last executing test programs: 1m17.917705224s ago: executing program 1 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r6, @ANYBLOB="c8b31fdd6c47c3deddcde6aedd4bfda0c036181c51d8ff06e4559d6a480e6c62228063a6daf458c7e3215d90263fe8393b55485357cb5141faa1b9c6d8d145b81a071610f343312fe20cf46b987bdfc8163bd904fecba4555111c1fd589c00"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702004fd696570ae7aa3700000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000020000000000008500000084000000b7000000000000009500"/96], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd28, 0x65c7dbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 1m17.005045716s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "a2c5c5ec9441710776308df5ab94af2b681cacc459287d20ab921d85d7ce933646f16839fffc3da1287e063a443d85342fa72739e1a6562d9170b8ca910ff08dd2d5d38548c98443e64ec1617998d3754438e2a0d198f51b131e0fb8006376"}, &(0x7f0000000000)=0x67) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async, rerun: 64) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4041) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1m4.782050712s ago: executing program 1 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r6, @ANYBLOB="c8b31fdd6c47c3deddcde6aedd4bfda0c036181c51d8ff06e4559d6a480e6c62228063a6daf458c7e3215d90263fe8393b55485357cb5141faa1b9c6d8d145b81a071610f343312fe20cf46b987bdfc8163bd904fecba4555111c1fd589c00"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702004fd696570ae7aa3700000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000020000000000008500000084000000b7000000000000009500"/96], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd28, 0x65c7dbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 1m4.162740934s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "a2c5c5ec9441710776308df5ab94af2b681cacc459287d20ab921d85d7ce933646f16839fffc3da1287e063a443d85342fa72739e1a6562d9170b8ca910ff08dd2d5d38548c98443e64ec1617998d3754438e2a0d198f51b131e0fb8006376"}, &(0x7f0000000000)=0x67) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async, rerun: 64) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4041) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 51.999676884s ago: executing program 1 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r6, @ANYBLOB="c8b31fdd6c47c3deddcde6aedd4bfda0c036181c51d8ff06e4559d6a480e6c62228063a6daf458c7e3215d90263fe8393b55485357cb5141faa1b9c6d8d145b81a071610f343312fe20cf46b987bdfc8163bd904fecba4555111c1fd589c00"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702004fd696570ae7aa3700000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000020000000000008500000084000000b7000000000000009500"/96], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd28, 0x65c7dbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 50.539354666s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "a2c5c5ec9441710776308df5ab94af2b681cacc459287d20ab921d85d7ce933646f16839fffc3da1287e063a443d85342fa72739e1a6562d9170b8ca910ff08dd2d5d38548c98443e64ec1617998d3754438e2a0d198f51b131e0fb8006376"}, &(0x7f0000000000)=0x67) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async, rerun: 64) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4041) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 39.103138876s ago: executing program 1 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r6, @ANYBLOB="c8b31fdd6c47c3deddcde6aedd4bfda0c036181c51d8ff06e4559d6a480e6c62228063a6daf458c7e3215d90263fe8393b55485357cb5141faa1b9c6d8d145b81a071610f343312fe20cf46b987bdfc8163bd904fecba4555111c1fd589c00"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702004fd696570ae7aa3700000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000020000000000008500000084000000b7000000000000009500"/96], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd28, 0x65c7dbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 37.94500341s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "a2c5c5ec9441710776308df5ab94af2b681cacc459287d20ab921d85d7ce933646f16839fffc3da1287e063a443d85342fa72739e1a6562d9170b8ca910ff08dd2d5d38548c98443e64ec1617998d3754438e2a0d198f51b131e0fb8006376"}, &(0x7f0000000000)=0x67) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async, rerun: 64) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4041) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 32.478807129s ago: executing program 4 (id=1531): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 31.699723462s ago: executing program 4 (id=1539): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x22) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x78}}, 0x0) r4 = socket(0x2b, 0x80801, 0x200) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000740)) 31.543356819s ago: executing program 4 (id=1541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000c, 0x10012, r0, 0x9129b000) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000d7ad4e76fceb9e01e001df83970fa9f8c22ac4fdc30e50dbbb87756f27f457f76280141ed0946615116fa7cd2da32d5121cc8821c248bd099e516217c813", @ANYRES16=r1, @ANYBLOB="e379ffffffff0000000042db4dc38cfb05e60700000009ec60b4eefe250a"], 0x18}, 0x1, 0x0, 0x0, 0x10800}, 0x40000) 31.20446411s ago: executing program 4 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @loopback, 0x60be0441}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 23.878962699s ago: executing program 1 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r6, @ANYBLOB="c8b31fdd6c47c3deddcde6aedd4bfda0c036181c51d8ff06e4559d6a480e6c62228063a6daf458c7e3215d90263fe8393b55485357cb5141faa1b9c6d8d145b81a071610f343312fe20cf46b987bdfc8163bd904fecba4555111c1fd589c00"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702004fd696570ae7aa3700000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000020000000000008500000084000000b7000000000000009500"/96], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd28, 0x65c7dbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 22.35962104s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "a2c5c5ec9441710776308df5ab94af2b681cacc459287d20ab921d85d7ce933646f16839fffc3da1287e063a443d85342fa72739e1a6562d9170b8ca910ff08dd2d5d38548c98443e64ec1617998d3754438e2a0d198f51b131e0fb8006376"}, &(0x7f0000000000)=0x67) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async, rerun: 64) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4041) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 20.07447628s ago: executing program 4 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @loopback, 0x60be0441}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 8.761834476s ago: executing program 1 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r6, @ANYBLOB="c8b31fdd6c47c3deddcde6aedd4bfda0c036181c51d8ff06e4559d6a480e6c62228063a6daf458c7e3215d90263fe8393b55485357cb5141faa1b9c6d8d145b81a071610f343312fe20cf46b987bdfc8163bd904fecba4555111c1fd589c00"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702004fd696570ae7aa3700000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000020000000000008500000084000000b7000000000000009500"/96], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd28, 0x65c7dbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 7.558673078s ago: executing program 2 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "a2c5c5ec9441710776308df5ab94af2b681cacc459287d20ab921d85d7ce933646f16839fffc3da1287e063a443d85342fa72739e1a6562d9170b8ca910ff08dd2d5d38548c98443e64ec1617998d3754438e2a0d198f51b131e0fb8006376"}, &(0x7f0000000000)=0x67) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async, rerun: 64) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4041) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 6.350043692s ago: executing program 4 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @loopback, 0x60be0441}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.476610698s ago: executing program 0 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x5, 0x4, 0x1}}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}}, 0x0) 1.297309s ago: executing program 0 (id=1676): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffff8, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0xffffffff, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200303afffe8000000000000000000000000000bbff0200000000000000000000000000aa"], 0x0) 1.171689447s ago: executing program 3 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9bf89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x8000) (fail_nth: 3) 1.158148351s ago: executing program 0 (id=1678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b00000000000000000300000000000000000000000000000008000000000000000000000000000000001a000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000100000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.05513516s ago: executing program 0 (id=1679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="41441827f3d62f90074ac7b2eccef9d2e3df9fa6fbac212239063943febc57f9748237c4fd39c83b47f53f16191080041d0a55deafc45d53bb489f2f0d55cf23ab6a02", 0x43}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x5}], 0x4000000000000bd, 0x2, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff80}, @NL80211_ATTR_IE={0xa4, 0x2a, [@chsw_timing={0x68, 0x4, {0x2, 0x401}}, @peer_mgmt={0x75, 0x8, {0x0, 0x4, @val=0x3, @val=0x1b, @void}}, @dsss={0x3, 0x1, 0x9d}, @cf={0x4, 0x6, {0x3, 0x7, 0x2, 0x3}}, @challenge={0x10, 0x1, 0xe}, @random_vendor={0xdd, 0x6e, "5212079ab19f61787911e6322d0ccaddc5855fa7b9188621707f5aa1127a6aee89528e9b6c9177b5042b4d8aeebada73464c81af6637539505ad01e70d08975b4276f322a92ab2d4221fd4d703f988589f8f67194c9a38f2b2ca788e9d41b9991de490f9362283e57aa22b87e36b"}, @peer_mgmt={0x75, 0x6, {0x0, 0x6, @void, @val=0x37, @void}}, @peer_mgmt={0x75, 0x8, {0x1, 0x7fff, @val=0x8, @val=0x41, @void}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x101}, @NL80211_ATTR_MAC={0xa, 0x6, @random="12ced0f4d2fa"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 1.054954447s ago: executing program 3 (id=1680): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000270700000000000000000900020073797a31000000000500010007000000050005000a0000000c0007800800064000070000110003"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 746.778958ms ago: executing program 3 (id=1681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9bf89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 559.742439ms ago: executing program 3 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104fcffffff0800000000000000", @ANYRES32=r1, @ANYBLOB="0315e1ffffff0000140012800b0001006970766c616e00e89dc2ab6ad4fe580b8c75a8497a5648f512e7ab0e1bb730f2fc8d17c9681b806714082bb29462aef8b94c4818ca4c754e763607c87d634dd9060afcd320af5a55bdfee7af1f3add05ebc6bdb0cc680fedc58f61dcfac8aa7cd70000", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0xf0b029b400ec192e) 422.304812ms ago: executing program 3 (id=1683): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept(r1, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f00000002c0)=@tcp6=r3, 0x2}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x9}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 294.61283ms ago: executing program 3 (id=1684): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003006f56053021e3db5e31a40955c600d35da9e6ac400166db480a0001"], 0xc8}}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000580)={@remote, @local}, &(0x7f0000000600)=0xc) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000580)={@remote, @local, 0x0}, &(0x7f0000000600)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x15, 0x1, 0x53745bdd, 0x6aa4, 0x208, 0x1, 0xfffffffa, '\x00', 0x0, r1, 0x4, 0x1, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x15, 0x1, 0x53745bdd, 0x6aa4, 0x208, 0x1, 0xfffffffa, '\x00', 0x0, r1, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000440)='syzkaller\x00', 0xfff, 0xcc, &(0x7f0000000480)=""/204, 0x40f00, 0x44, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x3, 0x3, 0x6}, 0x10, 0x27e13, r1, 0x1, &(0x7f0000000780)=[r6, r1, r1, r1, r1, r1], &(0x7f00000007c0)=[{0x2, 0x5, 0x3, 0xb}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000440)='syzkaller\x00', 0xfff, 0xcc, &(0x7f0000000480)=""/204, 0x40f00, 0x44, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x3, 0x3, 0x6}, 0x10, 0x27e13, r1, 0x1, &(0x7f0000000780)=[r6, r1, r1, r1, r1, r1], &(0x7f00000007c0)=[{0x2, 0x5, 0x3, 0xb}], 0x10, 0x4}, 0x94) setsockopt$inet6_mreq(r3, 0x29, 0x8, 0x0, 0x0) (async) setsockopt$inet6_mreq(r3, 0x29, 0x8, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket(0x18, 0x4, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r9, 0x29, 0x2, 0xc, 0x3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x20, 0xa69b, 0x7}}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newtfilter={0x1574, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x1548, 0x2, [@TCA_FW_ACT={0x1544, 0x4, [@m_police={0x1540, 0x3, 0x0, 0x0, {{0xb}, {0x14f0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x1, 0x4, 0x4, 0x5, 0x5fc9, 0x9, 0x8, 0x8, 0x3ff, 0x3, 0x2, 0x5, 0x5, 0xfffffff8, 0xffffffff, 0x0, 0x9, 0x7fff, 0x80, 0x2, 0xfffffff9, 0x1, 0x8, 0x8, 0x6, 0x3, 0x8, 0x80000000, 0x4, 0x81, 0x8, 0x9, 0x101, 0xf, 0x10000, 0x8, 0x3, 0x9, 0x1, 0x3, 0xfffffff7, 0x95, 0x6e1, 0xdd, 0x8000, 0x7, 0x5, 0x8, 0x8, 0xfffff001, 0x2, 0x4, 0x7, 0x8, 0x6, 0x8, 0x100, 0x4, 0x53, 0x6, 0x9af, 0x6, 0xb2, 0x0, 0x8, 0x3, 0x5, 0xfffffffa, 0x6, 0x3, 0x7f, 0x8, 0x0, 0x9, 0x6b9e4ec7, 0x401, 0x5, 0x9, 0x8, 0x5, 0x5, 0x1ff, 0x400, 0x0, 0x8, 0x3, 0x0, 0x7fff, 0x7ff, 0x1, 0x0, 0x0, 0x4, 0x6, 0x5, 0x4, 0x5670026c, 0xe9, 0x10001, 0x2, 0x4, 0x80, 0x9, 0x3, 0x1fbe, 0x8000, 0x2e69, 0x5, 0x4, 0x800, 0x7, 0x80000001, 0x6, 0x8, 0x6, 0x8, 0x7aa892dd, 0xe7e, 0x9, 0xffffffff, 0x6, 0x24, 0x3, 0x3, 0xfffffffb, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7, 0x800, 0x6, 0x200, 0x9, 0x3, 0x3, 0x3, 0x7, 0x7, 0x1bb2, 0x10, 0x8834, 0x8001, 0x6, 0xff, 0x7ff, 0x7, 0x7fff, 0x100, 0x7, 0x7, 0x1, 0x7, 0x8, 0x4, 0x4, 0x7fff, 0x6, 0x1, 0xfff, 0x2, 0x7, 0x7, 0x8, 0x8000, 0x7, 0xa, 0x8, 0x0, 0x5, 0x4, 0x4, 0x1, 0xffff0000, 0x0, 0xab1, 0x44, 0x7, 0x3, 0x7fffffff, 0x8000, 0x81, 0x6, 0x4, 0xe, 0xffffffff, 0x3, 0x3, 0x1, 0x8, 0x7, 0x10, 0x101, 0x7, 0xc, 0x8, 0x9, 0xffffffff, 0xd, 0x0, 0x80000001, 0x8, 0x9, 0x7, 0x7, 0x5, 0xf7, 0x5, 0x7, 0xfffffffe, 0x7, 0x1, 0x1d8, 0x9, 0x3, 0x4, 0x1, 0x80000000, 0x1, 0x9, 0x2, 0x4, 0x69, 0x4, 0x1, 0x401, 0x6, 0xd, 0x2, 0xcb, 0x2, 0x101, 0xf3, 0x7f, 0x10b2913a, 0xfffffffd, 0x5, 0x800, 0x200, 0x8, 0x3, 0xffffffff, 0x5, 0xe, 0xc13, 0xb, 0x5845, 0x7, 0x6, 0x5, 0x8f88, 0x6, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x9, 0x8, 0x400, {0x15, 0x1, 0x5da, 0x0, 0x7, 0x7}, {0x95, 0x2, 0x4, 0x81, 0x7, 0x3}, 0x9, 0x8e, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xeb1, 0x4, 0x2, {0x7, 0x2, 0x80, 0x4, 0xff}, {0xf8, 0x1, 0x6, 0x4, 0x800, 0x8980}, 0x5, 0x8, 0x5c}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000000, 0x4, 0xafa, 0xb, 0x40, 0xe7, 0x3, 0xc4, 0x480000, 0x6, 0x8d1, 0xffffff01, 0x5, 0x9, 0x2, 0x2, 0x949, 0x2, 0x4, 0x2, 0x36, 0xfff, 0xffffffd3, 0x4, 0x6, 0x6e1, 0x1, 0xf305, 0x6, 0x9, 0x7f, 0x401, 0xcf88, 0xffffffff, 0xfffffffd, 0x4, 0x9, 0x3, 0x1, 0x8, 0x2, 0x5, 0x5, 0x80000000, 0x647, 0x8, 0x80000000, 0x9, 0x10000, 0x8, 0xbeba11f6, 0x9, 0x0, 0x8, 0xfffffff6, 0x3, 0x9, 0x7, 0x4, 0x8, 0x8000, 0x93, 0x0, 0x9, 0x8, 0x4, 0x4, 0xfffff9d5, 0xe, 0xffff4488, 0xc0000000, 0x2, 0x4, 0x46, 0x1ff, 0x1000, 0x9, 0x5, 0xffffffff, 0x9, 0xfffff615, 0x8000, 0x7ff, 0x100, 0x1000, 0xffffffff, 0x8e2, 0x5de, 0x6, 0x8, 0xffff0001, 0x3, 0x80000001, 0x1, 0xf, 0x8, 0x8001, 0x9, 0x6, 0xfffffffb, 0x0, 0x9, 0x58, 0x400, 0xfffffff8, 0xa1d, 0x1, 0x7, 0x5, 0x4, 0x8c6a, 0x2, 0xf, 0x1, 0x5, 0x10001, 0x1, 0x7, 0x5c, 0x2, 0x5, 0x2, 0x329, 0x9, 0x101, 0x0, 0x6, 0x9, 0x2, 0x80000001, 0x7ff, 0x5, 0xab4, 0x80000001, 0x3, 0x2, 0x7, 0x2, 0xfffffffc, 0x800, 0xffffffff, 0xa, 0x10000, 0x9, 0x3, 0xdf82, 0x1ff, 0x1, 0x7, 0xd, 0x3, 0x81, 0x5, 0x3, 0x1, 0x4, 0x7, 0x2, 0x0, 0x80, 0xfffffff9, 0x3, 0x4, 0x1, 0x3, 0xffffffff, 0x6, 0x4, 0x87ab, 0x80000001, 0x2, 0x81, 0x4, 0x1, 0xff, 0x41, 0xfffffff9, 0x9, 0x7, 0x32, 0xffff50a9, 0x8, 0x7, 0x7, 0x0, 0x3, 0x7, 0x200, 0xe7, 0x1, 0x101, 0x6a, 0x1, 0x4, 0x10000, 0xb169, 0xfff, 0xab49, 0x86cd, 0xb40, 0x100, 0x7fffffff, 0x6, 0x3, 0x2, 0x4, 0x200, 0x5, 0x100, 0x3, 0x7, 0x3, 0x7, 0x8, 0xfff, 0xf4, 0x65184685, 0x2, 0x32a, 0x1, 0x6, 0x8001, 0x800, 0x7, 0x0, 