last executing test programs: 1m6.984942354s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x1b4, 0x31, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000e69c34efbae02d69000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) 58.564331974s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x1b4, 0x31, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000e69c34efbae02d69000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) 48.120674511s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x1b4, 0x31, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000e69c34efbae02d69000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) 42.64052809s ago: executing program 3 (id=2194): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) 42.492539766s ago: executing program 3 (id=2197): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async) r3 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r0}) 42.19604352s ago: executing program 3 (id=2200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xbb5b, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.362355668s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x1b4, 0x31, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000e69c34efbae02d69000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) 30.645394519s ago: executing program 3 (id=2200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xbb5b, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.889758585s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x1b4, 0x31, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000e69c34efbae02d69000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) 20.86048848s ago: executing program 3 (id=2200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xbb5b, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.957242913s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x1b4, 0x31, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6b}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1b4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000e69c34efbae02d69000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) 6.886134296s ago: executing program 3 (id=2200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xbb5b, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.623499097s ago: executing program 1 (id=2431): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008000300010200"], 0x20}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000a05000000000000002000020000021400010000000000000000000700000a00"/56, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket$inet6_sctp(0xa, 0x0, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r8, &(0x7f00000002c0)="0c5336d384a8f948ef4da69cd16ead09717c57228b91ce76d8923b04ed8134e6e997d760cb2f92995ca493a41f4421c6aaa253835a5356cd43300f23541bf08ef583a269ae41a65b63f4b2cc243099839f64", &(0x7f0000000a80)=""/4096, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r8, &(0x7f00000002c0)="0c5336d384a8f948ef4da69cd16ead09717c57228b91ce76d8923b04ed8134e6e997d760cb2f92995ca493a41f4421c6aaa253835a5356cd43300f23541bf08ef583a269ae41a65b63f4b2cc243099839f64", &(0x7f0000000a80)=""/4096, 0x4}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000200027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_LABELS_MASK={0xc, 0x17, [0x10000, 0x0]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x7, 0x80]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff3f0f, 0x7f, 0x100, 0x0, 0x1, 0x6, r7}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 2.34822447s ago: executing program 1 (id=2434): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000130728bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e23000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r5, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ff", @ANYBLOB="00000000000000001c00128009"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.111602857s ago: executing program 4 (id=2436): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xc1, 0x87, 0x4, 0x50, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1, 0x7800, 0x1, 0x80, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@private2, 0xf, r3}) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 1.919660313s ago: executing program 2 (id=2438): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000070000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000c49856070060d149e86ec5abd94a471e"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.906358785s ago: executing program 4 (id=2439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x400000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x0, 0x6, 0x3, 0x7fffffff}, {0xa000, 0x2, 0x5, 0x3}, {0x200, 0xc, 0x1, 0x59}]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r3, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24f2ce045ce71a755394acd8d9f08e0ed70464b933c81002"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ced3dfa4dbdcf9623ee45e7032834411eef9cd0cdf5d84bb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6131a61e5aba6fda9ccdbf49fdd30fef497b04f04e3de36e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "94ac9b165277e421de75eb3d90e0e5411b20d19b8555f44d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.748204215s ago: executing program 2 (id=2440): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) (async, rerun: 64) socket$kcm(0x29, 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x10704e33187b75ab, 0x0, 0x3, 0x2, 0x2, @empty, @local, 0x7800, 0x20, 0x101}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x34, r1}) 1.72675088s ago: executing program 4 (id=2441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) setsockopt(r0, 0x6, 0x81, &(0x7f0000000080)="1ae96d0103010000", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000e80)=ANY=[@ANYBLOB="cc020000210a01"], 0x2cc}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20048051) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 1.510423449s ago: executing program 4 (id=2442): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='d', 0x1}], 0x1}, 0x340040a1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x0, 0x20}, 0xc) 1.464227897s ago: executing program 2 (id=2443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000002000000000000000000018110000bf73459398e31cccaa2986d79a270c26a079992f5efe374af7ff0a0af4a412ead25abc3264de1d542870b10464f7200c10891f65bd7c451a1d2e0b4b79ba6593eaf826fb7c99d165b38af669d9613af409e1cc25fc38d12b93e55fb0623f78dc9aa2e8b2135ef2f98ce47dea785cfc79a7990d46304704eac5f27b839ab9cd80714a30ca86b8e3598c05e52885bea7ad86c75ccc1312cb45b08d68d92405a6636ceb", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40800}, 0x6) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000002080004400000000f08000140000000001c000580090001006d657461000000000c000280080002402000000d0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 1.409377977s ago: executing program 1 (id=2444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001000a9001000000009000000060000000000000ef4000000000000000200002e3e00"], 0x0, 0x31}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000180)=0x100, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x65fb, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x2022, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r4, 0x1, 0xfffffffd, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x38}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe0, 0x39, 0x400, 0x70bd28, 0x25dfdbfb, {0x2}, [@generic="d8b0e082dbe2426fa60079f35571ee40d92d76314e214139e80164f5cfc57db2eb22d4daa4c833fc30a4e3fa6dce1bbe9e6ec21d24cfa497aa05ded37beee9d921d574d7f566bf87cbd7f2378f1dce5e964e0e261bd5064893f8b4b4aef87e897a791d465a0ab75978e06af27c984b3b93fdc0aefde55577559f6b8579cc53e3377bc23a466aded77ebc2b57dd606d5ebb95bcb7dcd65599a36fbd55e0c2beea5d993493ae15eb2b2a43a312bdfa119cc08dcc8bb51b786f544a9d07d65fbbed3b62", @typed={0x8, 0xbb, 0x0, 0x0, @u32=0xff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x811}, 0x20000041) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x14008805) 1.380826494s ago: executing program 2 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x68, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) 1.208341204s ago: executing program 2 (id=2446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}], 0x1, 0x44005) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6eb03e65", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)="32c6d3f0aca0a70286313329572c1c924fda7a8a8095b4a8791dfd6a8423ef22c8f5f4a6f5337f4bf9244d199205428c6b0c97c100588607572b6e86236c43f24936", 0x42}], 0x1}}], 0x2, 0x800) 1.124125615s ago: executing program 1 (id=2447): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 963.529853ms ago: executing program 1 (id=2448): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) syz_init_net_socket$ax25(0x27, 0x0, 0xc3) 854.82412ms ago: executing program 1 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24080}, 0x200c0054) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x2, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@broadcast, @random="000400", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010101, {0x5, 0x4, 0x1, 0x32, 0x95, 0x66, 0x8, 0xfb, 0x21, 0x3, @broadcast, @empty}, "3b1222ab89563240"}}}}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x40, 0x1, 0x78, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0xc1, 0x8, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x81, 0x76, 0x7, 0x38, @mcast2, @loopback, 0x10, 0x10, 0x0, 0xc}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)='%pK \x00'}, 0x20) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r9) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0xc, &(0x7f0000000840)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500ffffffff080000002e00000008000300", @ANYRES32=r11, @ANYBLOB="060098000000000003009ccdb40ba9257a31626cd9bb8a4879ac7d048f2f9c431fc4ade80000000000000000605a9aee4ad1547ce280174f8ab4f8af3cb9e9fc956154ef1dad2829a10342104019fbebd079f5a85a0a11a95bb2cec62f1fee24e1d85db26853a9c87df45072486481"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) 596.864582ms ago: executing program 4 (id=2450): r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="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"], 0x48) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0xc8}}, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) sendfile(r5, r5, 0x0, 0xffffffffffffffff) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) close(r6) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xfff) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000100)=r10, 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x5, 0x6, 0x401, 0x79b, 0x2, 0x5, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x2, @mcast1, 0x80000001}}, 0x8, 0x1, 0xffff2eef, 0x0, 0x100}}, &(0x7f0000000300)=0xb0) 264.048048ms ago: executing program 2 (id=2451): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x2, @mcast1, 0xd}, {0xa, 0x4e21, 0x9073, @rand_addr=' \x01\x00', 0x100}, 0x1, {[0xe5, 0xfffffff8, 0x2, 0x8000, 0x0, 0x2, 0x7, 0x5]}}, 0x5c) sendto$rose(r1, 0x0, 0x0, 0xc0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000062000000160000000000000026000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 0s ago: executing program 4 (id=2452): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000004b703000008000000b70400000000000085000000320000009500"/72], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x13, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6ef34"}]}, 0x24}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ous mode [ 246.518753][ T7552] veth0_vlan: left promiscuous mode [ 247.120817][ T7552] team0 (unregistering): Port device team_slave_1 removed [ 247.166306][ T7552] team0 (unregistering): Port device team_slave_0 removed [ 247.363343][ T5860] Bluetooth: hci4: command tx timeout [ 247.605707][T12019] netlink: 'syz.1.1812': attribute type 29 has an invalid length. [ 247.730922][T12047] netlink: zone id is out of range [ 247.746341][T12047] netlink: zone id is out of range [ 247.752152][T12047] netlink: zone id is out of range [ 247.757554][T12047] netlink: zone id is out of range [ 247.763324][T12047] netlink: zone id is out of range [ 247.768814][T12047] netlink: zone id is out of range [ 247.776709][T12047] netlink: zone id is out of range [ 247.785600][T12047] netlink: zone id is out of range [ 247.792632][T12047] netlink: zone id is out of range [ 247.798031][T12047] netlink: zone id is out of range [ 247.924065][T12055] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1820'. [ 247.990494][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1822'. [ 248.034495][T11984] chnl_net:caif_netlink_parms(): no params data found [ 248.209581][T11984] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.217248][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.224803][T11984] bridge_slave_0: entered allmulticast mode [ 248.233354][T11984] bridge_slave_0: entered promiscuous mode [ 248.246534][T11984] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.254649][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.262072][T11984] bridge_slave_1: entered allmulticast mode [ 248.269474][T11984] bridge_slave_1: entered promiscuous mode [ 248.305927][T11984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.318390][T11984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.363116][T11984] team0: Port device team_slave_0 added [ 248.372080][T11984] team0: Port device team_slave_1 added [ 248.404502][T11984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.412259][T11984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.438312][T11984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.450979][T11984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.458089][T11984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.484830][T11984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.535808][T11984] hsr_slave_0: