, 0x5, 0x0, 0x1, 0x7, 0x73e}, {0xa507, 0x7, 0xffffff81, 0xf0, 0x2, 0x8}, {0x7, 0x5, 0x1, 0x80, 0xd7, 0x5}, {0x2, 0x80000000, 0x7, 0x6, 0x3, 0x1000}, {0x2, 0x8, 0x8, 0x9, 0x4, 0x800}, {0x100, 0xa0, 0x9, 0x9, 0x6, 0x40}, {0x1, 0x7, 0x100, 0x5, 0x0, 0x2}, {0xffff, 0xc8d, 0x7fffffff, 0x2e, 0x7, 0x6}, {0x7, 0x70d, 0x0, 0x80000000, 0x3, 0x2}, {0x3, 0x10, 0x6, 0xc, 0x2, 0xf104}, {0x6, 0x7, 0x5, 0x200, 0xffffdf74, 0x4}, {0x2, 0x2, 0x48e9, 0x6, 0x100, 0xfffffff8}, {0x3ff, 0x7, 0x2, 0x10000, 0x14629443, 0x1}, {0x7, 0xae46, 0x6, 0x5, 0x7f, 0x7}, {0xb, 0x62c, 0xffffffff, 0x2, 0xf2, 0xfffffffd}, {0x3, 0x0, 0x1000, 0xbcd9, 0x7, 0xc}, {0x9, 0x56e5, 0x4, 0x6, 0x61, 0x3}, {0x10001, 0xffffffff, 0x10000, 0xc95, 0xbd, 0x9}, {0x699, 0x5, 0x0, 0x4, 0x8, 0x1}, {0x9, 0xfffffff9, 0x8e95, 0xff, 0xb, 0x7}, {0x8001, 0x6, 0x8001, 0x8, 0x1, 0xf}, {0x3a, 0x6, 0x69f1, 0x8363, 0xfffff35d}, {0x6, 0x8, 0x8, 0x4, 0x5, 0x1cc4}, {0x1fc0000, 0x4, 0xffffffff, 0x4, 0x5, 0x7fffffff}, {0x4, 0x6, 0x0, 0x81, 0xffffffff, 0x2}, {0x400, 0x9, 0x3, 0x6, 0x5, 0xff}, {0x3, 0x69, 0xe, 0x80000000, 0x7, 0x3}, {0x3, 0xfffffffe, 0xffff0001, 0x1, 0x8, 0x4}, {0x5, 0xfffffffd, 0x0, 0xea3, 0x6, 0xc}, {0x53, 0x0, 0x1, 0x5, 0x6, 0x6}, {0x9, 0x9, 0x9, 0x6c16, 0x80000001, 0x1}, {0xc, 0x0, 0x7, 0x5, 0x1000, 0x8}, {0x4, 0x0, 0x7, 0x5, 0x0, 0x6f8}, {0x9, 0x1, 0x0, 0xeab, 0x8000, 0x1000}, {0x5, 0xf531, 0x8, 0x6, 0x6, 0x2}, {0x4db, 0x1, 0x100, 0x2, 0x8, 0x5}, {0x2, 0x7f, 0x2, 0x2584, 0x4, 0xf96}, {0x7bb, 0x8, 0x3, 0x8, 0x1a, 0x3}, {0xbe, 0xf, 0xe9, 0x8000, 0xffff, 0x7}, {0x7, 0x9, 0x5, 0xffff2e0e, 0xffffffff, 0x1}, {0xaef4, 0x3, 0x4, 0xb, 0x1, 0xffff0001}, {0x2, 0x0, 0x2, 0x918, 0x2, 0xc7d}, {0x3, 0x847, 0x5, 0x7, 0xfff, 0x20000}, {0x3, 0xffff0000, 0x58a, 0x40, 0x5, 0xfffffff9}, {0x3, 0x1, 0xff, 0x6, 0xde1f, 0x7}, {0x5, 0xffff5880, 0x4, 0x7, 0x7fff}, {0x6, 0x85f, 0x8, 0x6}, {0xb, 0x6, 0x5, 0x7, 0x4, 0x3}, {0x3ff, 0x0, 0xfffffffd, 0xbc, 0x2}, {0x8, 0x7f, 0x4, 0x7fff, 0xfffffffc, 0x50000}, {0x7f, 0x5, 0x1, 0xfffff2f6, 0x0, 0x40}, {0x9, 0xfe0, 0x52b, 0x76c, 0x2, 0x3}, {0x0, 0x5, 0x3, 0x8, 0x3, 0x5}, {0x2, 0xa41e, 0x0, 0x3, 0x4, 0x401}, {0x1, 0x7f, 0xee, 0x1, 0xffff, 0x80}, {0x4, 0x9, 0x7, 0xdc1, 0x81, 0x4}, {0xacf, 0x17, 0x2, 0xa863, 0xc, 0xc}, {0x9, 0xa, 0x0, 0x4b93, 0x1, 0x9}, {0x20, 0x53, 0x5, 0x5c, 0x6, 0x7}, {0x7da, 0x0, 0x10, 0x6, 0x4, 0x7fffffff}, {0x40, 0x80000001, 0x9, 0x9, 0x7fff, 0x4}, {0x727, 0x5, 0x1000, 0x1, 0xccd, 0x4}, {0x7f, 0x965f, 0x4, 0x94, 0x216, 0x1000}, {0x6, 0x6, 0x2, 0x9, 0x2000000, 0x5}, {0x10001, 0x0, 0x81, 0xc, 0x2, 0xfffffffe}, {0x2, 0x9, 0xc, 0x3, 0xfffffe00, 0x9}, {0x400, 0x5, 0x9, 0x0, 0x2, 0x3}, {0x568, 0x8, 0x4, 0x4, 0x1, 0x1}, {0x4, 0xfffffff7, 0xfffffffc, 0x1, 0x3, 0x4}, {0x1, 0xdd4, 0x3, 0x0, 0x6}, {0x6, 0x7, 0x0, 0x6, 0x9, 0x6}], [{0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {}, {0x2, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x2}, {}, {0x4}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x4}, {}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1e46195c0d7143a5, 0x1}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {}, {}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x55, 0x6, "cb985387bfe926e6dac5bd341fcb9e5d766de28499264d54ded40c95dcb8fc916fbb9453b5eca4a6cc641c5b3aceeef22d922c120e34169ec24b3cd404a27b5d232f341e03ece480bd8dbf82fa3ff28e38"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xcc, 0xd, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x8, 0x7fffffff, 0x4}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x2, 0x2d, 0x6f}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x1, 0x5, 0x4d}, 0x76}}]}, {0x4c, 0x6, "e5418ad6b328adcb2eaf34994ca7d8e0dab9655c90bba5f8a6ad39f7cd97300b1641c75c57853b666c68bd22b512abf7dafb0a0dc8cf5ac90cda3417ceb40df3202b3788e34a8c1e"}, {0xc, 0x7, {0x775417053e7a2148}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x10c, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x16a2}]}, {0xb5, 0x6, "4536b9f53e83653afcfdb9e23a2326b8c20c6e7c6e5ccc52c0456b65a1529279344b8854a2c39bf9c18c1bf6a687590320f5f312d5851492fbccad5c0a21d05c6de4cfabcb47b4a36a6b39b151ff295d3d41a05e6823ed8eec9804e9327c3ff6c2792408a9828341b17eada2696b057d3c90366b68531bcd67cbc1d614ffc831bf163f8effd498aebf3e456cd01b0f51817d02e57c8c85c3c683236192fc1c1fd52af54a89c5db57cdf9768ce6215d8613"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xec, 0x17, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8, 0x7, 0x806, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, 'wpan1\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x19, 0x1, 0x6, 0x1}}]}, {0x7b, 0x6, "3711efa076b4ff4ceaa5625353273ade1462819aa5f6c582dfcae039ea0e06c670a2bbdbeb6995be6c4a1cba802efb84158bd7c2671fadfb44a77a2d70e6e0ad30fb6698350bf97ec4b670f832d33cf51a2748dda882e8100ebf57f9be47a0ec1885326735aab413190150dc58312a9248ba34f85fd0ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_skbedit={0x114, 0x6, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc38a}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xce, 0x6, "3b6a60d796663859d3ccaa54973ec86af8b64560426411b6fb2308457eb72543a552196bff091217c877756995535c57e67645ed085f12cb119dbde0790fc6d58bce198a64452cc62e37dfd5af8ca5fc369a3e981e900f17f2df4d8a2baa9eb895cda4b9e5250d2928fd9d5850674c1d2ecdc0008dbddcc6b5c489a44929bcf3b42bb280d8c7d766eb45a8c109ac23148b058c09e16b2d3bc96912e7a0bcef9ea1e7fbb33d773e927cb7994d80d7a6cdfc4903477969984fa93a633473c31d083d68307ac16e752f84da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x6, 0xf, 0x3}]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0xb}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}]}, 0x1d10}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "46a054a955cde96243b206bcfdb366c5"}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x400c091) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 316.172807ms ago: executing program 2 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001009000002020000800100000000679f41bc0000000000020000"], 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 211.621509ms ago: executing program 2 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a03, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtclass={0x24, 0x28, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x11, 0x7}, {0xf, 0xd}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84044}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0xffffff3d}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 192.087161ms ago: executing program 0 (id=2003): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x80) splice(r0, &(0x7f0000000000)=0xbc58, r0, &(0x7f0000000040)=0x6, 0xe118, 0x2) 10.24979ms ago: executing program 0 (id=2004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d5063300a1000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x111040, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000140)={'wg0\x00', @multicast}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r8, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x38}, 0x1, 0x0, 0x0, 0x94}, 0x90) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="f108e100", @ANYRES16=r1, @ANYRES8=r0], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d5063300a1000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x111040, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000140)={'wg0\x00', @multicast}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r8, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x38}, 0x1, 0x0, 0x0, 0x94}, 0x90) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="f108e100", @ANYRES16=r1, @ANYRES8=r0], 0x38}}, 0x0) (async) 0s ago: executing program 4 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) (async, rerun: 32) sendto$inet6(r4, &(0x7f0000000280)="5417072ecbaf9f09f7fb679251d452152d83286da0147ee60145bda6b1a2508ab042fc81dd5ae39f4c80d849e878cde2d92e5b2d24dc4933d441384f28414ec7f418e7f1b3c51e7ee0590fe41a418193bc0a410e533d50907c095ecf7c227b3ba4", 0x61, 0x80c0, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @mcast1, 0x9}, 0x1c) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0) (async) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 32) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x10000001) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): expected cc 0x0c23 length: 249 > 4 [ 191.642068][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.726264][ T8936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.742746][ T8936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.753313][ T8936] bond0 (unregistering): Released all slaves [ 191.898928][T10098] lo speed is unknown, defaulting to 1000 [ 192.115993][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 192.213964][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 192.364283][T10111] bond2: entered promiscuous mode [ 192.401795][T10111] bond2: entered allmulticast mode [ 192.420234][T10111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.513139][T10124] rdma_rxe: rxe_newlink: failed to add lo [ 193.385964][ T8936] hsr_slave_0: left promiscuous mode [ 193.399420][ T8936] hsr_slave_1: left promiscuous mode [ 193.413677][ T8936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.432058][ T8936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.453314][ T8936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.468099][ T8936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.509447][ T8936] veth1_macvtap: left promiscuous mode [ 193.515079][T10161] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1074'. [ 193.525090][ T8936] veth0_macvtap: left promiscuous mode [ 193.531241][ T8936] veth1_vlan: left promiscuous mode [ 193.536608][ T8936] veth0_vlan: left promiscuous mode [ 193.678707][ T5156] Bluetooth: hci1: command tx timeout [ 194.090909][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165985][T10178] netlink: 'syz.3.1080': attribute type 17 has an invalid length. [ 194.181945][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 194.209821][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1080'. [ 194.222055][ T8936] team0 (unregistering): Port device team_slave_1 removed [ 194.258467][ T8936] team0 (unregistering): Port device team_slave_0 removed [ 194.640815][T10163] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 194.861870][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1081'. [ 194.960603][T10198] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 195.004693][T10198] netlink: 'syz.2.1083': attribute type 3 has an invalid length. [ 195.084912][T10198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1083'. [ 195.095366][T10098] chnl_net:caif_netlink_parms(): no params data found [ 195.251615][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 195.286177][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 195.759561][ T5156] Bluetooth: hci1: command tx timeout [ 195.906049][T10251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.960569][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 195.978537][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'. [ 196.052309][ T10] IPVS: starting estimator thread 0... [ 196.148060][T10262] IPVS: using max 29 ests per chain, 69600 per kthread [ 196.225242][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.253097][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.274372][T10098] bridge_slave_0: entered allmulticast mode [ 196.298077][T10098] bridge_slave_0: entered promiscuous mode [ 196.306510][T10254] tipc: Enabling of bearer rejected, failed to enable media [ 196.370958][T10265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.403888][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.429709][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.449568][T10098] bridge_slave_1: entered allmulticast mode [ 196.465344][T10098] bridge_slave_1: entered promiscuous mode [ 196.576543][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.626326][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.759681][T10098] team0: Port device team_slave_0 added [ 196.780823][T10098] team0: Port device team_slave_1 added [ 196.839205][T10293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.895786][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.928089][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.002434][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.061959][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.119173][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.224814][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.427479][T10318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.554475][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1116'. [ 197.574500][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1116'. [ 197.574807][T10098] hsr_slave_0: entered promiscuous mode [ 197.645848][T10098] hsr_slave_1: entered promiscuous mode [ 197.653475][T10098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.680828][T10098] Cannot create hsr debugfs directory [ 197.756142][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1117'. [ 197.794808][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 197.839259][ T5156] Bluetooth: hci1: command tx timeout [ 197.855210][T10349] netlink: 'syz.2.1118': attribute type 5 has an invalid length. [ 198.787564][T10394] xt_hashlimit: size too large, truncated to 1048576 [ 198.933119][T10399] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 199.455564][T10098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.509986][T10098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.546981][T10098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.565930][T10098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.711139][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.744140][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.776666][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.783877][ T8931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.851560][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.858792][ T8931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.919914][ T5156] Bluetooth: hci1: command tx timeout [ 200.209490][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805616d400: rx timeout, send abort [ 200.219019][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055595000: rx timeout, send abort [ 200.228889][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055595000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.243548][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805616d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.258608][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055596c00: rx timeout, send abort [ 200.268848][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055596c00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 200.453372][T10461] syzkaller0: entered promiscuous mode [ 200.459622][T10461] syzkaller0: entered allmulticast mode [ 200.553373][T10470] vxcan5: entered allmulticast mode [ 200.602287][T10461] dvmrp0: entered allmulticast mode [ 200.737776][T10480] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 202.422385][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.433478][T10479] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.451366][T10479] bridge0: entered allmulticast mode [ 202.606614][T10515] netlink: 'syz.4.1149': attribute type 21 has an invalid length. [ 202.640937][T10098] veth0_vlan: entered promiscuous mode [ 202.676462][T10098] veth1_vlan: entered promiscuous mode [ 202.744677][T10098] veth0_macvtap: entered promiscuous mode [ 202.755207][T10098] veth1_macvtap: entered promiscuous mode [ 