0x4, 0x502a2b2c, 0xffffffff, 0x2, 0x7e, 0x100000, 0x800, 0x5, 0xa, 0x2, 0x7, 0x0, 0x8, 0xfffffff8, 0x0, 0x64, 0x354c, 0x6, 0x80, 0x6, 0x80000000, 0xc000000, 0xe0000, 0x833c, 0xdedf, 0x800, 0x3, 0xaad, 0x7, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4adb, 0x9ee, 0x4, 0x200, 0x7, 0x3, 0x0, 0xc, 0xf7, 0x4, 0xc, 0x60, 0xb, 0x7, 0x6, 0x1, 0x0, 0xb, 0xf, 0x340, 0x0, 0xca, 0x3, 0x9, 0x4, 0xde, 0x7, 0x8, 0x2, 0xfffffffc, 0x3, 0x463, 0x9, 0x3, 0x2, 0x3ff, 0xcf, 0x9, 0x2, 0xfffffffa, 0x4, 0x10, 0x2, 0x7, 0x1520, 0x6, 0x8001, 0x2, 0x4, 0x8, 0x5, 0x80000001, 0xfffffc01, 0x5, 0x3da2, 0x6, 0x6, 0x0, 0x6, 0x4, 0x6, 0x0, 0x1, 0xede, 0x7, 0x0, 0x0, 0x0, 0xfffff428, 0x8, 0x2, 0x6, 0x68, 0xa1, 0x5, 0x6e, 0x4, 0x80000000, 0x8, 0xff, 0x4, 0x6, 0x7, 0xca8f, 0x4, 0x7941, 0xd3c0bf5, 0x1, 0x9, 0x800, 0x9, 0x9, 0x7fffffff, 0x6, 0x1, 0x2, 0x8, 0xfffffff9, 0x0, 0x8, 0x6d042069, 0x100, 0x8, 0x5, 0xc470, 0xfffffffc, 0xb, 0x80000000, 0x7, 0x6, 0x3, 0xf7, 0x100, 0x667d475e, 0x8, 0xba, 0x6, 0x1, 0x800, 0x8, 0x5, 0x2000000, 0x5, 0x0, 0xd, 0x1000, 0x9, 0xef7c, 0x3, 0x1000, 0xfffffffd, 0x70b, 0x90e2, 0x5, 0x8, 0x9, 0x6, 0x619e, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8000, 0x4, 0x6, 0xfffffffb, 0x9, 0xf, 0x5, 0x9, 0x6, 0xeda9, 0x2c, 0x81, 0x81, 0xfffffe01, 0x9, 0x2, 0x7f6, 0x7, 0x6, 0x7, 0x2, 0x7, 0xead, 0xfffffffb, 0x9, 0xb9d, 0x4, 0xc393, 0x4, 0xde, 0xc0, 0xbc6, 0x6, 0x1ff, 0x5, 0x8, 0xd, 0x3, 0x6fd, 0x6, 0x2, 0x3, 0x15, 0x3, 0x0, 0x6, 0x0, 0xa0, 0x10, 0x8, 0x9, 0x6, 0x9bbe, 0xd, 0x3, 0x8, 0x7, 0xd, 0xfb3, 0xb, 0x0, 0x8000, 0x45, 0x0, 0x4, 0xb91, 0x1ff, 0x2, 0xc2, 0x8, 0x40, 0x6, 0x0, 0x8, 0x4, 0x9, 0x1, 0x0, 0x3, 0x8, 0x401, 0xa5ec, 0x7, 0x6, 0x1ff, 0x1, 0x4, 0xfffffffd, 0x9, 0x1, 0x9, 0x7ff, 0x5, 0x5, 0x3, 0x1, 0x8, 0xfffffff9, 0x2562, 0x3, 0x80000000, 0x36604c28, 0x2, 0x80000000, 0x4, 0x0, 0x3, 0xe, 0x0, 0x1, 0x1, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x9, 0xffffffff, 0x3, {0x5, 0x2, 0xd8a, 0x800, 0x4, 0x6}, {0x6, 0x0, 0x5, 0x524a, 0x1ff, 0x8}, 0x6, 0x200, 0x8}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x8, 0x7ff, 0x3, 0x1, 0xffffff37, 0x200, 0xf, 0x5, 0x9, 0x10001, 0x800, 0x2, 0x10000, 0xb34, 0xab, 0x8f, 0xa3, 0x2, 0x2, 0x9, 0xfffffffc, 0x1, 0xd50, 0x3, 0x10001, 0x4, 0x6, 0xc00, 0x792, 0x3, 0x334, 0x5ea, 0x10, 0x1, 0x80000000, 0x9ef5, 0x7f, 0x7, 0x7, 0x2, 0x4, 0x82, 0x3ff, 0xfffff5f2, 0x8d6, 0x2, 0x9, 0x1, 0x2, 0xde5, 0xff, 0x1, 0xfffffffa, 0x5023, 0x80, 0x3, 0x5, 0x8, 0x0, 0x8, 0xcf40, 0x7, 0x4, 0x9, 0x959e, 0x3ff, 0x40, 0x4, 0x22f, 0x7, 0xffffffe8, 0x0, 0x6, 0x3, 0x739a, 0xaef7, 0x200, 0xfffffff2, 0x10000, 0xa, 0x6, 0x4, 0x1, 0x3, 0x3, 0x3, 0x7, 0x7, 0xf, 0x6, 0x7, 0xf2, 0x3d49, 0x3, 0x400, 0xec, 0x67c, 0x5, 0x7ff, 0x400, 0x8, 0x4, 0x490f, 0x3, 0x6, 0x8, 0xb59, 0x3, 0x6, 0x4, 0x2, 0x6d762aea, 0x8, 0x9, 0x5, 0x4, 0x4, 0x4, 0xda, 0x2, 0x1ff, 0xd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x2, 0x574b, 0x9, 0x2, 0x8, 0x57d, 0x3, 0x5, 0x10, 0x800, 0xffffff80, 0x555, 0x3, 0x2, 0x0, 0x3, 0x3, 0xe, 0x81, 0x1244, 0x9, 0x7ff, 0x8, 0x3ff, 0x0, 0x3, 0x8, 0x80, 0xdac6, 0x2, 0x10000, 0x401, 0x2d, 0xfffffc01, 0xdd, 0x7ff, 0x2766, 0x40f00088, 0x101, 0x7, 0x2, 0xfffffffa, 0x6, 0x10001, 0xfffffff7, 0x0, 0x200, 0x0, 0x6, 0x9, 0x2, 0x4, 0x4, 0x6df, 0xc, 0xe24, 0x4, 0x2, 0xfffffc00, 0xfffffff9, 0x10001, 0xb, 0x3, 0xfffffffe, 0x7, 0x101, 0x80, 0x5, 0x5, 0xac, 0x2552, 0x5, 0xb1, 0x400, 0xffff0001, 0xfffffffc, 0x8, 0x6, 0x17, 0x58, 0x8, 0x3, 0x9, 0x8001, 0x5d3, 0x1000, 0x7f, 0x4, 0x5, 0x1, 0xb5, 0x0, 0x3, 0x6, 0x0, 0x4db29ad8, 0x200, 0x5, 0x0, 0xd58, 0xe, 0x3, 0x5, 0x80000001, 0x401, 0x6, 0xffffff3b, 0xa, 0x2, 0x2, 0x0, 0x4f3, 0x4cb, 0x8, 0x7ff, 0x5, 0x9, 0x8, 0x2e50, 0x753, 0x0, 0x7, 0x4, 0x70, 0x1, 0x7f, 0x4, 0x26b]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x90, 0x5a14, 0x0, 0x7, 0x2, 0x1, 0x1, 0x8, 0x9, 0x401, 0x7f, 0x0, 0x5, 0x81, 0x275e, 0xee2f, 0xf8, 0x2b, 0x3, 0x86, 0x4, 0xffffff01, 0x1, 0x8, 0x800, 0x1, 0x80000000, 0x7, 0x4, 0xfffeffff, 0x101, 0x9, 0x6, 0xc15, 0xfffffffb, 0x2, 0x2, 0xff8, 0x2, 0x80, 0x936, 0x7, 0xfffffffe, 0x0, 0x800, 0x697, 0x1, 0x0, 0x1372, 0xffffff01, 0x3, 0x4, 0x7fff, 0xca2c, 0xb558, 0x5, 0xf, 0x7ff, 0x6, 0x8, 0x7, 0x0, 0x4, 0x6900bf44, 0x7fff, 0x52, 0x2, 0x152aaa6, 0xc8f0, 0x7ff, 0xb, 0x800, 0x6, 0xfff, 0x5, 0xf5, 0x68e, 0x180c4d9d, 0x8, 0x425, 0x9, 0xffffffff, 0x7, 0x336, 0xffffffff, 0xb, 0x891, 0x7, 0x5, 0x3e3, 0x4, 0x9, 0x10001, 0x8, 0x7, 0x9, 0x9, 0xa467, 0x1, 0x1, 0x800, 0x5f, 0x4, 0x1, 0x9, 0x4, 0x9, 0x0, 0xa29, 0x4, 0x7, 0x80000001, 0x6, 0x5, 0xfffffffd, 0x5, 0x82, 0xfffffffa, 0xfffffffe, 0xffffff0e, 0x7, 0x280, 0x100, 0x100, 0xed0, 0x0, 0x73, 0x5, 0x0, 0x8, 0x1, 0x4, 0x6, 0x2, 0xc, 0x0, 0x7, 0x5, 0x1, 0x7, 0x7, 0x1, 0x80, 0x4, 0x8, 0x8, 0xa53, 0x6, 0x2, 0x2, 0x401, 0x6, 0xd, 0x7, 0x2, 0x7, 0x1, 0x1fe5, 0x0, 0x0, 0xffff0000, 0x4, 0x9, 0x0, 0x3, 0x6, 0x261, 0x401, 0xb, 0x65f6c292, 0x8, 0x785e, 0x9, 0x3, 0x5, 0x4, 0x0, 0x3, 0x1, 0x1, 0xd4c, 0xe, 0x1, 0x7, 0x2, 0x101, 0x8, 0x2, 0x4, 0x40, 0x8, 0xe139, 0x6, 0x9e0, 0xa000, 0xfffffffe, 0x6, 0x3, 0x7ff, 0xb17, 0x200, 0x1e, 0x4, 0x7, 0x7, 0x8cb8, 0x0, 0xfffffffa, 0xd63, 0x8, 0xb39b, 0xffffd559, 0x10, 0x7f, 0x2, 0x1, 0x1, 0x4040, 0x7, 0x8, 0x8, 0x9, 0xf, 0x4, 0x8, 0xb, 0x7, 0xf000, 0x7, 0x0, 0x0, 0x7, 0x7, 0x9, 0x7f, 0x200000, 0x6, 0x81, 0xffff, 0x7ff, 0x1, 0xfffffff7, 0x80000001, 0x8, 0xb0, 0x1ff, 0x5, 0x4, 0x5, 0x101, 0x2, 0x10, 0x80, 0x4]}]]}, {0x27, 0x6, "bf786540d3446a07533da4f6405ca596aab20e41fbe0ff98b39b10b63d6eff6169f8e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1574}, 0x1, 0x0, 0x0, 0x80c8}, 0x20004804) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r10, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x3, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x400}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20044080) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001c000100002000000000000007000000", @ANYRES32=r12, @ANYBLOB="0800b2000a000200aaaaaaaaaa1c0000d361b380fd12525b05c711615b3a528fd7054106eb0cba9c009ca6fc2c1a3e544e93c714668d2482fb6cd5cc6c8d5d2bc4cd4c6283c6fdd22a7a32dabae5019fbc092992d422a799ff33b4303f96efcd388925fa2daa02722fa3a8911893f6c31219f14bb51768e17af3f519924a7cb7b840971a0000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) accept4(r10, 0x0, 0x0, 0x0) (async) accept4(r10, 0x0, 0x0, 0x0) connect$netrom(r10, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="030000000000000000000000fffffffffffffff9", @ANYRES32=r9, @ANYRES32, @ANYBLOB="03000000050000000200"/28], 0x50) 51.69682ms ago: executing program 0 (id=1685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000130400000000599f297316544bb300000000e000000100000000000000000000000020010000000000000a1a013c00000002000000004e24001a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000010000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000003000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000700000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00000100000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}}, 0x0) 0s ago: executing program 0 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x5, 0x4, 0x1}}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): [ 222.529255][T10034] netlink: 'syz.3.1164': attribute type 9 has an invalid length. [ 222.548652][ T9903] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.571739][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.579056][ T9903] bridge_slave_1: entered allmulticast mode [ 222.591942][ T9903] bridge_slave_1: entered promiscuous mode [ 222.647874][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.655357][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.668422][ T9928] bridge_slave_0: entered allmulticast mode [ 222.676857][ T9928] bridge_slave_0: entered promiscuous mode [ 222.686851][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.694249][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.701762][ T9928] bridge_slave_1: entered allmulticast mode [ 222.711063][ T9928] bridge_slave_1: entered promiscuous mode [ 222.721931][ T9903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.778540][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.792253][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.803970][ T9903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.838504][ T8904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.964323][ T8904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.992068][ T9928] team0: Port device team_slave_0 added [ 223.004347][ T9928] team0: Port device team_slave_1 added [ 223.016698][ T9903] team0: Port device team_slave_0 added [ 223.026621][T10050] xt_TCPMSS: Only works on TCP SYN packets [ 223.052894][ T9903] team0: Port device team_slave_1 added [ 223.112072][ T8904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.160006][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.174640][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.210429][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.224512][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.233542][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.260556][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.275429][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.283677][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.310049][ T9903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.347372][ T8904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.352243][ T5847] Bluetooth: hci2: command tx timeout [ 223.375183][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.383714][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.420370][ T9903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.568496][ T9928] hsr_slave_0: entered promiscuous mode [ 223.575558][ T9928] hsr_slave_1: entered promiscuous mode [ 223.582211][ T9928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.590147][ T9928] Cannot create hsr debugfs directory [ 223.685627][ T9903] hsr_slave_0: entered promiscuous mode [ 223.707214][ T9903] hsr_slave_1: entered promiscuous mode [ 223.718534][ T9903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.729088][ T9903] Cannot create hsr debugfs directory [ 223.906737][ T8904] bridge_slave_1: left allmulticast mode [ 223.912769][ T8904] bridge_slave_1: left promiscuous mode [ 223.918556][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.928781][ T8904] bridge_slave_0: left allmulticast mode [ 223.935031][ T8904] bridge_slave_0: left promiscuous mode [ 223.941554][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.319595][ T8904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.335942][ T8904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.346381][ T8904] bond0 (unregistering): Released all slaves [ 224.554598][ T5847] Bluetooth: hci1: command tx timeout [ 224.708414][ T8904] hsr_slave_0: left promiscuous mode [ 224.722201][ T8904] hsr_slave_1: left promiscuous mode [ 224.731604][ T8904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.739196][ T8904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.750690][ T8904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.758533][ T8904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.781890][ T8904] veth1_macvtap: left promiscuous mode [ 224.787471][ T8904] veth0_macvtap: left promiscuous mode [ 224.793607][ T8904] veth1_vlan: left promiscuous mode [ 224.799018][ T8904] veth0_vlan: left promiscuous mode [ 224.820981][T10086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1178'. [ 225.377129][ T8904] team0 (unregistering): Port device team_slave_1 removed [ 225.416036][ T8904] team0 (unregistering): Port device team_slave_0 removed [ 225.429822][ T5847] Bluetooth: hci2: command tx timeout [ 226.022806][T10103] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20000 [ 226.063408][T10104] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1182'. [ 226.339003][ T9928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.363359][ T9928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.397481][ T9928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.410660][ T9928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.416218][T10115] can: request_module (can-proto-4) failed. [ 226.505858][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 226.609395][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.629903][ T5847] Bluetooth: hci1: command tx timeout [ 226.668784][ T9928] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.692568][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 226.707148][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.714411][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.771407][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.778625][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.824070][ T9903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.849383][ T9903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.862216][ T9903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.881865][ T9903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.098551][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.130318][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.189634][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.196856][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.265636][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.272916][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.445685][ T9903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.509608][ T5847] Bluetooth: hci2: command tx timeout [ 227.523984][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.731715][ T9928] veth0_vlan: entered promiscuous mode [ 227.812860][ T9928] veth1_vlan: entered promiscuous mode [ 227.997250][ T9928] veth0_macvtap: entered promiscuous mode [ 228.060001][ T9928] veth1_macvtap: entered promiscuous mode [ 228.158896][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.183423][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.200005][ T9928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.208778][ T9928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.233869][ T9928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.257806][ T9928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.435412][ T9903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.540984][T10195] netlink: 'syz.0.1203': attribute type 18 has an invalid length. [ 228.609853][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.617744][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.717993][ T6598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.720233][T10201] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 228.734867][T10202] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 228.737181][ T9903] veth0_vlan: entered promiscuous mode [ 228.755178][ T6598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.797172][ T9903] veth1_vlan: entered promiscuous mode [ 228.895616][ T9903] veth0_macvtap: entered promiscuous mode [ 228.915508][ T9903] veth1_macvtap: entered promiscuous mode [ 228.990387][T10209] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1207'. [ 229.011280][T10209] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1207'. [ 229.024267][T10209] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1207'. [ 229.086538][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.135850][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.154386][ T9903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.177450][ T9903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.230081][ T9903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.243341][ T9903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.337301][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.354969][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.406270][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.419526][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.515550][ T6607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.800422][ T6607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.039243][ T6607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.132468][ T6607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.304615][ T6607] bridge_slave_1: left allmulticast mode [ 230.311698][ T6607] bridge_slave_1: left promiscuous mode [ 230.317628][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.332448][ T6607] bridge_slave_0: left allmulticast mode [ 230.338261][ T6607] bridge_slave_0: left promiscuous mode [ 230.345258][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.565508][T10221] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 230.780722][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.788733][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.798648][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.822562][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.843298][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.927171][ T6607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.939106][ T6607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.951152][ T6607] bond0 (unregistering): Released all slaves [ 230.969881][T10221] bond0: (slave team0): Releasing backup interface [ 230.978445][T10221] batman_adv: batadv0: Adding interface: team0 [ 230.985369][T10221] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 231.243476][ T6607] hsr_slave_0: left promiscuous mode [ 231.249665][ T6607] hsr_slave_1: left promiscuous mode [ 231.255716][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.265431][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.302905][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.319680][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.365003][ T6607] veth1_macvtap: left promiscuous mode [ 231.375340][ T6607] veth0_macvtap: left promiscuous mode [ 231.382532][ T6607] veth1_vlan: left promiscuous mode [ 231.382668][T10232] netlink: 'syz.3.1211': attribute type 58 has an invalid length. [ 231.388060][ T6607] veth0_vlan: left promiscuous mode [ 231.439562][T10232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1211'. [ 231.657480][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.666828][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.675039][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.683319][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.693037][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.052631][ T6607] team0 (unregistering): Port device team_slave_1 removed [ 232.115899][ T6607] team0 (unregistering): Port device team_slave_0 removed [ 232.498321][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 232.861439][T10223] chnl_net:caif_netlink_parms(): no params data found [ 232.950133][ T51] Bluetooth: hci1: command tx timeout [ 233.097208][T10268] ipvlan0: left allmulticast mode [ 233.313425][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.340300][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.347568][T10223] bridge_slave_0: entered allmulticast mode [ 233.362464][T10223] bridge_slave_0: entered promiscuous mode [ 233.382686][T10234] chnl_net:caif_netlink_parms(): no params data found [ 233.417303][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.428048][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.449660][T10223] bridge_slave_1: entered allmulticast mode [ 233.457668][T10223] bridge_slave_1: entered promiscuous mode [ 233.678324][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.703530][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.750020][ T51] Bluetooth: hci2: command tx timeout [ 233.827694][T10223] team0: Port device team_slave_0 added [ 233.941624][T10223] team0: Port device team_slave_1 added [ 234.033604][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.045887][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.059031][T10234] bridge_slave_0: entered allmulticast mode [ 234.070718][T10234] bridge_slave_0: entered promiscuous mode [ 234.141189][ T6607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.168767][T10234] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.189630][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.197256][T10234] bridge_slave_1: entered allmulticast mode [ 234.215833][T10234] bridge_slave_1: entered promiscuous mode [ 234.395023][ T6607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.424511][T10319] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 234.480457][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.487524][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.539900][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.553449][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.565630][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.603725][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.622219][T10319] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 234.642858][ T6607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.666161][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 234.718993][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.786107][ T6607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.808584][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.927125][T10234] team0: Port device team_slave_0 added [ 235.041063][ T51] Bluetooth: hci1: command tx timeout [ 235.082510][T10234] team0: Port device team_slave_1 added [ 235.112119][T10349] bridge7: entered promiscuous mode [ 235.129668][T10349] bridge7: entered allmulticast mode [ 235.171157][T10223] hsr_slave_0: entered promiscuous mode [ 235.200835][T10223] hsr_slave_1: entered promiscuous mode [ 235.319991][T10359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 235.330732][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.344656][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.380881][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.394013][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.401527][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.428050][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.711752][ T6607] bridge_slave_1: left allmulticast mode [ 235.717479][ T6607] bridge_slave_1: left promiscuous mode [ 235.732920][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.772472][ T6607] bridge_slave_0: left allmulticast mode [ 235.778334][ T6607] bridge_slave_0: left promiscuous mode [ 235.791697][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.832783][ T5847] Bluetooth: hci2: command tx timeout [ 236.237350][ T6607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.248517][ T6607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.259166][ T6607] bond0 (unregistering): Released all slaves [ 236.278419][T10234] hsr_slave_0: entered promiscuous mode [ 236.286544][T10234] hsr_slave_1: entered promiscuous mode [ 236.293303][T10234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.301104][T10234] Cannot create hsr debugfs directory [ 236.388371][T10390] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 236.420091][T10390] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 236.472388][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 237.008391][ T6607] hsr_slave_0: left promiscuous mode [ 237.014727][ T6607] hsr_slave_1: left promiscuous mode [ 237.027453][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.036637][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.052357][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.060949][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.086952][ T6607] veth1_macvtap: left promiscuous mode [ 237.092683][ T6607] veth0_macvtap: left promiscuous mode [ 237.098304][ T6607] veth1_vlan: left promiscuous mode [ 237.104155][ T6607] veth0_vlan: left promiscuous mode [ 237.120133][ T5847] Bluetooth: hci1: command tx timeout [ 237.429657][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 237.567306][ T6607] team0 (unregistering): Port device team_slave_1 removed [ 237.613922][ T6607] team0 (unregistering): Port device team_slave_0 removed [ 237.920686][ T51] Bluetooth: hci2: command tx timeout [ 238.393655][T10441] netlink: 'syz.3.1265': attribute type 2 has an invalid length. [ 238.742974][T10223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.865713][T10467] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1271'. [ 238.910896][T10461] bond3 (unregistering): Released all slaves [ 238.997133][T10223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.016450][T10477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.097784][T10474] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 239.115690][T10223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.180422][T10223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.189998][ T51] Bluetooth: hci1: command tx timeout [ 239.411310][T10499] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 239.545042][T10506] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1282'. [ 239.568632][T10506] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1282'. [ 239.751158][T10513] xt_hashlimit: invalid interval [ 239.768122][T10234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.811536][T10234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.834704][T10234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.857731][T10234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.990382][ T51] Bluetooth: hci2: command tx timeout [ 240.043245][T10532] netlink: 'syz.4.1288': attribute type 2 has an invalid length. [ 240.047562][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.058969][T10532] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1288'. [ 240.088720][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.183153][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.190401][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.242388][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.249632][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.412484][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.434316][T10548] C: renamed from lo [ 240.458153][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 240.495033][T10234] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.523983][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.531258][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.600085][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.607344][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.656107][T10556] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1295'. [ 240.897618][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.045011][T10223] veth0_vlan: entered promiscuous mode [ 241.091313][T10574] netlink: 'syz.3.1299': attribute type 11 has an invalid length. [ 241.116263][T10223] veth1_vlan: entered promiscuous mode [ 241.236047][T10223] veth0_macvtap: entered promiscuous mode [ 241.281976][T10223] veth1_macvtap: entered promiscuous mode [ 241.349107][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.381734][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.423655][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.437696][T10584] netlink: 'syz.4.1303': attribute type 7 has an invalid length. [ 241.472469][T10223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.485799][T10589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1305'. [ 241.498876][T10223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.530002][T10223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.538784][T10223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.707374][T10234] veth0_vlan: entered promiscuous mode [ 241.782555][T10234] veth1_vlan: entered promiscuous mode [ 241.848357][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.866962][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.935956][T10234] veth0_macvtap: entered promiscuous mode [ 241.990118][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.009804][T10234] veth1_macvtap: entered promiscuous mode [ 242.015627][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.108372][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.121315][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.167285][T10234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.183808][T10234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.196610][T10234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.205770][T10234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.383181][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.410851][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.421170][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 242.447059][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.455249][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.742224][ T6582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.877973][ T6582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.099227][ T6582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.233603][T10626] netlink: 'syz.0.1318': attribute type 11 has an invalid length. [ 243.245820][T10626] netlink: 'syz.0.1318': attribute type 4 has an invalid length. [ 243.256935][T10626] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1318'. [ 243.297641][ T6582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.489823][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.499397][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.508852][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.518325][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.526590][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.552315][ T6582] bridge_slave_1: left allmulticast mode [ 243.558031][ T6582] bridge_slave_1: left promiscuous mode [ 243.564546][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.574367][ T6582] bridge_slave_0: left allmulticast mode [ 243.582311][ T6582] bridge_slave_0: left promiscuous mode [ 243.589244][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.939826][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.951980][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.964255][ T6582] bond0 (unregistering): Released all slaves [ 244.270542][ T6582] hsr_slave_0: left promiscuous mode [ 244.292394][ T6582] hsr_slave_1: left promiscuous mode [ 244.298638][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.308722][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.355815][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.367412][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.388391][T10644] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1319'. [ 244.409069][ T6582] veth1_macvtap: left promiscuous mode [ 244.433178][ T6582] veth0_macvtap: left promiscuous mode [ 244.454021][ T6582] veth1_vlan: left promiscuous mode [ 244.464917][ T6582] veth0_vlan: left promiscuous mode [ 244.525450][T10650] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1323'. [ 244.726581][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.753707][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.763197][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.771935][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.780824][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.106478][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 245.149377][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 245.590482][ T51] Bluetooth: hci1: command tx timeout [ 245.718752][T10629] chnl_net:caif_netlink_parms(): no params data found [ 245.777056][T10663] netlink: 'syz.3.1325': attribute type 5 has an invalid length. [ 245.805708][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 246.076283][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.086169][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.110479][T10629] bridge_slave_0: entered allmulticast mode [ 246.118172][T10629] bridge_slave_0: entered promiscuous mode [ 246.132271][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.142046][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.150590][T10629] bridge_slave_1: entered allmulticast mode [ 246.157928][T10629] bridge_slave_1: entered promiscuous mode [ 246.179143][T10677] 8021q: VLANs not supported on wg2 [ 246.184878][T10681] netlink: 'syz.0.1331': attribute type 3 has an invalid length. [ 246.186170][T10677] IPVS: set_ctl: invalid protocol: 58 172.30.1.4:20003 [ 246.305235][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 246.308505][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.447435][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.545055][T10629] team0: Port device team_slave_0 added [ 246.590433][T10629] team0: Port device team_slave_1 added [ 