last executing test programs: 1m31.610956424s ago: executing program 4 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 1m25.11188776s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0ea28b1cac5b699b45883d46a484358e6ce518a9c2bc91c608e12198"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "84842c1da2ae22d143a99728ed7a7da0040dfe3619"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ec9dbe61b6c4efddea2c0c26e35b84bea022987d1dfab6ad6489e47d9fef5a5e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50a}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffed75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "ad9052381f7749a03056eecc8fdb56df0f762bcc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c477aa1aca5373f4f92aac40fa1d563c39e768e5c783f6740a"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a8e8f79880262faa54c9c91ff1b2a612542bc1eca32cafd28f8ce0c58"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$rxrpc(r4, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)=""/117, 0x75}], 0x7}, 0x2040) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x4003, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x401, 0x8, 0x140, 0x81}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x4, 0x0, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x51}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 1m17.561694205s ago: executing program 4 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 1m15.237313213s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0ea28b1cac5b699b45883d46a484358e6ce518a9c2bc91c608e12198"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "84842c1da2ae22d143a99728ed7a7da0040dfe3619"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ec9dbe61b6c4efddea2c0c26e35b84bea022987d1dfab6ad6489e47d9fef5a5e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50a}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffed75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "ad9052381f7749a03056eecc8fdb56df0f762bcc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c477aa1aca5373f4f92aac40fa1d563c39e768e5c783f6740a"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a8e8f79880262faa54c9c91ff1b2a612542bc1eca32cafd28f8ce0c58"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$rxrpc(r4, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)=""/117, 0x75}], 0x7}, 0x2040) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x4003, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x401, 0x8, 0x140, 0x81}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x4, 0x0, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x51}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 1m3.253625286s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0ea28b1cac5b699b45883d46a484358e6ce518a9c2bc91c608e12198"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "84842c1da2ae22d143a99728ed7a7da0040dfe3619"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ec9dbe61b6c4efddea2c0c26e35b84bea022987d1dfab6ad6489e47d9fef5a5e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50a}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffed75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "ad9052381f7749a03056eecc8fdb56df0f762bcc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c477aa1aca5373f4f92aac40fa1d563c39e768e5c783f6740a"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a8e8f79880262faa54c9c91ff1b2a612542bc1eca32cafd28f8ce0c58"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$rxrpc(r4, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)=""/117, 0x75}], 0x7}, 0x2040) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x4003, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x401, 0x8, 0x140, 0x81}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x4, 0x0, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x51}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 1m1.935688198s ago: executing program 4 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 45.022162435s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0ea28b1cac5b699b45883d46a484358e6ce518a9c2bc91c608e12198"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "84842c1da2ae22d143a99728ed7a7da0040dfe3619"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ec9dbe61b6c4efddea2c0c26e35b84bea022987d1dfab6ad6489e47d9fef5a5e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50a}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffed75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "ad9052381f7749a03056eecc8fdb56df0f762bcc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c477aa1aca5373f4f92aac40fa1d563c39e768e5c783f6740a"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a8e8f79880262faa54c9c91ff1b2a612542bc1eca32cafd28f8ce0c58"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$rxrpc(r4, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)=""/117, 0x75}], 0x7}, 0x2040) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x4003, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x401, 0x8, 0x140, 0x81}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x4, 0x0, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x51}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 43.355251233s ago: executing program 4 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 32.908517674s ago: executing program 2 (id=1678): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x15, 0x1, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) getsockopt(r1, 0x8, 0x80000001, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 32.769322072s ago: executing program 2 (id=1681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 32.590659999s ago: executing program 2 (id=1683): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x50) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0xad, 0x44, &(0x7f0000000340)="0429d9f2d433180fe46a204f16009ca77b16921cc35cfcafa7c08a95d671496f5ccddd7f3341104cbdb5f66729b6661894ff2ade894e0aabe1bf5be619b97c60473d04383aa777bfb53f913c27862729448880f5018a9a53956ad9392ba70c7d3a9bc282c203c556b6ae88715f3015da86592f1f60ab4d6e8eb6786527fb1092554f6beaf2c678998dbe34f63594fb33d0a6726c37ca8e54e4a7ca3874f15dddec7aa32e82cfda6b1a3d9715b8", &(0x7f0000000140)=""/68, 0x7, 0x0, 0xf9, 0x4e, &(0x7f0000000580)="d3ebc906ce172167942dd262dfbdb8e50a73727878a43d65ad473e5c5fe42f5aae3c620dfb5394413e355c9c7045c7b24ab8927a56d033c2003298c6c4ef95221ef335fb6b0255ebf5f8eb43b567853601b49c48ede400a2c91fa8ee4f7326a27aded75e9804271c354fd4ce6fa0547a7624965d9a465126d9c14b1cb521b3d87f9962172fc06f9dd1e0bd57c9150ce5d5beabd00d47888406fdef66422f445ec69fa041868b53c340f51b4e023a20e1a382be01edb3ea4d6bf94b4a83d49ef036094470b481c1301763f02a04903c464bfef3f68118d9781c2719bf32fb1c2c0f36038be8da8de45399f2909a33c4926e56602baf7d12d816", &(0x7f0000000480)="08ff4144dd4f80ed69380b70a4b865f8c533df48213d9cc6fd54a0605cd25e910030d869ddcde49da6b807cc0f8bbaaa597606d1be0a2a31b95e2193c8b8a3025267c7ecdbf96e2c34a099065512", 0x0, 0x0, 0x3}, 0x50) 32.250067196s ago: executing program 2 (id=1686): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80084) 31.966224878s ago: executing program 2 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x800000, 0x25dfdbff, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xffffffffffffffff}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44c40}, 0x4008004) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800110101000000000000000a000008000200080000000008001700ff1afffff8cc20fb261760e5dfdfa38d24ad9bd9115a12d93e5ae2e524d1eab26e42ddf61598c31cce70f0680349c1d65b27d494b5f3e421e7423e01e12d495d425b8068a8fa08437f4884b51823e0fd16cedb5ae7ddc6d2da3e077e1b9e80c7510a06bd65b9832b59859405aa7c420e46b174704535d0d1161a07c858afe9d82ebc3b54a5989e4d81f6c718bee867d1448fa3fa3a023936cd23f177c664d2459020e4807fdd17575aae545b951f72fdf1ed698af471787a708bd167629e8975877b5d00"], 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4008081) 27.256045983s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0ea28b1cac5b699b45883d46a484358e6ce518a9c2bc91c608e12198"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "84842c1da2ae22d143a99728ed7a7da0040dfe3619"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ec9dbe61b6c4efddea2c0c26e35b84bea022987d1dfab6ad6489e47d9fef5a5e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50a}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffed75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "ad9052381f7749a03056eecc8fdb56df0f762bcc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c477aa1aca5373f4f92aac40fa1d563c39e768e5c783f6740a"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a8e8f79880262faa54c9c91ff1b2a612542bc1eca32cafd28f8ce0c58"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$rxrpc(r4, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)=""/117, 0x75}], 0x7}, 0x2040) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x4003, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x401, 0x8, 0x140, 0x81}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x4, 0x0, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x51}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 19.004059194s ago: executing program 4 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 13.726523295s ago: executing program 2 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x800000, 0x25dfdbff, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xffffffffffffffff}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44c40}, 0x4008004) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800110101000000000000000a000008000200080000000008001700ff1afffff8cc20fb261760e5dfdfa38d24ad9bd9115a12d93e5ae2e524d1eab26e42ddf61598c31cce70f0680349c1d65b27d494b5f3e421e7423e01e12d495d425b8068a8fa08437f4884b51823e0fd16cedb5ae7ddc6d2da3e077e1b9e80c7510a06bd65b9832b59859405aa7c420e46b174704535d0d1161a07c858afe9d82ebc3b54a5989e4d81f6c718bee867d1448fa3fa3a023936cd23f177c664d2459020e4807fdd17575aae545b951f72fdf1ed698af471787a708bd167629e8975877b5d00"], 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4008081) 6.795148769s ago: executing program 1 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x12}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0ea28b1cac5b699b45883d46a484358e6ce518a9c2bc91c608e12198"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "84842c1da2ae22d143a99728ed7a7da0040dfe3619"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ec9dbe61b6c4efddea2c0c26e35b84bea022987d1dfab6ad6489e47d9fef5a5e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50a}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffed75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "ad9052381f7749a03056eecc8fdb56df0f762bcc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c477aa1aca5373f4f92aac40fa1d563c39e768e5c783f6740a"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a8e8f79880262faa54c9c91ff1b2a612542bc1eca32cafd28f8ce0c58"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40811}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$rxrpc(r4, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000800)=""/117, 0x75}], 0x7}, 0x2040) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x4003, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x401, 0x8, 0x140, 0x81}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x4, 0x0, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x51}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 2.023290098s ago: executing program 3 (id=1804): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) 1.828060082s ago: executing program 3 (id=1806): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000002100)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60f4adf700202cff20010000000000000000000000000000000000000000000000000000013a00000000000000880084780600000000000000000000000000ffffac1e010103f353000000"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000003707064c37508bca1971745b5dad5cb74f919a853e6191bc2d042589eb8d7bc95ffe11c35cf83f9880565b8fc9f545f5adf5ad91184fa5b44f8afff90d009cf540942409a488b95208af440ebea5a3c21160"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xdd, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ffffffff8500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = socket(0x22, 0x2, 0x4) sendmsg$alg(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000fc0)="d81be8777f7222a3e310d86013daa2c0a1ca41ddd46ca88ec3a5e987ef1a3d76b20f071c2d1b0383c6a8254f53add2a598475d02e066e62b416920335e9a042a993342b86a6da1d236437717a062ca7da8e742e9c78864415dcfa8ac8e99a01281cea014707d10772a8367b743249156fb3b89ce49ee659f4ca950de436e66ab84bb25a8e3a24982aa290f470aae8154666496705672fc19210f2d21145af3ced770b03cbb7548509dafa7b10bdf1bed1f603a24cb9a8eed9b902b033fbae4cc87a321f4c5615e87e9d83696d4a4faf45693e92ea749c1ca8cf84bdb41cdda0f102e16ed5d5ee30a70d247f862d765351bafecaa748a9ed18da2585f6d64d602fc58055d7b79e355382b817ee087163d8f8eee95f133fa76f105603b024353253a927dcfceabc61f63195eabb7b737bb357cb5315469968d7100e814cd0cae7c055c991990e772bf433aae1d9272a248d9e342316651b26c57e5bddd2bcd086fce595b442cf5d39313bc17fa54f57989c99fd7cdf200eded95873a230684edcdad842821132d14487d84da87faa92315d63dab41d3375e490d4bba04a31073e8acdf2b77e482e6cefbabcdeb2c4bac0d6db2d3c503db705be5ab72b33e340bdbadaacdb8049207ba70bde64afe555165daa173236e2888b02a9c640052070aaeee8fb1c51497c93e2952dcf37501c4f6559f29d1db2b5b4fb96811c48510e789dde11eba90fcc0f2973c7fb445c59e64a1e84e2c1a5f3dee2afb0c46d079e34c903881b911cc5fb000609125f41d14368c2bb9e86d246dabe93659568fe1cf5b3b2804f3ca72d14afa40ae370619216808e72c96c6763addbf8997cb7ac48c7a63c15bc1a388f5967c2f46d0b7cd8da93a0f3630b0d5849739fc440614916b2c98d1bb04e8f584b395bad78dd1d82a85150a870988f95855b29db73922fed4bc4818f515ae7409948d84635a666d8e1bd0eec9f30048c4449da3575b85cc5d2ddb0dc6434313529bdf4d62b5d7d08b0617367916a76a315464c19b29b86500d521ff4a56c5b7aa33d93ae36eafd35c71128400073811b0ea4d5673f14d68d09c6606dce447237cf9ff60191ca3a1fd06ea1805ea551eea5c82c23fbf6e2a912607c2dd138e79e726c76192e1eaca6d39e079672803d396eca84b3bd2f3ce2c2565a2191647512fdd7d302fbc2df516eb0b28d3787e68445fec52a01b9bdc1b1dc00d45a710a9cc73084008775390021c0852564cf59effe69bdc6b48130bf2c83cb7df04dc76f4e8b097a8fcbe4c4da1a84d03106e7f82f6b47ecfa59a805430e2ae2418f1fbb99c8f61ba49abc447ada08b495c6761e1607a4a618f276edd5c742b33f6e9d4dcd700b59eac50fe5527cdb3dbb8443001e8221970683ac59e388b3f588d43bbb3aed83e4896d3db7ad613cd411d8d2301b87e943e877e22bc08503efce48a1edfac951a429f3cfa763d4e3acbdfc0b77f61a471135851ae7cabb1b7d10a7c5dd95a1a690c3e14c0906cc87ae64b3b162911c32b62e4e8f5785bc9913f7bbfcc11c03e853fb1d4b8c582c58e74f442a3a1e8468ff5b4cc157ff4cd2ae263753f5adb9b6b07e6e13a40bd050f3a5f074e98f76f1586d8f136dd9354890c6819554fff472c025f6528427ff4f6a04c294921dd1e0aee38dd8ea889caac41cd8340c97d3662b6d5bfbbe85d170f45ea8e2cd87825272c340e383fab6efb4cede55cf75d90c01b195cb518176bab5ce3cb6d6b15d444bbb23ebc2aedf888b8c4aec8e497a2faa74241654bb3431349e0879c11654c90776b95a898c3ef08e2ef9297b88f3de2eea4f50c3e8cf71a32fd2c4f627d4fed76c76c9927524b157d0ef312525eae0727eb28dcb593e12bcd7874aeb13d1bb593c4a31596b16c13d1ab03e649034ca79911b845668be0c999778c70b75f17b2768d1aa4542c88a173bb18be9ca0485fac9855ca1b690cd21438825f9bdd9edb2a761073614880e322c8d8ee75605801f671a25e70bd0dbcb20f3baf41f74b82fff62e924ea7220d0de79d58279f0e4ec61b2df47ab3b19d25bf35c79fb5cfd67e51b2dbd8a96a5db756945b9fe1b92d9e80c5115448fec448428be443933afb092f254f7d55cf4ab0395abf561bad7c407aff8b5ed33bfb99264331bf991671a042c296962d62672b3adb4038a1c706da232fdc55384e39654a5174f732d99f711613d268b3b82a101bd109276332ee9ac7c6c2c0f40626cec23ff4fb75771f7062b1c61540d33ab81134275d8a7c644c67a01eeca97ead315fcf059fc8978a2f1833744eb7c9ddad24956c1c4d7a5952b28790e2a36654813372972040125cb8fd47d275cd21dedd91955cbab547aa193f36a0df29c2662f5edf0200398bbae6df661bba394f4c3772dc4c70807d8a34d4aef414133696024f8b3f416d2e03039331ace947dd94019afe90a33a21d7bc608cf398deb8a5bcbea52d520ef640058fb7a2a4a9d20a2d6197dae38ac03d5b6f5768ce714b7097d9827c9d74259bb41e08a71428807cc91d660caef5fbcc4760fdabf3ae3da852b967b4b85dc8f43be85c6f88c3349b264aa649d187f3f4b9cecb2bead45e140edc893d1ffba8eea0d884f0b0b97dbeea7c8b248b9d6f1f62b1c8fc7a58531d1a3fad458da91af3cfe10f38e1dbb2619dc3f68894dcab862e2425710045d1fbdada74f8e96c3af021be4caee32eb9e4637446c5f5cf483a48e0dafc6657f8ee56513f4799d66bda6fbd55cd524c3d9412324429064ce125cb9e24cda79b03e8c3c4e294ac8732f3174e7803209db5a9521a0e27df89cdda9c595e4c16f61af2cc84fa9a6e41154c4dcdd3ed3b19c2db6d95ad1a8daa10edb1a8ee2760b265841a6811d9d22f0dc0338a01a50ff07f58583532aa1bacc3ecb7e213835bc5c6a53cfee406c27ecc7a1dfa3bd6545e0bf4fee6150696728b677400fab0b786887cdeb22eeadc0c83fc23de1d4881ba1e0e4d699bdf58cc78e968a063e2c3ebb517e42eae4abda10f106124485f2adcbf7f58f67fe6e655b0f417ffbe6471301418abee37eeba6e7c1d9d41f78e25b970e217abe49b5b1b5ad5b8e7800da3e95487a6a268413a6defb89df9a7ef3d3991b1008a799dd2163ab7410fdb4177d0f96ef3e238e3f29ed7103eff1272847078b10d5830ffe126e184a69edf5ba787f136ddc5b22f68f2e685d8e32bd41a37d4f78362e0b450b5ec2f8b836db317fe7ff1394d98ae531964f6cc18c3a861affe9df7f7b581594fb94194e17e16b9458781a8e374731849afc680e88ffcca395ac7403b8f8840e35689daaaedd4b50c03c8b2a31367158db290f