entered promiscuous mode [ 248.542556][T11984] hsr_slave_1: entered promiscuous mode [ 248.548924][T11984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.556688][T11984] Cannot create hsr debugfs directory [ 248.937050][T11984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.947244][T11984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.958487][T11984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.969869][T11984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.057411][T11984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.080475][T11984] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.098843][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.106049][ T7555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.117667][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.124854][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.335276][T11984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.383827][T11984] veth0_vlan: entered promiscuous mode [ 249.397725][T11984] veth1_vlan: entered promiscuous mode [ 249.429974][T11984] veth0_macvtap: entered promiscuous mode [ 249.439775][T11984] veth1_macvtap: entered promiscuous mode [ 249.453192][ T5860] Bluetooth: hci4: command tx timeout [ 249.466954][T11984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.482991][T11984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.496454][T11984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.506057][T11984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.515028][T11984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.524497][T11984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.594156][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.612094][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.639356][ T7557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.647373][ T7557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.607990][ T9824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.566621][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.578027][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.586420][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.595017][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.604840][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.641088][T12080] lo speed is unknown, defaulting to 1000 [ 252.798643][T12080] chnl_net:caif_netlink_parms(): no params data found [ 252.889804][T12080] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.897164][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.904627][T12080] bridge_slave_0: entered allmulticast mode [ 252.912606][T12080] bridge_slave_0: entered promiscuous mode [ 252.922813][T12080] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.930107][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.937805][T12080] bridge_slave_1: entered allmulticast mode [ 252.946495][T12080] bridge_slave_1: entered promiscuous mode [ 252.983523][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.995873][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.037667][T12080] team0: Port device team_slave_0 added [ 253.046895][T12080] team0: Port device team_slave_1 added [ 253.087498][ T9824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.117740][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.125360][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.151738][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.176881][ T9824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.194976][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.202597][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.229320][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.282197][ T9824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.319099][T12080] hsr_slave_0: entered promiscuous mode [ 253.326221][T12080] hsr_slave_1: entered promiscuous mode [ 253.332962][T12080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.340570][T12080] Cannot create hsr debugfs directory [ 253.459287][ T9824] bridge_slave_1: left allmulticast mode [ 253.465132][ T9824] bridge_slave_1: left promiscuous mode [ 253.470979][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.482198][ T9824] bridge_slave_0: left allmulticast mode [ 253.488031][ T9824] bridge_slave_0: left promiscuous mode [ 253.494014][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.841042][ T9824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.859301][ T9824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.869696][ T9824] bond0 (unregistering): Released all slaves [ 254.160620][ T9824] hsr_slave_0: left promiscuous mode [ 254.167358][ T9824] hsr_slave_1: left promiscuous mode [ 254.173478][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.180909][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.196888][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.204726][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.226498][ T9824] veth1_macvtap: left promiscuous mode [ 254.232299][ T9824] veth0_macvtap: left promiscuous mode [ 254.238033][ T9824] veth1_vlan: left promiscuous mode [ 254.243766][ T9824] veth0_vlan: left promiscuous mode [ 254.644178][ T5860] Bluetooth: hci4: command tx timeout [ 254.737042][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 254.779157][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 255.300122][T12080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.324874][T12080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.338590][T12080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.350822][T12080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.461354][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.487723][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.499753][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.506976][ T7551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.525165][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.532431][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.741881][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.787565][T12080] veth0_vlan: entered promiscuous mode [ 255.800486][T12080] veth1_vlan: entered promiscuous mode [ 255.833752][T12080] veth0_macvtap: entered promiscuous mode [ 255.843940][T12080] veth1_macvtap: entered promiscuous mode [ 255.866407][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.883307][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.897619][T12080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.908113][T12080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.917489][T12080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.927886][T12080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.999475][ T7551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.011387][ T7551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.039141][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.048927][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.786279][ T9824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.882511][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.892067][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.901828][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.910764][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.918806][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.956539][T12099] lo speed is unknown, defaulting to 1000 [ 259.053228][ T9824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.135020][ T9824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.160009][T12099] chnl_net:caif_netlink_parms(): no params data found [ 259.222862][ T9824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.289855][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.297234][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.306436][T12099] bridge_slave_0: entered allmulticast mode [ 259.314204][T12099] bridge_slave_0: entered promiscuous mode [ 259.324473][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.332004][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.339256][T12099] bridge_slave_1: entered allmulticast mode [ 259.346969][T12099] bridge_slave_1: entered promiscuous mode [ 259.404310][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.417715][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.480222][T12099] team0: Port device team_slave_0 added [ 259.486871][ T9824] bridge_slave_1: left allmulticast mode [ 259.493022][ T9824] bridge_slave_1: left promiscuous mode [ 259.498822][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.508924][ T9824] bridge_slave_0: left allmulticast mode [ 259.516048][ T9824] bridge_slave_0: left promiscuous mode [ 259.522186][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.863912][ T9824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.875155][ T9824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.887155][ T9824] bond0 (unregistering): Released all slaves [ 259.904336][T12099] team0: Port device team_slave_1 added [ 259.965072][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.972506][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.000002][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.036080][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.047459][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.073801][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.166308][ T9824] hsr_slave_0: left promiscuous mode [ 260.173652][ T9824] hsr_slave_1: left promiscuous mode [ 260.179638][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.188949][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.197445][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.205506][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.227046][ T9824] veth1_macvtap: left promiscuous mode [ 260.233897][ T9824] veth0_macvtap: left promiscuous mode [ 260.240450][ T9824] veth1_vlan: left promiscuous mode [ 260.246235][ T9824] veth0_vlan: left promiscuous mode [ 260.729678][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 260.776196][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 260.965593][ T5860] Bluetooth: hci4: command tx timeout [ 261.234204][T12099] hsr_slave_0: entered promiscuous mode [ 261.241068][T12099] hsr_slave_1: entered promiscuous mode [ 261.248583][T12099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.256758][T12099] Cannot create hsr debugfs directory [ 261.690866][T12099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.701949][T12099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.712904][T12099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.723375][T12099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.772269][ T7552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.809249][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.830635][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.849687][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.857055][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.867720][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.874940][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.079436][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.134201][T12099] veth0_vlan: entered promiscuous mode [ 262.147841][T12099] veth1_vlan: entered promiscuous mode [ 262.179909][T12099] veth0_macvtap: entered promiscuous mode [ 262.191061][T12099] veth1_macvtap: entered promiscuous mode [ 262.213475][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.230679][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.242966][T12099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.252494][T12099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.262324][T12099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.271072][T12099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.347695][ T9824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.357118][ T9824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.386606][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.396014][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.080037][ T9824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.273747][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.283251][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.291545][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.302612][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.312513][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.348990][T12118] lo speed is unknown, defaulting to 1000 [ 265.506006][ T9824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.528724][T12118] chnl_net:caif_netlink_parms(): no params data found [ 265.617141][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.624535][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.632361][T12118] bridge_slave_0: entered allmulticast mode [ 265.639777][T12118] bridge_slave_0: entered promiscuous mode [ 265.649852][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.657505][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.665248][T12118] bridge_slave_1: entered allmulticast mode [ 265.672780][T12118] bridge_slave_1: entered promiscuous mode [ 265.709921][T12118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.724064][T12118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.768681][T12118] team0: Port device team_slave_0 added [ 265.778433][T12118] team0: Port device team_slave_1 added [ 265.797722][ T9824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.841440][T12118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.848477][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.875418][T12118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.904301][ T9824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.922159][T12118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.929172][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.955657][T12118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.019049][T12118] hsr_slave_0: entered promiscuous mode [ 266.026172][T12118] hsr_slave_1: entered promiscuous mode [ 266.033451][T12118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.041322][T12118] Cannot create hsr debugfs directory [ 266.138466][ T9824] bridge_slave_1: left allmulticast mode [ 266.144683][ T9824] bridge_slave_1: left promiscuous mode [ 266.150456][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.160087][ T9824] bridge_slave_0: left allmulticast mode [ 266.167172][ T9824] bridge_slave_0: left promiscuous mode [ 266.173014][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.507572][ T9824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.519708][ T9824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.530089][ T9824] bond0 (unregistering): Released all slaves [ 266.778831][ T9824] hsr_slave_0: left promiscuous mode [ 266.787930][ T9824] hsr_slave_1: left promiscuous mode [ 266.794447][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.802843][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.810914][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.818923][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.842607][ T9824] veth1_macvtap: left promiscuous mode [ 266.848201][ T9824] veth0_macvtap: left promiscuous mode [ 266.854049][ T9824] veth1_vlan: left promiscuous mode [ 266.859381][ T9824] veth0_vlan: left promiscuous mode [ 267.323094][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 267.363806][ T5860] Bluetooth: hci4: command tx timeout [ 267.374700][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 267.947029][T12118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.957300][T12118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.968513][T12118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.980411][T12118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.103713][T12118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.129312][T12118] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.144655][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.151888][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.167698][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.174915][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.387054][T12118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.444045][T12118] veth0_vlan: entered promiscuous mode [ 268.457672][T12118] veth1_vlan: entered promiscuous mode [ 268.488514][T12118] veth0_macvtap: entered promiscuous mode [ 268.498941][T12118] veth1_macvtap: entered promiscuous mode [ 268.518828][T12118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.536931][T12118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.550275][T12118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.560168][T12118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.570329][T12118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.579618][T12118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.650996][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.665062][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.693384][ T7557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.704206][ T7557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.413112][ T7552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.679801][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.689672][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.702247][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.713597][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.725616][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.763263][T12137] lo speed is unknown, defaulting to 1000 [ 271.928193][T12137] chnl_net:caif_netlink_parms(): no params data found [ 272.016855][ T7552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.048807][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.056668][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.064439][T12137] bridge_slave_0: entered allmulticast mode [ 272.078506][T12137] bridge_slave_0: entered promiscuous mode [ 272.100009][ T7552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.117447][T12137] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.125101][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.132873][T12137] bridge_slave_1: entered allmulticast mode [ 272.140245][T12137] bridge_slave_1: entered promiscuous mode [ 272.190730][ T7552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.226539][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.239668][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.285203][T12137] team0: Port device team_slave_0 added [ 272.294639][T12137] team0: Port device team_slave_1 added [ 272.340989][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.348212][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.375499][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.397259][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.404594][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.431044][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.507299][ T7552] bridge_slave_1: left allmulticast mode [ 272.516564][ T7552] bridge_slave_1: left promiscuous mode [ 272.522467][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.533084][ T7552] bridge_slave_0: left allmulticast mode [ 272.538777][ T7552] bridge_slave_0: left promiscuous mode [ 272.545271][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.944667][ T7552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.956647][ T7552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.968450][ T7552] bond0 (unregistering): Released all slaves [ 272.987805][T12137] hsr_slave_0: entered promiscuous mode [ 272.994533][T12137] hsr_slave_1: entered promiscuous mode [ 273.000904][T12137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.008927][T12137] Cannot create hsr debugfs directory [ 273.268386][ T7552] hsr_slave_0: left promiscuous mode [ 273.277504][ T7552] hsr_slave_1: left promiscuous mode [ 273.287755][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.296344][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.305920][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.313587][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.336204][ T7552] veth1_macvtap: left promiscuous mode [ 273.342005][ T7552] veth0_macvtap: left promiscuous mode [ 273.347667][ T7552] veth1_vlan: left promiscuous mode [ 273.353638][ T7552] veth0_vlan: left promiscuous mode [ 273.761760][ T5860] Bluetooth: hci4: command tx timeout [ 273.857848][ T7552] team0 (unregistering): Port device team_slave_1 removed [ 273.899875][ T7552] team0 (unregistering): Port device team_slave_0 removed [ 274.038532][T12153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 274.773799][T12164] IPv6: sit1: Disabled Multicast RS [ 274.981698][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 275.041541][T12173] chnl_net:caif_netlink_parms(): no params data found [ 275.074688][T12180] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1835'. [ 275.176432][T12185] tipc: Enabled bearer , priority 0 [ 275.197079][T12185] syzkaller0: entered promiscuous mode [ 275.216027][T12185] syzkaller0: entered allmulticast mode [ 275.277533][T12185] tipc: Resetting bearer [ 275.326252][T12183] tipc: Resetting bearer [ 275.384200][T12183] tipc: Disabling bearer [ 275.657394][T12137] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.705821][T12137] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.750541][T12137] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.784438][T12137] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.842502][ T5860] Bluetooth: hci4: command tx timeout [ 276.083087][T12137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.140183][T12137] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.197026][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.204331][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.235006][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.242315][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.246339][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 276.348540][T12250] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 276.358264][T12250] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1852'. [ 276.367977][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 276.378530][T12249] tipc: Enabled bearer , priority 12 [ 276.656049][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 276.973177][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.152193][T12137] veth0_vlan: entered promiscuous mode [ 277.179131][T12277] netlink: 'syz.3.1859': attribute type 12 has an invalid length. [ 277.190437][T12277] netlink: 'syz.3.1859': attribute type 29 has an invalid length. [ 277.241186][T12277] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1859'. [ 277.250330][T12277] netlink: 'syz.3.1859': attribute type 2 has an invalid length. [ 277.311371][T12277] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1859'. [ 277.368349][T12137] veth1_vlan: entered promiscuous mode [ 277.501381][ T5916] tipc: Node number set to 2904495812 [ 277.515646][T12137] veth0_macvtap: entered promiscuous mode [ 277.590331][T12137] veth1_macvtap: entered promiscuous mode [ 277.638267][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1863'. [ 277.700374][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.757869][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.807502][T12137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.835107][T12137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.848256][T12137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.857710][T12137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.922388][ T5860] Bluetooth: hci4: command tx timeout [ 277.995377][T12301] tipc: Enabled bearer , priority 0 [ 278.027034][T12301] syzkaller0: entered promiscuous mode [ 278.035758][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 278.042425][T12301] syzkaller0: entered allmulticast mode [ 278.274445][T12298] tipc: Resetting bearer [ 278.338851][T12298] tipc: Disabling bearer [ 278.400866][ T9824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.428886][ T9824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.520502][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.529546][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.315749][ T9824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.378640][T12353] tipc: Enabled bearer , priority 0 [ 279.411963][T12353] syzkaller0: entered promiscuous mode [ 279.417527][T12353] syzkaller0: entered allmulticast mode [ 279.481014][ T9824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.516480][T12351] tipc: Resetting bearer [ 279.577387][T12351] tipc: Disabling bearer [ 279.610531][ T9824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.695026][ T9824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.797390][ T9824] bridge_slave_1: left allmulticast mode [ 279.803207][ T9824] bridge_slave_1: left promiscuous mode [ 279.808998][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.818593][ T9824] bridge_slave_0: left allmulticast mode [ 279.824827][ T9824] bridge_slave_0: left promiscuous mode [ 279.830699][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.184135][ T9824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.196388][ T9824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.206709][ T9824] bond0 (unregistering): Released all slaves [ 280.470795][ T9824] hsr_slave_0: left promiscuous mode [ 280.477037][ T9824] hsr_slave_1: left promiscuous mode [ 280.483065][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.490923][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.498945][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.506627][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.530070][ T9824] veth1_macvtap: left promiscuous mode [ 280.535947][ T9824] veth0_macvtap: left promiscuous mode [ 280.542074][ T9824] veth1_vlan: left promiscuous mode [ 280.547415][ T9824] veth0_vlan: left promiscuous mode [ 280.749379][T12360] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 280.791482][T12360] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1883'. [ 280.821326][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 281.286689][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.301952][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.312112][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.325952][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.333923][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.571375][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 281.623781][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 282.093859][T12379] tipc: Enabling of bearer rejected, failed to enable media [ 282.269179][T12385] lo speed is unknown, defaulting to 1000 [ 282.353137][T12392] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 282.373870][T12392] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1889'. [ 282.411414][T12392] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 282.582851][T12402] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 282.590711][T12402] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 282.678810][T12406] tipc: Enabled bearer , priority 0 [ 282.737523][T12406] tipc: Resetting bearer [ 282.749742][T12385] chnl_net:caif_netlink_parms(): no params data found [ 282.775700][T12404] tipc: Disabling bearer [ 282.933937][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.950374][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.959840][T12385] bridge_slave_0: entered allmulticast mode [ 282.968291][T12385] bridge_slave_0: entered promiscuous