246.725395][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.736921][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.765958][T10696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1336'. [ 246.777364][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.869879][ T5847] Bluetooth: hci2: command tx timeout [ 246.896358][ T6582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.915982][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.923202][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.951667][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.960323][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 246.977277][T10709] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 247.023846][T10709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.098606][T10707] bond3: (slave veth5): Enslaving as an active interface with a down link [ 247.180462][ T6582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.243526][T10723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1342'. [ 247.254024][T10629] hsr_slave_0: entered promiscuous mode [ 247.259834][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1340'. [ 247.268951][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.291125][T10629] hsr_slave_1: entered promiscuous mode [ 247.307112][T10655] chnl_net:caif_netlink_parms(): no params data found [ 247.399230][ T6582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.543312][ T6582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.607631][T10738] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1344'. [ 247.647421][T10740] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 247.670435][ T5847] Bluetooth: hci1: command tx timeout [ 247.776678][T10740] syzkaller1: entered promiscuous mode [ 247.794481][T10740] syzkaller1: entered allmulticast mode [ 247.963020][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.970546][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.979969][T10655] bridge_slave_0: entered allmulticast mode [ 247.987844][T10655] bridge_slave_0: entered promiscuous mode [ 248.054919][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.071129][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.078430][T10655] bridge_slave_1: entered allmulticast mode [ 248.101270][T10759] netlink: 'syz.0.1350': attribute type 23 has an invalid length. [ 248.101430][T10655] bridge_slave_1: entered promiscuous mode [ 248.368069][T10763] netlink: 'syz.0.1350': attribute type 23 has an invalid length. [ 248.370497][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.465566][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.663609][ T6582] bridge_slave_1: left allmulticast mode [ 248.671391][ T6582] bridge_slave_1: left promiscuous mode [ 248.682371][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.693599][ T6582] bridge_slave_0: left allmulticast mode [ 248.702311][ T6582] bridge_slave_0: left promiscuous mode [ 248.708267][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.951338][ T5847] Bluetooth: hci2: command tx timeout [ 249.177023][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.200093][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.221356][ T6582] bond0 (unregistering): Released all slaves [ 249.271720][T10655] team0: Port device team_slave_0 added [ 249.325099][T10655] team0: Port device team_slave_1 added [ 249.569912][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1362'. [ 249.583450][T10812] netlink: 'syz.3.1362': attribute type 7 has an invalid length. [ 249.594082][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.604579][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.629569][T10812] netlink: 'syz.3.1362': attribute type 8 has an invalid length. [ 249.631007][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.653212][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 249.706254][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.729366][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.755942][ T5847] Bluetooth: hci1: command tx timeout [ 249.764409][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.974123][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 250.131883][T10655] hsr_slave_0: entered promiscuous mode [ 250.158067][T10655] hsr_slave_1: entered promiscuous mode [ 250.184594][T10655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.207298][T10655] Cannot create hsr debugfs directory [ 250.227963][ T6582] hsr_slave_0: left promiscuous mode [ 250.235128][T10841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.246557][ T6582] hsr_slave_1: left promiscuous mode [ 250.260221][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.267827][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.284891][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.293850][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.347720][ T6582] veth1_macvtap: left promiscuous mode [ 250.354351][ T6582] veth0_macvtap: left promiscuous mode [ 250.360656][ T6582] veth1_vlan: left promiscuous mode [ 250.366170][ T6582] veth0_vlan: left promiscuous mode [ 250.899672][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 250.942423][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 251.031767][ T5847] Bluetooth: hci2: command tx timeout [ 251.818591][T10869] team0: MTU too low for tipc bearer [ 251.827286][T10869] tipc: Enabling of bearer rejected, failed to enable media [ 251.836267][ T5847] Bluetooth: hci1: command tx timeout [ 251.919057][T10629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.944180][T10869] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 252.020365][T10629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.059315][T10629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.089587][T10883] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 252.097471][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 252.110718][T10629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.226927][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 252.585604][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.636895][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.657044][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.664413][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.690598][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.697882][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.793206][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 252.883904][T10655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.911170][T10655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.943251][T10655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.966059][T10655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.115025][ T5847] Bluetooth: hci2: command tx timeout [ 253.315005][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.357847][T10923] nbd: must specify a size in bytes for the device [ 253.396517][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.433009][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.465438][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.472709][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.507276][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.514541][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.533424][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 253.652113][T10933] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 253.656692][T10629] veth0_vlan: entered promiscuous mode [ 253.713339][T10629] veth1_vlan: entered promiscuous mode [ 253.793372][T10629] veth0_macvtap: entered promiscuous mode [ 253.818393][T10629] veth1_macvtap: entered promiscuous mode [ 253.883963][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.923245][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.953639][T10629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.971119][T10629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.000532][T10629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.014481][T10629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.302777][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.333083][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.403495][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.426965][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.443532][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.525951][T10954] C: entered promiscuous mode [ 254.548298][T10954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.557413][ T8906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.677804][T10655] veth0_vlan: entered promiscuous mode [ 255.703159][T10655] veth1_vlan: entered promiscuous mode [ 255.756119][T10962] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1401'. [ 255.776134][T10655] veth0_macvtap: entered promiscuous mode [ 255.803174][T10655] veth1_macvtap: entered promiscuous mode [ 255.853703][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.868183][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.885539][T10655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.896138][T10655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.905308][T10655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.914586][T10655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.005444][ T8906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.026964][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.043855][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.077709][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.086609][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.408934][ T8906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.515489][ T8906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.623759][ T8906] bridge_slave_1: left allmulticast mode [ 256.629711][ T8906] bridge_slave_1: left promiscuous mode [ 256.635527][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.646411][ T8906] bridge_slave_0: left allmulticast mode [ 256.652526][ T8906] bridge_slave_0: left promiscuous mode [ 256.658277][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.807695][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'. [ 257.399273][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.408553][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.423438][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.444601][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.452934][ T8906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.462051][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.479082][ T8906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.497438][ T8906] bond0 (unregistering): Released all slaves [ 257.521767][T10965] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 257.852587][ T8906] hsr_slave_0: left promiscuous mode [ 257.858889][ T8906] hsr_slave_1: left promiscuous mode [ 257.870747][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.878231][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.888983][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.896984][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.919912][ T8906] veth1_macvtap: left promiscuous mode [ 257.925528][ T8906] veth0_macvtap: left promiscuous mode [ 257.931744][ T8906] veth1_vlan: left promiscuous mode [ 257.937082][ T8906] veth0_vlan: left promiscuous mode [ 258.397070][ T8906] team0 (unregistering): Port device team_slave_1 removed [ 258.446630][ T8906] team0 (unregistering): Port device team_slave_0 removed [ 259.053593][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.068670][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.077733][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.094084][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.105215][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.410438][T10980] chnl_net:caif_netlink_parms(): no params data found [ 259.516172][ T51] Bluetooth: hci1: command tx timeout [ 259.758485][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.773045][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.788097][T11027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1413'. [ 259.798910][T10980] bridge_slave_0: entered allmulticast mode [ 259.807877][T10980] bridge_slave_0: entered promiscuous mode [ 259.818675][T11023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1414'. [ 259.828561][T11023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1414'. [ 259.844987][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.853439][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.900340][T10980] bridge_slave_1: entered allmulticast mode [ 259.908303][T10980] bridge_slave_1: entered promiscuous mode [ 260.054380][T10980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.124963][T10980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.326259][T10980] team0: Port device team_slave_0 added [ 260.346776][T10980] team0: Port device team_slave_1 added [ 260.378827][T11007] chnl_net:caif_netlink_parms(): no params data found [ 260.457298][T11052] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 260.487258][T10980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.496464][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.523527][T10980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.582176][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1423'. [ 260.601169][T10980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.608708][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.688596][T10980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.836049][ T8906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.973202][ T8906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.162697][T10980] hsr_slave_0: entered promiscuous mode [ 261.179248][T10980] hsr_slave_1: entered promiscuous mode [ 261.190811][ T51] Bluetooth: hci2: command tx timeout [ 261.251935][ T8906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.268890][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.278328][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.288348][T11007] bridge_slave_0: entered allmulticast mode [ 261.298886][T11007] bridge_slave_0: entered promiscuous mode [ 261.313352][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.343527][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.353265][T11007] bridge_slave_1: entered allmulticast mode [ 261.376012][T11007] bridge_slave_1: entered promiscuous mode [ 261.390323][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 261.457583][ T8906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.589679][ T51] Bluetooth: hci1: command tx timeout [ 261.602360][T11108] xt_time: unknown flags 0x4 [ 261.613857][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.702054][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.728572][T11112] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 261.737340][T11112] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1437'. [ 261.748129][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 261.923647][T11007] team0: Port device team_slave_0 added [ 261.954703][T11007] team0: Port device team_slave_1 added [ 262.133722][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.145521][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.173234][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.230406][T11130] netlink: 'syz.3.1442': attribute type 10 has an invalid length. [ 262.256810][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.270906][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.303775][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.324431][T11136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1443'. [ 262.335610][ T8906] bridge_slave_1: left allmulticast mode [ 262.346305][ T8906] bridge_slave_1: left promiscuous mode [ 262.352801][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.365144][ T8906] bridge_slave_0: left allmulticast mode [ 262.371346][ T8906] bridge_slave_0: left promiscuous mode [ 262.377112][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.754412][ T8906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.768070][ T8906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.792176][ T8906] bond0 (unregistering): Released all slaves [ 262.826803][T11130] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 262.906795][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1443'. [ 263.119076][T11149] netlink: 