202.817308][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.843523][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.887291][T10098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.909722][T10098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.948587][T10098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.957370][T10098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.045023][T10540] raw_sendmsg: syz.0.1157 forgot to set AF_INET. Fix it! [ 203.185145][ T8936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.219342][ T8936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.340365][T10554] netlink: 'syz.0.1161': attribute type 4 has an invalid length. [ 203.350606][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.408905][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.418445][T10559] __nla_validate_parse: 4 callbacks suppressed [ 203.418462][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 203.511639][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1163'. [ 203.566347][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 203.632390][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 203.964440][T10589] netlink: 'syz.0.1169': attribute type 23 has an invalid length. [ 204.017167][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 204.038976][T10589] netlink: 'syz.0.1169': attribute type 21 has an invalid length. [ 204.046914][T10589] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1169'. [ 204.062000][T10594] netlink: 'syz.4.1171': attribute type 10 has an invalid length. [ 204.080435][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1171'. [ 204.121248][T10589] netlink: 'syz.0.1169': attribute type 23 has an invalid length. [ 204.140370][T10603] netlink: 'syz.2.1172': attribute type 21 has an invalid length. [ 204.153657][T10594] team0: Port device geneve0 added [ 204.211192][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'. [ 204.405169][T10612] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.421592][T10612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.506346][T10614] bridge: RTM_NEWNEIGH with invalid ether address [ 204.516521][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 204.644974][ T2965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.773273][ T2965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.962319][ T2965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.105859][ T2965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.351983][ T2965] bridge_slave_1: left allmulticast mode [ 205.357684][ T2965] bridge_slave_1: left promiscuous mode [ 205.367477][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.386031][ T2965] bridge_slave_0: left allmulticast mode [ 205.394390][ T2965] bridge_slave_0: left promiscuous mode [ 205.400814][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.946823][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.963069][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.976762][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.008571][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.029522][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.080406][ T2965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.091336][T10662] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1184'. [ 206.105516][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.115669][ T2965] bond0 (unregistering): Released all slaves [ 206.262235][T10652] team0: Port device geneve0 removed [ 206.356532][T10663] unknown channel width for channel at 909000KHz? [ 206.376557][T10663] unknown channel width for channel at 909000KHz? [ 206.475774][T10668] bond4: entered promiscuous mode [ 206.484912][T10668] bond4: entered allmulticast mode [ 206.494290][T10668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.503119][T10646] lo speed is unknown, defaulting to 1000 [ 206.534970][T10675] ip6tnl1: entered promiscuous mode [ 206.542810][T10675] ip6tnl1: entered allmulticast mode [ 206.721866][T10657] lo speed is unknown, defaulting to 1000 [ 207.195436][T10702] batadv_slave_1: entered promiscuous mode [ 207.213261][T10702] macsec1: entered promiscuous mode [ 207.229611][T10702] macsec1: entered allmulticast mode [ 207.235046][T10702] batadv_slave_1: entered allmulticast mode [ 207.383000][ C1] Unknown status report in ack skb [ 208.079915][ T5846] Bluetooth: hci1: command tx timeout [ 208.407393][ T2965] hsr_slave_0: left promiscuous mode [ 208.415627][ T2965] hsr_slave_1: left promiscuous mode [ 208.425649][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.435313][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.444250][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.452861][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.476915][ T2965] veth1_macvtap: left promiscuous mode [ 208.483059][ T2965] veth0_macvtap: left promiscuous mode [ 208.490885][ T2965] veth1_vlan: left promiscuous mode [ 208.496215][ T2965] veth0_vlan: left promiscuous mode [ 208.914571][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 208.959707][ T2965] team0 (unregistering): Port device team_slave_0 removed [ 210.158380][ T5860] Bluetooth: hci1: command tx timeout [ 210.213667][T10657] chnl_net:caif_netlink_parms(): no params data found [ 210.737418][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.751428][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.766453][T10816] __nla_validate_parse: 4 callbacks suppressed [ 210.766469][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 210.800070][T10657] bridge_slave_0: entered allmulticast mode [ 210.809269][T10657] bridge_slave_0: entered promiscuous mode [ 210.837222][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.860706][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.902606][T10657] bridge_slave_1: entered allmulticast mode [ 210.913718][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 210.923707][T10657] bridge_slave_1: entered promiscuous mode [ 211.124688][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.164801][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.316387][T10657] team0: Port device team_slave_0 added [ 211.337730][T10657] team0: Port device team_slave_1 added [ 211.518961][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 211.525054][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 211.544025][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.557148][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.606145][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.685336][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.734948][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.769292][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 211.796508][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.974432][T10657] hsr_slave_0: entered promiscuous mode [ 212.000703][T10657] hsr_slave_1: entered promiscuous mode [ 212.014808][T10657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.024196][T10657] Cannot create hsr debugfs directory [ 212.213399][T10884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1241'. [ 212.248834][ T5156] Bluetooth: hci1: command tx timeout [ 212.643762][T10902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1246'. [ 212.817214][T10914] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1250'. [ 212.827313][T10909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 212.868861][T10914] netlink: zone id is out of range [ 212.891028][T10914] netlink: get zone limit has 8 unknown bytes [ 213.270557][T10937] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 213.525288][T10951] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1259'. [ 213.855355][T10961] netlink: 'syz.4.1262': attribute type 5 has an invalid length. [ 213.923357][T10657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.147105][T10978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.318670][ T5156] Bluetooth: hci1: command tx timeout [ 214.503092][T10657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.621575][T10657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.674309][T10657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.993181][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1272'. [ 215.136978][T10657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.222775][T10657] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.264399][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.271612][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.309589][T11025] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1276'. [ 215.350856][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 215.414272][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.421465][ T8938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.583671][T11040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.643611][T11043] sctp: [Deprecated]: syz.2.1281 (pid 11043) Use of int in maxseg socket option. [ 215.643611][T11043] Use struct sctp_assoc_value instead [ 215.644016][T10657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.915454][T11061] __nla_validate_parse: 3 callbacks suppressed [ 215.915472][T11061] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1284'. [ 216.013142][T11061] vlan2: entered allmulticast mode [ 216.046666][T11061] gretap0: entered allmulticast mode [ 216.190772][T11073] netlink: 'syz.2.1286': attribute type 2 has an invalid length. [ 216.240396][T11073] netlink: 'syz.2.1286': attribute type 8 has an invalid length. [ 216.290517][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1286'. [ 216.335060][T11080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.342345][T11080] IPv6: NLM_F_CREATE should be set when creating new route [ 216.377227][T11082] openvswitch: netlink: Message has -1 unknown bytes. [ 216.385864][T11073] lo: entered allmulticast mode [ 216.392298][T11084] netlink: 'syz.0.1289': attribute type 19 has an invalid length. [ 216.412188][T11073] tunl0: entered allmulticast mode [ 216.453848][T11073] gre0: entered allmulticast mode [ 216.519731][T11073] gretap0: entered allmulticast mode [ 216.543660][T11073] erspan0: entered allmulticast mode [ 216.595834][T11073] ip_vti0: entered allmulticast mode [ 216.635220][T11073] ip6_vti0: entered allmulticast mode [ 216.650122][T11092] netlink: 'syz.3.1290': attribute type 39 has an invalid length. [ 216.671761][T11073] sit0: entered allmulticast mode [ 216.712294][T11073] ip6tnl0: entered allmulticast mode [ 216.726865][T11073] ip6gre0: entered allmulticast mode [ 216.742448][T11073] syz_tun: entered allmulticast mode [ 216.765965][T11073] ip6gretap0: entered allmulticast mode [ 216.785287][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.806792][T11073] bridge0: entered allmulticast mode [ 216.835399][T11073] vcan0: entered allmulticast mode [ 216.859411][T11073] bond0: entered allmulticast mode [ 216.877444][T11073] bond_slave_0: entered allmulticast mode [ 216.906166][T11073] bond_slave_1: entered allmulticast mode [ 216.916036][T11110] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1291'. [ 216.928413][T11073] team0: entered allmulticast mode [ 216.945725][T11073] team_slave_0: entered allmulticast mode [ 216.965568][T11073] team_slave_1: entered allmulticast mode [ 216.975452][T11110] netlink: zone id is out of range [ 217.001933][T11110] netlink: zone id is out of range [ 217.020199][T11110] netlink: zone id is out of range [ 217.039212][T11073] nlmon0: entered allmulticast mode [ 217.049583][T11073] caif0: entered allmulticast mode [ 217.060677][T11110] netlink: zone id is out of range [ 217.065988][T11073] vxcan0: entered allmulticast mode [ 217.103546][T11073] vxcan1: entered allmulticast mode [ 217.142258][T11110] netlink: zone id is out of range [ 217.150400][T11073] veth0: entered allmulticast mode [ 217.225512][T11073] veth1: entered allmulticast mode [ 217.293489][T11073] wg0: entered allmulticast mode [ 217.307026][T11073] wg1: entered allmulticast mode [ 217.329835][T11073] veth0_to_bridge: entered allmulticast mode [ 217.386721][T11073] veth0_to_bond: entered allmulticast mode [ 217.437051][T11073] veth1_to_bond: entered allmulticast mode [ 217.480207][T11073] veth0_to_team: entered allmulticast mode [ 217.511562][T11073] veth1_to_team: entered allmulticast mode [ 217.564353][T11073] veth0_to_batadv: entered allmulticast mode [ 217.590207][T11073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.603279][T11073] batadv_slave_0: entered allmulticast mode [ 217.634509][T11073] veth1_to_batadv: entered allmulticast mode [ 217.657377][T11073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.680622][T11073] batadv_slave_1: entered allmulticast mode [ 217.699411][T11073] xfrm0: entered allmulticast mode [ 217.715544][T11073] veth0_to_hsr: entered allmulticast mode [ 217.735253][T11073] hsr_slave_0: entered allmulticast mode [ 217.760647][T11073] hsr0: entered allmulticast mode [ 217.775486][T11073] veth1_virt_wifi: entered allmulticast mode [ 217.797118][T11073] veth0_virt_wifi: entered allmulticast mode [ 217.813890][T11073] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 217.833671][T11073] veth1_vlan: entered allmulticast mode [ 217.856578][T11073] veth0_vlan: entered allmulticast mode [ 217.872703][T11073] vlan0: entered allmulticast mode [ 217.878732][T11073] vlan1: entered allmulticast mode [ 217.884076][T11073] macvlan0: left promiscuous mode [ 217.898738][T11073] macvlan1: entered allmulticast mode [ 217.914567][T11073] ipvlan0: entered allmulticast mode [ 217.928491][T11073] ipvlan1: entered allmulticast mode [ 217.934512][T11073] veth1_macvtap: entered allmulticast mode [ 217.946926][T11073] veth0_macvtap: entered allmulticast mode [ 217.959116][T11073] macvtap0: entered allmulticast mode [ 217.985985][T11073] macsec0: entered allmulticast mode [ 218.007127][T11073] geneve0: entered allmulticast mode [ 218.026699][T11073] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.048806][T11073] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.057191][T11073] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.067456][T11073] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.084973][T11073] geneve1: entered allmulticast mode [ 218.143544][T11073] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 218.205398][T11073] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 218.236286][T11073] bond1: entered allmulticast mode [ 218.248041][T11073] netdevsim netdevsim2 eth0: entered allmulticast mode [ 218.256435][T11073] netdevsim netdevsim2 eth1: entered allmulticast mode [ 218.264439][T11073] netdevsim netdevsim2 eth2: entered allmulticast mode [ 218.271667][T11073] netdevsim netdevsim2 eth3: entered allmulticast mode [ 218.290068][T11073] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 218.307745][T11073] ipvlan2: entered allmulticast mode [ 218.334391][T11073] ip6tnl1: entered allmulticast mode [ 218.348246][T11073] bridge1: entered allmulticast mode [ 218.358634][T11073] batadv0: left promiscuous mode [ 218.367628][T11073] macvlan2: left promiscuous mode [ 218.381421][T11073] vxcan2: entered allmulticast mode [ 218.393169][T11073] vxcan3: entered allmulticast mode [ 218.407626][T11073] vxlan0: entered allmulticast mode [ 218.415672][T11073] macvlan3: entered allmulticast mode [ 218.422232][T11073] erspan1: entered allmulticast mode [ 218.432445][T11073] bond2: entered allmulticast mode [ 218.439906][T11073] ip6gretap1: entered allmulticast mode [ 218.468865][T11073] bridge2: entered allmulticast mode [ 218.484828][T11073] vlan2: left promiscuous mode [ 218.494609][T11073] bridge0: left promiscuous mode [ 218.514363][T11073] vlan2: entered allmulticast mode [ 218.535130][T11073] bond3: left promiscuous mode [ 218.540928][T11073] gretap1: left promiscuous mode [ 218.546418][T11073] macvtap1: left promiscuous mode [ 218.573208][T11073] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 