mode [ 282.980509][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.994040][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.002317][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 283.012953][T12385] bridge_slave_1: entered allmulticast mode [ 283.020513][T12385] bridge_slave_1: entered promiscuous mode [ 283.099115][T12385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.136426][T12385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.266045][T12385] team0: Port device team_slave_0 added [ 283.280672][T12385] team0: Port device team_slave_1 added [ 283.359915][T12385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.368271][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.395834][T12385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.414008][T12385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.424662][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.452616][ T5860] Bluetooth: hci4: command tx timeout [ 283.454723][T12385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.600673][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 283.734683][T12385] hsr_slave_0: entered promiscuous mode [ 283.756688][T12385] hsr_slave_1: entered promiscuous mode [ 283.776718][T12385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.787616][T12385] Cannot create hsr debugfs directory [ 283.818975][T12452] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 284.029816][T12455] tipc: Enabled bearer , priority 0 [ 284.084675][T12455] tipc: Resetting bearer [ 284.136255][T12458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1906'. [ 284.155516][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1906'. [ 284.165643][T12454] tipc: Disabling bearer [ 284.177400][T12458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1906'. [ 284.190118][T12458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1906'. [ 284.449624][T12478] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1913'. [ 284.644394][T12385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.676682][T12385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.709049][T12385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.740453][T12385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.894383][T12509] netlink: 'syz.3.1917': attribute type 12 has an invalid length. [ 284.912417][T12509] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 285.115781][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.154339][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.168339][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.175544][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.218610][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.225895][ T9828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.522336][ T5860] Bluetooth: hci4: command tx timeout [ 285.710689][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.798532][T12385] veth0_vlan: entered promiscuous mode [ 285.816766][T12385] veth1_vlan: entered promiscuous mode [ 285.838890][T12543] __nla_validate_parse: 9 callbacks suppressed [ 285.838911][T12543] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1929'. [ 285.917801][T12385] veth0_macvtap: entered promiscuous mode [ 285.936176][T12385] veth1_macvtap: entered promiscuous mode [ 285.986644][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.017725][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.037698][T12385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.050458][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 286.059777][T12385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.073346][T12385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.086808][T12385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.118790][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 286.537138][T12567] net_ratelimit: 4 callbacks suppressed [ 286.537159][T12567] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 286.617961][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.650639][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.775949][ T9823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.820503][ T9823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.255274][T12592] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 287.389678][T12600] : entered promiscuous mode [ 287.404863][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 287.490937][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 287.533341][T12603] netlink: 'syz.3.1952': attribute type 1 has an invalid length. [ 287.751779][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 287.760969][T12615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 287.771088][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 287.805178][T12615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 287.816005][T12615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1956'. [ 287.893007][T12620] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.070092][T12636] IPVS: length: 196 != 24 [ 288.113061][T12638] sit1: entered promiscuous mode [ 288.160283][T12642] netlink: 'syz.4.1965': attribute type 2 has an invalid length. [ 288.616159][T12668] sctp: [Deprecated]: syz.1.1969 (pid 12668) Use of int in maxseg socket option. [ 288.616159][T12668] Use struct sctp_assoc_value instead [ 288.957951][ T7552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.392353][ T7552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.468028][ T7552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.534195][ T7552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.641671][ T7552] bridge_slave_1: left allmulticast mode [ 289.647428][ T7552] bridge_slave_1: left promiscuous mode [ 289.653336][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.665274][ T7552] bridge_slave_0: left allmulticast mode [ 289.670970][ T7552] bridge_slave_0: left promiscuous mode [ 289.677179][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.057981][ T7552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.069333][ T7552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.079919][ T7552] bond0 (unregistering): Released all slaves [ 290.427299][T12693] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 290.547913][T12690] lo speed is unknown, defaulting to 1000 [ 290.636938][ T7552] hsr_slave_0: left promiscuous mode [ 290.674604][ T7552] hsr_slave_1: left promiscuous mode [ 290.701581][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.715341][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.735612][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.753943][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.819704][ T7552] veth1_macvtap: left promiscuous mode [ 290.835747][ T7552] veth0_macvtap: left promiscuous mode [ 290.845885][ T7552] veth1_vlan: left promiscuous mode [ 290.862675][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.870793][T12715] __nla_validate_parse: 5 callbacks suppressed [ 290.870812][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 290.872192][ T7552] veth0_vlan: left promiscuous mode [ 290.895316][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.902337][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 290.910964][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.913325][T12721] netlink: 'syz.2.1985': attribute type 30 has an invalid length. [ 290.922608][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.927211][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 290.935329][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.123668][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 291.136274][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 291.488948][ T7552] team0 (unregistering): Port device team_slave_1 removed [ 291.539412][ T7552] team0 (unregistering): Port device team_slave_0 removed [ 291.990242][T12713] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1983'. [ 292.201682][T12717] lo speed is unknown, defaulting to 1000 [ 292.291702][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 292.312098][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 292.391819][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 292.618833][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 292.648214][T12717] chnl_net:caif_netlink_parms(): no params data found [ 292.789561][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.797119][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.805169][T12717] bridge_slave_0: entered allmulticast mode [ 292.813441][T12717] bridge_slave_0: entered promiscuous mode [ 292.823235][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.830539][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.837978][T12717] bridge_slave_1: entered allmulticast mode [ 292.846037][T12717] bridge_slave_1: entered promiscuous mode [ 292.917954][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.939158][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.042069][ T5851] Bluetooth: hci4: command tx timeout [ 293.052402][T12717] team0: Port device team_slave_0 added [ 293.076368][T12717] team0: Port device team_slave_1 added [ 293.178119][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.186477][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.216110][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.235579][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.248214][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.279590][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.349977][T12772] netlink: 'syz.1.1996': attribute type 10 has an invalid length. [ 293.405512][T12772] bridge_slave_1: entered promiscuous mode [ 293.412179][T12772] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 293.431856][T12717] hsr_slave_0: entered promiscuous mode [ 293.440043][T12717] hsr_slave_1: entered promiscuous mode [ 293.447087][T12717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.456609][T12717] Cannot create hsr debugfs directory [ 293.652610][T12781] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 293.660969][T12781] netlink: 'syz.3.2000': attribute type 3 has an invalid length. [ 293.762252][ T9823] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.772715][T12783] erspan0: entered promiscuous mode [ 293.777983][T12783] erspan0: entered allmulticast mode [ 294.508271][T12717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.561443][T12717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.585182][T12717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.610141][T12717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.621562][T12827] sctp: [Deprecated]: syz.1.2013 (pid 12827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.621562][T12827] Use struct sctp_sack_info instead [ 294.836694][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.888366][T12717] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.909496][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.916826][ T9823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.973937][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.981224][ T9823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.119566][ T9824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.122061][ T5851] Bluetooth: hci4: command tx timeout [ 295.135736][ T9824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.478639][T12717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.491022][T12872] vlan0: entered promiscuous mode [ 295.653455][T12717] veth0_vlan: entered promiscuous mode [ 295.676122][T12717] veth1_vlan: entered promiscuous mode [ 295.764088][T12717] veth0_macvtap: entered promiscuous mode [ 295.793331][ T9823] tipc: Subscription rejected, illegal request [ 295.817867][T12717] veth1_macvtap: entered promiscuous mode [ 295.877154][T12717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.916928][T12717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.936374][T12717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.953878][T12717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.967229][T12717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.978506][T12717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.983423][T12893] __nla_validate_parse: 6 callbacks suppressed [ 295.983449][T12893] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2034'. [ 296.008012][T12893] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 296.016781][T12893] openvswitch: netlink: Duplicate key (type 0). [ 296.154004][ T9828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.175222][ T9828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.232040][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'. [ 296.250934][ T9823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.265653][ T9823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.241495][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 297.265632][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'. [ 297.328188][ T9828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.989533][ T9828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.477020][ T9828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.541948][ T9828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.655956][ T9828] bridge_slave_1: left allmulticast mode [ 298.662075][ T9828] bridge_slave_1: left promiscuous mode [ 298.667819][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.677852][ T9828] bridge_slave_0: left allmulticast mode [ 298.683979][ T9828] bridge_slave_0: left promiscuous mode [ 298.689754][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.195075][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.205622][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.225517][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.246110][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.262281][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.288693][ T9828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.301699][ T9828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.312832][ T9828] bond0 (unregistering): Released all slaves [ 299.364675][T12963] lo speed is unknown, defaulting to 1000 [ 299.917309][T12995] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2065'. [ 299.938484][T12963] chnl_net:caif_netlink_parms(): no params data found [ 300.303415][ T9828] hsr_slave_0: left promiscuous mode [ 300.320786][ T9828] hsr_slave_1: left promiscuous mode [ 300.327492][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.336040][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.344627][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.354838][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.364757][ T5985] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 300.413854][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 300.416174][ T9828] veth1_macvtap: left promiscuous mode [ 300.452675][ T9828] veth0_macvtap: left promiscuous mode [ 300.458457][ T9828] veth1_vlan: left promiscuous mode [ 300.466713][ T9828] veth0_vlan: left promiscuous mode [ 300.519636][T13024] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2067'. [ 301.281218][ T9828] team0 (unregistering): Port device team_slave_1 removed [ 301.329162][ T9828] team0 (unregistering): Port device team_slave_0 removed [ 301.369885][ T5851] Bluetooth: hci4: command tx timeout [ 301.994875][T12963] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.003739][T12963] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.011998][T12963] bridge_slave_0: entered allmulticast mode [ 302.020793][T12963] bridge_slave_0: entered promiscuous mode [ 302.046697][T12963] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.071620][T12963] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.080800][T12963] bridge_slave_1: entered allmulticast mode [ 302.089785][T12963] bridge_slave_1: entered promiscuous mode [ 302.184135][T13051] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.200799][T13053] netlink: 'syz.2.2080': attribute type 33 has an invalid length. [ 302.216129][T13053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2080'. [ 302.250262][T12963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.299298][T12963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.504797][T12963] team0: Port device team_slave_0 added [ 302.564831][T12963] team0: Port device team_slave_1 added [ 302.668537][T12963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.675892][T12963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.713245][T12963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.826100][T12963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.835376][T12963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.881297][T12963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.983946][T13083] xt_CT: No such helper "syz1" [ 303.040476][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 303.076000][T12963] hsr_slave_0: entered promiscuous mode [ 303.084079][T12963] hsr_slave_1: entered promiscuous mode [ 303.100402][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 303.111695][T12963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.123126][T12963] Cannot create hsr debugfs directory [ 303.178045][T13090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 303.448706][ T5851] Bluetooth: hci4: command 0x041b tx timeout [ 303.561778][T13112] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 303.626737][T13110] netlink: 'syz.3.2095': attribute type 11 has an invalid length. [ 303.703660][T13117] vlan3: entered promiscuous mode [ 303.731786][T13117] gretap0: entered promiscuous mode [ 304.056667][T13130] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 304.155913][T13137] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2107'. [ 304.203904][T13140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2108'. [ 304.221017][T12963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.249077][T12963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.273075][T12963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.303301][T12963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.313004][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2109'. [ 304.382817][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2109'. [ 304.620363][T12963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.669753][T13162] tipc: Enabled bearer , priority 0 [ 304.720995][T12963] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.740834][T13162] tipc: Resetting bearer [ 304.792419][T13161] tipc: Disabling bearer [ 304.847844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.855153][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.908349][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.915673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.954719][T13171] netlink: 'syz.2.2118': attribute type 26 has an invalid length. [ 304.977903][T13171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.129800][T12963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.149157][T13182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2121'. [ 305.273903][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 305.525281][ T5860] Bluetooth: hci4: command 0x041b tx timeout [ 305.658348][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 305.685612][T13204] netlink: 'syz.1.2127': attribute type 20 has an invalid length. [ 305.733854][T13204] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.742956][T13204] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.751886][T13204] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.760630][T13204] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.800299][T13209] tipc: Enabled bearer , priority 0 [ 305.808185][T13204] netlink: 'syz.1.2127': attribute type 20 has an invalid length. [ 305.831897][T13208] tipc: Resetting bearer [ 305.868516][T13207] tipc: Disabling bearer [ 305.907399][T12963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.009548][T13215] can: request_module (can-proto-5) failed. [ 306.048513][T12963] veth0_vlan: entered promiscuous mode [ 306.077837][T12963] veth1_vlan: entered promiscuous mode [ 306.174411][T12963] veth0_macvtap: entered promiscuous mode [ 306.212483][T12963] veth1_macvtap: entered promiscuous mode [ 306.267314][T12963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.308766][T12963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.348549][T12963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.369232][T12963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.388406][T12963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.408801][T12963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.570283][ T9824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.578512][ T9824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.738289][ T7557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.775841][ T7557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.868896][T13256] tipc: Enabled bearer , priority 0 [ 306.883964][T13256] tipc: Resetting bearer [ 306.937066][T13254] tipc: Disabling bearer [ 307.114473][T13264] netlink: 'syz.4.2146': attribute type 8 has an invalid length. [ 307.201483][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.271353][T13272] __nla_validate_parse: 5 callbacks suppressed [ 307.271375][T13272] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2149'. [ 307.310395][T13275] netlink: 'syz.3.2151': attribute type 3 has an invalid length. [ 307.324509][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2150'. [ 307.336044][T13276] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 307.357800][T13272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.365517][T13272] IPv6: NLM_F_CREATE should be set when creating new route [ 307.426960][T13272] sctp: [Deprecated]: syz.1.2149 (pid 13272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.426960][T13272] Use struct sctp_sack_info instead [ 307.580257][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2155'. [ 307.649016][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 307.784493][ T7557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.054953][ T7557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.363197][ T7557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.563026][ T7557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.658564][ T7557] bridge_slave_1: left allmulticast mode [ 308.664945][ T7557] bridge_slave_1: left promiscuous mode [ 308.670763][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.680880][ T7557] bridge_slave_0: left allmulticast mode [ 308.686842][ T7557] bridge_slave_0: left promiscuous mode [ 308.692668][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.061052][ T7557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.074456][ T7557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.085182][ T7557] bond0 (unregistering): Released all slaves [ 309.308568][T13294] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 309.380481][T13301] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 309.485182][ T7557] hsr_slave_0: left promiscuous mode [ 309.536890][ T7557] hsr_slave_1: left promiscuous mode [ 309.557337][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.587546][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.638562][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.656863][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.733348][ T7557] veth1_macvtap: left promiscuous mode [ 309.748745][T13313] netlink: 'syz.3.2164': attribute type 2 has an invalid length. [ 309.749015][ T7557] veth0_macvtap: left promiscuous mode [ 309.770144][ T7557] veth1_vlan: left promiscuous mode [ 309.775912][ T7557] veth0_vlan: left promiscuous mode [ 309.928202][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.938681][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.947701][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.957972][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.966389][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.532379][ T7557] team0 (unregistering): Port device team_slave_1 removed [ 310.588813][ T7557] team0 (unregistering): Port device team_slave_0 removed [ 311.154729][T13323] lo speed is unknown, defaulting to 1000 [ 311.376466][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 311.516386][T13350] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2174'. [ 311.740631][T13323] chnl_net:caif_netlink_parms(): no params data found [ 311.977227][T13323] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.997663][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.010251][T13323] bridge_slave_0: entered allmulticast mode [ 312.016836][ T5860] Bluetooth: hci4: command tx timeout [ 312.028620][T13323] bridge_slave_0: entered promiscuous mode [ 312.047595][T13323] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.055344][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.062913][T13323] bridge_slave_1: entered allmulticast mode [ 312.071291][T13323] bridge_slave_1: entered promiscuous mode [ 312.198208][T13323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.211973][T13323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.269506][T13323] team0: Port device team_slave_0 added [ 312.281765][T13323] team0: Port device team_slave_1 added [ 312.362994][T13323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.370289][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.400909][T13323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.419703][T13323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.428242][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.458956][T13323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.535081][T13323] hsr_slave_0: entered promiscuous mode [ 312.545412][T13323] hsr_slave_1: entered promiscuous mode [ 312.555527][T13323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.564808][T13323] Cannot create hsr debugfs directory [ 312.667916][T13405] netlink: 'syz.4.2187': attribute type 2 has an invalid length. [ 312.676790][T13405] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.2187'. [ 312.689004][T13407] netlink: 'syz.4.2187': attribute type 2 has an invalid length. [ 312.699363][T13407] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.2187'. [ 312.875394][T13411] netlink: 'syz.4.2189': attribute type 13 has an invalid length. [ 312.887005][T13411] netlink: 'syz.4.2189': attribute type 58 has an invalid length. [ 312.899445][T13411] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2189'. [ 312.990788][T13409] xt_CT: No such helper "pptp" [ 313.040824][T13415] openvswitch: netlink: Key type 4624 is out of range max 32 [ 313.416079][T13323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.485749][T13323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.504256][T13323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.516819][T13323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.593092][ T7557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 313.753459][ T7557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 313.820231][ T7557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 313.923164][ T7557] bond0: (slave netdevsim0): Releasing backup interface [ 313.972053][T13323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.055772][T13323] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.084020][ T5860] Bluetooth: hci4: command tx timeout [ 314.100559][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.107850][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.163395][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.170657][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.243819][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 