'syz.3.1448': attribute type 10 has an invalid length. [ 263.160112][T11149] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 263.170548][T11149] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.215006][T11007] hsr_slave_0: entered promiscuous mode [ 263.238858][T11007] hsr_slave_1: entered promiscuous mode [ 263.257141][T11007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.265518][T11007] Cannot create hsr debugfs directory [ 263.271098][ T51] Bluetooth: hci2: command tx timeout [ 263.351301][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 263.480347][T11161] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 263.535676][ T8906] hsr_slave_0: left promiscuous mode [ 263.549799][ T8906] hsr_slave_1: left promiscuous mode [ 263.556103][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.564914][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.575025][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.583051][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.623942][ T8906] veth1_macvtap: left promiscuous mode [ 263.632826][ T8906] veth0_macvtap: left promiscuous mode [ 263.638550][ T8906] veth1_vlan: left promiscuous mode [ 263.647444][ T8906] veth0_vlan: left promiscuous mode [ 263.669595][ T51] Bluetooth: hci1: command tx timeout [ 263.725140][T11167] netlink: 'syz.3.1454': attribute type 13 has an invalid length. [ 263.733393][T11167] netlink: 'syz.3.1454': attribute type 58 has an invalid length. [ 263.741739][T11167] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1454'. [ 263.981641][T11171] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1454'. [ 264.022486][T11173] sctp: [Deprecated]: syz.0.1455 (pid 11173) Use of int in max_burst socket option. [ 264.022486][T11173] Use struct sctp_assoc_value instead [ 264.235591][ T8906] team0 (unregistering): Port device team_slave_1 removed [ 264.285268][ T8906] team0 (unregistering): Port device team_slave_0 removed [ 264.867310][T11176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1456'. [ 264.923584][T11177] vxcan1: entered allmulticast mode [ 264.935694][T11176] vxcan1: left allmulticast mode [ 265.099250][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1460'. [ 265.137490][T10980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.162869][T10980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.205158][T10980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.283901][T10980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.349756][ T51] Bluetooth: hci2: command tx timeout [ 265.521339][T11209] netlink: 'syz.0.1464': attribute type 27 has an invalid length. [ 265.581244][T10980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.648199][T10980] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.705797][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.713076][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.771941][ T51] Bluetooth: hci1: command tx timeout [ 265.821249][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.828496][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.034975][T11007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.088758][T11007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.143917][T11007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.173352][T11007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.481980][T10980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.500528][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.506397][T11254] __nla_validate_parse: 1 callbacks suppressed [ 266.506418][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 266.534126][T11254] macvlan4: entered promiscuous mode [ 266.549931][T11254] macvlan4: entered allmulticast mode [ 266.570205][T11254] batadv0: entered promiscuous mode [ 266.576391][T11254] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 266.617041][T11254] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 266.652122][T11258] batman_adv: batadv0: Adding interface: netdevsim0 [ 266.658906][T11258] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.686926][T11258] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 266.732042][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.792570][T10980] veth0_vlan: entered promiscuous mode [ 266.848311][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.855594][ T8904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.875970][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.883150][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.899071][T10980] veth1_vlan: entered promiscuous mode [ 266.923219][T11272] vxcan1: tx address claim with dest, not broadcast [ 266.960448][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 267.018616][T10980] veth0_macvtap: entered promiscuous mode [ 267.046742][T10980] veth1_macvtap: entered promiscuous mode [ 267.098522][T10980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.116623][T10980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.147950][T10980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.178219][T10980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.189732][T10980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.205884][T10980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.366940][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.383816][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.425448][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.431461][ T51] Bluetooth: hci2: command tx timeout [ 267.446515][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.464353][T11007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.474738][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1485'. [ 267.487996][T11284] bridge_slave_0: default FDB implementation only supports local addresses [ 267.618643][T11287] tipc: Can't bind to reserved service type 0 [ 267.641859][T11007] veth0_vlan: entered promiscuous mode [ 267.659175][T11007] veth1_vlan: entered promiscuous mode [ 267.742614][T11007] veth0_macvtap: entered promiscuous mode [ 267.756092][T11007] veth1_macvtap: entered promiscuous mode [ 267.807198][T11007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.828971][T11007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.894456][T11007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.928371][T11007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.941884][T11007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.953260][T11007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.053620][T11302] netlink: 'syz.4.1492': attribute type 4 has an invalid length. [ 268.121045][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'. [ 268.137251][T11302] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1492'. [ 268.147402][ T8904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.158439][ T8904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.168095][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 268.426085][ T6622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.505662][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.527210][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.760575][ T6622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.178527][ T6622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.328577][ T6622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.479746][ T6622] bridge_slave_1: left allmulticast mode [ 269.485579][ T6622] bridge_slave_1: left promiscuous mode [ 269.491975][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.508131][ T6622] bridge_slave_0: left allmulticast mode [ 269.529655][ T6622] bridge_slave_0: left promiscuous mode [ 269.535485][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.796777][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.812380][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.825309][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.834775][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.845175][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.954402][ T6622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.966180][ T6622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.976226][ T6622] bond0 (unregistering): Released all slaves [ 270.267429][ T6622] hsr_slave_0: left promiscuous mode [ 270.273842][ T6622] hsr_slave_1: left promiscuous mode [ 270.282100][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.290526][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.298481][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.306745][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.327735][ T6622] veth1_macvtap: left promiscuous mode [ 270.334243][ T6622] veth0_macvtap: left promiscuous mode [ 270.340386][ T6622] veth1_vlan: left promiscuous mode [ 270.345720][ T6622] veth0_vlan: left promiscuous mode [ 270.879590][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1498'. [ 271.069695][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 271.166270][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.187067][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.219257][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.230420][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.238536][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.239548][ T6622] team0 (unregistering): Port device team_slave_0 removed [ 271.873427][T11326] chnl_net:caif_netlink_parms(): no params data found [ 271.914236][ T5847] Bluetooth: hci1: command tx timeout [ 272.177535][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.185461][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.200835][T11326] bridge_slave_0: entered allmulticast mode [ 272.209077][T11326] bridge_slave_0: entered promiscuous mode [ 272.231666][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.239356][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.247745][T11326] bridge_slave_1: entered allmulticast mode [ 272.256400][T11326] bridge_slave_1: entered promiscuous mode [ 272.458836][T11326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.497474][T11326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.648137][T11326] team0: Port device team_slave_0 added [ 272.677845][T11326] team0: Port device team_slave_1 added [ 272.683769][T11379] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1508'. [ 272.748846][T11326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.766436][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.813283][T11326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.845134][T11326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.853376][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.880210][T11326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.909180][T11344] chnl_net:caif_netlink_parms(): no params data found [ 272.952931][T11390] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 272.967511][T11390] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1510'. [ 273.036132][ T6622] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.087793][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 273.105000][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 273.108205][T11326] hsr_slave_0: entered promiscuous mode [ 273.141937][T11326] hsr_slave_1: entered promiscuous mode [ 273.211980][ T6622] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.270973][ T5847] Bluetooth: hci2: command tx timeout [ 273.395014][ T6622] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.427360][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1513'. [ 273.498074][ T6622] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.574359][T11344] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.586274][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.594252][T11344] bridge_slave_0: entered allmulticast mode [ 273.603301][T11344] bridge_slave_0: entered promiscuous mode [ 273.695945][T11344] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.711076][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.729627][T11344] bridge_slave_1: entered allmulticast mode [ 273.745968][T11344] bridge_slave_1: entered promiscuous mode [ 273.932335][T11344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.934967][T11418] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1516'. [ 273.985679][T11418] bridge_slave_1: left allmulticast mode [ 273.990007][ T5847] Bluetooth: hci1: command tx timeout [ 274.036362][T11344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.162129][T11344] team0: Port device team_slave_0 added [ 274.216188][T11344] team0: Port device team_slave_1 added [ 274.239280][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 274.294293][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 274.352992][T11433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1521'. [ 274.627947][T11344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.635423][T11344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.662709][T11344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.696705][ T6622] bridge_slave_1: left allmulticast mode [ 274.716235][ T6622] bridge_slave_1: left promiscuous mode [ 274.730535][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.766741][ T6622] bridge_slave_0: left allmulticast mode [ 274.777949][ T6622] bridge_slave_0: left promiscuous mode [ 274.785810][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.813408][T11451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.221913][T11470] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 275.350499][ T5847] Bluetooth: hci2: command tx timeout [ 275.397034][ T6622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.411882][ T6622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.432794][ T6622] bond0 (unregistering): Released all slaves [ 275.466504][T11344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.474622][T11344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.501649][T11344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.685073][T11483] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 275.738589][T11483] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1538'. [ 275.758028][T11344] hsr_slave_0: entered promiscuous mode [ 275.767607][T11344] hsr_slave_1: entered promiscuous mode [ 275.787900][T11344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.799923][T11344] Cannot create hsr debugfs directory [ 276.069913][ T5847] Bluetooth: hci1: command tx timeout [ 276.199846][ T6622] hsr_slave_0: left promiscuous mode [ 276.211989][ T6622] hsr_slave_1: left promiscuous mode [ 276.228385][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.253637][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.265645][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.275859][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.304768][ T6622] veth1_macvtap: left promiscuous mode [ 276.316170][ T6622] veth0_macvtap: left promiscuous mode [ 276.326107][ T6622] veth1_vlan: left promiscuous mode [ 276.336181][ T6622] veth0_vlan: left promiscuous mode [ 277.075536][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.084565][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.102149][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.116696][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.134005][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.150672][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 277.195262][ T6622] team0 (unregistering): Port device team_slave_0 removed [ 277.270980][ T5847] Bluetooth: hci0: command tx timeout [ 277.430031][ T5847] Bluetooth: hci2: command tx timeout [ 277.583171][T11326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.608970][T11326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.666833][T11326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.720899][T11326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.113321][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.150650][ T5847] Bluetooth: hci1: command tx timeout [ 278.177215][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.244223][ T1136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.257347][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.298499][T11517] chnl_net:caif_netlink_parms(): no params data found [ 278.342717][ T1136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.363122][T11326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.411675][ T1136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.468026][T11326] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.513729][ T1136] batman_adv: batadv0: Removing interface: netdevsim0 [ 278.523622][ T1136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.585592][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.592783][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.626722][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.636816][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.644417][T11517] bridge_slave_0: entered allmulticast mode [ 278.652180][T11517] bridge_slave_0: entered promiscuous mode [ 278.671547][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.678754][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.697088][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.708226][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.716905][T11517] bridge_slave_1: entered allmulticast mode [ 278.730420][T11517] bridge_slave_1: entered promiscuous mode [ 278.836955][T11344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.879228][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.923604][T11344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.946898][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.045868][T11344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.058080][T11344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.134147][T11517] team0: Port device team_slave_0 added [ 279.178133][T11558] __nla_validate_parse: 2 callbacks suppressed [ 279.178149][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 279.195305][ T5847] Bluetooth: hci3: command tx timeout [ 279.509752][ T5847] Bluetooth: hci2: command tx timeout [ 279.664688][ T1136] bond0 (unregistering): Released all slaves [ 279.680327][ T1136] bond1 (unregistering): Released all slaves [ 279.771097][ T1136] bond2 (unregistering): Released all slaves [ 279.863983][ T1136] bond3 (unregistering): (slave veth5): Releasing active interface [ 279.873854][ T1136] bond3 (unregistering): Released all slaves [ 279.887839][ T1136] bond4 (unregistering): Released all slaves [ 279.912046][T11517] team0: Port device team_slave_1 added [ 280.116564][ T1136] : left promiscuous mode [ 280.185632][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.202383][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.236081][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.259085][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.266711][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.297353][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.313979][ T1136] tipc: Left network mode [ 280.315401][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 280.488102][T11517] hsr_slave_0: entered promiscuous mode [ 280.504637][T11517] hsr_slave_1: entered promiscuous mode [ 280.516293][T11517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.525109][T11517] Cannot create hsr debugfs directory [ 280.610416][T11579] tipc: Enabled bearer , priority 0 [ 280.629323][T11579] syzkaller0: entered promiscuous mode [ 280.635397][T11579] syzkaller0: entered allmulticast mode [ 280.688835][ T1136] hsr_slave_0: left promiscuous mode [ 280.695215][ T1136] hsr_slave_1: left promiscuous mode [ 280.702355][ T1136] batman_adv: batadv0: Removing interface: team0 [ 280.709254][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.718234][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.726811][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.734679][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.751368][ T1136] veth0_macvtap: left promiscuous mode [ 280.869920][ T1136] pim6reg527 (unregistering): left allmulticast mode [ 281.106026][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 281.146300][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 281.269740][ T5847] Bluetooth: hci3: command tx timeout [ 281.525335][T11584] tipc: Resetting bearer [ 281.533606][T11578] tipc: Resetting bearer [ 281.549279][T11578] tipc: Disabling bearer [ 281.600084][T11326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.836114][T11344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.946894][T11344] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.964785][T11602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1568'. [ 281.970973][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.981065][ T8904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.020062][T11326] veth0_vlan: entered promiscuous mode [ 282.028447][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.035656][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.188881][T11326] veth1_vlan: entered promiscuous mode [ 282.337169][T11326] veth0_macvtap: entered promiscuous mode [ 282.376402][T11326] veth1_macvtap: entered promiscuous mode [ 282.465402][T11326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.498349][T11326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.535612][T11326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.550186][T11326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.570488][T11326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.579243][T11326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.595943][T11517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.615609][T11517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.636600][T11615] batadv_slave_1: entered promiscuous mode [ 282.643368][T11615] macsec1: entered promiscuous mode [ 282.650687][T11615] macsec1: entered allmulticast mode [ 282.656118][T11615] batadv_slave_1: entered allmulticast mode [ 282.696593][T11517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.717325][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 282.735497][T11517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.901212][T11344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.964617][ T8904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.975663][ T8904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.075745][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.095192][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.194465][T11344] veth0_vlan: entered promiscuous mode [ 283.216318][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.249955][T11344] veth1_vlan: entered promiscuous mode [ 283.324128][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.348668][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.355859][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.370124][ T5847] Bluetooth: hci3: command tx timeout [ 283.407706][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.414941][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.438995][T11344] veth0_macvtap: entered promiscuous mode [ 283.493686][T11344] veth1_macvtap: entered promiscuous mode [ 283.552191][ T6582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.639324][T11344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.670851][ T6582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.705070][T11344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.794739][ T6582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.851525][T11344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.865272][T11344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.879218][T11344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.888302][T11344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.930744][ T6582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.047938][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.078042][ T6607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.102045][ T6607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.172608][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.196405][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.295160][ T6582] bridge_slave_1: left allmulticast mode [ 284.301184][ T6582] bridge_slave_1: left promiscuous mode [ 284.307038][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.332923][ T6582] bridge_slave_0: left allmulticast mode [ 284.345894][ T6582] bridge_slave_0: left promiscuous mode [ 284.356099][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.656419][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.667797][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.679075][ T6582] bond0 (unregistering): Released all slaves [ 284.870486][T11517] veth0_vlan: entered promiscuous mode [ 284.941699][T11517] veth1_vlan: entered promiscuous mode [ 285.024669][ T6582] hsr_slave_0: left promiscuous mode [ 285.074261][ T6582] hsr_slave_1: left promiscuous mode [ 285.090946][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.098416][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.141347][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.148805][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.210594][ T6582] veth1_macvtap: left promiscuous mode [ 285.216219][ T6582] veth0_macvtap: left promiscuous mode [ 285.225773][ T6582] veth1_vlan: left promiscuous mode [ 285.232014][ T6582] veth0_vlan: left promiscuous mode [ 285.395725][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.411958][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.421248][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.429338][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.437839][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.445041][ T5155] Bluetooth: hci3: command tx timeout [ 285.736943][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 285.776476][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 286.120338][T11517] veth0_macvtap: entered promiscuous mode [ 286.132428][T11517] veth1_macvtap: entered promiscuous mode [ 286.184474][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.212206][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.241793][T11517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.251782][T11517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.261583][T11517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.270490][T11517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.444345][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.458890][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.542935][ T6607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.600038][ T6607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.614023][T11666] x_tables: duplicate underflow at hook 2 [ 286.652714][T11668] x_tables: duplicate underflow at hook 2 [ 286.814731][ T6582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.878300][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1582'. [ 286.916030][T11674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1582'. [ 286.986464][T11657] chnl_net:caif_netlink_parms(): no params data found [ 287.034466][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.039298][ T6582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.047683][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.062638][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.075473][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.084695][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.193139][ T6582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.362724][T11691] netlink: 'syz.0.1585': attribute type 23 has an invalid length. [ 287.382600][ T6582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.509637][ T5847] Bluetooth: hci1: command tx timeout [ 287.545654][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.558579][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.566372][T11657] bridge_slave_0: entered allmulticast mode [ 287.578061][T11657] bridge_slave_0: entered promiscuous mode [ 287.624650][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.635536][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.644974][T11657] bridge_slave_1: entered allmulticast mode [ 287.673508][T11657] bridge_slave_1: entered promiscuous mode [ 287.852053][T11657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.930243][T11657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.027569][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.036523][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.049664][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.058205][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.067087][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.076742][T11657] team0: Port device team_slave_0 added [ 288.122810][T11657] team0: Port device team_slave_1 added [ 288.237265][T11657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.244794][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.272044][T11657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.284717][ T6582] bridge_slave_1: left allmulticast mode [ 288.294521][ T6582] bridge_slave_1: left promiscuous mode [ 288.300472][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.311704][ T6582] bridge_slave_0: left allmulticast mode [ 288.317411][ T6582] bridge_slave_0: left promiscuous mode [ 288.323304][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.384468][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 288.384928][T11716] netlink: 'syz.0.1592': attribute type 11 has an invalid length. [ 288.407755][T11716] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1592'. [ 288.423623][T11717] netlink: 'syz.0.1592': attribute type 5 has an invalid length. [ 288.438463][T11717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 288.681389][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.692903][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.704999][ T6582] bond0 (unregistering): Released all slaves [ 288.741281][T11657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.748273][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.786946][T11657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.830680][T11717] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 288.843593][T11717] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 288.852165][T11717] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 288.865007][T11717] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 288.875088][T11717] geneve2: entered promiscuous mode [ 288.880911][T11717] geneve2: entered allmulticast mode [ 288.971788][T11726] netlink: 'syz.0.1594': attribute type 11 has an invalid length. [ 288.989348][T11726] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 289.111769][ T51] Bluetooth: hci2: command tx timeout [ 289.248984][T11678] chnl_net:caif_netlink_parms(): no params data found [ 289.289205][T11657] hsr_slave_0: entered promiscuous mode [ 289.301000][T11657] hsr_slave_1: entered promiscuous mode [ 289.491898][ T6582] hsr_slave_0: left promiscuous mode [ 289.498716][ T6582] hsr_slave_1: left promiscuous mode [ 289.517759][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.529827][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.545379][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.569901][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.590014][ T51] Bluetooth: hci1: command tx timeout [ 289.611351][ T6582] veth1_macvtap: left promiscuous mode [ 289.617053][ T6582] veth0_macvtap: left promiscuous mode [ 289.625764][ T6582] veth1_vlan: left promiscuous mode [ 289.631507][ T6582] veth0_vlan: left promiscuous mode [ 290.131573][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 290.153959][ T51] Bluetooth: hci3: command tx timeout [ 290.175322][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 290.583275][T11746] syzkaller1: entered promiscuous mode [ 290.588816][T11746] syzkaller1: entered allmulticast mode [ 290.786233][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.794321][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.802422][T11678] bridge_slave_0: entered allmulticast mode [ 290.813288][T11678] bridge_slave_0: entered promiscuous mode [ 290.822556][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.829794][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.836988][T11678] bridge_slave_1: entered allmulticast mode [ 290.844740][T11678] bridge_slave_1: entered promiscuous mode [ 290.993359][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.067804][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.180780][T11678] team0: Port