72ba39f5a8991b5de758d12749d49df6b7b47ecbacc2ab6e8d0e539547e672c077148780a44687e344b3a5d40b96d56705fcf3b0d67841238bfab3844af49ebdd736e4628a5cc3b6251380975ad6335ec686de26283ce7ebea0e803960309fbad3cd831c621a73f0431c6f4deaa8d516965f622479157acf0aed00746ed0a0a995048bd1d29319632e96accc09d240534637113b8566c528b81511a6b1c170243f34dc289606c54aa238aa7feb02c2e66b2df922c13262a49c2a97a8abb905bece150bfff559291247e769efa353e3095f1e56b436597c162d98c61088c43d18f0de59fb36eefd99bb70a54fde5244b20df35a5f2e42b264b3ad5fec95630a356ad9828ed77e7705d60bea111267a6439e5530351c00eab1eef4f5f41825d7d696d2156dd392582eb1a7b00e5176b1e0e1af4a33ed0eaa57d1951fcdc0d338b50ac352499185b83f94ec641aacf16beecd82426ccb022aaed913b1516f9aa87140ab1ef9c81921ce85a8041cf0eec729b111e9c1c7b388c6db27c8496eebaef76b2c520fe0710afa37094b65cf7e1210a57b5b9ed3141dd856ad8243a3cbbc2472bf196cc283884fe6f1cac35c6f1cfeac400f1acdee713f71365c415ed68c9280ea21dcbbdc427b5c2607c90c573d26bc722c790f8c386735c62683cd2457c2fa7646adbbc16a41a92d96d88ea10ea706e688c27a5a4cc9e4de67346e36afc2f4bb34fddc6dbae892cef26b4b585bc27c361af276d6921bef50e12ba761d477cfd8eb5b24f5d05a3d370a8affbc3f25fe884da9c65bacd65608d934a95deec069e17bedc98982ae00ca192e032960e363d81ea319ce00e260cb5dccf5c600de990777eb05d6600207aa3b0b260d816025bf66bbbc6377aeccd93d5c0373bf4e3e38929e085fa6cd8a810bc3d04442b4e45edd2888319496e4ea8d866a5e3bf94799edd5fba6da42ebd744ed29d72a72ab50d531a9aa7f725e772b3b03fc19f0bc2f5c712541eeb45be08446ea33fd22f1e30eaae236ab5d585c9a6699ad00c22b4853ff1c18ff570dd29220661d779e0a1bb1cc0480ea1256cad448a9fed54ddbe31f2ec93f94ff028f5e5237312d1ae0edddf6304f1257133a679e14411729d78836004bafe8d9f34940847f8a7b2396268d11a4a11bfdf2f357934f3cd53ff448737488b3e568470b48a786ee1fecb3b440aa307bfe465b60b6ae910d5ecbcce666e62190d3e6ee4aec70249c099f23d93c83fbe0984ef70dae53310dd428423b2d4a5e149239568cd79ed2c554a0fd887c7f9ca2a77852aa5ecc9719095d8846a87ebe4061397359052a87c64cf97b99f6a8d81655a356ad38a477d2486b1dca4aad5acb68f51a52942c19cb15db02a5f12434ae08b9ec1429f322992b584f43e2ef2bfd20d25693c269e4bbbda64d76e7271339e155f4802635fc1231fa5d2378745f9cc0d114218e30a7c6ed718deafddd0d4a7f06255ed0bd38c3d3adf512ba99d272ba6e7d1af363e55167d3abf401359c84072ea019dd0da8c75d75a9dcc448e30ef2c52b89cbd6345dd3dc268d0afdced57dda46be3fa6ee36a104a7e8b21d07fb6481054dcbf206fccfcb01d7e8edbcb3acb347cf6683d20913d9680f246189cc3ac5760188ae1f7023c2a08fe4e3960afaf8323fb180fcb185ce82697635f92f50b8426bc851e607fc6d2596f9b23ccf22d1f4c115faf08894d5f0e384fc8f48285d5d91b85ea209327e2a84860710d27a35de57ae979fd91954139533f973db7b834ae7e80a47654e0fb72c7c7b20c08415cce42a2cc810a505402b5cd2dded7cdd3d396d501d2684ed5b2265122edf0f1f484f5c822cc1b7a9a0da6c131eebfecaf6b995cae125e6d580f3bdacd07dd012cb17818d00e623932bfff31d5e8bdb1501424a331b205567815ba8c8c9cd21598fffc275c5199bbfcf35abd43d63c48069950076e80b4191f285eee26c2a4287bb6cebe0332e16974337d8348da59d900c8853d61e5d3cb9ffe520d902a5ca2db8cda4d7dae4a0180b24047d977b6341f37ad7486f0cae3982c303a6b1e765bc18f91a596f34c3b9539c8d1b4310b6112ce1314a96fa17c8bf3d7770ed27872f5afbe4e96c862184b947ced42ba30bc0b2a5f6715cf47a06ec8014d0ac2b53de2d99b48f1340c2d6465f9b2abb91fa076ec21ea1e3051a209f46d424f92390d38a65ede5326581a2a7a5dfbfed87c42971ec6b765d429cca4f920e90c127a5eadf10acc8540c7e362973e2d999f15036b68d816638ce9c611a032706574fe1dfa5378836555d2aa28af9dff8559aae457b1e207a3cb29b29aabd12b91eac79f9df3a52393abbb946a4bd2fb1652698cfa2aed0c131ab01b29b447d74b894d44db9d9960cad7bc2d696b42e03e7f56af5a784a3e935bec0d6a51611d3431555a9f03321c57f1011562234e01b922", 0x1000}, {&(0x7f0000001fc0)="9e4eb21463f0fc5913c8a49deefd3fde093651343bad38fd7e39ef14d17fd0d30e39a04698048c2049e2b54df169b3df07436e332e2b2fc7052c61df00cd3a649f5fb9a871fbde86d4001d7f9ee63fec874cd0f2a87eb1b141443637d2180ee6542c48fee64d3bc272dbce08257cda27120840b4f66a6b06f839b827c3cbae0d2c71ae43da21c255295ef039a2e072d1ad0aa4986edd3dc9c66e5f4f3d42d1f190297955cea3a85d4e01bfed754b9f68", 0xb0}], 0x2, 0x0, 0x0, 0x4}, 0x4000010) setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000100), 0x4) accept$unix(r0, &(0x7f0000000f40), &(0x7f0000000080)=0x6e) 1.701425312s ago: executing program 3 (id=1808): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000000000000000000730135000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.554941114s ago: executing program 3 (id=1810): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x20000}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) socket$inet6(0xa, 0xa, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x1) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xf, 0x81}, &(0x7f0000000140)=0x90) syz_genetlink_get_family_id$nl80211(0x0, r4) read(r0, &(0x7f0000000140)=""/111, 0x6f) 1.027344926s ago: executing program 0 (id=1812): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x2300, 0x1, 0x2}}) 792.0618ms ago: executing program 0 (id=1813): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20040000f403040025bd7000fddbdf250300000000000000000000000a000000ff0700000d000000ffffffffff0300000200000008000000000000000700000004cf0000fdffffff01f8ffff00800100fefffffff35aab1d5c1c00002800000004000000c10c000001000000000000000900000008000000070000003400000000000100090000000d000000070000000800000098f500000300000003000000ff07000006000000000800000800000001000000030000000600000000000100090000000f000000c74e0000010000004000000075060000ff00000000100000040000000008000009000000b50900000a000000c09fffff030000000000000009000000ff0300000800000000000100ff03000002000000ffffffffb70000000400000004000000040000000180000040000000070000000300000000020000358500001000000000100000601b0000ffffffff05664d330400000000020000faffffff0100000007000000ef000000d004000004000000100000000300000001000000ff7fffff010000009bc0000004000000080000000900000000000000ff7f000005000000080000000000000019000000030000000600000001040000b20d00000900003f36779a00010000007f0000000900000000080000ff7f000000020000f6ffffff37e60000d20800000700000005000000410000000f00000000080000c3bb0000040000006d00000006000000000100000080000001800000010000000d010000000000004b0a0000ec00000003000000ffffff7f000800003100000009000000240000000900000001000000feffffff020000008d320000ff00000007000000080000000000000008000000c0000000090000000800000063a9000008000000010000007700000005000000ff03000008000000fcffffffe638ffff0c000000070000005a0700000100000006000000030000003ee500000000807f0000010003000000030000000c4e2779080000002fe6000004000000001000000000000003000000ff0f00000000008004000000020000007f00000009000000f8ffffff02000000800000000900000002bd0000287f00000b2800000600000057e00000001000000b00000007000000080000000100000001000000060000000800000000010000f2ffffff040000000008000007000000080000080300000000000000090000000e00000000000000040000000100000008000000060000000020000006000000040000000300000005000000050000000800000000000100000001000002000000100000010000000700000000000000210c0000001000000200000006000000050000000800000080000000030000000000010009000000040000000008000080000000070000000b000000af28ce17ff0f000000100000010100000300000000000000633084d838dc36188b596b4e5c340087a193927e90ac9973a3eee5f36098d885acd0eecf3167ce726118263b71a0a56678708720cd8ae8287db0f70d53f300"/1118], 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210026bd7000fcdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00,\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20044005}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000080), &(0x7f0000000340)=r8}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'dvmrp1\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x5c, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 609.887822ms ago: executing program 3 (id=1814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x5, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001400)='syzkaller\x00', 0x4, 0x5c, &(0x7f0000001440)=""/92, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0xc, 0x10, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001540)=[0x1, 0x1], &(0x7f0000001580)=[{0x0, 0x3, 0x1, 0xc}], 0x10, 0x4}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="6001e7ee", @ANYRES16=r2, @ANYBLOB="010000000000000000103b00000008000300", @ANYRES32=r3, @ANYBLOB="4300330080800000ffffffffffff0802110000005050505050500000c80082000000000000000000000000000100060206002a01013c0400000200720603030303030300"], 0x60}}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5764d00200b5b6fc63da20bdd9affbf17f675d84baaa731ca29de59271ed654e2f9dbc652c945c4366b0808493b287ad8d50fb035e1c9c2a57109a20f8d65c3219688800b23c7d86d1b68847d740bf9adb8d437aedd773f45b2b996166ca1c2e831c0764cbe966610b94b24bcc25adfc3b2ab71fd4"], &(0x7f0000000400)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2a}, 0xc) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001680)={@fallback=r5, 0xffffffffffffffff, 0x2f, 0x1a, r0, @void, @value=r6}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x22, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$inet(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="29132f23ac15ce98b9", 0x9}], 0x1}, 0x40) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {0x0}], 0x2}}], 0x2, 0x4000000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 523.720479ms ago: executing program 0 (id=1815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400df250100"/20], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 368.12749ms ago: executing program 0 (id=1816): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='timer_start\x00', r1, 0x0, 0x80000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7254fd6f62fec638abf292e6c33925b29"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES8=r6], 0x28}}], 0x1, 0xc1) socket$kcm(0x10, 0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='timer_start\x00', r1, 0x0, 0x80000000000}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async) close(r4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r5) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) socket$inet6(0xa, 0x3, 0x8) (async) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES8=r6], 0x28}}], 0x1, 0xc1) (async) 347.607594ms ago: executing program 3 (id=1817): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000500)={r2, r0, 0x7, 0x0, 0x0, 0x4f, 0xf, 0xb5b, 0xf, 0x2, 0x3, 0x7, 'syz1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900090400000000000000000a000000000000000002000008001e0001"], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = accept(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x81}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x3f, &(0x7f0000000440)=""/63, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x7, 0x3b7, 0x40}, 0x10, 0x8583, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r6, r5]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00', 0x7, 0x38, &(0x7f0000000280)=""/56, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xd, 0x8000}, 0x10, 0x1d911, r7, 0x6, &(0x7f0000000640)=[r6], &(0x7f0000000780)=[{0x2, 0x3, 0x6, 0xa}, {0x2, 0x1, 0xf, 0x2}, {0x5, 0x1, 0xe, 0x2}, {0x1, 0x3, 0x0, 0x6}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x2, 0x2, 0x7}], 0x10, 0xf6}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r8, 0x1, 0x30}, &(0x7f0000000180)=0xc) 195.592148ms ago: executing program 0 (id=1818): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_1\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 16.517687ms ago: executing program 0 (id=1819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0xe, 0x3169, 0x8, 0x1, 0x6, 0x9, 0x8, 0x2, 0xfff, 0x10004, 0x8004, 0x7, 0x2, 0x100005, 0x4, 0x6, 0x5, 0x1, 0x2400, 0x3, 0x9, 0x2, 0x80000000}}) 0s ago: executing program 4 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) kernel console output (not intermixed with test programs): ous mode [ 257.252079][T10861] team0: Device veth1_vlan failed to register rx_handler [ 257.283845][T10867] syzkaller1: entered promiscuous mode [ 257.289467][T10867] syzkaller1: entered allmulticast mode [ 257.414161][T10873] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.735656][T10875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1205'. [ 258.017262][T10762] chnl_net:caif_netlink_parms(): no params data found [ 258.245784][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 258.258084][ T64] hsr_slave_0: left promiscuous mode [ 258.274564][ T64] hsr_slave_1: left promiscuous mode [ 258.289774][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.308409][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.328781][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.347083][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.397206][ T64] veth1_macvtap: left promiscuous mode [ 258.403554][ T64] veth0_macvtap: left promiscuous mode [ 258.409491][ T64] veth1_vlan: left promiscuous mode [ 258.416052][ T64] veth0_vlan: left promiscuous mode [ 258.801308][ T5836] Bluetooth: hci2: command tx timeout [ 258.967155][ T64] team0 (unregistering): Port device team_slave_1 removed [ 259.008570][ T64] team0 (unregistering): Port device team_slave_0 removed [ 259.429189][T10899] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.438354][T10899] batman_adv: batadv0: Interface activated: team0 [ 259.445336][T10899] tipc: Resetting bearer [ 259.451911][T10899] batman_adv: batadv0: Interface deactivated: team0 [ 259.459502][T10899] batman_adv: batadv0: Removing interface: team0 [ 259.468671][T10899] team0: Cannot enslave team device to itself [ 259.766644][T10921] syzkaller0: entered promiscuous mode [ 259.772974][T10921] syzkaller0: entered allmulticast mode [ 260.175893][T10935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1219'. [ 260.322872][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 261.442760][T10762] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.460438][T10762] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.477986][T10762] bridge_slave_0: entered allmulticast mode [ 261.504024][T10762] bridge_slave_0: entered promiscuous mode [ 261.637536][T10762] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.667759][T10762] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.694896][T10762] bridge_slave_1: entered allmulticast mode [ 261.709084][T10762] bridge_slave_1: entered promiscuous mode [ 261.812968][T10762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.839294][T10762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.908077][T10948] IPVS: Scheduler module ip_vs_sip not found [ 262.095448][T10762] team0: Port device team_slave_0 added [ 262.115991][T10762] team0: Port device team_slave_1 added [ 262.318306][T10762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.330203][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.377704][T10762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.391217][T10701] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.400531][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 262.421282][T10762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.432921][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.459779][T10762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.501100][T10701] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.501222][T10975] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1233'. [ 262.522105][T10701] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.559777][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'. [ 262.587469][T10701] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.609191][T10978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 262.609873][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'. [ 262.667057][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 262.734667][T10762] hsr_slave_0: entered promiscuous mode [ 262.748999][T10762] hsr_slave_1: entered promiscuous mode [ 262.757014][T10762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.765102][T10762] Cannot create hsr debugfs directory [ 262.842141][T10981] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1235'. [ 262.963286][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 263.537426][T10701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.583978][T10701] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.620196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.627482][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.662778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.670071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.690541][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 263.738270][T11026] IPVS: Unknown mcast interface: vcan0 [ 263.745437][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1247'. [ 264.480444][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 264.659278][T11043] dvmrp0: entered allmulticast mode [ 265.027255][T10762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.066384][T10701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.074892][T10762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.094588][T10762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.124276][T10762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.323989][T10701] veth0_vlan: entered promiscuous mode [ 265.385917][T10701] veth1_vlan: entered promiscuous mode [ 265.417650][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 265.538892][T10701] veth0_macvtap: entered promiscuous mode [ 265.563125][T10701] veth1_macvtap: entered promiscuous mode [ 265.637389][T10701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.682911][T10701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.718352][T10701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.720722][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'. [ 265.732972][T10701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.748879][T10701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.804986][T10701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.889114][T11106] lo: entered promiscuous mode [ 265.907773][T11106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.966119][T10762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.027369][T11113] netlink: 'syz.2.1269': attribute type 10 has an invalid length. [ 266.065192][T10762] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.158340][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.165660][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.196984][T10583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.215997][T10583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.237153][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.244383][T10583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.338692][T11119] netem: incorrect ge model size [ 266.352418][T11119] netem: change failed [ 266.366217][T11121] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 266.403294][T10583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.433268][T10583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.565882][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 266.576136][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 266.878378][T11134] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 267.009438][T11134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.091026][T11142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.135185][T11142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.162753][T11142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.191698][T11142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.226889][T11142] bond3: (slave geneve2): making interface the new active one [ 267.252413][T11142] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 267.398060][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.429146][T11157] xt_hashlimit: overflow, rate too high: 0 [ 267.439196][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1283'. [ 267.455186][T11156] sctp: [Deprecated]: syz.0.1283 (pid 11156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.455186][T11156] Use struct sctp_sack_info instead [ 267.476111][T11156] sctp: [Deprecated]: syz.0.1283 (pid 11156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.476111][T11156] Use struct sctp_sack_info instead [ 267.516700][T11157] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1284'. [ 267.612485][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.677740][T10762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.857646][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.045638][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.075941][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.090189][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.098969][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.120667][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.129058][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.271400][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 268.280692][T11187] netlink: 'syz.2.1291': attribute type 5 has an invalid length. [ 268.283615][T11187] Cannot find add_set index 4 as target [ 268.335027][T11183] netlink: 'syz.0.1292': attribute type 15 has an invalid length. [ 268.657544][T11196] sctp: [Deprecated]: syz.3.1296 (pid 11196) Use of int in maxseg socket option. [ 268.657544][T11196] Use struct sctp_assoc_value instead [ 268.659819][T11198] sctp: [Deprecated]: syz.2.1297 (pid 11198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.659819][T11198] Use struct sctp_sack_info instead [ 268.716263][ T6071] bridge_slave_1: left allmulticast mode [ 268.735236][ T6071] bridge_slave_1: left promiscuous mode [ 268.741732][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.753919][ T6071] bridge_slave_0: left allmulticast mode [ 268.759615][ T6071] bridge_slave_0: left promiscuous mode [ 268.766203][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.044890][T11207] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 269.046264][ T6790] IPVS: starting estimator thread 0... [ 269.060730][T11206] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 269.160019][T11209] IPVS: using max 23 ests per chain, 55200 per kthread [ 269.339889][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.353157][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.366674][ T6071] bond0 (unregistering): Released all slaves [ 269.443363][T10762] veth0_vlan: entered promiscuous mode [ 269.558394][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 269.668925][T11232] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 269.687274][T11232] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1306'. [ 269.720810][T11236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 270.030677][T10762] veth1_vlan: entered promiscuous mode [ 270.161725][ T51] Bluetooth: hci2: command tx timeout [ 270.204770][ T6071] hsr_slave_0: left promiscuous mode [ 270.211984][ T6071] hsr_slave_1: left promiscuous mode [ 270.218401][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.228285][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.240664][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.248161][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.275796][ T6071] veth1_macvtap: left promiscuous mode [ 270.281534][ T6071] veth0_macvtap: left promiscuous mode [ 270.287269][ T6071] veth1_vlan: left promiscuous mode [ 270.294342][ T6071] veth0_vlan: left promiscuous mode [ 270.936477][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 270.984440][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 271.427167][T11178] chnl_net:caif_netlink_parms(): no params data found [ 271.510817][T11258] veth5: entered allmulticast mode [ 271.567964][T10762] veth0_macvtap: entered promiscuous mode [ 271.606869][T10762] veth1_macvtap: entered promiscuous mode [ 271.831854][T10762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.165983][T10762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.188349][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.208419][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.222365][T11178] bridge_slave_0: entered allmulticast mode [ 272.231029][T11178] bridge_slave_0: entered promiscuous mode [ 272.233834][T11295] netlink: 'syz.3.1323': attribute type 9 has an invalid length. [ 272.240340][ T51] Bluetooth: hci2: command tx timeout [ 272.258910][T11295] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1323'. [ 272.259062][T10762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.279044][T10762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.289676][T10762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.298663][T10762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.368609][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.376367][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.387442][T11178] bridge_slave_1: entered allmulticast mode [ 272.396719][T11178] bridge_slave_1: entered promiscuous mode [ 272.423417][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 272.436784][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 272.474694][T11302] netlink: 'syz.3.1324': attribute type 14 has an invalid length. [ 272.486925][T11302] netlink: 'syz.3.1324': attribute type 13 has an invalid length. [ 272.558067][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.627403][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.658070][T11304] tipc: Enabling of bearer rejected, failed to enable media [ 272.792460][T11178] team0: Port device team_slave_0 added [ 272.846328][T11178] team0: Port device team_slave_1 added [ 272.930793][T11324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.963790][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.967430][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.984391][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 272.993840][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.000967][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.051831][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.063048][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 273.091420][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.098524][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.126674][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.182518][T11334] netlink: 'syz.2.1332': attribute type 39 has an invalid length. [ 273.243983][T11178] hsr_slave_0: entered promiscuous mode [ 273.251089][T11178] hsr_slave_1: entered promiscuous mode [ 273.278251][T10583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.315460][T10583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.618767][T11343] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1336'. [ 273.648572][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 273.658904][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 273.668175][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 273.781318][T11351] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1338'. [ 273.836893][T11351] netlink: zone id is out of range [ 273.848810][T11351] netlink: zone id is out of range [ 273.861296][T10583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.876708][T11351] netlink: get zone limit has 8 unknown bytes [ 274.044674][T10583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.228877][T10583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.297699][T10583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.320517][ T51] Bluetooth: hci2: command tx timeout [ 274.387337][T11178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.411913][T11178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.454336][T11178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.480600][T11178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.520807][T10583] bridge_slave_1: left allmulticast mode [ 274.526958][T10583] bridge_slave_1: left promiscuous mode [ 274.536509][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.546641][T10583] bridge_slave_0: left allmulticast mode [ 274.553144][T10583] bridge_slave_0: left promiscuous mode [ 274.558898][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.876804][T10583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.887888][T10583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.898667][T10583] bond0 (unregistering): Released all slaves [ 275.006831][T11178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.063332][T11178] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.079200][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.086600][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.114372][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.121624][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.234565][T10583] hsr_slave_0: left promiscuous mode [ 275.243928][T10583] hsr_slave_1: left promiscuous mode [ 275.250463][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.257910][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.266758][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.274918][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.295943][T10583] veth1_macvtap: left promiscuous mode [ 275.301708][T10583] veth0_macvtap: left promiscuous mode [ 275.307502][T10583] veth1_vlan: left promiscuous mode [ 275.313447][T10583] veth0_vlan: left promiscuous mode [ 275.385572][T11366] netlink: 'syz.0.1340': attribute type 2 has an invalid length. [ 275.413864][T11367] netlink: 'syz.0.1340': attribute type 9 has an invalid length. [ 275.938986][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.956708][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.973086][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.984925][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.993330][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.229451][T10583] team0 (unregistering): Port device team_slave_1 removed [ 276.275581][T10583] team0 (unregistering): Port device team_slave_0 removed [ 276.400032][ T5836] Bluetooth: hci2: command tx timeout [ 277.347077][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.433198][T11410] macvtap2: entered promiscuous mode [ 277.438797][T11410] macvtap2: entered allmulticast mode [ 277.449003][T11410] vlan0: entered allmulticast mode [ 277.524185][T11379] chnl_net:caif_netlink_parms(): no params data found [ 277.695704][T11178] veth0_vlan: entered promiscuous mode [ 277.887666][T11178] veth1_vlan: entered promiscuous mode [ 277.936185][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.954005][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.970660][T11379] bridge_slave_0: entered allmulticast mode [ 277.989351][T11379] bridge_slave_0: entered promiscuous mode [ 278.009041][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.023709][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.031488][T11379] bridge_slave_1: entered allmulticast mode [ 278.039682][T11379] bridge_slave_1: entered promiscuous mode [ 278.080571][ T5836] Bluetooth: hci4: command tx timeout [ 278.161886][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.195072][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.313665][T11178] veth0_macvtap: entered promiscuous mode [ 278.334510][T11379] team0: Port device team_slave_0 added [ 278.346248][T11178] veth1_macvtap: entered promiscuous mode [ 278.359639][T11379] team0: Port device team_slave_1 added [ 278.493872][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.504601][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.543494][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.569629][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.615842][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.625773][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.655006][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.669411][T11462] xt_nfacct: accounting object `syz1' does not exists [ 278.738859][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.917058][T11379] hsr_slave_0: entered promiscuous mode [ 278.924690][T11379] hsr_slave_1: entered promiscuous mode [ 278.932757][T11379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.941435][T11379] Cannot create hsr debugfs directory [ 278.951056][T11178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.959813][T11178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.971599][T11178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.980869][T11178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.166743][T11483] __nla_validate_parse: 3 callbacks suppressed [ 279.166766][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 279.409459][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.435861][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.572535][T11495] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1375'. [ 279.598095][T10583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.619446][T10583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.988867][T11511] sctp: [Deprecated]: syz.2.1380 (pid 11511) Use of int in maxseg socket option. [ 279.988867][T11511] Use struct sctp_assoc_value instead [ 280.133154][T11513] rdma_op ffff88805552c1f0 conn xmit_rdma 0000000000000000 [ 280.160244][ T5836] Bluetooth: hci4: command tx timeout [ 280.237674][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 280.438345][ T968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.481887][T11527] C: renamed from lo [ 280.531036][T11527] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.623474][ T968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.764829][ T968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.829770][T11379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.869339][ T968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.888226][T11379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.900848][T11379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.914759][T11379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.059774][ T968] bridge_slave_1: left allmulticast mode [ 281.067811][ T968] bridge_slave_1: left promiscuous mode [ 281.075393][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.085102][ T968] bridge_slave_0: left allmulticast mode [ 281.091886][ T968] bridge_slave_0: left promiscuous mode [ 