314.435466][ T7557] bridge_slave_0: left allmulticast mode [ 314.455525][ T7557] bridge_slave_0: left promiscuous mode [ 314.475537][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.583852][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.595681][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.613518][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.622189][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.630222][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.967882][ T7557] dvmrp0 (unregistering): left allmulticast mode [ 316.162004][ T5851] Bluetooth: hci4: command tx timeout [ 316.309800][ T7557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.320056][ T7557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.330534][ T7557] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 316.340060][ T7557] bond0 (unregistering): Released all slaves [ 316.357785][ T7557] bond1 (unregistering): Released all slaves [ 316.473328][ T7557] bond2 (unregistering): Released all slaves [ 316.633111][T13471] lo speed is unknown, defaulting to 1000 [ 316.711832][T13483] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 316.741705][ T5851] Bluetooth: hci3: command tx timeout [ 316.793381][ T7557] tipc: Left network mode [ 317.162061][T13506] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 317.169913][T13506] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 317.457840][ T7557] hsr_slave_0: left promiscuous mode [ 317.462364][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 317.480664][ T7557] hsr_slave_1: left promiscuous mode [ 317.488632][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.499518][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.545901][ T7557] pimreg3 (unregistering): left allmulticast mode [ 318.243053][ T5851] Bluetooth: hci4: command tx timeout [ 318.378210][T13323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.445045][T13471] chnl_net:caif_netlink_parms(): no params data found [ 318.677324][T13323] veth0_vlan: entered promiscuous mode [ 318.710662][T13323] veth1_vlan: entered promiscuous mode [ 318.812881][ T5851] Bluetooth: hci3: command tx timeout [ 318.860332][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.881336][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.898936][T13471] bridge_slave_0: entered allmulticast mode [ 318.916015][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 318.920666][T13471] bridge_slave_0: entered promiscuous mode [ 318.927847][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 318.943709][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 318.957750][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.971615][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.992600][T13471] bridge_slave_1: entered allmulticast mode [ 319.007249][T13471] bridge_slave_1: entered promiscuous mode [ 319.064735][T13551] x_tables: duplicate underflow at hook 2 [ 319.109350][T13471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.153355][T13471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.253303][T13471] team0: Port device team_slave_0 added [ 319.266633][T13471] team0: Port device team_slave_1 added [ 319.291793][T13323] veth0_macvtap: entered promiscuous mode [ 319.334520][T13323] veth1_macvtap: entered promiscuous mode [ 319.362750][T13471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.369819][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.445931][T13471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.489639][T13471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.509490][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.538903][T13471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.624142][T13471] hsr_slave_0: entered promiscuous mode [ 319.630966][T13471] hsr_slave_1: entered promiscuous mode [ 319.637503][T13471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.647129][T13471] Cannot create hsr debugfs directory [ 319.657772][T13323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.690091][T13323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.714360][T13323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.724462][T13323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.734130][T13323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.743123][T13323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.961500][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.977397][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.035250][ T9828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.044913][ T9828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.560721][ T9828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.607689][T13471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.631048][T13471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.687822][T13471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.794653][ T9828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.829180][T13471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.881754][ T5851] Bluetooth: hci3: command tx timeout [ 320.968006][ T9828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.069635][ T9828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.114238][T13471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.139920][T13471] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.157536][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.164742][ T9823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.184257][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.191487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.288185][ T9828] bridge_slave_1: left allmulticast mode [ 321.297673][ T9828] bridge_slave_1: left promiscuous mode [ 321.303597][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.313725][ T9828] bridge_slave_0: left allmulticast mode [ 321.319590][ T9828] bridge_slave_0: left promiscuous mode [ 321.325479][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.679750][ T9828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.693220][ T9828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.705969][ T9828] bond0 (unregistering): Released all slaves [ 321.978919][T13471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.004425][ T9828] hsr_slave_0: left promiscuous mode [ 322.010489][ T9828] hsr_slave_1: left promiscuous mode [ 322.018144][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.025943][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.037078][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.044782][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.067297][ T9828] veth1_macvtap: left promiscuous mode [ 322.073131][ T9828] veth0_macvtap: left promiscuous mode [ 322.079495][ T9828] veth1_vlan: left promiscuous mode [ 322.085003][ T9828] veth0_vlan: left promiscuous mode [ 322.806599][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.817642][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.826589][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.826606][ T9828] team0 (unregistering): Port device team_slave_1 removed [ 322.847720][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.860892][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.902353][ T9828] team0 (unregistering): Port device team_slave_0 removed [ 322.961632][ T5860] Bluetooth: hci3: command tx timeout [ 323.393124][T13602] tipc: Enabled bearer , priority 0 [ 323.519771][T13471] veth0_vlan: entered promiscuous mode [ 323.602880][T13610] lo speed is unknown, defaulting to 1000 [ 323.616997][T13471] veth1_vlan: entered promiscuous mode [ 323.633071][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.755750][T13471] veth0_macvtap: entered promiscuous mode [ 323.795569][T13619] netlink: 'syz.2.2243': attribute type 3 has an invalid length. [ 323.856673][T13471] veth1_macvtap: entered promiscuous mode [ 323.939051][T13471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.959331][T13628] veth0_to_bridge: entered promiscuous mode [ 323.969093][T13471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.990803][T13627] veth0_to_bridge: left promiscuous mode [ 324.005831][T13471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.015033][T13471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.025724][T13471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.037231][T13471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.113425][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 324.209282][T13610] chnl_net:caif_netlink_parms(): no params data found [ 324.256648][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2248'. [ 324.276194][ T7551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.288072][ T7551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.431055][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.448398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.463325][T13610] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.470566][T13610] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.499092][T13610] bridge_slave_0: entered allmulticast mode [ 324.522005][T13610] bridge_slave_0: entered promiscuous mode [ 324.545160][T13610] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.552834][T13610] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.560393][T13610] bridge_slave_1: entered allmulticast mode [ 324.575230][T13610] bridge_slave_1: entered promiscuous mode [ 324.755879][ T7557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.847901][T13610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.874265][ T30] audit: type=1107 audit(1752573666.209:2): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 324.893696][T13610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.992119][ T5860] Bluetooth: hci4: command tx timeout [ 325.116535][T13668] netlink: 'syz.4.2257': attribute type 21 has an invalid length. [ 325.125694][T13668] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2257'. [ 325.210766][T13671] netlink: 'syz.4.2258': attribute type 9 has an invalid length. [ 325.220781][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 325.396594][T13667] vlan2: entered promiscuous mode [ 325.412979][T13667] bridge0: entered promiscuous mode [ 325.565502][ T9823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.749534][ T9823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.786439][T13610] team0: Port device team_slave_0 added [ 325.816025][T13610] team0: Port device team_slave_1 added [ 325.877986][T13689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2263'. [ 326.004646][ T9823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.017331][T13691] x_tables: duplicate underflow at hook 1 [ 326.205979][ T9823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.235595][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.245774][T13610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.254957][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.255694][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.301543][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.313328][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.318027][T13610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.343492][T13610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.351299][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.351754][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.417896][T13610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.567572][T13610] hsr_slave_0: entered promiscuous mode [ 326.595980][T13610] hsr_slave_1: entered promiscuous mode [ 326.616541][T13610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.637695][T13610] Cannot create hsr debugfs directory [ 326.703061][T13695] lo speed is unknown, defaulting to 1000 [ 326.915824][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2266'. [ 326.939373][T13714] netlink: 'syz.1.2268': attribute type 18 has an invalid length. [ 327.046775][ T5860] Bluetooth: hci4: command tx timeout [ 327.080212][T13717] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2269'. [ 327.097291][ T9823] bridge_slave_1: left allmulticast mode [ 327.110252][ T9823] bridge_slave_1: left promiscuous mode [ 327.116844][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.127264][ T9823] bridge_slave_0: left allmulticast mode [ 327.133450][ T9823] bridge_slave_0: left promiscuous mode [ 327.139397][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.560518][ T9823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.573085][ T9823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.584329][ T9823] bond0 (unregistering): Released all slaves [ 327.921783][T13729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2273'. [ 327.987736][T13726] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2272'. [ 328.328406][T13695] chnl_net:caif_netlink_parms(): no params data found [ 328.374673][ T9823] hsr_slave_0: left promiscuous mode [ 328.392168][ T9823] hsr_slave_1: left promiscuous mode [ 328.398265][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.412772][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.428102][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.443732][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.468251][ T9823] veth1_macvtap: left promiscuous mode [ 328.474196][ T9823] veth0_macvtap: left promiscuous mode [ 328.479888][ T9823] veth1_vlan: left promiscuous mode [ 328.487412][ T5860] Bluetooth: hci3: command tx timeout [ 328.493954][ T9823] veth0_vlan: left promiscuous mode [ 329.066288][ T9823] team0 (unregistering): Port device team_slave_1 removed [ 329.117132][ T9823] team0 (unregistering): Port device team_slave_0 removed [ 329.124477][ T5860] Bluetooth: hci4: command tx timeout [ 329.893853][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.897198][T13770] x_tables: duplicate underflow at hook 2 [ 