last executing test programs: 2m26.835854832s ago: executing program 1 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3, 0x0, 0x1000}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x80}}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000001f000100000000000000000006"], 0x18}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r5, 0x1, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080), 0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3, 0x0, 0x1000}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x80}}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000001f000100000000000000000006"], 0x18}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) getsockopt$sock_buf(r5, 0x1, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) 2m26.014329915s ago: executing program 1 (id=477): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000020000edffffff00188700080009000200000008000a00000000020000000000004cb652001f00000000000000000000e4ffffff0000001400200000000000000000000000ffffac14d5bb05002200000000000009a4cac54f8cd68015374663c7b1944518e80be265b5ff7f5ee32bc7551badba1a0ef8151a2b8fc0db5bbac4b10495a4e344048cffa3b66a03"], 0x64}}, 0x0) 2m25.843634009s ago: executing program 1 (id=481): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) 2m25.491131345s ago: executing program 1 (id=484): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 2m25.219986851s ago: executing program 1 (id=488): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x5f2bc000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) socket(0x11, 0x3, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r9 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r9, &(0x7f0000000080), &(0x7f0000000040)=0xc) (async) getsockname$qrtr(r9, &(0x7f0000000080), &(0x7f0000000040)=0xc) 2m24.907106612s ago: executing program 1 (id=490): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x26020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000380)="03", 0x0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280)={0x1000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESDEC=r1, @ANYRES32=r4, @ANYRESDEC=r6, @ANYRES32=r8, @ANYBLOB="04"], 0xc4}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB="08000067e2711be86e2dce37e5d9000900000000800000610ac5211828220032561880d7019146e0475605f82605d12acbae1b0d435efe6de1f6cfb6d315069c5d26a0fbd84311d4b6e8af64a0c13c185f382d7b0c17b55409058ff78729e3399ce89760e7eaaef315a1cb74ef778e135ff8fb2ec3f815327a7c51658c82efd16541d64ba0c6662f9cf9a43aa3c75dbd1995f3a0888053a23edb9b20fa62794959996bd243d49ee2b12f209aefe30619cef761b36ce130fdb03d7e592e295ed0c4da99c616", @ANYRES32=r1, @ANYBLOB="0000000004000000b7080000000000007b8af8ff00000000b70800003b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000018130000", @ANYRES32=r1, @ANYBLOB="00000000000000001835000001000000000000000000000020e90200040000002151c7fefcffffff850000009c0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x5f, &(0x7f0000000100)=""/95, 0x40f00, 0x10, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000000040)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xf, 0xfffffffc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r11, r1, r1, r1], 0x0, 0x10, 0x94}, 0x94) 2m9.829546762s ago: executing program 32 (id=490): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x26020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000380)="03", 0x0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280)={0x1000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESDEC=r1, @ANYRES32=r4, @ANYRESDEC=r6, @ANYRES32=r8, @ANYBLOB="04"], 0xc4}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB="08000067e2711be86e2dce37e5d9000900000000800000610ac5211828220032561880d7019146e0475605f82605d12acbae1b0d435efe6de1f6cfb6d315069c5d26a0fbd84311d4b6e8af64a0c13c185f382d7b0c17b55409058ff78729e3399ce89760e7eaaef315a1cb74ef778e135ff8fb2ec3f815327a7c51658c82efd16541d64ba0c6662f9cf9a43aa3c75dbd1995f3a0888053a23edb9b20fa62794959996bd243d49ee2b12f209aefe30619cef761b36ce130fdb03d7e592e295ed0c4da99c616", @ANYRES32=r1, @ANYBLOB="0000000004000000b7080000000000007b8af8ff00000000b70800003b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000018130000", @ANYRES32=r1, @ANYBLOB="00000000000000001835000001000000000000000000000020e90200040000002151c7fefcffffff850000009c0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x5f, &(0x7f0000000100)=""/95, 0x40f00, 0x10, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000000040)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xf, 0xfffffffc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r11, r1, r1, r1], 0x0, 0x10, 0x94}, 0x94) 1m6.706766551s ago: executing program 3 (id=797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 1m5.235203979s ago: executing program 2 (id=233): r0 = socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080006000000000000b37ac916d93992246b453d9ad81c48d75b7fb620bf7b62a48135a6f1508c656c2f7d7a435ab78b101f87b632aff4a5736213902da3e5abb3f182f20e787af3f43829fe207fe66775bfcefeb00cc67286a89ba5e5b3796d8cb7dcac7d9e8fb67510801541ae0d"], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20010) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="04c34300", @ANYRES16=r7, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x3261e) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000080fddb2f6e62da29df256400000094595b7e56c36d080001007a0000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000800)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "6ff3bed7", "aed1f9feae4c322c"}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r12 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x110, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000e45be120886378adfc93f0cd00"/34], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 53.719713651s ago: executing program 3 (id=797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 52.757244039s ago: executing program 2 (id=233): r0 = socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080006000000000000b37ac916d93992246b453d9ad81c48d75b7fb620bf7b62a48135a6f1508c656c2f7d7a435ab78b101f87b632aff4a5736213902da3e5abb3f182f20e787af3f43829fe207fe66775bfcefeb00cc67286a89ba5e5b3796d8cb7dcac7d9e8fb67510801541ae0d"], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20010) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="04c34300", @ANYRES16=r7, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x3261e) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000080fddb2f6e62da29df256400000094595b7e56c36d080001007a0000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000800)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "6ff3bed7", "aed1f9feae4c322c"}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r12 