281.097914][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.671789][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.691849][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.707134][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.739068][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.758820][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.808052][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.819308][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.831566][ T968] bond0 (unregistering): Released all slaves [ 282.118390][T11379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.125993][T11570] netlink: 'syz.3.1393': attribute type 11 has an invalid length. [ 282.236235][T11573] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 282.243086][T11572] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 282.244746][ T51] Bluetooth: hci4: command tx timeout [ 282.262204][T11572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1394'. [ 282.272495][T11573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1394'. [ 282.344595][T11576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.352560][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 282.461254][T11379] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.563794][ T968] hsr_slave_0: left promiscuous mode [ 282.573811][ T968] hsr_slave_1: left promiscuous mode [ 282.584485][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.592977][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.611886][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.629750][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.663649][T11592] netlink: 'syz.0.1401': attribute type 39 has an invalid length. [ 282.684655][ T968] veth1_macvtap: left promiscuous mode [ 282.693644][ T968] veth0_macvtap: left promiscuous mode [ 282.699867][ T968] veth1_vlan: left promiscuous mode [ 282.706325][ T968] veth0_vlan: left promiscuous mode [ 283.185667][ T968] team0 (unregistering): Port device team_slave_1 removed [ 283.231395][ T968] team0 (unregistering): Port device team_slave_0 removed [ 283.653322][T11593] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1400'. [ 283.662824][T11593] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1400'. [ 283.775937][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.783247][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.819839][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.827206][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.833116][T11603] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 283.843242][ T51] Bluetooth: hci2: command tx timeout [ 283.878345][T11603] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1403'. [ 283.908298][T11379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.918975][T11379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.927057][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 284.183967][T11558] chnl_net:caif_netlink_parms(): no params data found [ 284.331834][ T51] Bluetooth: hci4: command tx timeout [ 284.394003][T11625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1408'. [ 284.452381][T11631] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1409'. [ 284.493440][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 284.655743][T11641] Cannot find add_set index 4 as target [ 284.679405][T11643] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 284.689426][T11558] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.715590][T11558] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.725094][T11558] bridge_slave_0: entered allmulticast mode [ 284.734867][T11558] bridge_slave_0: entered promiscuous mode [ 284.744493][T11643] tipc: Started in network mode [ 284.749504][T11643] tipc: Node identity 1688c61c2ade, cluster identity 4711 [ 284.762037][T11643] tipc: Enabled bearer , priority 12 [ 284.773086][T11558] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.781795][T11558] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.789186][T11558] bridge_slave_1: entered allmulticast mode [ 284.798362][T11558] bridge_slave_1: entered promiscuous mode [ 284.916730][T11558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.937045][T11379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.944953][T11656] netlink: 'syz.3.1414': attribute type 23 has an invalid length. [ 284.958472][T11558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.992212][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 285.075983][T11656] vlan2: entered allmulticast mode [ 285.079817][T11660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1415'. [ 285.087009][T11656] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 285.122583][T11558] team0: Port device team_slave_0 added [ 285.155303][T11558] team0: Port device team_slave_1 added [ 285.294042][T11558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.321202][T11558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.362243][T11558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.377707][T11558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.385243][T11558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.422730][T11558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.578238][T11558] hsr_slave_0: entered promiscuous mode [ 285.595565][T11558] hsr_slave_1: entered promiscuous mode [ 285.881892][ T6782] tipc: Node number set to 1012319772 [ 285.922513][ T51] Bluetooth: hci2: command tx timeout [ 286.148660][T11379] veth0_vlan: entered promiscuous mode [ 286.325691][T11379] veth1_vlan: entered promiscuous mode [ 286.466343][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 286.499391][T11714] netlink: 'syz.2.1431': attribute type 13 has an invalid length. [ 286.526651][T11714] macvtap0: entered allmulticast mode [ 286.535856][T11714] macvtap0: refused to change device tx_queue_len [ 286.584806][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'. [ 286.657775][T11379] veth0_macvtap: entered promiscuous mode [ 286.709662][T11379] veth1_macvtap: entered promiscuous mode [ 286.733262][T11724] tipc: Enabling of bearer rejected, failed to enable media [ 286.764840][T11379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.802475][T11379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.829596][T11379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.848515][T11379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.864704][T11379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.874463][T11379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.933663][T11727] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 287.044871][T11558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.095095][T11558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.118107][T11558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.143838][T11558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.211594][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.242890][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.340341][T11746] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 287.378775][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.404455][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.541504][T11558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.663403][T11558] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.697265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.704583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.714042][T11755] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 287.742020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.749336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.908199][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.001294][ T51] Bluetooth: hci2: command tx timeout [ 288.145959][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.297789][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.376126][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.452001][T11558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.501012][T11558] veth0_vlan: entered promiscuous mode [ 288.516146][T11558] veth1_vlan: entered promiscuous mode [ 288.551382][T11558] veth0_macvtap: entered promiscuous mode [ 288.562546][T11558] veth1_macvtap: entered promiscuous mode [ 288.586284][T11558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.602191][T11558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.620703][T11558] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.629720][T11558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.639325][T11558] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.655848][T11558] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.754980][ T12] bridge_slave_1: left allmulticast mode [ 288.761375][ T12] bridge_slave_1: left promiscuous mode [ 288.767274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.778013][ T12] bridge_slave_0: left allmulticast mode [ 288.784209][ T12] bridge_slave_0: left promiscuous mode [ 288.791716][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.124933][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.135844][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.146439][ T12] bond0 (unregistering): Released all slaves [ 289.294683][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.304451][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.339238][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.355148][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.486186][ T12] hsr_slave_0: left promiscuous mode [ 289.492784][ T12] hsr_slave_1: left promiscuous mode [ 289.498615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.507635][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.516262][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.525456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.543933][ T12] veth1_macvtap: left promiscuous mode [ 289.549520][ T12] veth0_macvtap: left promiscuous mode [ 289.555953][ T12] veth1_vlan: left promiscuous mode [ 289.562489][ T12] veth0_vlan: left promiscuous mode [ 289.674152][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 289.734215][T11780] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 290.592298][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.611275][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.619801][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.632170][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.651444][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.988706][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.030377][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.875623][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 291.941261][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.955600][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.969604][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.981745][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.991232][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.439804][T11807] chnl_net:caif_netlink_parms(): no params data found [ 292.579606][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.722428][ T51] Bluetooth: hci2: command tx timeout [ 292.735145][T10583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.982489][T10583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.039891][T11819] chnl_net:caif_netlink_parms(): no params data found [ 293.184955][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.193655][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.202589][T11807] bridge_slave_0: entered allmulticast mode [ 293.213024][T11807] bridge_slave_0: entered promiscuous mode [ 293.257052][T10583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.310418][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.323557][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.332447][T11807] bridge_slave_1: entered allmulticast mode [ 293.341666][T11807] bridge_slave_1: entered promiscuous mode [ 293.505068][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.586668][T10583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.616654][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.648833][T11819] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.656148][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.667242][T11819] bridge_slave_0: entered allmulticast mode [ 293.675347][T11819] bridge_slave_0: entered promiscuous mode [ 293.772320][T11819] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.783391][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.799237][T11819] bridge_slave_1: entered allmulticast mode [ 293.819397][T11819] bridge_slave_1: entered promiscuous mode [ 293.866130][T11807] team0: Port device team_slave_0 added [ 293.884152][T11807] team0: Port device team_slave_1 added [ 293.892855][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 293.998328][T11819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.047870][T11807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.055744][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.084652][ T51] Bluetooth: hci4: command tx timeout [ 294.093748][T11807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.108360][T11907] netlink: 'syz.2.1472': attribute type 39 has an invalid length. [ 294.135229][T11819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.147779][T11807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.155741][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.187684][T11909] netlink: 'syz.2.1472': attribute type 9 has an invalid length. [ 294.190403][T11807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.282436][T11819] team0: Port device team_slave_0 added [ 294.325014][T11819] team0: Port device team_slave_1 added [ 294.355833][T11911] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 294.378373][T11807] hsr_slave_0: entered promiscuous mode [ 294.385906][T11807] hsr_slave_1: entered promiscuous mode [ 294.393184][T11807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.401720][T11807] Cannot create hsr debugfs directory [ 294.441105][T11911] team0: Device ipvlan1 failed to register rx_handler [ 294.507915][T11819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.526005][T11819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.577714][T11819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.599236][T10583] bridge_slave_1: left allmulticast mode [ 294.605506][T10583] bridge_slave_1: left promiscuous mode [ 294.611900][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.656978][T10583] bridge_slave_0: left allmulticast mode [ 294.669792][T10583] bridge_slave_0: left promiscuous mode [ 294.679362][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.800145][ T51] Bluetooth: hci2: command tx timeout [ 295.198245][T10583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.214748][T10583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.226913][T10583] bond0 (unregistering): Released all slaves [ 295.244091][T11819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.252016][T11819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.278829][T11819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.399171][T11913] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 295.636872][T11819] hsr_slave_0: entered promiscuous mode [ 295.667844][T11819] hsr_slave_1: entered promiscuous mode [ 295.680442][T11819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.693733][T11819] Cannot create hsr debugfs directory [ 295.727743][T11939] sctp: [Deprecated]: syz.0.1481 (pid 11939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.727743][T11939] Use struct sctp_sack_info instead [ 295.754033][T10583] hsr_slave_0: left promiscuous mode [ 295.762252][T10583] hsr_slave_1: left promiscuous mode [ 295.777865][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.799734][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.815166][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.831904][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.929607][T10583] veth1_macvtap: left promiscuous mode [ 295.943282][T10583] veth0_macvtap: left promiscuous mode [ 295.955687][T10583] veth1_vlan: left promiscuous mode [ 295.968889][T10583] veth0_vlan: left promiscuous mode [ 296.161900][ T51] Bluetooth: hci4: command tx timeout [ 296.586816][T10583] team0 (unregistering): Port device team_slave_1 removed [ 296.635109][T10583] team0 (unregistering): Port device team_slave_0 removed [ 296.881573][ T51] Bluetooth: hci2: command tx timeout [ 297.722601][T11983] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1493'. [ 297.772884][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1493'. [ 297.856626][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 297.967483][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 298.240857][ T51] Bluetooth: hci4: command tx timeout [ 298.360527][T12010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1502'. [ 298.472355][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 