device team_slave_0 added [ 291.187764][T11704] chnl_net:caif_netlink_parms(): no params data found [ 291.194844][ T51] Bluetooth: hci2: command tx timeout [ 291.216118][T11678] team0: Port device team_slave_1 added [ 291.340180][T11777] tap0: tun_chr_ioctl cmd 1074025672 [ 291.345536][T11777] tap0: ignored: set checksum disabled [ 291.395497][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.402817][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.431181][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.482620][ T6582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.515043][T11788] sctp: [Deprecated]: syz.3.1609 (pid 11788) Use of int in maxseg socket option. [ 291.515043][T11788] Use struct sctp_assoc_value instead [ 291.554475][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 291.568914][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 291.578222][T11787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1609'. [ 291.588282][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.603142][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.629728][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.663100][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.670422][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.677601][T11704] bridge_slave_0: entered allmulticast mode [ 291.680037][ T51] Bluetooth: hci1: command tx timeout [ 291.685784][T11704] bridge_slave_0: entered promiscuous mode [ 291.717999][ T6582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.744716][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.753553][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.764321][T11704] bridge_slave_1: entered allmulticast mode [ 291.773785][T11704] bridge_slave_1: entered promiscuous mode [ 291.817833][ T6582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.867334][T11678] hsr_slave_0: entered promiscuous mode [ 291.876122][T11678] hsr_slave_1: entered promiscuous mode [ 291.886518][T11678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.895401][T11678] Cannot create hsr debugfs directory [ 291.928725][ T6582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.948483][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.962562][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.050740][T11704] team0: Port device team_slave_0 added [ 292.098761][T11704] team0: Port device team_slave_1 added [ 292.149310][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.157134][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.183469][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.195306][T11657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.222474][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.229970][ T51] Bluetooth: hci3: command tx timeout [ 292.235917][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.262773][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.274085][T11657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.291435][T11657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.342932][T11657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.496608][ T6582] bridge_slave_1: left allmulticast mode [ 292.503684][ T6582] bridge_slave_1: left promiscuous mode [ 292.510387][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.524005][T11805] netlink: 'syz.0.1612': attribute type 9 has an invalid length. [ 292.530516][ T6582] bridge_slave_0: left allmulticast mode [ 292.537490][ T6582] bridge_slave_0: left promiscuous mode [ 292.543392][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.948569][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.959817][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.972223][ T6582] bond0 (unregistering): Released all slaves [ 293.004502][T11704] hsr_slave_0: entered promiscuous mode [ 293.041645][T11704] hsr_slave_1: entered promiscuous mode [ 293.049106][T11704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.079436][T11704] Cannot create hsr debugfs directory [ 293.270110][ T51] Bluetooth: hci2: command tx timeout [ 293.749566][ T51] Bluetooth: hci1: command tx timeout [ 293.749650][ T6582] hsr_slave_0: left promiscuous mode [ 293.798706][ T6582] hsr_slave_1: left promiscuous mode [ 293.822235][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.854947][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.881372][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.889333][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.934967][ T6582] veth1_macvtap: left promiscuous mode [ 293.943282][ T6582] veth0_macvtap: left promiscuous mode [ 293.949131][ T6582] veth1_vlan: left promiscuous mode [ 293.956598][ T6582] veth0_vlan: left promiscuous mode [ 294.315476][ T51] Bluetooth: hci3: command tx timeout [ 294.466994][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 294.507563][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 295.070725][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 295.087718][T11657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.167605][T11657] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.295388][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.302646][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.360808][ T51] Bluetooth: hci2: command tx timeout [ 295.418708][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.425993][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.582310][T11878] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1626'. [ 295.610838][T11678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.635260][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1625'. [ 295.655994][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1625'. [ 295.681223][T11678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.699152][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 295.764883][T11678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.784428][T11678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.037569][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1628'. [ 296.072834][T11898] netlink: 'syz.0.1628': attribute type 7 has an invalid length. [ 296.089842][T11898] netlink: 'syz.0.1628': attribute type 8 has an invalid length. [ 296.098714][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 296.278675][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.404450][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.409472][ T51] Bluetooth: hci3: command tx timeout [ 296.491255][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.498530][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.545995][T11657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.571392][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.578609][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.595077][T11704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.608053][T11704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.652180][T11704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.698341][T11704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.856894][T11657] veth0_vlan: entered promiscuous mode [ 296.878802][T11935] netlink: 'syz.0.1635': attribute type 16 has an invalid length. [ 296.899591][T11935] netlink: 'syz.0.1635': attribute type 17 has an invalid length. [ 297.065740][T11657] veth1_vlan: entered promiscuous mode [ 297.258874][T11704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.278298][T11657] veth0_macvtap: entered promiscuous mode [ 297.315798][T11657] veth1_macvtap: entered promiscuous mode [ 297.331497][T11704] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.365410][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.372669][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.438319][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.445562][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.477396][T11657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.524812][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.554406][T11657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.583678][T11657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.593673][T11657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.603378][T11657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.614370][T11657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.837048][T11678] veth0_vlan: entered promiscuous mode [ 297.847457][T11962] netlink: 'syz.0.1639': attribute type 75 has an invalid length. [ 297.893534][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.894440][T11678] veth1_vlan: entered promiscuous mode [ 297.910673][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.015971][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.043947][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.044751][T11678] veth0_macvtap: entered promiscuous mode [ 298.086409][T11678] veth1_macvtap: entered promiscuous mode [ 298.161405][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.203902][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.253523][T11678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.280758][T11678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.293975][T11977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1643'. [ 298.299607][T11678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.314309][T11678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.500920][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.682762][ T6582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.790202][ T6590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.798078][ T6590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.872136][ T6582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.982651][ T6582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.015795][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.031276][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.071087][ T6582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.177464][T11704] veth0_vlan: entered promiscuous mode [ 299.190091][T11704] veth1_vlan: entered promiscuous mode [ 299.224512][T11704] veth0_macvtap: entered promiscuous mode [ 299.233722][T11704] veth1_macvtap: entered promiscuous mode [ 299.253092][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.268121][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.283143][T11704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.293535][T11704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.303122][T11704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.313302][T11704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.421367][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.429260][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.472186][ T6582] bridge_slave_1: left allmulticast mode [ 299.477885][ T6582] bridge_slave_1: left promiscuous mode [ 299.486318][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.502992][ T6582] bridge_slave_0: left allmulticast mode [ 299.508676][ T6582] bridge_slave_0: left promiscuous mode [ 299.515759][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.018011][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.035416][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.047568][ T6582] bond0 (unregistering): Released all slaves [ 300.080756][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.099590][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.162871][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.173216][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.183807][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.192863][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.201558][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.432204][ T6582] hsr_slave_0: left promiscuous mode [ 300.438696][ T6582] hsr_slave_1: left promiscuous mode [ 300.445046][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.454512][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.462951][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.471573][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.491144][ T6582] veth1_macvtap: left promiscuous mode [ 300.496703][ T6582] veth0_macvtap: left promiscuous mode [ 300.502488][ T6582] veth1_vlan: left promiscuous mode [ 300.507817][ T6582] veth0_vlan: left promiscuous mode [ 301.346541][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 301.441731][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 301.525371][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.535152][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.546633][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.548635][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.573982][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.583326][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.583443][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.604185][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.614259][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.625844][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.072186][T12023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 302.111319][T12021] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1652'. [ 302.232955][ T5155] Bluetooth: hci1: command tx timeout [ 302.274785][T12001] chnl_net:caif_netlink_parms(): no params data found [ 302.439832][T12033] FAULT_INJECTION: forcing a failure. [ 302.439832][T12033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.457013][T12033] CPU: 1 UID: 0 PID: 12033 Comm: syz.0.1655 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 302.457040][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.457052][T12033] Call Trace: [ 302.457059][T12033] [ 302.457067][T12033] dump_stack_lvl+0x189/0x250 [ 302.457111][T12033] ? __pfx____ratelimit+0x10/0x10 [ 302.457140][T12033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.457169][T12033] ? __pfx__printk+0x10/0x10 [ 302.457189][T12033] ? __might_fault+0xb0/0x130 [ 302.457218][T12033] should_fail_ex+0x414/0x560 [ 302.457247][T12033] _copy_from_user+0x2d/0xb0 [ 302.457266][T12033] ___sys_sendmsg+0x158/0x2a0 [ 302.457294][T12033] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.457363][T12033] ? __fget_files+0x2a/0x420 [ 302.457383][T12033] ? __fget_files+0x3a0/0x420 [ 302.457412][T12033] __x64_sys_sendmsg+0x19b/0x260 [ 302.457438][T12033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.457472][T12033] ? __pfx_ksys_write+0x10/0x10 [ 302.457487][T12033] ? rcu_is_watching+0x15/0xb0 [ 302.457537][T12033] ? do_syscall_64+0xbe/0x3b0 [ 302.457560][T12033] do_syscall_64+0xfa/0x3b0 [ 302.457577][T12033] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.457606][T12033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.457625][T12033] ? clear_bhb_loop+0x60/0xb0 [ 302.457650][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.457669][T12033] RIP: 0033:0x7f12b8d8e929 [ 302.457693][T12033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.457710][T12033] RSP: 002b:00007f12b9c0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.457735][T12033] RAX: ffffffffffffffda RBX: 00007f12b8fb5fa0 RCX: 00007f12b8d8e929 [ 302.457750][T12033] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 302.457762][T12033] RBP: 00007f12b9c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 302.457774][T12033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.457786][T12033] R13: 0000000000000000 R14: 00007f12b8fb5fa0 R15: 00007fff57732838 [ 302.457818][T12033] [ 302.722194][T12040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1656'. [ 302.820523][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.827941][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.837265][T12001] bridge_slave_0: entered allmulticast mode [ 302.845832][T12001] bridge_slave_0: entered promiscuous mode [ 302.854947][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.862299][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.869951][T12001] bridge_slave_1: entered allmulticast mode [ 302.875960][T12045] xt_hashlimit: invalid rate [ 302.878030][T12001] bridge_slave_1: entered promiscuous mode [ 302.916584][T12015] chnl_net:caif_netlink_parms(): no params data found [ 302.955087][T12047] sctp: [Deprecated]: syz.3.1657 (pid 12047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.955087][T12047] Use struct