218.585209][T11073] vxcan4: entered allmulticast mode [ 218.593135][T11073] bond4: left promiscuous mode [ 218.687331][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.767480][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1296'. [ 218.795491][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 218.986089][T11164] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1299'. [ 218.994899][T10657] veth0_vlan: entered promiscuous mode [ 219.058547][T10657] veth1_vlan: entered promiscuous mode [ 219.101152][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 219.117660][T11169] veth0: entered promiscuous mode [ 219.121399][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 219.160668][T10657] veth0_macvtap: entered promiscuous mode [ 219.175601][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 219.202577][T10657] veth1_macvtap: entered promiscuous mode [ 219.430655][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.471981][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.503798][T10657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.544652][T10657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.567885][T10657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.576618][T10657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.799766][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 219.878925][T11193] net_ratelimit: 7 callbacks suppressed [ 219.878943][T11193] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 220.065181][ T8936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.085583][ T8936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.206925][ T8938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.239196][ T8938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.972117][ T8931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.084922][ T8931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.316015][ T8931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.415357][ T8931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.666810][ T8931] bridge_slave_1: left allmulticast mode [ 221.682230][ T8931] bridge_slave_1: left promiscuous mode [ 221.693075][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.711359][ T8931] bridge_slave_0: left allmulticast mode [ 221.717046][ T8931] bridge_slave_0: left promiscuous mode [ 221.725942][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.244231][T11285] __nla_validate_parse: 1 callbacks suppressed [ 222.244250][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1319'. [ 222.363225][T11290] netlink: 'syz.3.1321': attribute type 13 has an invalid length. [ 222.397732][T11290] netlink: 'syz.3.1321': attribute type 17 has an invalid length. [ 222.438450][ T8931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.465523][ T8931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.484557][ T8931] bond0 (unregistering): Released all slaves [ 222.840321][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.852020][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.860608][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.875542][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.885805][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.953618][T11311] lo speed is unknown, defaulting to 1000 [ 223.222273][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 223.437605][T11323] netlink: 'syz.4.1328': attribute type 7 has an invalid length. [ 223.589443][T11331] ip6gretap0: entered promiscuous mode [ 223.618556][T11331] vlan2: entered promiscuous mode [ 223.781231][T11323] : entered promiscuous mode [ 224.453431][T11353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1334'. [ 224.580092][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 224.632925][T11363] xt_CT: No such helper "syz0" [ 224.960328][ T5846] Bluetooth: hci1: command tx timeout [ 225.661707][ T8931] hsr_slave_0: left promiscuous mode [ 225.667635][ T8931] hsr_slave_1: left promiscuous mode [ 225.674560][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.682948][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.694257][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.717614][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.747171][ T8931] veth1_macvtap: left promiscuous mode [ 225.762722][ T8931] veth0_macvtap: left promiscuous mode [ 225.769240][ T8931] veth1_vlan: left promiscuous mode [ 225.774547][ T8931] veth0_vlan: left promiscuous mode [ 226.162644][ T8931] team0 (unregistering): Port device team_slave_1 removed [ 226.196305][ T8931] team0 (unregistering): Port device team_slave_0 removed [ 226.535698][T11357] team0: Device is already in use. [ 227.008353][T11392] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1344'. [ 227.033395][T11311] chnl_net:caif_netlink_parms(): no params data found [ 227.044759][ T5846] Bluetooth: hci1: command tx timeout [ 227.234733][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 227.374687][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1351'. [ 227.384343][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 227.450228][T11424] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 227.465287][T11424] netlink: 'syz.2.1350': attribute type 3 has an invalid length. [ 227.475738][T11424] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1350'. [ 227.521871][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.536867][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.544218][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 227.544324][T11311] bridge_slave_0: entered allmulticast mode [ 227.560531][T11427] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 227.568476][T11311] bridge_slave_0: entered promiscuous mode [ 227.599989][T11426] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 227.616268][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.625406][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.643214][T11311] bridge_slave_1: entered allmulticast mode [ 227.664065][T11311] bridge_slave_1: entered promiscuous mode [ 227.676454][T11427] netlink: 'syz.0.1352': attribute type 10 has an invalid length. [ 227.728791][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1353'. [ 227.756176][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.766186][T11427] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 227.783035][T11435] bridge_slave_0: left allmulticast mode [ 227.789398][T11435] bridge_slave_0: left promiscuous mode [ 227.795210][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.807615][T11435] bridge_slave_1: left allmulticast mode [ 227.815134][T11435] bridge_slave_1: left promiscuous mode [ 227.821157][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.833732][T11435] team_slave_0: left promiscuous mode [ 227.841414][T11435] team_slave_0: left allmulticast mode [ 227.854512][T11435] team0: Port device team_slave_0 removed [ 227.863394][T11435] team_slave_1: left promiscuous mode [ 227.870188][T11435] team_slave_1: left allmulticast mode [ 227.881164][T11435] team0: Port device team_slave_1 removed [ 227.887533][T11435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.895330][T11435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.904594][T11435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.912857][T11435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.931921][T11435] geneve0: left promiscuous mode [ 227.937214][T11435] geneve0: left allmulticast mode [ 227.946674][T11435] team0: Port device geneve0 removed [ 227.960221][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.184766][T11311] team0: Port device team_slave_0 added [ 228.191619][T11446] netlink: 'syz.0.1355': attribute type 11 has an invalid length. [ 228.222786][T11311] team0: Port device team_slave_1 added [ 228.264984][T11455] netlink: 'syz.2.1359': attribute type 21 has an invalid length. [ 228.301724][T11455] netlink: 'syz.2.1359': attribute type 6 has an invalid length. [ 228.333309][T11455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1359'. [ 228.420681][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.433324][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.469280][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 228.507944][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.541098][T11473] netlink: 'syz.0.1362': attribute type 29 has an invalid length. [ 228.554199][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 228.596554][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.614146][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.646504][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.659594][T11475] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 228.667629][T11475] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1364'. [ 228.679567][T11480] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 228.734786][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 228.802914][T11311] hsr_slave_0: entered promiscuous mode [ 228.820121][T11311] hsr_slave_1: entered promiscuous mode [ 228.836148][T11311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.847104][T11311] Cannot create hsr debugfs directory [ 228.856620][T11480] netlink: 'syz.4.1366': attribute type 12 has an invalid length. [ 229.119509][ T5846] Bluetooth: hci1: command tx timeout [ 229.201203][T11494] vlan3: entered promiscuous mode [ 229.206297][T11494] bridge0: entered promiscuous mode [ 229.589340][T11311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.602542][T11311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.612787][T11311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.624477][T11311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.705304][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.729146][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.742191][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.749408][ T8931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.763449][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.770646][ T8936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.002148][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.052675][T11521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.069801][T11522] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 230.095101][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.173184][T11311] veth0_vlan: entered promiscuous mode [ 230.200155][T11311] veth1_vlan: entered promiscuous mode [ 230.351147][T11311] veth0_macvtap: entered promiscuous mode [ 230.388926][T11311] veth1_macvtap: entered promiscuous mode [ 230.452992][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.496260][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.508899][T11548] x_tables: duplicate underflow at hook 1 [ 230.524972][T11547] syz_tun: entered allmulticast mode [ 230.566526][T11311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.576814][T11311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.586209][T11311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.595772][T11311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.810476][T11559] team_slave_0: mtu greater than device maximum [ 230.831636][ T8936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.859214][ T8936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.962744][ T8931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.982046][ T8931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.337437][T11590] netlink: 'syz.3.1396': attribute type 5 has an invalid length. [ 231.717500][T11615] sock: sock_timestamping_bind_phc: sock not bind to device [ 231.923028][T11627] openvswitch: netlink: Duplicate or invalid key (type 0). [ 231.931135][T11627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.001483][T11630] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 232.155135][T11643] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 232.292112][T11648] tipc: Enabling of bearer rejected, media not registered [ 232.441727][T11652] siw: device registration error -23 [ 232.491849][T11660] __nla_validate_parse: 20 callbacks suppressed [ 232.491866][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 232.563669][ T8935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.735462][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 233.758735][T11667] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 233.774160][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.784882][T11671] netlink: 'syz.4.1423': attribute type 1 has an invalid length. [ 233.860495][ T8935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.044160][T11673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.072351][T11673] bond3: (slave bond4): making interface the new active one [ 234.086582][T11673] bond3: (slave bond4): Enslaving as an active interface with an up link [ 234.122117][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.132043][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.140487][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.149383][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.157101][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.166118][T11671] tipc: Started in network mode [ 234.183398][T11671] tipc: Node identity e0000002, cluster identity 4711 [ 234.190637][T11671] tipc: Enabling of bearer rejected, failed to enable media [ 234.237607][T11693] netlink: 'syz.2.1427': attribute type 28 has an invalid length. [ 234.261419][ T8935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.270329][T11693] netlink: 'syz.2.1427': attribute type 3 has an invalid length. [ 234.307670][T11695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'. [ 234.311456][T11693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1427'. [ 234.325284][T11695] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1428'. [ 234.359450][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 234.386877][ T8935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.440122][T11689] lo speed is unknown, defaulting to 1000 [ 234.504458][T11701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1430'. [ 234.680445][T11693] syz.2.1427 (11693) used greatest stack depth: 16824 bytes left [ 234.752703][ T8935] bridge_slave_1: left allmulticast mode [ 234.766940][ T8935] bridge_slave_1: left promiscuous mode [ 234.810383][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.855333][ T8935] bridge_slave_0: left allmulticast mode [ 234.878971][ T8935] bridge_slave_0: left promiscuous mode [ 234.884773][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.904650][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'. [ 235.041178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.158913][T11727] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1437'. [ 235.174537][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.447255][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 235.520713][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.534129][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.544475][ T8935] bond0 (unregistering): Released all slaves [ 235.595043][T11738] bridge5: entered promiscuous mode [ 235.604892][T11738] bridge5: entered allmulticast mode [ 235.651172][T11741] geneve2: entered promiscuous mode [ 235.791587][T11752] Cannot find del_set index 17 as target [ 235.881482][T11757] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 235.985762][T11768] netlink: 'syz.0.1447': attribute type 165 has an invalid length. [ 235.994500][T11768] netlink: 'syz.0.1447': attribute type 96 has an invalid length. [ 236.020782][T11763] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.176413][T11780] unsupported nlmsg_type 40 [ 236.238511][ T5156] Bluetooth: hci1: command