298.495490][T11819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.543376][T11819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.622381][T11819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.633626][T12009] delete_channel: no stack [ 298.658994][T11819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.779455][T11807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.795154][T11807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.805919][T11807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.819736][T11807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.962053][ T51] Bluetooth: hci2: command tx timeout [ 299.205594][T11819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.284823][T11819] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.303622][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.352869][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.360231][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.377501][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.384824][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.497667][T11807] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.546017][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.553496][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.583049][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.590372][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.627326][T12054] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 299.687630][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 300.112386][T12076] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1514'. [ 300.256728][T11819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.334197][ T51] Bluetooth: hci4: command tx timeout [ 300.340496][T11807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.573375][T11819] veth0_vlan: entered promiscuous mode [ 300.616373][T11819] veth1_vlan: entered promiscuous mode [ 300.756860][T11819] veth0_macvtap: entered promiscuous mode [ 300.787290][T11819] veth1_macvtap: entered promiscuous mode [ 300.865100][T11819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.913907][T11819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.002316][T11819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.020082][T11819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.028886][T11819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.066601][T11819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.134244][T12113] sctp: [Deprecated]: syz.3.1525 (pid 12113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.134244][T12113] Use struct sctp_sack_info instead [ 301.307356][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.345370][T12118] netlink: 'syz.2.1526': attribute type 2 has an invalid length. [ 301.359729][T11807] veth0_vlan: entered promiscuous mode [ 301.452092][T11807] veth1_vlan: entered promiscuous mode [ 301.471223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.494358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.506930][T12126] netlink: 'syz.0.1530': attribute type 4 has an invalid length. [ 301.577380][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.607296][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.683975][T11807] veth0_macvtap: entered promiscuous mode [ 301.722505][T11807] veth1_macvtap: entered promiscuous mode [ 301.806474][T11807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.957489][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 301.958226][T11807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.976648][T12143] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 301.981569][T11807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.997968][T11807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.008826][T11807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.019559][T12144] netlink: 'syz.0.1534': attribute type 2 has an invalid length. [ 302.023945][T11807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.030604][T12144] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 302.045193][T12144] netlink: 'syz.0.1534': attribute type 2 has an invalid length. [ 302.054654][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 302.065119][T12144] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 302.073204][T12144] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 302.108539][T12144] netlink: 'syz.0.1534': attribute type 2 has an invalid length. [ 302.196928][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.433746][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.464286][T10583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.485893][T10583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.585154][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.707938][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.757253][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.769363][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.062646][ T6071] bridge_slave_1: left allmulticast mode [ 303.068385][ T6071] bridge_slave_1: left promiscuous mode [ 303.077401][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.095638][ T6071] bridge_slave_0: left allmulticast mode [ 303.103265][ T6071] bridge_slave_0: left promiscuous mode [ 303.109154][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.778125][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.798419][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.814963][ T6071] bond0 (unregistering): Released all slaves [ 303.838144][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.851190][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.854878][T12169] netem: incorrect ge model size [ 303.859562][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.868866][T12169] netem: change failed [ 303.874893][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.890909][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.165483][ T6071] hsr_slave_0: left promiscuous mode [ 304.171803][ T6071] hsr_slave_1: left promiscuous mode [ 304.177850][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.185866][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.194547][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.202546][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.221461][ T6071] veth1_macvtap: left promiscuous mode [ 304.227094][ T6071] veth0_macvtap: left promiscuous mode [ 304.233453][ T6071] veth1_vlan: left promiscuous mode [ 304.238761][ T6071] veth0_vlan: left promiscuous mode [ 304.698549][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 304.749774][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 305.437130][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.450284][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.461337][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.475717][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.489248][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.808141][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 305.835734][T12211] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1548'. [ 305.878333][T12179] chnl_net:caif_netlink_parms(): no params data found [ 306.006772][ T51] Bluetooth: hci2: command tx timeout [ 306.035344][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 307.600964][ T51] Bluetooth: hci4: command tx timeout [ 307.765399][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1551'. [ 307.942112][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 307.979625][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 308.028091][ T6071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.062373][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.073161][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.080061][ T51] Bluetooth: hci2: command tx timeout [ 308.083805][T12179] bridge_slave_0: entered allmulticast mode [ 308.103756][T12179] bridge_slave_0: entered promiscuous mode [ 308.114768][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.122311][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.129871][T12179] bridge_slave_1: entered allmulticast mode [ 308.138272][T12179] bridge_slave_1: entered promiscuous mode [ 308.176467][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 308.280955][ T6071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.322344][T12258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1559'. [ 308.398437][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.447281][ T6071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.486561][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.716669][ T6071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.841981][T12179] team0: Port device team_slave_0 added [ 308.924698][T12179] team0: Port device team_slave_1 added [ 309.084040][T12205] chnl_net:caif_netlink_parms(): no params data found [ 309.106992][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.135236][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.145202][T12296] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.165137][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.179787][T12296] netlink: 'syz.0.1568': attribute type 11 has an invalid length. [ 309.205821][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.209996][T12296] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1568'. [ 309.224123][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.224196][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.301018][T12301] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1569'. [ 309.437205][T12304] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 309.680800][ T51] Bluetooth: hci4: command tx timeout [ 309.723724][T12179] hsr_slave_0: entered promiscuous mode [ 309.741688][T12179] hsr_slave_1: entered promiscuous mode [ 309.841613][T12325] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 309.881508][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.902382][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.911005][T12205] bridge_slave_0: entered allmulticast mode [ 309.922444][T12205] bridge_slave_0: entered promiscuous mode [ 309.987079][ T6071] bridge_slave_1: left allmulticast mode [ 309.994753][ T6071] bridge_slave_1: left promiscuous mode [ 310.005363][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.021421][ T6071] bridge_slave_0: left allmulticast mode [ 310.033687][ T6071] bridge_slave_0: left promiscuous mode [ 310.047255][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.239765][ T51] Bluetooth: hci2: command tx timeout [ 310.515468][T12348] xt_ecn: cannot match TCP bits for non-tcp packets [ 310.631626][T12350] x_tables: duplicate underflow at hook 1 [ 310.757386][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.769014][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.779734][ T6071] bond0 (unregistering): Released all slaves [ 310.795228][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.804261][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.812122][T12205] bridge_slave_1: entered allmulticast mode [ 310.819414][T12205] bridge_slave_1: entered promiscuous mode [ 310.978569][T12352] __nla_validate_parse: 2 callbacks suppressed [ 310.978592][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 311.007160][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 311.032993][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.072952][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.088266][T12356] IPv6: sit1: Disabled Multicast RS [ 311.094988][T12356] sit1: entered allmulticast mode [ 311.411865][ T6071] hsr_slave_0: left promiscuous mode [ 311.439844][ T6071] hsr_slave_1: left promiscuous mode [ 311.461426][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.469009][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.497837][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.528325][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.596138][ T6071] veth1_macvtap: left promiscuous mode [ 311.612887][ T6071] veth0_macvtap: left promiscuous mode [ 311.619445][ T6071] veth1_vlan: left promiscuous mode [ 311.637589][ T6071] veth0_vlan: left promiscuous mode [ 311.671403][T12376] validate_nla: 1 callbacks suppressed [ 311.671423][T12376] netlink: 'syz.3.1591': attribute type 8 has an invalid length. [ 311.716376][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 311.760297][ T51] Bluetooth: hci4: command tx timeout [ 312.320499][ T51] Bluetooth: hci2: command tx timeout [ 312.353630][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 312.402682][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 312.860083][T12205] team0: Port device team_slave_0 added [ 312.885274][T12376] bridge0: entered allmulticast mode [ 312.896037][T12376] tipc: Resetting bearer [ 312.915118][T12205] team0: Port device team_slave_1 added [ 313.162304][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.163460][T12398] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 313.189107][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.227255][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.244443][T12401] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.260567][T12400] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 313.368827][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.391809][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.425768][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.762480][T12205] hsr_slave_0: entered promiscuous mode [ 313.777705][T12205] hsr_slave_1: entered promiscuous mode [ 313.789638][T12205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.803917][T12205] Cannot create hsr debugfs directory [ 313.840099][ T51] Bluetooth: hci4: command tx timeout [ 314.264216][T12425] netlink: 'syz.0.1601': attribute type 4 has an invalid length. [ 314.280004][T12425] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1601'. [ 314.312034][T12429] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.365290][T12179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.393874][T12179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.414342][T12179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.526899][T12429] syzkaller0: entered promiscuous mode [ 314.532810][T12429] syzkaller0: entered allmulticast mode [ 314.555179][T12179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.575570][T12437] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 314.584916][T12437] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 316.695803][T12463] syzkaller1: entered promiscuous mode [ 316.728971][T12463] syzkaller1: entered allmulticast mode [ 316.877181][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.935883][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.952659][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.959967][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.988066][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.995492][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.143704][T12205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.195849][T12205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.214308][T12205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.234733][T12486] lo: entered allmulticast mode [ 317.246307][T12486] tunl0: entered allmulticast mode [ 317.260913][T12486] gre0: entered allmulticast mode [ 317.273669][T12486] ip_vti0: entered allmulticast mode [ 317.281675][T12486] ip6_vti0: entered allmulticast mode [ 317.287874][T12486] sit0: entered allmulticast mode [ 317.294403][T12486] ip6tnl0: entered allmulticast mode [ 317.301876][T12486] ip6gre0: entered allmulticast mode [ 317.307572][T12486] ip6gretap0: entered allmulticast mode [ 317.321239][T12486] bridge0: entered allmulticast mode [ 317.340375][T12486] bond0: entered allmulticast mode [ 317.350583][T12486] team0: entered allmulticast mode [ 317.365955][T12486] dummy0: entered allmulticast mode [ 317.384827][T12486] nlmon0: entered allmulticast mode [ 317.397687][T12486] batadv0: entered allmulticast mode [ 317.403749][T12486] vxcan0: entered allmulticast mode [ 317.409235][T12486] vxcan1: entered allmulticast mode [ 317.424293][T12486] veth0: entered allmulticast mode [ 317.429814][T12486] veth1: entered allmulticast mode [ 317.437788][T12486] wg1: entered allmulticast mode [ 317.446844][T12486] wg2: entered allmulticast mode [ 317.459721][T12486] veth0_to_bridge: entered allmulticast mode [ 317.469690][T12486] : entered allmulticast mode [ 317.476990][T12486] veth0_to_bond: entered allmulticast mode [ 317.487914][T12486] bond_slave_0: entered allmulticast mode [ 317.496070][T12486] veth1_to_bond: entered allmulticast mode [ 317.506145][T12486] bond_slave_1: entered allmulticast mode [ 317.515013][T12486] veth0_to_team: entered allmulticast mode [ 317.543052][T12486] team_slave_0: entered allmulticast mode [ 317.549680][T12486] veth1_to_team: entered allmulticast mode [ 317.557695][T12486] team_slave_1: entered allmulticast mode [ 317.564322][T12486] veth0_to_batadv: entered allmulticast mode [ 317.572195][T12486] batadv_slave_0: entered