329.903447][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.914367][T13695] bridge_slave_0: entered allmulticast mode [ 329.922324][T13695] bridge_slave_0: entered promiscuous mode [ 329.938547][T13770] unknown channel width for channel at 909000KHz? [ 329.939811][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.953364][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.961376][T13695] bridge_slave_1: entered allmulticast mode [ 329.969615][T13695] bridge_slave_1: entered promiscuous mode [ 330.103407][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.120342][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.134628][T13777] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 330.146269][T13777] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 330.163786][T13610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.183008][T13610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.233486][T13695] team0: Port device team_slave_0 added [ 330.247343][T13695] team0: Port device team_slave_1 added [ 330.255324][T13610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.275751][T13610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.405841][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.416691][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.426508][T13789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.446998][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.547423][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.565650][ T5860] Bluetooth: hci3: command tx timeout [ 330.571146][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.571222][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.877708][T13695] hsr_slave_0: entered promiscuous mode [ 330.890983][T13695] hsr_slave_1: entered promiscuous mode [ 330.906550][T13695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.930274][T13695] Cannot create hsr debugfs directory [ 331.133016][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2294'. [ 331.175874][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2294'. [ 331.211218][ T5860] Bluetooth: hci4: command tx timeout [ 331.324863][T13610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.359491][T13833] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 331.434003][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 331.441816][T13837] tipc: Enabling of bearer rejected, media not registered [ 331.452259][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 331.463005][T13835] netlink: 'syz.4.2297': attribute type 13 has an invalid length. [ 331.500724][T13610] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.659749][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.667218][ T7557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.746554][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.753861][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.862385][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 332.095698][T13695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.120199][T13695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.149420][T13695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.182105][T13695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.315010][T13610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.450730][T13610] veth0_vlan: entered promiscuous mode [ 332.480880][T13610] veth1_vlan: entered promiscuous mode [ 332.554218][T13695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.580484][T13883] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 16 [ 332.590876][T13610] veth0_macvtap: entered promiscuous mode [ 332.609482][T13610] veth1_macvtap: entered promiscuous mode [ 332.641716][ T5860] Bluetooth: hci3: command tx timeout [ 332.647901][T13695] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.657108][T13885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.687170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.694676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.718375][T13610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.730611][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.737904][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.771020][T13610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.790446][T13610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.803650][T13610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.815901][T13610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.826022][T13610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.907639][T13888] netlink: 'syz.2.2310': attribute type 13 has an invalid length. [ 332.988643][T13695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.040986][T13695] veth0_vlan: entered promiscuous mode [ 333.056777][T13695] veth1_vlan: entered promiscuous mode [ 333.182253][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.210957][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.246331][T13695] veth0_macvtap: entered promiscuous mode [ 333.273187][T13695] veth1_macvtap: entered promiscuous mode [ 333.293107][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.308986][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.357520][T13695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.383227][T13695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.425684][T13695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.466550][T13695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.475508][T13695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.484694][T13695] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.538992][T13903] Cannot find del_set index 17 as target [ 333.770010][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.787420][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.829500][T13915] ?H: renamed from lo (while UP) [ 333.865853][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.900261][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.004351][ T9824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.215193][ T9824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.530790][ T9824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.770302][ T9824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.059101][ T9824] bridge_slave_1: left allmulticast mode [ 335.071830][ T9824] bridge_slave_1: left promiscuous mode [ 335.088180][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.190156][ T9824] bridge_slave_0: left allmulticast mode [ 335.216325][ T9824] bridge_slave_0: left promiscuous mode [ 335.236510][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.255654][T13934] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.335178][T13939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2325'. [ 335.641407][T13950] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2326'. [ 335.815687][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.828054][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.845122][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.853890][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.876546][T10771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.889930][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.904130][T10771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.922519][T10771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.935356][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.950988][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.124371][ T9824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.137281][ T9824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.148527][ T9824] bond0 (unregistering): Released all slaves [ 336.191892][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 336.269875][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 336.293175][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 336.449771][T13966] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 336.493114][T13956] ?H speed is unknown, defaulting to 1000 [ 336.591512][T13954] ?H speed is unknown, defaulting to 1000 [ 336.608957][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 336.649657][T13975] netlink: 'syz.1.2331': attribute type 6 has an invalid length. [ 336.692904][ T9824] hsr_slave_0: left promiscuous mode [ 336.699786][ T9824] hsr_slave_1: left promiscuous mode [ 336.710366][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.718199][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.737568][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.745521][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.774761][ T9824] veth1_macvtap: left promiscuous mode [ 336.780482][ T9824] veth0_macvtap: left promiscuous mode [ 336.786509][ T9824] veth1_vlan: left promiscuous mode [ 336.792854][ T9824] veth0_vlan: left promiscuous mode [ 337.320261][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 337.381008][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 337.946797][ T5860] Bluetooth: hci3: command tx timeout [ 338.003031][ T5860] Bluetooth: hci4: command tx timeout [ 338.456238][T13956] chnl_net:caif_netlink_parms(): no params data found [ 338.619062][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2341'. [ 338.669533][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2340'. [ 338.803380][T13954] chnl_net:caif_netlink_parms(): no params data found [ 339.053675][T13956] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.061333][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.068850][T13956] bridge_slave_0: entered allmulticast mode [ 339.082261][T13956] bridge_slave_0: entered promiscuous mode [ 339.129776][T13956] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.145289][T13956] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.163889][T13956] bridge_slave_1: entered allmulticast mode [ 339.183421][T13956] bridge_slave_1: entered promiscuous mode [ 339.246307][ T9824] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.343979][ T9824] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.371834][T13956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.383387][T13954] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.392413][T13954] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.399913][T13954] bridge_slave_0: entered allmulticast mode [ 339.407980][T13954] bridge_slave_0: entered promiscuous mode [ 339.424149][T13956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.472034][T13954] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.479583][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.495735][T13954] bridge_slave_1: entered allmulticast mode [ 339.506221][T13954] bridge_slave_1: entered promiscuous mode [ 339.536163][ T9824] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.603212][T14034] tipc: Enabling of bearer rejected, failed to enable media [ 339.625374][T13956] team0: Port device team_slave_0 added [ 339.644052][T13956] team0: Port device team_slave_1 added [ 339.689321][ T9824] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.710038][T13954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.735388][T13954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.853126][T13956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.860399][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.888064][T13956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.965915][T13956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.978140][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.007135][ T5860] Bluetooth: hci3: command tx timeout [ 340.015284][T13956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.082127][ T5860] Bluetooth: hci4: command tx timeout [ 340.113031][T13954] team0: Port device team_slave_0 added [ 340.182788][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2351'. [ 340.198071][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 340.229179][T13954] team0: Port device team_slave_1 added [ 340.262764][T13956] hsr_slave_0: entered promiscuous mode [ 340.269281][T13956] hsr_slave_1: entered promiscuous mode [ 340.290647][T13956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.309364][T13956] Cannot create hsr debugfs directory [ 340.418065][ T9824] bridge_slave_1: left allmulticast mode [ 340.434240][ T9824] bridge_slave_1: left promiscuous mode [ 340.444582][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.477191][ T9824] bridge_slave_0: left allmulticast mode [ 340.491746][ T9824] bridge_slave_0: left promiscuous mode [ 340.507238][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.574743][T14074] netlink: 'syz.1.2355': attribute type 10 has an invalid length. [ 340.754359][T14077] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 341.054956][ T9824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.066571][ T9824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.077008][ T9824] bond0 (unregistering): Released all slaves [ 341.093457][T13954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.100610][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.139658][T13954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.230538][T14074] geneve1: entered promiscuous mode [ 341.254602][T14074] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 341.265743][T14076] syzkaller1: entered promiscuous mode [ 341.271652][T14076] syzkaller1: entered allmulticast mode [ 341.292353][T13954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.299399][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.331784][T13954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.545158][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 341.596328][T13954] hsr_slave_0: entered promiscuous mode [ 341.603538][T13954] hsr_slave_1: entered promiscuous mode [ 341.610500][T13954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.618956][T13954] Cannot create hsr debugfs directory [ 341.759283][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 341.783683][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 341.796891][ T9824] hsr_slave_0: left promiscuous mode [ 341.804387][ T9824] hsr_slave_1: left promiscuous mode [ 341.810568][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.818185][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.829898][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.839163][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.870396][ T9824] veth1_macvtap: left promiscuous mode [ 341.876389][ T9824] veth0_macvtap: left promiscuous mode [ 341.882457][ T9824] veth1_vlan: left promiscuous mode [ 341.888040][ T9824] veth0_vlan: left promiscuous mode [ 342.097068][ T5860] Bluetooth: hci3: command tx timeout [ 342.173231][ T5860] Bluetooth: hci4: command tx timeout [ 342.306143][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2362'. [ 342.548960][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 342.597350][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 343.470206][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 343.570937][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 343.585973][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 343.595291][T14127] netlink: 'syz.2.2367': attribute type 14 has an invalid length. [ 343.919919][T14132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.933943][T14132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.110536][T14132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.121912][T14132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.131350][ T30] audit: type=1107 audit(1752573685.479:3): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L7-ò VH1q9 F!kP]y:]S#цˤDb1NLl"eh:}҇|h6St.r6CDм}QDbP_k k eb.