tx timeout [ 236.622947][ T8935] hsr_slave_0: left promiscuous mode [ 236.630670][ T8935] hsr_slave_1: left promiscuous mode [ 236.636792][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.645509][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.655292][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.663392][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.724637][ T8935] veth1_macvtap: left promiscuous mode [ 236.739381][ T8935] veth0_macvtap: left promiscuous mode [ 236.749146][ T8935] veth1_vlan: left promiscuous mode [ 236.758710][ T8935] veth0_vlan: left promiscuous mode [ 236.895936][T11805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.452830][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 237.489652][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 237.939986][T11813] lo speed is unknown, defaulting to 1000 [ 238.103081][T11689] chnl_net:caif_netlink_parms(): no params data found [ 238.318450][ T5156] Bluetooth: hci1: command tx timeout [ 238.337230][T11831] __nla_validate_parse: 3 callbacks suppressed [ 238.337244][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1462'. [ 238.445250][T11831] batadv0: entered promiscuous mode [ 238.452815][T11831] team0: entered promiscuous mode [ 238.458744][T11831] team_slave_0: entered promiscuous mode [ 238.465240][T11831] team_slave_1: entered promiscuous mode [ 238.472476][T11831] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 238.484168][T11831] Cannot create hsr debugfs directory [ 238.490106][T11831] hsr1: entered promiscuous mode [ 238.495085][T11831] hsr1: entered allmulticast mode [ 238.504628][T11831] batadv0: entered allmulticast mode [ 238.510602][T11831] team0: entered allmulticast mode [ 238.516206][T11831] team_slave_0: entered allmulticast mode [ 238.524407][T11831] team_slave_1: entered allmulticast mode [ 238.551547][T11689] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.559778][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.566998][T11689] bridge_slave_0: entered allmulticast mode [ 238.575493][T11689] bridge_slave_0: entered promiscuous mode [ 238.598432][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.605573][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.613957][T11689] bridge_slave_1: entered allmulticast mode [ 238.626529][T11689] bridge_slave_1: entered promiscuous mode [ 238.714697][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.719935][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 238.734358][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.838494][T11838] hsr_slave_1 (unregistering): left promiscuous mode [ 239.034914][T11689] team0: Port device team_slave_0 added [ 239.143059][T11689] team0: Port device team_slave_1 added [ 239.237982][T11846] netem: change failed [ 239.303531][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.331826][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.427496][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.451943][T11852] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 239.477606][T11852] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 239.509734][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.517239][T11852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1468'. [ 239.551005][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.692423][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.925108][T11689] hsr_slave_0: entered promiscuous mode [ 239.947691][T11689] hsr_slave_1: entered promiscuous mode [ 239.984398][T11689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.013214][T11689] Cannot create hsr debugfs directory [ 240.402793][ T5846] Bluetooth: hci1: command tx timeout [ 241.313976][T11689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.370903][T11689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.386491][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 241.400137][T11689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.422123][T11689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.595756][T11913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1483'. [ 241.691055][T11689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.754824][T11689] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.832141][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.839359][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.882797][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.889990][ T8937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.992649][T11931] lo speed is unknown, defaulting to 1000 [ 242.240401][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 242.320716][T11938] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.478837][ T5156] Bluetooth: hci1: command tx timeout [ 242.563159][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.681885][T11689] veth0_vlan: entered promiscuous mode [ 242.698881][T11689] veth1_vlan: entered promiscuous mode [ 242.740948][T11689] veth0_macvtap: entered promiscuous mode [ 242.754349][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 242.766507][T11689] veth1_macvtap: entered promiscuous mode [ 242.774958][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 242.803670][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.825952][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.845466][T11689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.862134][T11689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.872302][T11689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.884789][T11689] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.064069][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.084508][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.191797][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 243.210673][ T8938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.230530][ T8938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.254672][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 243.312107][T11966] veth1_macvtap: left promiscuous mode [ 243.317616][T11966] macsec0: entered promiscuous mode [ 243.347222][T11966] macsec0: entered allmulticast mode [ 243.436859][T11983] bond0: (slave team0): Releasing backup interface [ 243.482874][T11983] bridge_slave_0: left promiscuous mode [ 243.491551][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.520238][T11983] bond0: (slave bond_slave_0): Releasing backup interface [ 243.529902][T11983] bond0: (slave bond_slave_1): Releasing backup interface [ 243.543296][T11983] team0: Port device team_slave_0 removed [ 243.563130][T11983] team0: Port device team_slave_1 removed [ 243.571669][T11983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.583017][T11983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.602672][T11983] batman_adv: batadv0: Removing interface: ipvlan2 [ 243.619449][T11983] bond0: (slave macvlan2): Releasing backup interface [ 243.631914][T11983] bond2: (slave ip6gretap1): Removing an active aggregator [ 243.642098][T11983] bond2: (slave ip6gretap1): Releasing backup interface [ 243.653712][T11983] bond3: (slave gretap1): Releasing active interface [ 244.111807][T12018] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 244.151539][T12021] set match dimension is over the limit! [ 244.234475][ T8935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.714481][ T8935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.054662][ T8935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.253696][ T8935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.373377][ T8935] bridge_slave_1: left allmulticast mode [ 245.381730][ T8935] bridge_slave_1: left promiscuous mode [ 245.387739][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.398681][ T8935] bridge_slave_0: left allmulticast mode [ 245.404371][ T8935] bridge_slave_0: left promiscuous mode [ 245.410604][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.038378][T12063] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 246.453878][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.463067][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.474876][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.492884][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.501232][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.581672][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.593340][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.607747][ T8935] bond0 (unregistering): Released all slaves [ 246.626133][T12029] erspan0: entered allmulticast mode [ 246.634970][T12074] mac80211_hwsim hwsim10 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 246.647434][T12064] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.654784][T12064] tipc: Enabled bearer , priority 10 [ 246.771293][T12083] lo speed is unknown, defaulting to 1000 [ 246.779311][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.907439][T12095] netlink: 'syz.0.1525': attribute type 23 has an invalid length. [ 246.918670][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.956803][T12095] xt_l2tp: unknown flags: 18 [ 247.058085][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.093681][T12100] tipc: Started in network mode [ 247.119352][T12100] tipc: Node identity 06305c668b5f, cluster identity 4711 [ 247.143667][T12100] tipc: Enabled bearer , priority 10 [ 247.199447][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.329433][T12114] xt_TCPMSS: Only works on TCP SYN packets [ 247.337914][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.488476][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.627871][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 247.665973][T12125] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.769080][ T977] tipc: Node number set to 3758096386 [ 247.907974][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.008407][ T8935] hsr_slave_0: left promiscuous mode [ 248.028361][ T8935] hsr_slave_1: left promiscuous mode [ 248.036743][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.052580][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.086696][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.100560][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.143067][ T8935] veth1_macvtap: left promiscuous mode [ 248.155760][ T8935] veth0_macvtap: left promiscuous mode [ 248.163150][ T8935] veth1_vlan: left promiscuous mode [ 248.174883][ T8935] veth0_vlan: left promiscuous mode [ 248.180257][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.235948][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'. [ 248.248784][ T5931] tipc: Node number set to 2372885606 [ 248.561014][ T5156] Bluetooth: hci1: command tx timeout [ 248.688596][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 248.707982][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.733502][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 249.116503][T12083] chnl_net:caif_netlink_parms(): no params data found [ 249.486329][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.498246][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.505497][T12083] bridge_slave_0: entered allmulticast mode [ 249.514516][T12083] bridge_slave_0: entered promiscuous mode [ 249.524979][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.532355][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.539882][T12083] bridge_slave_1: entered allmulticast mode [ 249.560063][T12083] bridge_slave_1: entered promiscuous mode [ 249.569900][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 249.683153][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.719618][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.757961][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.867085][T12083] team0: Port device team_slave_0 added [ 249.897743][T12083] team0: Port device team_slave_1 added [ 250.006901][T12197] tipc: New replicast peer: 255.255.255.255 [ 250.014280][T12197] tipc: Enabled bearer , priority 10 [ 250.024407][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.044538][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.071780][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.093600][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.103956][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.138308][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.232870][T12203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.251634][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 250.260907][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 250.391043][T12203] bond6 (unregistering): Released all slaves [ 250.536614][T12219] ip6t_srh: unknown srh invflags 4449 [ 250.544373][T12083] hsr_slave_0: entered promiscuous mode [ 250.569115][T12083] hsr_slave_1: entered promiscuous mode [ 250.575786][T12083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.597962][T12083] Cannot create hsr debugfs directory [ 250.638648][ T5156] Bluetooth: hci1: command tx timeout [ 250.707949][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 250.717550][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 250.748735][T12230] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 250.797951][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.230872][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 251.482654][T12266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1577'. [ 251.612901][T12083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.643764][T12083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.696923][T12083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.722867][T12083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.837882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.852006][T12289] netlink: 'syz.2.1581': attribute type 21 has an invalid length. [ 251.878614][T12289] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1581'. [ 251.950313][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1583'. [ 252.124767][T12083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.191060][T12083] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.252252][T12317] netlink: 'syz.4.1587': attribute type 18 has an invalid length. [ 252.377397][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.384589][ T8931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.489015][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.496208][ T8931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.630042][T12331] pimreg: entered allmulticast mode [ 252.718515][ T5156] Bluetooth: hci1: command tx timeout [ 252.878002][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.004990][T12346] netlink: 'syz.3.1593': attribute type 7 has an invalid length. [ 253.063256][T12351] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.290445][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.316629][T12364] tipc: Enabled bearer , priority 0 [ 253.429810][T12083] veth0_vlan: entered promiscuous mode [ 253.451276][T12369] __nla_validate_parse: 5 callbacks suppressed [ 253.451295][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 253.480727][T12083] veth1_vlan: entered promiscuous mode [ 253.515978][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 253.554447][T12369] erspan0: entered promiscuous mode [ 253.567741][T12369] gretap0: entered promiscuous mode [ 253.575445][T12369] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 253.589461][T12369] Cannot create hsr debugfs directory [ 253.595014][T12369] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 253.614095][T12369] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 253.633621][T12372] pim6reg: entered allmulticast mode [ 253.686110][T12083] veth0_macvtap: entered promiscuous mode [ 253.716548][T12083] veth1_macvtap: entered promiscuous mode [ 253.782950][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.808840][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.828677][T12083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.842848][T12083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.856175][T12083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.865205][T12386] netlink: 'syz.0.1606': attribute type 3 has an invalid length. [ 253.874451][T12083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.884835][T12386] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1606'. [ 253.917887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.058949][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.073754][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.123042][ T8935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.166310][ T8935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.183237][T12399] netlink: 'syz.3.1611': attribute type 3 has an invalid length. [ 254.219988][T12399] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1611'. [ 254.443659][T11103] tipc: Node number set to 1835347501 [ 254.618842][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 254.644010][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 254.874033][T12436] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 254.906639][T12436] bond6: entered promiscuous mode [ 254.914581][T12436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.949891][T12436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.956974][T12436] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 254.967750][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.976076][T12436] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 255.021423][T12436] bond6: (slave wireguard0): making interface the new active one [ 255.030403][T12436] wireguard0: entered promiscuous mode [ 255.037363][T12436] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 255.145000][T12447] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 255.175445][T12447] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1624'. [ 255.196019][T12447] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 255.235834][ T8931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.521487][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.001855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.982012][ T8931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.037920][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.089176][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 257.104823][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 257.180534][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.211338][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.220035][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.233168][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.246471][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.306272][ T8931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.490593][ T8931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.522374][T12496] bond0: entered allmulticast mode [ 257.527542][T12496] bond_slave_0: entered allmulticast mode [ 257.553867][T12496] bond_slave_1: entered allmulticast mode [ 257.570636][T12476] lo speed is unknown, defaulting to 1000 [ 257.589014][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1640'. [ 257.629334][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.659814][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.667692][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.716351][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.759203][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.781515][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.825792][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.860994][ T8931] bridge_slave_1: left allmulticast mode [ 257.866675][ T8931] bridge_slave_1: left promiscuous mode [ 257.872505][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.872521][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.872534][T12498] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 257.910710][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.959736][ T8931] bridge_slave_0: left allmulticast mode [ 257.965422][ T8931] bridge_slave_0: left promiscuous mode [ 257.984609][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.078096][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.410333][ T8931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.421857][ T8931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.431849][ T8931] bond0 (unregistering): Released all slaves [ 258.624734][T12530] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 258.658408][T12530] netlink: 'syz.0.1648': attribute type 2 has an invalid length. [ 258.692408][T12534] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 258.728984][T12534] __nla_validate_parse: 3 callbacks suppressed [ 258.728999][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 258.816268][T12534] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 258.837381][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1651'. [ 259.117949][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.281840][ T5156] Bluetooth: hci1: command tx timeout [ 259.562432][ T8931] hsr_slave_0: left promiscuous mode [ 259.579459][ T8931] hsr_slave_1: left promiscuous mode [ 259.584320][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 259.590010][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.607573][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.625572][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.634369][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.686836][ T8931] veth1_macvtap: left promiscuous mode [ 259.708505][ T8931] veth0_macvtap: left promiscuous mode [ 259.714229][ T8931] veth1_vlan: left promiscuous mode [ 259.724634][ T8931] veth0_vlan: left promiscuous mode [ 259.745660][T12617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1662'. [ 259.974827][T12623] xt_CT: No such helper "pptp" [ 260.160507][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.313257][ T8931] team0 (unregistering): Port device team_slave_1 removed [ 260.352380][ T8931] team0 (unregistering): Port device team_slave_0 removed [ 260.743066][T12599] bridge0: entered allmulticast mode [ 260.795510][T12604] bridge0 (unregistering): left allmulticast mode [ 260.899464][T12476] chnl_net:caif_netlink_parms(): no params data found [ 261.070726][T12636] siw: device registration error -23 [ 261.106986][T12634] ip6tnl2: entered allmulticast mode [ 261.133041][T12634] hsr1: entered allmulticast mode [ 261.143742][T12634] mac80211_hwsim hwsim38 wlan2: entered allmulticast mode [ 261.198165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.326752][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.342018][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.349881][T12476] bridge_slave_0: entered allmulticast mode [ 261.357456][T12476] bridge_slave_0: entered promiscuous mode [ 261.358729][ T5156] Bluetooth: hci1: command tx timeout [ 261.374155][T12664] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 261.399758][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.407776][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.436128][T12476] bridge_slave_1: entered allmulticast mode [ 261.460706][T12476] bridge_slave_1: entered promiscuous mode [ 261.463845][T12673] IPVS: length: 36 != 24 [ 261.477076][T12671] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 261.506844][T12671] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1675'. [ 261.611306][T12666] syzkaller1: entered promiscuous mode [ 261.616826][T12666] syzkaller1: entered allmulticast mode [ 261.720132][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.810805][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.937407][T12476] team0: Port device team_slave_0 added [ 261.966492][T12476] team0: Port device team_slave_1 added [ 262.041087][T12692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.089549][T12692] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 262.101023][T12692] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 262.103626][T12700] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 262.114935][T12700] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 262.130986][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.145366][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.180995][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 262.196366][T12697] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1680'. [ 262.203180][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.233592][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.241117][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.247993][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.268850][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.288594][T12704] netlink: 816 bytes leftover after parsing attributes in process `syz.3.1682'. [ 262.354798][T12709] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1682'. [ 262.366984][T12709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1682'. [ 262.434829][T12476] hsr_slave_0: entered promiscuous mode [ 262.444507][T12476] hsr_slave_1: entered promiscuous mode [ 262.451702][T12476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.459989][T12476] Cannot create hsr debugfs directory [ 262.895735][T12743] nla_validate_range_unsigned: 11 callbacks suppressed [ 262.895766][T12743] netlink: 'syz.4.1693': attribute type 11 has an invalid length. [ 263.267681][T12476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.277985][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.298535][T12476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.312916][T12476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.332429][T12476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.438499][ T5156] Bluetooth: hci1: command tx timeout [ 263.498667][T12776] sctp: [Deprecated]: syz.0.1704 (pid 12776) Use of int in max_burst socket option deprecated. [ 263.498667][T12776] Use struct sctp_assoc_value instead [ 263.623781][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.652823][T12781] xt_addrtype: ipv6 does not support BROADCAST matching [ 263.679255][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.694921][T12785] netlink: 'syz.2.1705': attribute type 9 has an invalid length. [ 263.724969][ T8932] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.732231][ T8932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.815384][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.822575][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.327964][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.357355][T12815] __nla_validate_parse: 8 callbacks suppressed [ 264.357371][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 264.360648][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.650211][T12476] veth0_vlan: entered promiscuous mode [ 264.696587][T12476] veth1_vlan: entered promiscuous mode [ 264.762497][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1719'. [ 264.862878][T12835] bond0: entered promiscuous mode [ 264.873217][T12835] batadv_slave_0: entered promiscuous mode [ 264.894650][T12835] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 264.912244][T12835] hsr2: entered promiscuous mode [ 264.932483][T12476] veth0_macvtap: entered promiscuous mode [ 264.970135][T12476] veth1_macvtap: entered promiscuous mode [ 265.014190][ T10] hid-generic 0005:10CF:05DF.0002: item fetching failed at offset 0/1 [ 265.029452][ T10] hid-generic 0005:10CF:05DF.0002: probe with driver hid-generic failed with error -22 [ 265.081240][T12476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.123975][T12476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.189349][T12476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.211210][T12476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.227468][T12476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.237294][T12476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.368294][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.434215][ T8935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.456818][ T8935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.492326][ T8935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.501347][ T8935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.523513][ T5156] Bluetooth: hci1: command tx timeout [ 265.751227][ T30] audit: type=1107 audit(1750929846.656:3): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g5Ct/o?!fPvҘF?օݰECkpG&5J#އK[|q)MCߝEM;=VXCQ#`2 [ 265.751227][ T30] 乶Tr$p5F,) e'Ck@{j [ 265.751227][ T30] P}nc̚m+2*'lcilw*Cy?9cNe' [ 265.825685][T12877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1739'. [ 266.201922][T12892] netlink: 896 bytes leftover after parsing attributes in process `syz.4.1744'. [ 266.399756][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.627698][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 266.650049][ T8931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.777646][T12909] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 267.105783][ T8931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.438032][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.465033][ T8931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.544003][ T8931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.662650][ T8931] bridge_slave_1: left allmulticast mode [ 267.668497][ T8931] bridge_slave_1: left promiscuous mode [ 267.674697][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.685547][ T8931] bridge_slave_0: left allmulticast mode [ 267.692034][ T8931] bridge_slave_0: left promiscuous mode [ 267.697747][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.003398][ T8931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.014474][ T8931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.024875][ T8931] bond0 (unregistering): Released all slaves [ 268.455587][T12936] netlink: 'syz.0.1757': attribute type 11 has an invalid length. [ 268.477940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.492340][T12933] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 268.517520][T12936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1757'. [ 268.596019][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1755'. [ 268.901030][T12944] syzkaller0: entered promiscuous mode [ 268.906577][T12944] syzkaller0: entered allmulticast mode [ 268.935984][T12951] pim6reg: entered allmulticast mode [ 269.040420][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.050031][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.058001][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.065937][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.083454][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.316544][T12973] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 269.518030][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.581536][T12982] openvswitch: netlink: Key type 29 is not supported [ 270.558970][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.715565][T12973] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 270.733331][T12973] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 270.785087][ T8931] hsr_slave_0: left promiscuous mode [ 270.816352][ T8931] hsr_slave_1: left promiscuous mode [ 270.841389][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.856567][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.874593][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.891714][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.963516][ T8931] veth1_macvtap: left promiscuous mode [ 270.984615][ T8931] veth0_macvtap: left promiscuous mode [ 271.002846][ T8931] veth1_vlan: left promiscuous mode [ 271.020592][ T8931] veth0_vlan: left promiscuous mode [ 271.138570][T13006] xt_l2tp: v2 tid > 0xffff: 150994944 [ 271.198124][ T5156] Bluetooth: hci1: command tx timeout [ 271.598027][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.685452][ T8931] team0 (unregistering): Port device team_slave_1 removed [ 271.721814][ T8931] team0 (unregistering): Port device team_slave_0 removed [ 272.194496][T12960] lo speed is unknown, defaulting to 1000 [ 272.496246][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 272.637850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.683728][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 272.969589][T13048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1786'. [ 272.982953][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.044505][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.051170][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 273.085727][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.104268][T13053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.210245][T12960] chnl_net:caif_netlink_parms(): no params data found [ 273.284520][ T5156] Bluetooth: hci1: command tx timeout [ 273.295461][T13067] netlink: 'syz.4.1791': attribute type 39 has an invalid length. [ 273.359402][T12960] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.366615][T12960] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.375499][T12960] bridge_slave_0: entered allmulticast mode [ 273.383214][T12960] bridge_slave_0: entered promiscuous mode [ 273.391808][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.399578][T12960] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.406819][T12960] bridge_slave_1: entered allmulticast mode [ 273.414585][T12960] bridge_slave_1: entered promiscuous mode [ 273.451867][T12960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.465499][T12960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.507451][T12960] team0: Port device team_slave_0 added [ 273.516046][T12960] team0: Port device team_slave_1 added [ 273.578868][T12960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.585953][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.612873][T12960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.629201][T12960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.636361][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.663593][T12960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.678023][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.745386][T12960] hsr_slave_0: entered promiscuous mode [ 273.762559][T12960] hsr_slave_1: entered promiscuous mode [ 273.770174][T12960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.780060][T12960] Cannot create hsr debugfs directory [ 273.940883][T13079] xt_CT: No such helper "syz0" [ 273.955071][T13084] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 273.967309][T13084] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1794'. [ 274.094897][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 274.130635][T13092] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 274.154918][T13092] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 274.183287][T13092] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 274.623231][T13113] netlink: 'syz.4.1802': attribute type 11 has an invalid length. [ 274.640923][T13113] netlink: 'syz.4.1802': attribute type 11 has an invalid length. [ 274.717857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.757570][T13125] vxcan1: tx address claim with dlc 0 [ 274.981887][T12960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.002356][T12960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.030304][T12960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.090409][T12960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.358228][ T5156] Bluetooth: hci1: command tx timeout [ 275.431855][ T5842] syz_tun (unregistering): left allmulticast mode [ 275.455674][ T5903] syz1: Port: 1 Link DOWN [ 275.739543][ T2914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.757938][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.783894][ T2914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.865336][T12960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.916499][ T2914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.943178][ T2914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.976591][T12960] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.995957][ T8932] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.003115][ T8932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.057515][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.064673][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.186036][ T2914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.207537][ T2914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.411862][ T2914] netdevsim netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.448160][ T2914] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.501625][T13201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.563559][T13203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.677623][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.698477][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.706133][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.737043][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.749325][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.797988][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.843265][ T2914] batadv1: left allmulticast mode [ 276.853555][ T2914] batadv1: left promiscuous mode [ 276.863356][ T2914] bridge0: port 3(batadv1) entered disabled state [ 276.881681][ T2914] bridge_slave_1: left allmulticast mode [ 276.887356][ T2914] bridge_slave_1: left promiscuous mode [ 276.938699][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.955281][ T2914] bridge_slave_0: left allmulticast mode [ 276.961712][ T2914] bridge_slave_0: left promiscuous mode [ 276.967485][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.024385][T13221] netlink: 'syz.4.1829': attribute type 39 has an invalid length. [ 277.438701][ T5156] Bluetooth: hci1: command tx timeout [ 277.837865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.489411][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.498665][ T2914] bond_slave_0: left allmulticast mode [ 278.505808][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.515162][ T2914] bond_slave_1: left allmulticast mode [ 278.522443][ T2914] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 278.533263][ T2914] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 278.543988][ T2914] bond0 (unregistering): Released all slaves [ 278.605962][T13230] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 278.667371][ T2914] tipc: Disabling bearer [ 278.723552][ T2914] tipc: Left network mode [ 278.786255][T13209] lo speed is unknown, defaulting to 1000 [ 278.813053][ T5156] Bluetooth: hci3: command tx timeout [ 278.819007][T13241] __nla_validate_parse: 6 callbacks suppressed [ 278.819022][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1834'. [ 278.877987][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.898457][T12960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.190184][T12960] veth0_vlan: entered promiscuous mode [ 279.209934][T13256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.252564][T12960] veth1_vlan: entered promiscuous mode [ 279.310411][T12960] veth0_macvtap: entered promiscuous mode [ 279.340041][T12960] veth1_macvtap: entered promiscuous mode [ 279.385196][T12960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.423045][T12960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.459205][T12960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.473732][T12960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.498746][T12960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.514162][T12960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.646519][T13267] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1843'. [ 279.785222][ T2914] batadv0: left promiscuous mode [ 279.794239][ T2914] team0: left promiscuous mode [ 279.824032][ T2914] team_slave_0: left promiscuous mode [ 279.850082][ T2914] team_slave_1: left promiscuous mode [ 279.885196][ T2914] hsr_slave_0: left promiscuous mode [ 279.910195][ T2914] hsr_slave_1: left promiscuous mode [ 279.916563][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.917864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.952530][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.966411][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.984738][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.037639][ T2914] veth1_macvtap: left promiscuous mode [ 280.046209][T13290] x_tables: duplicate underflow at hook 1 [ 280.048537][ T2914] veth0_macvtap: left promiscuous mode [ 280.068283][ T2914] veth1_vlan: left promiscuous mode [ 280.079869][ T2914] veth0_vlan: left promiscuous mode [ 280.155115][T13294] netlink: 'syz.2.1852': attribute type 8 has an invalid length. [ 280.226451][ T2914] pim6reg (unregistering): left allmulticast mode [ 280.553888][ T2914] team_slave_1 (unregistering): left allmulticast mode [ 280.570613][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 280.605826][ T2914] team_slave_0 (unregistering): left allmulticast mode [ 280.619748][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 280.880932][ T5156] Bluetooth: hci3: command tx timeout [ 280.957873][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.178412][T13309] netlink: 'syz.2.1855': attribute type 4 has an invalid length. [ 281.186481][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.205416][T13309] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1855'. [ 281.216467][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.414824][ T8931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.436612][ T2914] IPVS: stop unused estimator thread 0... [ 281.439287][ T8931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.493956][T13209] chnl_net:caif_netlink_parms(): no params data found [ 281.663521][T13335] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1862'. [ 281.677482][T13335] openvswitch: netlink: Flow key attr not present in new flow. [ 281.983828][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.998011][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.005259][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.027461][T13209] bridge_slave_0: entered allmulticast mode [ 282.039719][T13209] bridge_slave_0: entered promiscuous mode [ 282.053186][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.060990][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.261748][T13209] bridge_slave_1: entered allmulticast mode [ 282.282729][T13209] bridge_slave_1: entered promiscuous mode [ 282.416484][ T2914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.439839][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.453646][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.509219][ T2914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.527286][T13209] team0: Port device team_slave_0 added [ 282.536964][T13209] team0: Port device team_slave_1 added [ 282.573584][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.580714][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.608080][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.620800][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.628602][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.655285][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.707633][T13209] hsr_slave_0: entered promiscuous mode [ 282.714138][T13209] hsr_slave_1: entered promiscuous mode [ 282.722124][T13209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.729957][T13209] Cannot create hsr debugfs directory [ 282.795891][ T2914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.955014][ T2914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.971452][ T5156] Bluetooth: hci3: command tx timeout [ 283.037929][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 283.087749][ T2914] bridge_slave_1: left allmulticast mode [ 283.099770][ T2914] bridge_slave_1: left promiscuous mode [ 283.105499][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.118880][ T2914] bridge_slave_0: left allmulticast mode [ 283.124523][ T2914] bridge_slave_0: left promiscuous mode [ 283.131352][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.435211][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.446105][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.457437][ T2914] bond0 (unregistering): Released all slaves [ 283.614581][T13209] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.625465][T13209] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.635033][T13209] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.650757][T13209] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.820924][T13360] syzkaller1: entered promiscuous mode [ 283.826451][T13360] syzkaller1: entered allmulticast mode [ 283.834766][T13363] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1868'. [ 284.077862][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.085043][T13373] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 284.129567][T13373] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1870'. [ 284.186031][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.203355][T13376] netlink: 'syz.2.1872': attribute type 6 has an invalid length. [ 284.295185][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.348089][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.355324][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.467791][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.474987][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.511781][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.521622][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.530129][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.563593][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.575839][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.599957][ T2914] hsr_slave_0: left promiscuous mode [ 284.626630][ T2914] hsr_slave_1: left promiscuous mode [ 284.643812][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.653025][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.674321][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.686955][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.694949][T13396] netlink: 'syz.4.1876': attribute type 3 has an invalid length. [ 284.703915][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1876'. [ 284.753245][ T2914] veth1_macvtap: left promiscuous mode [ 284.763456][ T2914] veth0_macvtap: left promiscuous mode [ 284.770076][ T2914] veth1_vlan: left promiscuous mode [ 284.775525][ T2914] veth0_vlan: left promiscuous mode [ 285.038128][ T5156] Bluetooth: hci3: command tx timeout [ 285.117882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.266379][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 285.302525][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 285.754231][T13387] lo speed is unknown, defaulting to 1000 [ 285.796181][T13209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.822722][T13209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.869917][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 286.011449][T13417] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1882'. [ 286.157834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.244651][T13429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'. [ 