allmulticast mode [ 317.578424][T12486] veth1_to_batadv: entered allmulticast mode [ 317.586037][T12486] batadv_slave_1: entered allmulticast mode [ 317.592984][T12486] xfrm0: entered allmulticast mode [ 317.598433][T12486] veth0_to_hsr: entered allmulticast mode [ 317.606020][T12486] hsr_slave_0: entered allmulticast mode [ 317.612232][T12486] veth1_to_hsr: entered allmulticast mode [ 317.618130][T12486] hsr_slave_1: entered allmulticast mode [ 317.624806][T12486] hsr0: entered allmulticast mode [ 317.630835][T12486] veth1_virt_wifi: entered allmulticast mode [ 317.637434][T12486] veth0_virt_wifi: entered allmulticast mode [ 317.644316][T12486] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 317.652115][T12486] veth0_vlan: entered allmulticast mode [ 317.657898][T12486] vlan0: entered allmulticast mode [ 317.663905][T12486] vlan1: entered allmulticast mode [ 317.669266][T12486] macvlan0: entered allmulticast mode [ 317.675095][T12486] macvlan1: entered allmulticast mode [ 317.686426][T12486] ipvlan0: entered allmulticast mode [ 317.694294][T12486] ipvlan1: entered allmulticast mode [ 317.699857][T12486] veth1_macvtap: entered allmulticast mode [ 317.713069][T12486] veth0_macvtap: entered allmulticast mode [ 317.719342][T12486] macsec0: entered allmulticast mode [ 317.726404][T12486] geneve0: entered allmulticast mode [ 317.748539][T12486] geneve1: entered allmulticast mode [ 317.758928][T12486] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 317.766367][T12486] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 317.774318][T12486] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 317.785696][T12486] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 317.797347][T12486] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 317.809487][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'. [ 317.812846][T12486] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 317.826953][T12486] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 317.834619][T12486] macsec1: entered allmulticast mode [ 317.840862][T12486] veth2: entered allmulticast mode [ 317.846439][T12486] veth3: entered allmulticast mode [ 317.853286][T12486] vlan4094: entered allmulticast mode [ 317.858933][T12486] syztnl0: entered allmulticast mode [ 317.864523][T12486] gtp0: entered allmulticast mode [ 317.869802][T12486] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 317.878844][T12486] xfrm1: left promiscuous mode [ 317.883954][T12486] gre1: entered allmulticast mode [ 317.889627][T12486] gre2: entered allmulticast mode [ 317.895188][T12486] : entered allmulticast mode [ 317.901017][T12486] bridge1: entered allmulticast mode [ 317.906795][T12486] gretap0: entered allmulticast mode [ 317.912528][T12486] bridge2: entered allmulticast mode [ 317.918753][T12486] bond2: entered allmulticast mode [ 317.926742][T12486] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.936395][T12486] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.945444][T12486] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.954664][T12486] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.969046][T12486] vxlan0: entered allmulticast mode [ 317.978080][T12486] bridge3: entered allmulticast mode [ 317.992859][T12486] bridge_slave_1: entered allmulticast mode [ 317.999023][T12486] vlan2: entered allmulticast mode [ 318.009850][T12486] bridge4: entered allmulticast mode [ 318.015715][T12486] macsec2: entered allmulticast mode [ 318.027039][T12486] bridge5: entered allmulticast mode [ 318.039151][T12205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.427472][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.518227][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.637326][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.684781][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.692610][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.757496][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.764926][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.837660][T12179] veth0_vlan: entered promiscuous mode [ 318.905467][T12179] veth1_vlan: entered promiscuous mode [ 319.119654][T12179] veth0_macvtap: entered promiscuous mode [ 319.208704][T12179] veth1_macvtap: entered promiscuous mode [ 319.292595][T12179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.324696][T12179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.358398][T12549] xt_TCPMSS: Only works on TCP SYN packets [ 319.365417][T12179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.377525][T12179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.386565][T12179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.395499][T12179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.624083][T10583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.649869][T10583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.708270][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.733516][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.817100][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.966440][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 320.011758][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 320.027569][T12566] netlink: 'syz.2.1632': attribute type 13 has an invalid length. [ 320.119603][T12574] Cannot find add_set index 4 as target [ 320.334391][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 320.462217][ T968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.563484][T12582] netlink: 'syz.2.1635': attribute type 8 has an invalid length. [ 320.656933][ T968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.808253][ T968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.854852][T12205] veth0_vlan: entered promiscuous mode [ 320.867819][T12205] veth1_vlan: entered promiscuous mode [ 320.907872][T12205] veth0_macvtap: entered promiscuous mode [ 320.918886][T12205] veth1_macvtap: entered promiscuous mode [ 320.939336][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.957441][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.972950][T12205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.983274][T12205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.993073][T12205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.002303][T12205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.076386][ T968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.130099][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.138237][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.173468][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.186101][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.371523][ T968] bridge_slave_1: left allmulticast mode [ 321.378885][ T968] bridge_slave_1: left promiscuous mode [ 321.385702][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.397111][ T968] bridge_slave_0: left allmulticast mode [ 321.403557][ T968] bridge_slave_0: left promiscuous mode [ 321.409295][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.011547][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.029730][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.069263][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.088105][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.097928][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.153414][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.172319][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.202698][ T968] bond0 (unregistering): Released all slaves [ 322.571148][ T968] hsr_slave_0: left promiscuous mode [ 322.577599][ T968] hsr_slave_1: left promiscuous mode [ 322.585240][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.593019][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.604773][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.612865][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.632394][ T968] veth1_macvtap: left promiscuous mode [ 322.638102][ T968] veth0_macvtap: left promiscuous mode [ 322.647425][ T968] veth1_vlan: left promiscuous mode [ 322.653278][ T968] veth0_vlan: left promiscuous mode [ 323.135321][ T968] team0 (unregistering): Port device team_slave_1 removed [ 323.178836][ T968] team0 (unregistering): Port device team_slave_0 removed [ 323.756344][T12619] chnl_net:caif_netlink_parms(): no params data found [ 323.862023][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.869419][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.878548][T12619] bridge_slave_0: entered allmulticast mode [ 323.886799][T12619] bridge_slave_0: entered promiscuous mode [ 323.895518][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.903251][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.911278][T12619] bridge_slave_1: entered allmulticast mode [ 323.918493][T12619] bridge_slave_1: entered promiscuous mode [ 324.006231][T12619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.038663][T12619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.160526][ T51] Bluetooth: hci2: command tx timeout [ 324.180549][T12619] team0: Port device team_slave_0 added [ 324.196489][T12619] team0: Port device team_slave_1 added [ 324.285063][ T968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.581119][ T968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.641325][T12619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.648536][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.698477][T12619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.698571][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.711709][T12651] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 324.739402][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.743992][T12661] openvswitch: netlink: Actions may not be safe on all matching packets [ 324.756373][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.781771][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.808887][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.849571][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1651'. [ 324.875032][ T968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.900089][T12619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.907176][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.935711][T12619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.948053][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1651'. [ 324.958022][T12666] netlink: 'syz.3.1652': attribute type 9 has an invalid length. [ 324.999811][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1651'. [ 325.071660][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 325.081089][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 325.085832][ T968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.091774][T12674] netlink: 'syz.3.1654': attribute type 13 has an invalid length. [ 325.144521][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1651'. [ 325.153015][T12619] hsr_slave_0: entered promiscuous mode [ 325.171466][T12619] hsr_slave_1: entered promiscuous mode [ 325.237972][T12678] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1655'. [ 325.247019][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1651'. [ 325.247215][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1651'. [ 325.263378][T12678] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1655'. [ 325.274964][T12678] netlink: 'syz.3.1655': attribute type 6 has an invalid length. [ 325.284248][T12678] netlink: 'syz.3.1655': attribute type 5 has an invalid length. [ 325.785633][ T968] bridge_slave_1: left allmulticast mode [ 325.792122][ T968] bridge_slave_1: left promiscuous mode [ 325.801202][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.833908][ T968] bridge_slave_0: left allmulticast mode [ 325.839643][ T968] bridge_slave_0: left promiscuous mode [ 325.859069][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.244219][ T51] Bluetooth: hci2: command tx timeout [ 326.321729][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.335863][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.347054][ T968] bond0 (unregistering): Released all slaves [ 326.883319][ T51] Bluetooth: hci4: command tx timeout [ 328.320167][ T51] Bluetooth: hci2: command tx timeout [ 328.507065][T12725] netlink: 'syz.2.1666': attribute type 64 has an invalid length. [ 328.605262][T12713] syzkaller0: entered promiscuous mode [ 328.611176][T12713] syzkaller0: entered allmulticast mode [ 328.626475][T12659] chnl_net:caif_netlink_parms(): no params data found [ 328.626517][T12728] openvswitch: netlink: Message has 199 unknown bytes. [ 328.640830][T12728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.728164][T12728] netlink: 'syz.3.1667': attribute type 178 has an invalid length. [ 328.856158][ T968] hsr_slave_0: left promiscuous mode [ 328.868648][ T968] hsr_slave_1: left promiscuous mode [ 328.876152][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.884349][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.893380][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.901257][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.922341][ T968] veth1_macvtap: left promiscuous mode [ 328.928037][ T968] veth0_macvtap: left promiscuous mode [ 328.934162][ T968] veth1_vlan: left promiscuous mode [ 328.939547][ T968] veth0_vlan: left promiscuous mode [ 328.960087][ T51] Bluetooth: hci4: command tx timeout [ 329.463179][ T968] team0 (unregistering): Port device team_slave_1 removed [ 329.514350][ T968] team0 (unregistering): Port device team_slave_0 removed [ 330.413830][ T51] Bluetooth: hci2: command tx timeout [ 331.043749][ T51] Bluetooth: hci4: command tx timeout [ 331.724252][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.734252][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.746737][T12659] bridge_slave_0: entered allmulticast mode [ 331.756483][T12659] bridge_slave_0: entered promiscuous mode [ 331.765370][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.774299][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.783197][T12659] bridge_slave_1: entered allmulticast mode [ 331.793128][T12659] bridge_slave_1: entered promiscuous mode [ 331.935237][T12749] __nla_validate_parse: 30 callbacks suppressed [ 331.935261][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 331.994627][T12751] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 332.065392][T12751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.103105][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.127280][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.285151][T12759] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1676'. [ 332.297393][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 332.307613][T12659] team0: Port device team_slave_0 added [ 332.319770][T12659] team0: Port device team_slave_1 added [ 332.421867][T12619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.459400][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.469005][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.501328][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.517856][T12619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.535693][T12619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.561609][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.591106][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.637148][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.741852][T12619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.801928][T12659] hsr_slave_0: entered promiscuous mode [ 332.808845][T12659] hsr_slave_1: entered promiscuous mode [ 332.821516][T12659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.829144][T12659] Cannot create hsr debugfs directory [ 332.860602][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 333.030952][T12784] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1684'. [ 333.127032][ T51] Bluetooth: hci4: command tx timeout [ 333.343248][T12803] netlink: 'syz.0.1687': attribute type 12 has an invalid length. [ 333.586317][T12809] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 333.725738][T12619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.789691][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.843815][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.851060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.916034][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.923425][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.072161][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 334.154653][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 334.244805][T12659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.252074][T12824] xt_TCPMSS: Only works on TCP SYN packets [ 