ɫDG 1 [ 349.307499][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.322618][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.332421][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.341880][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.998258][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 350.043627][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.055181][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 350.067609][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.076382][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.087098][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.107127][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.170128][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.184650][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.205700][ T5985] bond0 (unregistering): Released all slaves [ 350.238576][T14284] syzkaller1: left promiscuous mode [ 350.261790][T14284] syzkaller1: left allmulticast mode [ 350.364977][T14286] ?H speed is unknown, defaulting to 1000 [ 350.447573][T14294] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 350.507855][T14298] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2412'. [ 350.512457][T14299] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 350.540801][T14296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2411'. [ 350.553666][T14252] ?H speed is unknown, defaulting to 1000 [ 350.729981][T14304] ip6t_REJECT: ECHOREPLY is not supported [ 350.824630][T14314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2414'. [ 351.016942][T14322] xt_TCPMSS: Only works on TCP SYN packets [ 351.182000][ T5985] hsr_slave_0: left promiscuous mode [ 351.198520][T14328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2417'. [ 351.201799][ T5985] hsr_slave_1: left promiscuous mode [ 351.242064][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.249579][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.275888][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.298997][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.327772][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2418'. [ 351.338507][ T5985] veth1_macvtap: left promiscuous mode [ 351.344253][ T5985] veth0_macvtap: left promiscuous mode [ 351.350079][ T5985] veth1_vlan: left promiscuous mode [ 351.360272][ T5985] veth0_vlan: left promiscuous mode [ 351.441360][ T5851] Bluetooth: hci3: command tx timeout [ 351.950379][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 352.000327][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 352.162272][ T5851] Bluetooth: hci4: command tx timeout [ 352.490829][T14338] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 352.528414][T14286] chnl_net:caif_netlink_parms(): no params data found [ 352.866309][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.893366][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.912263][T14286] bridge_slave_0: entered allmulticast mode [ 352.920266][T14286] bridge_slave_0: entered promiscuous mode [ 352.958985][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.968270][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.976255][T14286] bridge_slave_1: entered allmulticast mode [ 352.998974][T14286] bridge_slave_1: entered promiscuous mode [ 353.020064][T14367] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 353.171032][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.205068][T14373] lo: entered allmulticast mode [ 353.220609][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.472813][T14286] team0: Port device team_slave_0 added [ 353.499602][T14252] chnl_net:caif_netlink_parms(): no params data found [ 353.521666][ T5851] Bluetooth: hci3: command tx timeout [ 353.545365][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 353.558699][T14286] team0: Port device team_slave_1 added [ 353.632641][T14396] 8021q: VLANs not supported on lo [ 353.652708][T14393] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2434'. [ 353.677438][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.685289][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.711697][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.730397][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.738575][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.772822][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.993077][ T5985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.126654][T14417] netlink: 696 bytes leftover after parsing attributes in process `syz.4.2441'. [ 354.129294][ T5985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.158615][T14252] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.166244][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.175423][T14252] bridge_slave_0: entered allmulticast mode [ 354.183277][T14252] bridge_slave_0: entered promiscuous mode [ 354.198018][T14286] hsr_slave_0: entered promiscuous mode [ 354.208698][T14286] hsr_slave_1: entered promiscuous mode [ 354.215965][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.223991][T14286] Cannot create hsr debugfs directory [ 354.230788][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.243102][ T5851] Bluetooth: hci4: command tx timeout [ 354.264839][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.289725][T14252] bridge_slave_1: entered allmulticast mode [ 354.307516][T14252] bridge_slave_1: entered promiscuous mode [ 354.330830][T14422] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2443'. [ 354.381762][ T5985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.474143][T14427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.549786][T14252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.619488][ T5985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.676864][T14252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.776526][T14252] team0: Port device team_slave_0 added [ 354.825515][T14252] team0: Port device team_slave_1 added [ 354.978284][T14252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.985618][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.989729][T14438] netlink: 'syz.1.2449': attribute type 2 has an invalid length. [ 355.018561][T14252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.058361][T14252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.068297][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.096655][T14252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.141547][ T5985] bridge_slave_1: left allmulticast mode [ 355.154126][ T5985] bridge_slave_1: left promiscuous mode [ 355.160187][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.172274][ T5985] bridge_slave_0: left allmulticast mode [ 355.187094][ T5985] bridge_slave_0: left promiscuous mode [ 355.196018][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.602875][ T5851] Bluetooth: hci3: command tx timeout [ 355.629122][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.641807][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.652953][ T5985] bond0 (unregistering): Released all slaves [ 355.728058][T14451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.758173][T14451] bond0: (slave rose0): Enslaving as an active interface with an up link [ 355.767082][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.767125][ T78] ------------[ cut here ]------------ [ 355.767135][ T78] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 355.767161][ T78] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 355.767199][ T78] CPU: 1 UID: 0 PID: 78 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-syzkaller-00189-ge18f348632ec #0 PREEMPT(full) [ 355.767227][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.767241][ T78] Workqueue: events_unbound cfg80211_wiphy_work [ 355.767279][ T78] Call Trace: [ 355.767287][ T78] [ 355.767297][ T78] dump_stack_lvl+0x189/0x250 [ 355.767331][ T78] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.767358][ T78] ? __pfx__printk+0x10/0x10 [ 355.767402][ T78] ubsan_epilogue+0xa/0x40 [ 355.767433][ T78] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 355.767469][ T78] ieee80211_request_ibss_scan+0x600/0x8b0 [ 355.767530][ T78] ieee80211_ibss_work+0xd85/0x1060 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.767569][ T78] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.767609][ T78] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 355.767647][ T78] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.767683][ T78] ? kcov_remote_stop+0x17e/0x6d0 [ 355.767732][ T78] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 355.767777][ T78] ? skb_dequeue+0x10e/0x150 [ 355.767799][ T78] ? ieee80211_iface_work+0xcd4/0xfe0 [ 355.767827][ T78] ? ieee80211_iface_work+0xf39/0xfe0 [ 355.767865][ T78] cfg80211_wiphy_work+0x2dc/0x460 [ 355.767895][ T78] ? process_scheduled_works+0x9ef/0x17b0 [ 355.767928][ T78] process_scheduled_works+0xae1/0x17b0 [ 355.768002][ T78] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.768056][ T78] worker_thread+0x8a0/0xda0 [ 355.768122][ T78] kthread+0x70e/0x8a0 [ 355.768163][ T78] ? __pfx_worker_thread+0x10/0x10 [ 355.768192][ T78] ? __pfx_kthread+0x10/0x10 [ 355.768242][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.768277][ T78] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.768313][ T78] ? __pfx_kthread+0x10/0x10 [ 355.768350][ T78] ret_from_fork+0x3fc/0x770 [ 355.768381][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 355.768416][ T78] ? __switch_to_asm+0x39/0x70 [ 355.768448][ T78] ? __switch_to_asm+0x33/0x70 [ 355.768478][ T78] ? __pfx_kthread+0x10/0x10 [ 355.768514][ T78] ret_from_fork_asm+0x1a/0x30 [ 355.768570][ T78] [ 355.768665][ T78] ---[ end trace ]--- [ 356.141338][ T78] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 356.148643][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-syzkaller-00189-ge18f348632ec #0 PREEMPT(full) [ 356.160678][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.170963][ T78] Workqueue: events_unbound cfg80211_wiphy_work [ 356.177283][ T78] Call Trace: [ 356.180611][ T78] [ 356.183598][ T78] dump_stack_lvl+0x99/0x250 [ 356.188269][ T78] ? __asan_memcpy+0x40/0x70 [ 356.192901][ T78] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.198138][ T78] ? __pfx__printk+0x10/0x10 [ 356.202782][ T78] panic+0x2db/0x790 [ 356.206715][ T78] ? __pfx_panic+0x10/0x10 [ 356.211158][ T78] ? _printk+0xcf/0x120 [ 356.215352][ T78] ? __pfx__printk+0x10/0x10 [ 356.219986][ T78] check_panic_on_warn+0x89/0xb0 [ 356.224965][ T78] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 356.230726][ T78] ieee80211_request_ibss_scan+0x600/0x8b0 [ 356.236583][ T78] ieee80211_ibss_work+0xd85/0x1060 [ 356.241826][ T78] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.247074][ T78] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 356.253052][ T78] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 356.259515][ T78] ? kcov_remote_stop+0x17e/0x6d0 [ 356.264613][ T78] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 356.270313][ T78] ? skb_dequeue+0x10e/0x150 [ 356.274939][ T78] ? ieee80211_iface_work+0xcd4/0xfe0 [ 356.280341][ T78] ? ieee80211_iface_work+0xf39/0xfe0 [ 356.285754][ T78] cfg80211_wiphy_work+0x2dc/0x460 [ 356.290907][ T78] ? process_scheduled_works+0x9ef/0x17b0 [ 356.296672][ T78] process_scheduled_works+0xae1/0x17b0 [ 356.302276][ T78] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.308314][ T78] worker_thread+0x8a0/0xda0 [ 356.312957][ T78] kthread+0x70e/0x8a0 [ 356.317068][ T78] ? __pfx_worker_thread+0x10/0x10 [ 356.322301][ T78] ? __pfx_kthread+0x10/0x10 [ 356.326930][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.332163][ T78] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.337395][ T78] ? __pfx_kthread+0x10/0x10 [ 356.342026][ T78] ret_from_fork+0x3fc/0x770 [ 356.346669][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 356.351845][ T78] ? __switch_to_asm+0x39/0x70 [ 356.356651][ T78] ? __switch_to_asm+0x33/0x70 [ 356.361448][ T78] ? __pfx_kthread+0x10/0x10 [ 356.366252][ T78] ret_from_fork_asm+0x1a/0x30 [ 356.371096][ T78] [ 356.374469][ T78] Kernel Offset: disabled [ 356.378906][ T78] Rebooting in 86400 seconds..