286.510583][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.640474][ T5156] Bluetooth: hci1: command tx timeout [ 286.654641][T13209] veth0_vlan: entered promiscuous mode [ 286.669775][T13209] veth1_vlan: entered promiscuous mode [ 286.704517][T13209] veth0_macvtap: entered promiscuous mode [ 286.722262][T13209] veth1_macvtap: entered promiscuous mode [ 286.760061][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.792642][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.812109][T13387] chnl_net:caif_netlink_parms(): no params data found [ 286.837421][T13209] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.846918][T13209] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.856112][T13209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.866040][T13209] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.040899][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.048961][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.056225][T13387] bridge_slave_0: entered allmulticast mode [ 287.064951][T13387] bridge_slave_0: entered promiscuous mode [ 287.074759][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.082173][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.090524][T13387] bridge_slave_1: entered allmulticast mode [ 287.098502][T13387] bridge_slave_1: entered promiscuous mode [ 287.195478][T13387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.197872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.209188][T13387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.370362][T13387] team0: Port device team_slave_0 added [ 287.386410][T13387] team0: Port device team_slave_1 added [ 287.512960][T13387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.536817][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.605251][T13387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.625299][T13466] netlink: 'syz.2.1895': attribute type 4 has an invalid length. [ 287.628018][ T8930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.651584][T13387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.660410][ T8930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.667995][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.702075][T13387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.904788][T13387] hsr_slave_0: entered promiscuous mode [ 287.936043][T13387] hsr_slave_1: entered promiscuous mode [ 287.950197][T13387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.977912][T13387] Cannot create hsr debugfs directory [ 287.988695][ T8931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.996557][ T8931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.022138][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'. [ 288.238145][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.281712][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 288.404536][T13497] siw: device registration error -23 [ 288.586878][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 288.707327][T13517] netlink: 'syz.4.1910': attribute type 58 has an invalid length. [ 288.715877][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1910'. [ 288.725347][ T5156] Bluetooth: hci1: command tx timeout [ 288.805284][ T8930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.071545][ T8930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.125042][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 289.136192][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 289.146660][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 289.156210][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 289.215599][ T8930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.277970][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.351022][T13529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 289.380755][ T8930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.477303][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.490283][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.498687][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.519387][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.533925][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.565637][T13387] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.602174][T13387] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.636187][T13387] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.661006][T13387] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.681094][T13546] netlink: 'syz.0.1916': attribute type 3 has an invalid length. [ 289.773347][T13532] lo speed is unknown, defaulting to 1000 [ 289.923595][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'. [ 289.933934][T13555] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1919'. [ 289.954651][T13555] netlink: 'syz.4.1919': attribute type 5 has an invalid length. [ 289.963128][ T8930] bridge_slave_1: left allmulticast mode [ 289.977831][ T8930] bridge_slave_1: left promiscuous mode [ 289.983598][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.049519][ T8930] bridge_slave_0: left allmulticast mode [ 290.055211][ T8930] bridge_slave_0: left promiscuous mode [ 290.069451][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.317846][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.495335][ T8930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.506536][ T8930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.516303][ T8930] bond0 (unregistering): Released all slaves [ 290.797714][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.808753][ T5156] Bluetooth: hci1: command tx timeout [ 290.896044][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.941780][T13590] netlink: 'syz.2.1927': attribute type 18 has an invalid length. [ 291.031270][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.038454][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.150512][T13607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.267588][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.274832][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.320032][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 291.329812][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 291.357905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.509903][T13616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1936'. [ 291.546724][ T8930] hsr_slave_0: left promiscuous mode [ 291.563189][ T8930] hsr_slave_1: left promiscuous mode [ 291.571900][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.584449][ T8930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.599517][ T5156] Bluetooth: hci3: command tx timeout [ 291.606056][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.625398][ T8930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.686518][ T8930] veth1_macvtap: left promiscuous mode [ 291.695529][ T8930] veth0_macvtap: left promiscuous mode [ 291.705559][ T8930] veth1_vlan: left promiscuous mode [ 291.713172][ T8930] veth0_vlan: left promiscuous mode [ 292.294285][ T8930] team0 (unregistering): Port device team_slave_1 removed [ 292.332035][ T8930] team0 (unregistering): Port device team_slave_0 removed [ 292.397831][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.697895][T13625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1940'. [ 292.738872][T13532] chnl_net:caif_netlink_parms(): no params data found [ 292.805869][T13387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.856446][T13653] ip6t_srh: unknown srh match flags 4001 [ 292.875002][T13654] ip6t_srh: unknown srh match flags 4001 [ 292.895151][ T5156] Bluetooth: hci1: command tx timeout [ 293.078749][T13661] syzkaller1: entered promiscuous mode [ 293.091590][T13661] syzkaller1: entered allmulticast mode [ 293.276919][T13532] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.297746][T13532] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.307449][T13532] bridge_slave_0: entered allmulticast mode [ 293.331777][T13532] bridge_slave_0: entered promiscuous mode [ 293.352371][T13532] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.379445][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.386645][T13532] bridge_slave_1: entered allmulticast mode [ 293.404969][T13532] bridge_slave_1: entered promiscuous mode [ 293.437892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.522350][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.538875][T13532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.552599][T13532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.688321][ T5156] Bluetooth: hci3: command tx timeout [ 293.705577][T13532] team0: Port device team_slave_0 added [ 293.771837][T13532] team0: Port device team_slave_1 added [ 293.837038][T13700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.875742][T13532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.905092][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.941394][T13532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.959802][T13532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.972633][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.005029][T13532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.078584][T13387] veth0_vlan: entered promiscuous mode [ 294.220397][T13532] hsr_slave_0: entered promiscuous mode [ 294.227088][T13532] hsr_slave_1: entered promiscuous mode [ 294.248513][T13532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.256098][T13532] Cannot create hsr debugfs directory [ 294.283484][T13387] veth1_vlan: entered promiscuous mode [ 294.297562][T13719] __nla_validate_parse: 6 callbacks suppressed [ 294.297575][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1964'. [ 294.308143][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1964'. [ 294.477958][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.552652][T13387] veth0_macvtap: entered promiscuous mode [ 294.583486][T13387] veth1_macvtap: entered promiscuous mode [ 294.737577][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.760665][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 294.790282][T13745] GUP no longer grows the stack in syz.4.1973 (13745): 200000003000-200000005000 (200000001000) [ 294.812499][T13745] CPU: 1 UID: 0 PID: 13745 Comm: syz.4.1973 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 294.812526][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.812538][T13745] Call Trace: [ 294.812547][T13745] [ 294.812555][T13745] dump_stack_lvl+0x189/0x250 [ 294.812607][T13745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.812636][T13745] ? __pfx__printk+0x10/0x10 [ 294.812654][T13745] ? find_vma+0xe7/0x160 [ 294.812686][T13745] __get_user_pages+0x2a60/0x30b0 [ 294.812753][T13745] ? __pfx___get_user_pages+0x10/0x10 [ 294.812780][T13745] ? __gup_longterm_locked+0xbf7/0x15b0 [ 294.812808][T13745] ? down_read_killable+0x1d1/0x350 [ 294.812827][T13745] ? try_get_folio+0x633/0x660 [ 294.812848][T13745] __gup_longterm_locked+0xd66/0x15b0 [ 294.812882][T13745] ? try_grab_folio_fast+0x1be/0x4f0 [ 294.812911][T13745] ? gup_fast_fallback+0x1afc/0x2260 [ 294.812942][T13745] gup_fast_fallback+0x1cd4/0x2260 [ 294.813009][T13745] ? __pfx_gup_fast_fallback+0x10/0x10 [ 294.813044][T13745] ? __pfx_get_page_from_freelist+0x10/0x10 [ 294.813068][T13745] ? is_valid_gup_args+0x11f/0x200 [ 294.813109][T13745] ? get_user_pages_fast+0x4d/0xb0 [ 294.813138][T13745] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 294.813159][T13745] ? vfs_writev+0x31a/0x960 [ 294.813182][T13745] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.813210][T13745] iov_iter_get_pages2+0x5e/0xa0 [ 294.813231][T13745] sk_msg_zerocopy_from_iter+0x1f6/0x830 [ 294.813270][T13745] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 294.813331][T13745] tls_sw_sendmsg+0x989/0x23d0 [ 294.813382][T13745] ? __schedule+0x1713/0x4d00 [ 294.813417][T13745] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 294.813447][T13745] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.813467][T13745] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 294.813492][T13745] ? sock_rps_record_flow+0x19/0x410 [ 294.813531][T13745] ? inet_getname+0x527/0x530 [ 294.813550][T13745] ? inet6_sendmsg+0x101/0x120 [ 294.813574][T13745] __sock_sendmsg+0xe5/0x270 [ 294.813607][T13745] sock_write_iter+0x258/0x330 [ 294.813648][T13745] ? __pfx_sock_write_iter+0x10/0x10 [ 294.813684][T13745] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 294.813710][T13745] ? __pfx_aa_file_perm+0x10/0x10 [ 294.813742][T13745] do_iter_readv_writev+0x56e/0x7f0 [ 294.813764][T13745] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 294.813788][T13745] ? bpf_lsm_file_permission+0x9/0x20 [ 294.813812][T13745] ? security_file_permission+0x75/0x290 [ 294.813833][T13745] ? rw_verify_area+0x258/0x650 [ 294.813882][T13745] vfs_writev+0x31a/0x960 [ 294.813909][T13745] ? __lock_acquire+0xab9/0xd20 [ 294.813938][T13745] ? __pfx_vfs_writev+0x10/0x10 [ 294.813977][T13745] ? __fget_files+0x2a/0x420 [ 294.814003][T13745] ? __fget_files+0x3a0/0x420 [ 294.814023][T13745] ? __fget_files+0x2a/0x420 [ 294.814053][T13745] do_writev+0x14d/0x2d0 [ 294.814079][T13745] ? __pfx_do_writev+0x10/0x10 [ 294.814099][T13745] ? rcu_is_watching+0x15/0xb0 [ 294.814134][T13745] ? do_syscall_64+0xbe/0x3b0 [ 294.814156][T13745] do_syscall_64+0xfa/0x3b0 [ 294.814173][T13745] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.814200][T13745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.814219][T13745] ? clear_bhb_loop+0x60/0xb0 [ 294.814242][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.814260][T13745] RIP: 0033:0x7fd61178e929 [ 294.814283][T13745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.814305][T13745] RSP: 002b:00007fd6125ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 294.814329][T13745] RAX: ffffffffffffffda RBX: 00007fd6119b5fa0 RCX: 00007fd61178e929 [ 294.814343][T13745] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 294.814354][T13745] RBP: 00007fd611810b39 R08: 0000000000000000 R09: 0000000000000000 [ 294.814366][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.814377][T13745] R13: 0000000000000000 R14: 00007fd6119b5fa0 R15: 00007ffc55d915b8 [ 294.814408][T13745] [ 294.842496][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.222304][T13755] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 295.229259][T13387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.245533][T13387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.254833][T13387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.264791][T13387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.473115][T13764] bridge_slave_0: entered promiscuous mode [ 295.517939][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.556808][T13770] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.597700][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 295.621135][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.635707][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.707238][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.738918][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.776155][ T5156] Bluetooth: hci3: command tx timeout [ 295.884661][T13780] 8021q: VLANs not supported on lo [ 295.976099][T13532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.056913][T13532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.303749][T13532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.426292][ T8932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.452215][T13785] lo speed is unknown, defaulting to 1000 [ 296.452252][T13532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.557937][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.651066][ T8932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.778609][ T8932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.873376][T13532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.901889][T13532] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.925143][ T8932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.949858][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.957017][ T8930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.974709][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.981858][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.214217][ T8932] bridge_slave_1: left allmulticast mode [ 297.228193][ T8932] bridge_slave_1: left promiscuous mode [ 297.234038][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.244462][ T8932] bridge_slave_0: left allmulticast mode [ 297.251279][ T8932] bridge_slave_0: left promiscuous mode [ 297.257126][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.551050][ T8932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.562366][ T8932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.574063][ T8932] bond0 (unregistering): Released all slaves [ 297.597854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.724717][T13532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.839298][ T5156] Bluetooth: hci3: command tx timeout [ 297.858893][T13532] veth0_vlan: entered promiscuous mode [ 297.899271][T13532] veth1_vlan: entered promiscuous mode [ 297.975419][T13532] veth0_macvtap: entered promiscuous mode [ 297.993357][T13532] veth1_macvtap: entered promiscuous mode [ 298.019296][T13532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.043729][T13532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.071148][T13532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.098220][T13532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.117577][T13532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.127408][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 298.152075][T13532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.191920][T13814] chnl_net:caif_netlink_parms(): no params data found [ 298.426512][ T8932] hsr_slave_0: left promiscuous mode [ 298.466857][ T8932] hsr_slave_1: left promiscuous mode [ 298.484795][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.508427][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.516490][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.538766][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.602044][ T8932] veth1_macvtap: left promiscuous mode [ 298.607624][ T8932] veth0_macvtap: left promiscuous mode [ 298.628831][ T8932] veth1_vlan: left promiscuous mode [ 298.634181][ T8932] veth0_vlan: left promiscuous mode [ 298.639774][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.731663][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.741312][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.751144][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.759784][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.767834][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.135923][ T8932] team0 (unregistering): Port device team_slave_1 removed [ 299.175586][ T8932] team0 (unregistering): Port device team_slave_0 removed [ 299.509510][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 299.535178][T13835] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 299.547276][T13837] syzkaller1: entered promiscuous mode [ 299.553180][T13835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 299.559456][T13837] syzkaller1: entered allmulticast mode [ 299.564416][T13835] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 299.677968][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.726310][T13848] SET target dimension over the limit! [ 299.930971][T13855] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1998'. [ 300.016070][T13842] lo speed is unknown, defaulting to 1000 [ 300.052289][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.078040][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.187253][ T8931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.216274][ T8931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.238027][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 300.549238][T13873] ------------[ cut here ]------------ [ 300.554762][T13873] WARNING: CPU: 1 PID: 13873 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 300.565765][T13873] Modules linked in: [ 300.569975][T13873] CPU: 1 UID: 0 PID: 13873 Comm: syz.0.2004 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 300.582209][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.592796][T13873] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 300.599709][T13873] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 80 ac e5 f6 b8 04 00 00 00 eb 31 e8 74 ac e5 f6 eb 28 e8 6d ac e5 f6 90 <0f> 0b 90 eb 1d e8 62 ac e5 f6 b8 02 00 00 00 eb 13 e8 56 ac e5 f6 [ 300.620036][T13873] RSP: 0018:ffffc900042bef48 EFLAGS: 00010293 [ 300.626165][T13873] RAX: ffffffff8adaafe3 RBX: ffff888078400000 RCX: ffff8880254ebc00 [ 300.634226][T13873] RDX: 0000000000000000 RSI: ffffffff8f78b620 RDI: 0000000000000006 [ 300.642442][T13873] RBP: 0000000000000000 R08: ffff8880254ebc00 R09: 0000000000000007 [ 300.650511][T13873] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000000 [ 300.658595][T13873] R13: 0000000000000006 R14: ffff888078400180 R15: 1ffff1100f080030 [ 300.666598][T13873] FS: 00007fd02c9946c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 300.675610][T13873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.682251][T13873] CR2: 00007fd6125cbf98 CR3: 0000000076062000 CR4: 00000000003526f0 [ 300.690786][T13873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.699237][T13873] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.707249][T13873] Call Trace: [ 300.710625][T13873] [ 300.713590][T13873] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 300.718203][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.719900][T13873] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 300.732151][T13873] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 300.738715][T13873] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 300.744397][T13873] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 300.750068][T13873] ? ieee80211_get_link_sband+0x335/0x3e0 [ 300.755832][T13873] sta_link_apply_parameters+0xbb8/0xec0 [ 300.761561][T13873] sta_apply_parameters+0x944/0x15b0 [ 300.766892][T13873] ieee80211_add_station+0x424/0x6a0 [ 300.772258][T13873] rdev_add_station+0x105/0x290 [ 300.777138][T13873] nl80211_new_station+0x1723/0x1b40 [ 300.782619][T13873] ? __pfx_nl80211_new_station+0x10/0x10 [ 300.788760][T13873] ? netdev_run_todo+0xe1d/0xea0 [ 300.793772][T13873] ? nl80211_pre_doit+0x4f1/0x930 [ 300.799460][T13873] genl_family_rcv_msg_doit+0x212/0x300 [ 300.805077][T13873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.807974][ T5846] Bluetooth: hci1: command tx timeout [ 300.811241][T13873] ? bpf_lsm_capable+0x9/0x20 [ 300.821481][T13873] ? security_capable+0x7e/0x2e0 [ 300.826462][T13873] genl_rcv_msg+0x60e/0x790 [ 300.831069][T13873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.836127][T13873] ? ref_tracker_free+0x63a/0x7d0 [ 300.841264][T13873] ? __pfx_nl80211_pre_doit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 300.846666][T13873] ? __pfx_nl80211_new_station+0x10/0x10 [ 300.852361][T13873] ? __pfx_nl80211_post_doit+0x10/0x10 [ 300.857893][T13873] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.863318][T13873] netlink_rcv_skb+0x205/0x470 [ 300.868150][T13873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.873203][T13873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.878607][T13873] ? down_read+0x1ad/0x2e0 [ 300.883062][T13873] genl_rcv+0x28/0x40 [ 300.887078][T13873] netlink_unicast+0x758/0x8d0 [ 300.892320][T13873] netlink_sendmsg+0x805/0xb30 [ 300.897455][T13873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.902835][T13873] ? aa_sock_msg_perm+0x94/0x160 [ 300.907850][T13873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.913193][T13873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.918563][T13873] __sock_sendmsg+0x219/0x270 [ 300.923272][T13873] ____sys_sendmsg+0x505/0x830 [ 300.928136][T13873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.933838][T13873] ? import_iovec+0x74/0xa0 [ 300.938419][T13873] ___sys_sendmsg+0x21f/0x2a0 [ 300.943129][T13873] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.948434][T13873] ? __fget_files+0x2a/0x420 [ 300.953055][T13873] ? __fget_files+0x3a0/0x420 [ 300.957815][T13873] __x64_sys_sendmsg+0x19b/0x260 [ 300.962801][T13873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.968440][T13873] ? rcu_is_watching+0x15/0xb0 [ 300.973251][T13873] ? do_syscall_64+0xbe/0x3b0 [ 300.978019][T13873] do_syscall_64+0xfa/0x3b0 [ 300.982559][T13873] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.987846][T13873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.994345][T13873] ? clear_bhb_loop+0x60/0xb0 [ 300.999522][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.005449][T13873] RIP: 0033:0x7fd02bb8e929 [ 301.009944][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.029648][T13873] RSP: 002b:00007fd02c994038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.038212][T13873] RAX: ffffffffffffffda RBX: 00007fd02bdb6080 RCX: 00007fd02bb8e929 [ 301.046210][T13873] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 301.054266][T13873] RBP: 00007fd02bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 301.062291][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.070335][T13873] R13: 0000000000000000 R14: 00007fd02bdb6080 R15: 00007ffff52fd7b8 [ 301.078408][T13873] [ 301.081461][T13873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.088762][T13873] CPU: 1 UID: 0 PID: 13873 Comm: syz.0.2004 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 301.100845][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.110908][T13873] Call Trace: [ 301.114208][T13873] [ 301.117146][T13873] dump_stack_lvl+0x99/0x250 [ 301.121845][T13873] ? __asan_memcpy+0x40/0x70 [ 301.126447][T13873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.131657][T13873] ? __pfx__printk+0x10/0x10 [ 301.136264][T13873] panic+0x2db/0x790 [ 301.140184][T13873] ? __pfx_panic+0x10/0x10 [ 301.144647][T13873] ? show_trace_log_lvl+0x4fb/0x550 [ 301.149881][T13873] __warn+0x31b/0x4b0 [ 301.153893][T13873] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 301.159719][T13873] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 301.165543][T13873] report_bug+0x2be/0x4f0 [ 301.169900][T13873] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 301.175723][T13873] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 301.181546][T13873] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 301.187551][T13873] handle_bug+0x84/0x160 [ 301.191814][T13873] exc_invalid_op+0x1a/0x50 [ 301.196329][T13873] asm_exc_invalid_op+0x1a/0x20 [ 301.201189][T13873] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 301.207615][T13873] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 80 ac e5 f6 b8 04 00 00 00 eb 31 e8 74 ac e5 f6 eb 28 e8 6d ac e5 f6 90 <0f> 0b 90 eb 1d e8 62 ac e5 f6 b8 02 00 00 00 eb 13 e8 56 ac e5 f6 [ 301.227232][T13873] RSP: 0018:ffffc900042bef48 EFLAGS: 00010293 [ 301.233319][T13873] RAX: ffffffff8adaafe3 RBX: ffff888078400000 RCX: ffff8880254ebc00 [ 301.241296][T13873] RDX: 0000000000000000 RSI: ffffffff8f78b620 RDI: 0000000000000006 [ 301.249277][T13873] RBP: 0000000000000000 R08: ffff8880254ebc00 R09: 0000000000000007 [ 301.257258][T13873] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000000 [ 301.265235][T13873] R13: 0000000000000006 R14: ffff888078400180 R15: 1ffff1100f080030 [ 301.273244][T13873] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 301.279072][T13873] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 301.284913][T13873] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 301.290916][T13873] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 301.296574][T13873] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 301.303083][T13873] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 301.308722][T13873] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 301.314271][T13873] ? ieee80211_get_link_sband+0x335/0x3e0 [ 301.320022][T13873] sta_link_apply_parameters+0xbb8/0xec0 [ 301.325676][T13873] sta_apply_parameters+0x944/0x15b0 [ 301.330992][T13873] ieee80211_add_station+0x424/0x6a0 [ 301.336287][T13873] rdev_add_station+0x105/0x290 [ 301.341139][T13873] nl80211_new_station+0x1723/0x1b40 [ 301.346443][T13873] ? __pfx_nl80211_new_station+0x10/0x10 [ 301.352084][T13873] ? netdev_run_todo+0xe1d/0xea0 [ 301.357043][T13873] ? nl80211_pre_doit+0x4f1/0x930 [ 301.362074][T13873] genl_family_rcv_msg_doit+0x212/0x300 [ 301.367636][T13873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.373727][T13873] ? bpf_lsm_capable+0x9/0x20 [ 301.378406][T13873] ? security_capable+0x7e/0x2e0 [ 301.383355][T13873] genl_rcv_msg+0x60e/0x790 [ 301.387875][T13873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.392948][T13873] ? ref_tracker_free+0x63a/0x7d0 [ 301.397986][T13873] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 301.403364][T13873] ? __pfx_nl80211_new_station+0x10/0x10 [ 301.409010][T13873] ? __pfx_nl80211_post_doit+0x10/0x10 [ 301.414475][T13873] ? __pfx_ref_tracker_free+0x10/0x10 [ 301.419865][T13873] netlink_rcv_skb+0x205/0x470 [ 301.424640][T13873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.429680][T13873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.435004][T13873] ? down_read+0x1ad/0x2e0 [ 301.439428][T13873] genl_rcv+0x28/0x40 [ 301.443425][T13873] netlink_unicast+0x758/0x8d0 [ 301.448206][T13873] netlink_sendmsg+0x805/0xb30 [ 301.452991][T13873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.458282][T13873] ? aa_sock_msg_perm+0x94/0x160 [ 301.463223][T13873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.468514][T13873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.473804][T13873] __sock_sendmsg+0x219/0x270 [ 301.478502][T13873] ____sys_sendmsg+0x505/0x830 [ 301.483279][T13873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.488579][T13873] ? import_iovec+0x74/0xa0 [ 301.493089][T13873] ___sys_sendmsg+0x21f/0x2a0 [ 301.497782][T13873] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.503181][T13873] ? __fget_files+0x2a/0x420 [ 301.507802][T13873] ? __fget_files+0x3a0/0x420 [ 301.512502][T13873] __x64_sys_sendmsg+0x19b/0x260 [ 301.517449][T13873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.522922][T13873] ? rcu_is_watching+0x15/0xb0 [ 301.527699][T13873] ? do_syscall_64+0xbe/0x3b0 [ 301.532382][T13873] do_syscall_64+0xfa/0x3b0 [ 301.536885][T13873] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.542098][T13873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.548169][T13873] ? clear_bhb_loop+0x60/0xb0 [ 301.552851][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.558745][T13873] RIP: 0033:0x7fd02bb8e929 [ 301.563164][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.582796][T13873] RSP: 002b:00007fd02c994038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.591235][T13873] RAX: ffffffffffffffda RBX: 00007fd02bdb6080 RCX: 00007fd02bb8e929 [ 301.599218][T13873] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 301.607198][T13873] RBP: 00007fd02bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 301.615167][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.623141][T13873] R13: 0000000000000000 R14: 00007fd02bdb6080 R15: 00007ffff52fd7b8 [ 301.631139][T13873] [ 301.634296][T13873] Kernel Offset: disabled [ 301.638616][T13873] Rebooting in 86400 seconds..