334.282805][T12659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.326061][T12659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.364400][T12659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.476410][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.487649][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.502165][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.515433][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.523546][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.936052][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.091873][T12659] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.109430][T12619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.121009][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.128299][T10583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.177472][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.184969][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.219644][T12835] chnl_net:caif_netlink_parms(): no params data found [ 335.503304][T12659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.533539][T12835] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.545997][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.555608][T12835] bridge_slave_0: entered allmulticast mode [ 335.571376][T12835] bridge_slave_0: entered promiscuous mode [ 335.623711][T12835] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.650090][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.657412][T12835] bridge_slave_1: entered allmulticast mode [ 335.696047][T12835] bridge_slave_1: entered promiscuous mode [ 335.704477][T12619] veth0_vlan: entered promiscuous mode [ 335.807275][T12835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.834913][T12835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.012831][T12619] veth1_vlan: entered promiscuous mode [ 336.048559][T12835] team0: Port device team_slave_0 added [ 336.065786][T12835] team0: Port device team_slave_1 added [ 336.100322][T12885] netlink: 'syz.0.1704': attribute type 29 has an invalid length. [ 336.213942][T12835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.235291][T12835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.256916][T12890] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1705'. [ 336.267752][T12835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.280788][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1705'. [ 336.295497][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 336.297305][T12835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.323862][T12835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.356771][T12835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.492698][T12835] hsr_slave_0: entered promiscuous mode [ 336.504455][T12835] hsr_slave_1: entered promiscuous mode [ 336.514211][T12835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.526235][T12835] Cannot create hsr debugfs directory [ 336.541530][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.551641][T12619] veth0_macvtap: entered promiscuous mode [ 336.560209][ T51] Bluetooth: hci3: command tx timeout [ 336.567212][T12619] veth1_macvtap: entered promiscuous mode [ 336.823602][T12619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.903686][T12619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.975766][T12619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.990662][T12619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.000005][T12619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.020571][T12619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.353714][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.368653][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.541887][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.563792][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.579155][T12659] veth0_vlan: entered promiscuous mode [ 337.644852][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 337.657716][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 337.690501][T12916] netlink: 'syz.0.1712': attribute type 3 has an invalid length. [ 337.737705][T12659] veth1_vlan: entered promiscuous mode [ 337.983427][T12925] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.031774][T12659] veth0_macvtap: entered promiscuous mode [ 338.171454][ T968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.352333][ T968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.372530][T12659] veth1_macvtap: entered promiscuous mode [ 338.641334][ T51] Bluetooth: hci3: command tx timeout [ 339.798611][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.815290][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.836047][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.854336][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.868909][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.720761][ T51] Bluetooth: hci3: command tx timeout [ 341.920204][ T51] Bluetooth: hci2: command tx timeout [ 342.803250][ T51] Bluetooth: hci3: command tx timeout [ 343.087420][T12835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.117170][ T968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.147620][T12835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.175813][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.189527][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.267709][ T968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.324679][T12835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.363449][T12835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.388946][T12659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.399035][T12659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.409036][T12659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.418682][T12659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.459720][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1725'. [ 343.573463][T12973] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 343.587150][T12973] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 343.640694][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1726'. [ 343.879487][ T968] bridge_slave_1: left allmulticast mode [ 343.886096][ T968] bridge_slave_1: left promiscuous mode [ 343.894786][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.905269][ T968] bridge_slave_0: left allmulticast mode [ 343.911607][ T968] bridge_slave_0: left promiscuous mode [ 343.917530][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.003929][ T51] Bluetooth: hci2: command tx timeout [ 344.414864][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.437539][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.457447][ T968] bond0 (unregistering): Released all slaves [ 344.559510][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.578956][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.694670][T12947] chnl_net:caif_netlink_parms(): no params data found [ 344.757320][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.767868][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.791895][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 344.813172][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 345.003336][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.011611][T12947] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.019078][T12947] bridge_slave_0: entered allmulticast mode [ 345.039287][T12947] bridge_slave_0: entered promiscuous mode [ 345.077429][ T968] hsr_slave_0: left promiscuous mode [ 345.085449][ T968] hsr_slave_1: left promiscuous mode [ 345.096978][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.105275][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.114653][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.122515][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.145661][ T968] veth1_macvtap: left promiscuous mode [ 345.151681][ T968] veth0_macvtap: left promiscuous mode [ 345.157538][ T968] veth1_vlan: left promiscuous mode [ 345.163959][ T968] veth0_vlan: left promiscuous mode [ 345.668195][ T968] team0 (unregistering): Port device team_slave_1 removed [ 345.712966][ T968] team0 (unregistering): Port device team_slave_0 removed [ 346.081653][ T51] Bluetooth: hci2: command tx timeout [ 346.189667][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.206668][T12947] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.216221][T12947] bridge_slave_1: entered allmulticast mode [ 346.224797][T12947] bridge_slave_1: entered promiscuous mode [ 346.413216][T12947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.456057][T12947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.563951][T12835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.575525][T12947] team0: Port device team_slave_0 added [ 346.609512][T12947] team0: Port device team_slave_1 added [ 346.715405][T12835] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.725999][T12947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.738822][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.767879][T12947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.791364][T12947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.798436][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.829310][T12947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.852533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.859840][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.880692][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.887984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.946236][T12947] hsr_slave_0: entered promiscuous mode [ 346.952878][T12947] hsr_slave_1: entered promiscuous mode [ 346.998510][ T968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.077127][T12835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.089485][T12835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.125840][ T968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.225567][ T968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.312762][ T968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.564667][T12835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.599456][ T968] bridge_slave_1: left allmulticast mode [ 347.610197][ T968] bridge_slave_1: left promiscuous mode [ 347.616567][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.632531][ T968] bridge_slave_0: left allmulticast mode [ 347.638309][ T968] bridge_slave_0: left promiscuous mode [ 347.645134][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.029430][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.044436][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.055402][ T968] bond0 (unregistering): Released all slaves [ 348.161548][ T51] Bluetooth: hci2: command tx timeout [ 348.250840][T12835] veth0_vlan: entered promiscuous mode [ 348.274521][T12835] veth1_vlan: entered promiscuous mode [ 348.286543][T12947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.308194][T12947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.328042][T12947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.367726][T12947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.481603][ T968] hsr_slave_0: left promiscuous mode [ 348.496793][ T968] hsr_slave_1: left promiscuous mode [ 348.520284][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.527787][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.544882][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.552774][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.582566][ T968] veth1_macvtap: left promiscuous mode [ 348.591290][ T968] veth0_macvtap: left promiscuous mode [ 348.597946][ T968] veth1_vlan: left promiscuous mode [ 348.604334][ T968] veth0_vlan: left promiscuous mode [ 348.936365][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.946658][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.957129][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.972416][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.982099][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.304313][ T968] team0 (unregistering): Port device team_slave_1 removed [ 349.348192][ T968] team0 (unregistering): Port device team_slave_0 removed [ 349.940961][T12835] veth0_macvtap: entered promiscuous mode [ 349.987935][T12835] veth1_macvtap: entered promiscuous mode [ 350.135994][T12835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.203381][T12835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.216534][T12835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.235870][T12835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.246307][T12835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.255391][T12835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.399856][T12947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.569267][T12947] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.595143][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.602425][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.675809][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.683013][T10583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.721676][T10583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.729580][T10583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.769138][T13026] chnl_net:caif_netlink_parms(): no params data found [ 351.040515][ T5836] Bluetooth: hci4: command tx timeout [ 351.104928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.144842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.298628][T13026] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.307391][T13026] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.330237][T13026] bridge_slave_0: entered allmulticast mode [ 351.341009][T13026] bridge_slave_0: entered promiscuous mode [ 351.356097][T13026] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.364749][T13026] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.385853][T13026] bridge_slave_1: entered allmulticast mode [ 351.401490][T13026] bridge_slave_1: entered promiscuous mode [ 351.573090][T13026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.624514][T13026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.769076][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.957514][T13026] team0: Port device team_slave_0 added [ 352.026644][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.135701][T13026] team0: Port device team_slave_1 added [ 352.312509][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.390460][T13026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.405129][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.454566][T13026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.501662][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.525626][T13026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.533395][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.562327][T13026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.594533][T12947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.788864][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.810142][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.823688][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.850432][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.880559][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.892899][T13026] hsr_slave_0: entered promiscuous mode [ 352.911755][T13026] hsr_slave_1: entered promiscuous mode [ 352.945498][T13026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.980144][T13026] Cannot create hsr debugfs directory [ 353.120560][ T5836] Bluetooth: hci4: command tx timeout [ 353.320191][ T12] bridge_slave_1: left allmulticast mode [ 353.325932][ T12] bridge_slave_1: left promiscuous mode [ 353.344049][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.358110][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 353.382072][ T12] bridge_slave_0: left allmulticast mode [ 353.387792][ T12] bridge_slave_0: left promiscuous mode [ 353.398869][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.861396][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.872739][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.885684][ T12] bond0 (unregistering): Released all slaves [ 353.917090][T12947] veth0_vlan: entered promiscuous mode [ 354.209156][T12947] veth1_vlan: entered promiscuous mode [ 354.507115][T13151] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1763'. [ 354.606566][ T12] hsr_slave_0: left promiscuous mode [ 354.630016][ T12] hsr_slave_1: left promiscuous mode [ 354.636615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.658071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.672768][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.682931][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.725865][ T12] veth1_macvtap: left promiscuous mode [ 354.733617][ T12] veth0_macvtap: left promiscuous mode [ 354.739543][ T12] veth1_vlan: left promiscuous mode [ 354.745921][ T12] veth0_vlan: left promiscuous mode [ 354.961493][ T5836] Bluetooth: hci3: command tx timeout [ 355.205628][ T5836] Bluetooth: hci4: command tx timeout [ 355.388671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 355.434134][ T12] team0 (unregistering): Port device team_slave_0 removed [ 355.916225][T13155] veth0: entered promiscuous mode [ 355.922660][T13158] veth0: left