sctp_sack_info instead [ 302.984759][T12047] sctp: [Deprecated]: syz.3.1657 (pid 12047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.984759][T12047] Use struct sctp_sack_info instead [ 303.008852][T12001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.114347][T12001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.424056][T12001] team0: Port device team_slave_0 added [ 303.443102][T12001] team0: Port device team_slave_1 added [ 303.581262][T12001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.609298][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.669560][T12001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.669665][ T5155] Bluetooth: hci3: command tx timeout [ 303.680621][ T5847] Bluetooth: hci2: command tx timeout [ 303.726342][T12001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.733886][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.765890][T12001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.810470][T12017] chnl_net:caif_netlink_parms(): no params data found [ 303.843844][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.852329][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.862408][T12015] bridge_slave_0: entered allmulticast mode [ 303.870580][T12015] bridge_slave_0: entered promiscuous mode [ 303.913600][ T6582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.976356][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.984027][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.993078][T12015] bridge_slave_1: entered allmulticast mode [ 304.008147][T12015] bridge_slave_1: entered promiscuous mode [ 304.073529][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 304.087899][T12077] netlink: 'syz.0.1664': attribute type 10 has an invalid length. [ 304.089831][T12076] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 304.131144][T12072] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (39785) ! [ 304.140321][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 304.172089][T12001] hsr_slave_0: entered promiscuous mode [ 304.178403][T12001] hsr_slave_1: entered promiscuous mode [ 304.207623][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'. [ 304.217070][T12075] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 304.229548][T12075] netlink: 'syz.0.1664': attribute type 2 has an invalid length. [ 304.264038][ T6582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.311096][ T5847] Bluetooth: hci1: command tx timeout [ 304.344572][T12082] FAULT_INJECTION: forcing a failure. [ 304.344572][T12082] name failslab, interval 1, probability 0, space 0, times 0 [ 304.357995][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.0.1666 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 304.358023][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.358036][T12082] Call Trace: [ 304.358045][T12082] [ 304.358054][T12082] dump_stack_lvl+0x189/0x250 [ 304.358090][T12082] ? __pfx____ratelimit+0x10/0x10 [ 304.358122][T12082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.358163][T12082] ? __pfx__printk+0x10/0x10 [ 304.358192][T12082] ? __pfx___might_resched+0x10/0x10 [ 304.358230][T12082] should_fail_ex+0x414/0x560 [ 304.358262][T12082] should_failslab+0xa8/0x100 [ 304.358288][T12082] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 304.358309][T12082] ? __alloc_skb+0x112/0x2d0 [ 304.358337][T12082] __alloc_skb+0x112/0x2d0 [ 304.358365][T12082] netlink_sendmsg+0x5c6/0xb30 [ 304.358412][T12082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.358441][T12082] ? aa_sock_msg_perm+0x94/0x160 [ 304.358471][T12082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.358497][T12082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.358523][T12082] __sock_sendmsg+0x219/0x270 [ 304.358559][T12082] ____sys_sendmsg+0x505/0x830 [ 304.358590][T12082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.358628][T12082] ? import_iovec+0x74/0xa0 [ 304.358652][T12082] ___sys_sendmsg+0x21f/0x2a0 [ 304.358681][T12082] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.358749][T12082] ? __fget_files+0x2a/0x420 [ 304.358771][T12082] ? __fget_files+0x3a0/0x420 [ 304.358806][T12082] __x64_sys_sendmsg+0x19b/0x260 [ 304.358835][T12082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.358873][T12082] ? __pfx_ksys_write+0x10/0x10 [ 304.358889][T12082] ? rcu_is_watching+0x15/0xb0 [ 304.358927][T12082] ? do_syscall_64+0xbe/0x3b0 [ 304.358952][T12082] do_syscall_64+0xfa/0x3b0 [ 304.358969][T12082] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.358999][T12082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.359020][T12082] ? clear_bhb_loop+0x60/0xb0 [ 304.359045][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.359064][T12082] RIP: 0033:0x7f12b8d8e929 [ 304.359082][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.359100][T12082] RSP: 002b:00007f12b9c0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.359121][T12082] RAX: ffffffffffffffda RBX: 00007f12b8fb5fa0 RCX: 00007f12b8d8e929 [ 304.359136][T12082] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 304.359155][T12082] RBP: 00007f12b9c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 304.359168][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.359180][T12082] R13: 0000000000000000 R14: 00007f12b8fb5fa0 R15: 00007fff57732838 [ 304.359212][T12082] [ 304.698480][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.758271][ T6582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.803870][T12088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1668'. [ 304.832424][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.975415][T12015] team0: Port device team_slave_0 added [ 304.991720][T12091] netlink: 'syz.3.1669': attribute type 13 has an invalid length. [ 305.004317][T12091] netlink: 'syz.3.1669': attribute type 17 has an invalid length. [ 305.038114][ T6582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.063794][T12015] team0: Port device team_slave_1 added [ 305.086791][T12091] C: left promiscuous mode [ 305.120334][T12091] tunl0: left allmulticast mode [ 305.126568][T12091] gre0: left allmulticast mode [ 305.143316][T12091] gretap0: left allmulticast mode [ 305.164718][T12091] erspan0: left allmulticast mode [ 305.176761][T12091] ip_vti0: left allmulticast mode [ 305.184508][T12091] ip6_vti0: left allmulticast mode [ 305.196831][T12091] sit0: left allmulticast mode [ 305.206490][T12091] ip6tnl0: left allmulticast mode [ 305.217222][T12091] ip6gre0: left allmulticast mode [ 305.223873][T12091] syz_tun: left allmulticast mode [ 305.234436][T12091] ip6gretap0: left allmulticast mode [ 305.249702][T12091] bond0: left allmulticast mode [ 305.257851][T12091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.266041][T12091] dummy0: left allmulticast mode [ 305.274525][T12091] nlmon0: left allmulticast mode [ 305.284264][T12091] caif0: left allmulticast mode [ 305.289196][T12091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.403914][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.411267][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.418495][T12017] bridge_slave_0: entered allmulticast mode [ 305.427128][T12017] bridge_slave_0: entered promiscuous mode [ 305.454509][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.465982][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.496076][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.516479][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.524231][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.531918][T12017] bridge_slave_1: entered allmulticast mode [ 305.539358][T12017] bridge_slave_1: entered promiscuous mode [ 305.580016][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.587032][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.628632][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.745061][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.759135][ T5155] Bluetooth: hci2: command tx timeout [ 305.765217][ T5847] Bluetooth: hci3: command tx timeout [ 305.803049][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.988006][T12017] team0: Port device team_slave_0 added [ 306.003727][T12017] team0: Port device team_slave_1 added [ 306.089080][T12121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1675'. [ 306.105717][T12123] xt_hashlimit: max too large, truncated to 1048576 [ 306.215857][ T6582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.248439][T12015] hsr_slave_0: entered promiscuous mode [ 306.256525][T12015] hsr_slave_1: entered promiscuous mode [ 306.263408][T12015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.272785][T12015] Cannot create hsr debugfs directory [ 306.358780][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 306.374820][ T6582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.391474][ T5847] Bluetooth: hci1: command tx timeout [ 306.407583][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.416384][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.445206][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.490404][ T6582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.506240][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.517114][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.543461][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.669777][ T6582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.778604][T12017] hsr_slave_0: entered promiscuous mode [ 306.785812][T12017] hsr_slave_1: entered promiscuous mode [ 306.793530][T12017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.801996][T12017] Cannot create hsr debugfs directory [ 306.828742][T12143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 306.876454][T12143] bridge0: entered promiscuous mode [ 306.974274][T12145] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 307.028453][T12001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.066418][T12001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.126992][T12001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.154567][T12001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.230873][ T6582] bridge_slave_1: left allmulticast mode [ 307.236578][ T6582] bridge_slave_1: left promiscuous mode [ 307.271570][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.292986][ T6582] bridge_slave_0: left allmulticast mode [ 307.299166][ T6582] bridge_slave_0: left promiscuous mode [ 307.306693][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.329285][ T6582] bridge_slave_1: left allmulticast mode [ 307.335409][ T6582] bridge_slave_1: left promiscuous mode [ 307.342945][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.359055][ T6582] bridge_slave_0: left allmulticast mode [ 307.366202][ T6582] bridge_slave_0: left promiscuous mode [ 307.374263][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.428448][ T6582] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 307.440393][ T6582] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 307.450051][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 307.462214][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.472282][ T6582] Workqueue: netns cleanup_net [ 307.477074][ T6582] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 307.482721][ T6582] Code: ff ff ff e8 99 ec 41 01 89 c5 31 ff 89 c6 e8 be e1 9b f7 85 ed 74 45 e8 75 dd 9b f7 eb 05 e8 6e dd 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 78 5b ff f7 49 8b 2c 24 49 8d 7c [ 307.502330][ T6582] RSP: 0018:ffffc9001ac07158 EFLAGS: 00010206 [ 307.508412][ T6582] RAX: 000000001fffe000 RBX: 1ffff1100b75b682 RCX: ffff88802c0a9e00 [ 307.516397][ T6582] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 307.524375][ T6582] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 307.532356][ T6582] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: 00000000ffff0000 [ 307.540344][ T6582] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805badb410 [ 307.548351][ T6582] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 307.557298][ T6582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.563918][ T6582] CR2: 00007f12b8d743e0 CR3: 0000000022b12000 CR4: 00000000003526f0 [ 307.571917][ T6582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 307.579910][ T6582] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 307.587906][ T6582] Call Trace: [ 307.591192][ T6582] [ 307.594125][ T6582] __ipv6_dev_mc_dec+0x30d/0x390 [ 307.599086][ T6582] __ipv6_ifa_notify+0x43d/0xac0 [ 307.604055][ T6582] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 307.609533][ T6582] ? __lock_acquire+0xab9/0xd20 [ 307.614411][ T6582] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.619809][ T6582] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.625035][ T6582] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.630417][ T6582] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.636160][ T6582] addrconf_ifdown+0xe69/0x1880 [ 307.641039][ T6582] ? tls_dev_event+0x717/0xec0 [ 307.645816][ T6582] ? __pfx_addrconf_ifdown+0x10/0x10 [ 307.651107][ T6582] addrconf_notify+0x1bc/0x1010 [ 307.655981][ T6582] notifier_call_chain+0x1b3/0x3e0 [ 307.661119][ T6582] dev_close_many+0x29c/0x410 [ 307.665813][ T6582] ? __pfx_dev_close_many+0x10/0x10 [ 307.671011][ T6582] unregister_netdevice_many_notify+0x834/0x2320 [ 307.677347][ T6582] ? __lock_acquire+0xab9/0xd20 [ 307.682205][ T6582] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 307.688977][ T6582] ? unregister_netdevice_queue+0x1b3/0x380 [ 307.694878][ T6582] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 307.701146][ T6582] ? net_generic+0x1e/0x240 [ 307.705670][ T6582] ? net_generic+0x1e/0x240 [ 307.710194][ T6582] ops_undo_list+0x3dc/0x990 [ 307.714796][ T6582] ? __pfx_ops_undo_list+0x10/0x10 [ 307.719930][ T6582] cleanup_net+0x4c5/0x800 [ 307.724367][ T6582] ? __pfx_cleanup_net+0x10/0x10 [ 307.729308][ T6582] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.734521][ T6582] ? process_scheduled_works+0x9ef/0x17b0 [ 307.740263][ T6582] ? process_scheduled_works+0x9ef/0x17b0 [ 307.746010][ T6582] process_scheduled_works+0xae1/0x17b0 [ 307.751572][ T6582] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.757595][ T6582] worker_thread+0x8a0/0xda0 [ 307.762206][ T6582] kthread+0x70e/0x8a0 [ 307.766288][ T6582] ? __pfx_worker_thread+0x10/0x10 [ 307.771428][ T6582] ? __pfx_kthread+0x10/0x10 [ 307.776019][ T6582] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.781230][ T6582] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.786455][ T6582] ? __pfx_kthread+0x10/0x10 [ 307.791042][ T6582] ret_from_fork+0x3f9/0x770 [ 307.795638][ T6582] ? __pfx_ret_from_fork+0x10/0x10 [ 307.800781][ T6582] ? __switch_to_asm+0x39/0x70 [ 307.805565][ T6582] ? __switch_to_asm+0x33/0x70 [ 307.810338][ T6582] ? __pfx_kthread+0x10/0x10 [ 307.814957][ T6582] ret_from_fork_asm+0x1a/0x30 [ 307.819750][ T6582] [ 307.822799][ T6582] Modules linked in: [ 307.827697][ T6582] ---[ end trace 0000000000000000 ]--- [ 307.834666][ T5847] Bluetooth: hci3: command tx timeout [ 307.840159][ T5847] Bluetooth: hci2: command tx timeout [ 307.845856][ T6582] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 307.852992][ T6582] Code: ff ff ff e8 99 ec 41 01 89 c5 31 ff 89 c6 e8 be e1 9b f7 85 ed 74 45 e8 75 dd 9b f7 eb 05 e8 6e dd 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 78 5b ff f7 49 8b 2c 24 49 8d 7c [ 307.873220][ T6582] RSP: 0018:ffffc9001ac07158 EFLAGS: 00010206 [ 307.879306][ T6582] RAX: 000000001fffe000 RBX: 1ffff1100b75b682 RCX: ffff88802c0a9e00 [ 307.887345][ T6582] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 307.895392][ T6582] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 307.903408][ T6582] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: 00000000ffff0000 [ 307.911624][ T6582] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805badb410 [ 307.919997][ T6582] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 307.928954][ T6582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.935643][ T6582] CR2: 00007f12b8d743e0 CR3: 000000007a244000 CR4: 00000000003526f0 [ 307.943706][ T6582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 307.951888][ T6582] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 307.959965][ T6582] Kernel panic - not syncing: Fatal exception [ 307.966378][ T6582] Kernel Offset: disabled [ 307.970710][ T6582] Rebooting in 86400 seconds..