promiscuous mode [ 356.154902][T13093] chnl_net:caif_netlink_parms(): no params data found [ 356.277837][T12947] veth0_macvtap: entered promiscuous mode [ 356.346478][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.356008][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 356.357245][T13181] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 356.372861][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 356.413267][T12947] veth1_macvtap: entered promiscuous mode [ 356.572841][T13185] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1773'. [ 356.584335][T13185] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1773'. [ 356.611844][T13093] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.619149][T13093] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.627188][T13093] bridge_slave_0: entered allmulticast mode [ 356.635761][T13093] bridge_slave_0: entered promiscuous mode [ 356.657236][T12947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.665285][T13190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1773'. [ 356.710257][T13026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.749231][T13093] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.772482][T13093] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.783024][T13093] bridge_slave_1: entered allmulticast mode [ 356.794103][T13093] bridge_slave_1: entered promiscuous mode [ 356.806593][T13026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.928677][T12947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.936722][T13026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.949530][T13199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.973936][T13093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.989339][T13093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.006604][T13026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.019058][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'. [ 357.040368][ T5836] Bluetooth: hci3: command tx timeout [ 357.087362][T12947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.097234][T12947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.107388][T12947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.116828][T12947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.213549][T13093] team0: Port device team_slave_0 added [ 357.234828][T13210] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1778'. [ 357.256366][T13093] team0: Port device team_slave_1 added [ 357.281183][ T5836] Bluetooth: hci4: command tx timeout [ 357.400870][T13093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.407885][T13093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.437552][T13093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.501544][T13093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.514759][T13093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.543510][T13093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.755779][T13093] hsr_slave_0: entered promiscuous mode [ 357.764600][T13093] hsr_slave_1: entered promiscuous mode [ 357.775423][T13093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.785505][T13093] Cannot create hsr debugfs directory [ 357.813444][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.842790][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.984146][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 358.029230][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.037535][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.058949][T13229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.102403][T13231] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 358.210604][T13229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.279831][T13026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.377979][T13238] __nla_validate_parse: 1 callbacks suppressed [ 358.378000][T13238] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1786'. [ 358.415065][T13229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.452943][T13238] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 358.462935][T13238] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 358.527678][T13229] batman_adv: batadv0: Removing interface: netdevsim0 [ 358.537946][T13229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.698168][ T5934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.736519][T13026] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.812012][ T5934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.848309][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.855542][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.922418][T13229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.944021][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.951212][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.978208][T13229] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.030497][ T5934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.058662][T13229] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.106372][T13229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.121173][ T5836] Bluetooth: hci3: command tx timeout [ 359.141878][ T5934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.264165][T13093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.305561][T13093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.376932][T13093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.391510][T13093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.470870][ T5934] bridge_slave_1: left allmulticast mode [ 359.476607][ T5934] bridge_slave_1: left promiscuous mode [ 359.483854][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.495621][ T5934] bridge_slave_0: left allmulticast mode [ 359.507179][ T5934] bridge_slave_0: left promiscuous mode [ 359.514661][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.077944][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.099600][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.126126][ T5934] bond0 (unregistering): Released all slaves [ 360.159352][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 360.184848][T13263] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 360.445155][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.459568][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.472651][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.487277][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.500546][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.668639][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 360.671615][T13026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.863403][ T5934] hsr_slave_0: left promiscuous mode [ 360.884401][ T5934] hsr_slave_1: left promiscuous mode [ 360.901880][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.909539][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.928263][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.936890][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.970732][T13292] tipc: Failed to remove unknown binding: 66,1,1/1012319772:670457143/670457145 [ 360.991324][T13292] tipc: Failed to remove unknown binding: 66,1,1/1012319772:670457143/670457145 [ 360.996719][ T5934] veth1_macvtap: left promiscuous mode [ 361.012726][ T5934] veth0_macvtap: left promiscuous mode [ 361.018568][ T5934] veth1_vlan: left promiscuous mode [ 361.028436][ T5934] veth0_vlan: left promiscuous mode [ 361.201256][ T5836] Bluetooth: hci3: command tx timeout [ 361.598306][ T5934] team0 (unregistering): Port device team_slave_1 removed [ 361.643844][ T5934] team0 (unregistering): Port device team_slave_0 removed [ 362.100441][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 362.347688][T13093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.382753][T13093] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.409808][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.417003][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.434753][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.442031][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.562954][ T5836] Bluetooth: hci2: command tx timeout [ 362.881375][T13026] veth0_vlan: entered promiscuous mode [ 362.936358][T13026] veth1_vlan: entered promiscuous mode [ 362.974613][T13275] chnl_net:caif_netlink_parms(): no params data found [ 363.272596][T13026] veth0_macvtap: entered promiscuous mode [ 363.375618][T13093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.415296][T13026] veth1_macvtap: entered promiscuous mode [ 363.430436][T13275] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.438613][T13275] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.447372][T13275] bridge_slave_0: entered allmulticast mode [ 363.455167][T13275] bridge_slave_0: entered promiscuous mode [ 363.476768][T13275] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.488773][T13275] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.496839][T13275] bridge_slave_1: entered allmulticast mode [ 363.505008][T13275] bridge_slave_1: entered promiscuous mode [ 363.586415][T13275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.634439][T13026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.649468][T13275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.756813][T13026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.784203][T13275] team0: Port device team_slave_0 added [ 363.796802][T13275] team0: Port device team_slave_1 added [ 363.815746][T13026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.832980][T13026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.838602][T13336] sctp: [Deprecated]: syz.0.1809 (pid 13336) Use of int in maxseg socket option. [ 363.838602][T13336] Use struct sctp_assoc_value instead [ 363.843403][T13026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.871847][T13026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.971938][T13275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.985471][T13275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.014397][T13275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.058225][T13275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.066544][T13275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.095869][T13275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.115258][T13093] veth0_vlan: entered promiscuous mode [ 364.206947][T13093] veth1_vlan: entered promiscuous mode [ 364.266567][T13275] hsr_slave_0: entered promiscuous mode [ 364.274135][T13275] hsr_slave_1: entered promiscuous mode [ 364.476774][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.490348][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.650686][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.651443][ T5836] Bluetooth: hci2: command tx timeout [ 364.687965][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.725350][T13093] veth0_macvtap: entered promiscuous mode [ 364.816975][T13093] veth1_macvtap: entered promiscuous mode [ 364.964988][T13093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.082803][T13093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.101842][T13093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.112812][T13093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.122798][T13093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.132300][T13093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.360418][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.397118][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.430927][ T968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.587963][ T968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.613699][T13275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.629276][T13275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.657220][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.665619][T13275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.685822][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.706883][T13275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.774681][ T968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.856096][ T968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.909403][T13093] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 365.921450][T13093] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 365.930000][T13093] CPU: 1 UID: 0 PID: 13093 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 365.942277][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.952522][T13093] RIP: 0010:klist_remove+0x14a/0x340 [ 365.957834][T13093] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 365.977479][T13093] RSP: 0018:ffffc90003337840 EFLAGS: 00010202 [ 365.983743][T13093] RAX: 000000000000000b RBX: ffff888078305a00 RCX: 0000000000000000 [ 365.992090][T13093] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 366.000184][T13093] RBP: ffffc90003337928 R08: ffffffff8f8794c3 R09: 1ffffffff1f0f298 [ 366.008168][T13093] R10: dffffc0000000000 R11: fffffbfff1f0f299 R12: 0000000000000000 [ 366.016618][T13093] R13: 1ffff1100afb1d8c R14: ffff888057d8ec60 R15: dffffc0000000000 [ 366.024697][T13093] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 366.034018][T13093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.040792][T13093] CR2: 00007fdecdd7e2d8 CR3: 00000000336b0000 CR4: 00000000003526f0 [ 366.048798][T13093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.056841][T13093] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.064862][T13093] Call Trace: [ 366.068175][T13093] [ 366.071127][T13093] ? __pfx_klist_remove+0x10/0x10 [ 366.076175][T13093] ? __pfx_kobject_move+0x10/0x10 [ 366.081219][T13093] ? get_device_parent+0x366/0x3a0 [ 366.086431][T13093] device_move+0x193/0x700 [ 366.090978][T13093] hci_conn_del_sysfs+0xb8/0x170 [ 366.096134][T13093] hci_conn_del+0x8ff/0xcb0 [ 366.100740][T13093] hci_conn_hash_flush+0x191/0x230 [ 366.105868][T13093] hci_dev_close_sync+0xaef/0x1330 [ 366.111013][T13093] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 366.116567][T13093] ? up_write+0x1c4/0x420 [ 366.120994][T13093] hci_unregister_dev+0x21a/0x510 [ 366.126383][T13093] vhci_release+0x80/0xd0 [ 366.130727][T13093] ? __pfx_vhci_release+0x10/0x10 [ 366.135760][T13093] __fput+0x449/0xa70 [ 366.139755][T13093] task_work_run+0x1d1/0x260 [ 366.144357][T13093] ? __pfx_task_work_run+0x10/0x10 [ 366.150235][T13093] ? kmem_cache_free+0x18f/0x400 [ 366.155268][T13093] do_exit+0x6b5/0x22e0 [ 366.159464][T13093] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 366.164950][T13093] ? __pfx_do_exit+0x10/0x10 [ 366.169581][T13093] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.174807][T13093] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.180028][T13093] do_group_exit+0x21c/0x2d0 [ 366.184664][T13093] __x64_sys_exit_group+0x3f/0x40 [ 366.189699][T13093] x64_sys_call+0x21ba/0x21c0 [ 366.194394][T13093] do_syscall_64+0xfa/0x3b0 [ 366.198989][T13093] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.204309][T13093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.211288][T13093] ? clear_bhb_loop+0x60/0xb0 [ 366.216166][T13093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.222097][T13093] RIP: 0033:0x7f7f73b8e929 [ 366.226518][T13093] Code: Unable to access opcode bytes at 0x7f7f73b8e8ff. [ 366.233537][T13093] RSP: 002b:00007fff0b0d6e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 366.241980][T13093] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7f73b8e929 [ 366.250090][T13093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 366.258097][T13093] RBP: 00007f7f73bee8f0 R08: 00007fff0b0d4bc7 R09: 0000000000000003 [ 366.266090][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.274107][T13093] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff0b0d6fe0 [ 366.282110][T13093] [ 366.285156][T13093] Modules linked in: [ 366.292245][T13093] ---[ end trace 0000000000000000 ]--- [ 366.303357][T13093] RIP: 0010:klist_remove+0x14a/0x340 [ 366.308710][T13093] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 366.329494][T13093] RSP: 0018:ffffc90003337840 EFLAGS: 00010202 [ 366.338371][T13093] RAX: 000000000000000b RBX: ffff888078305a00 RCX: 0000000000000000 [ 366.347114][T13093] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 366.355884][T13093] RBP: ffffc90003337928 R08: ffffffff8f8794c3 R09: 1ffffffff1f0f298 [ 366.364160][T13093] R10: dffffc0000000000 R11: fffffbfff1f0f299 R12: 0000000000000000 [ 366.372604][T13093] R13: 1ffff1100afb1d8c R14: ffff888057d8ec60 R15: dffffc0000000000 [ 366.381006][T13093] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 366.390272][T13093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.396903][T13093] CR2: 00007fdecdd7e2d8 CR3: 000000003427c000 CR4: 00000000003526f0 [ 366.405397][T13093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.414353][T13093] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.422720][T13093] Kernel panic - not syncing: Fatal exception [ 366.429103][T13093] Kernel Offset: disabled [ 366.433449][T13093] Rebooting in 86400 seconds..