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x110, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000e45be120886378adfc93f0cd00"/34], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 40.245162235s ago: executing program 3 (id=797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 39.261671699s ago: executing program 2 (id=233): r0 = socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080006000000000000b37ac916d93992246b453d9ad81c48d75b7fb620bf7b62a48135a6f1508c656c2f7d7a435ab78b101f87b632aff4a5736213902da3e5abb3f182f20e787af3f43829fe207fe66775bfcefeb00cc67286a89ba5e5b3796d8cb7dcac7d9e8fb67510801541ae0d"], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20010) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="04c34300", @ANYRES16=r7, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x3261e) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000080fddb2f6e62da29df256400000094595b7e56c36d080001007a0000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000800)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "6ff3bed7", "aed1f9feae4c322c"}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r12 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x110, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000e45be120886378adfc93f0cd00"/34], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 28.050283674s ago: executing program 3 (id=797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 27.00623197s ago: executing program 2 (id=233): r0 = socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080006000000000000b37ac916d93992246b453d9ad81c48d75b7fb620bf7b62a48135a6f1508c656c2f7d7a435ab78b101f87b632aff4a5736213902da3e5abb3f182f20e787af3f43829fe207fe66775bfcefeb00cc67286a89ba5e5b3796d8cb7dcac7d9e8fb67510801541ae0d"], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20010) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="04c34300", @ANYRES16=r7, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x3261e) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000080fddb2f6e62da29df256400000094595b7e56c36d080001007a0000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000800)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "6ff3bed7", "aed1f9feae4c322c"}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r12 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x110, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000e45be120886378adfc93f0cd00"/34], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 15.347528136s ago: executing program 3 (id=797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 14.143535029s ago: executing program 2 (id=233): r0 = socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080006000000000000b37ac916d93992246b453d9ad81c48d75b7fb620bf7b62a48135a6f1508c656c2f7d7a435ab78b101f87b632aff4a5736213902da3e5abb3f182f20e787af3f43829fe207fe66775bfcefeb00cc67286a89ba5e5b3796d8cb7dcac7d9e8fb67510801541ae0d"], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20010) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="04c34300", @ANYRES16=r7, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x3261e) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000080fddb2f6e62da29df256400000094595b7e56c36d080001007a0000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000800)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "6ff3bed7", "aed1f9feae4c322c"}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r12 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x110, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000e45be120886378adfc93f0cd00"/34], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.345126287s ago: executing program 0 (id=1551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000010080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000010080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 4.322642719s ago: executing program 4 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x8, 0x5, 0x1ba}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000900)={r2, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x6, 0xe, 0xc, 0x8, 0x800, 0x0, 0x1, 'syz1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r12, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a000100696e6e65720000001c0002800800034000000007080004400000000f08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aba4726e193106fc3575c90d54a602dd35df9288d6fb41bc588ca22244f02d15c5e45044aa6bd9528caff3abe839949ed0c"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x94, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa1, 0x39}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x94}}, 0x0) 4.135828561s ago: executing program 0 (id=1554): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200ac0100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000080010380200000800800034000000002"], 0x240}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 4.060712158s ago: executing program 0 (id=1556): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) close(r1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8000088a8"], 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 4.03760561s ago: executing program 4 (id=1557): r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = socket(0x2b, 0x2, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1ec}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) socketpair(0x24, 0xa, 0xfffffffd, &(0x7f0000000100)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000feffffff1c0000000a0004007770616e3000000008000100"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x8000, 0xffff29c2, 0x1, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2, {[@noop]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@delqdisc={0x34, 0x25, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffff, 0x6}, {0x4, 0xf91ba0a1298b42e0}, {0x10, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xaa}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) 3.992132077s ago: executing program 5 (id=1558): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x108, 0x11, 0x148, 0x0, 0x10, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x588, 0x548, 0x7}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5, 0x3, 'syz0\x00', {0x4d}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {}, {}, 0x73, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xdb, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.777036598s ago: executing program 4 (id=1559): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000001c0)=""/131, &(0x7f0000000000)=0x83) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f0000000700)="a9", 0x5e0, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000001c0)=""/131, &(0x7f0000000000)=0x83) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) (async) sendto$packet(r1, &(0x7f0000000700)="a9", 0x5e0, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) (async) 3.735294545s ago: executing program 3 (id=797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0) 2.444466763s ago: executing program 0 (id=1560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) r4 = socket(0x10, 0x80002, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000440)=@newtaction={0x188, 0x30, 0x53b, 0x0, 0x0, {}, [{0x174, 0x1, [@m_simple={0x170, 0x1, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x13f, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x01\x00`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85\xb2\xb5\xa3&\xce\x18\x19\xd4^oh\x9eK\x02\xe7\x85 XXOO\xf3z\x16>\a\xdbZ\x1d\xae7J]\x1a\xd1\xdf\xd7kqd\x17D\xfd\xbd\x9d$e\xd6|\x17v7X\x9d6m\xa9k\xf7zA\xe3\x9d\'\xe7\xa4)\xfb\x81O\x99\xbbg0r\xa1I\xddE\xd3\b7a\x9a\xa7\xa2\xff\xba\x1e\x7f\xa9q\x91+\xe4\x9b\xe8\x13kx\x04\n\x02\xdc\x90PG\xf5\x8c\xfb\xd7A\xef\x82\x81c\xd4f\xe3\xcbg\xc7\x06\bf'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x188}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x100010, r1, 0xd6614000) r5 = epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8090}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0xa000000d}) close(0x4) 2.443428827s ago: executing program 5 (id=1561): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000004c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$igmp6(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000400000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000020000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close(r4) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r0, &(0x7f00000004c0), 0x8) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000400000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000020000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) close(r4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 2.443115468s ago: executing program 2 (id=233): r0 = socket$netlink(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080006000000000000b37ac916d93992246b453d9ad81c48d75b7fb620bf7b62a48135a6f1508c656c2f7d7a435ab78b101f87b632aff4a5736213902da3e5abb3f182f20e787af3f43829fe207fe66775bfcefeb00cc67286a89ba5e5b3796d8cb7dcac7d9e8fb67510801541ae0d"], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20010) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="04c34300", @ANYRES16=r7, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x3261e) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000080fddb2f6e62da29df256400000094595b7e56c36d080001007a0000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000800)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "6ff3bed7", "aed1f9feae4c322c"}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) r12 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x110, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000e45be120886378adfc93f0cd00"/34], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 643.90965ms ago: executing program 4 (id=1562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x5865, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) socket$netlink(0x10, 0x3, 0x0) 642.9649ms ago: executing program 0 (id=1563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={0xffffffffffffffff, &(0x7f0000001e80), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x36, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xba2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @tail_call, @call={0x85, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x2, 0x15, &(0x7f0000000600)=""/21, 0x41100, 0x5e, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r5], 0x0, 0x10, 0x764b}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x100, 0xfff, 0x6360, 0x9, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "ecce4ad7ba2da202b2dcd3f877876037b7b9a477dbeb4ad1334d68452135da4c3f5d7a2d2ec2b9eed1784c26bd86d445189c5fbe8ffe9a3db3e9468711dee5d6"}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xb12}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r12, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c0000003cfe724c02edc924edce6bd97ea0312514988203b534ada33de09ce4b0bbf4595204a0e55f11a3cd060580237fed4df7cd1d7431ac6b66fe00b57b657ca69aadb8f33889f48a7f0a3c702c475dee00306571bdece95d3abfca5e26b2df92678f44de4ff010b5", @ANYRES16=r12, @ANYBLOB="080027bd7000fbdbdf253f00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ffffff7f3300000074005e8008000200fcffffff0800060001000100080007006d03000008000300e150e45e08000300020000001c0001000400000000000000810000000900000006000000feffffff2c000100ecf3ffff0526e14e02000000060000006f61fc3d0900000005000000800000007bfaffffcffc0000"], 0x9c}}, 0x4008001) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 642.403242ms ago: executing program 5 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r11, 0x823, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) socket(0x10, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r11, 0x823, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x4010) (async) 446.352423ms ago: executing program 0 (id=1565): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 433.178436ms ago: executing program 5 (id=1566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x2b4, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x4}, {0x29c, 0x1, [@m_bpf={0xb0, 0x6, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x101, 0x9, 0x80, 0x2}, {0xe454, 0x1, 0xd9, 0x4}, {0x0, 0x5, 0x0, 0x5}, {0x5, 0x4, 0x6f, 0x7}, {0x2, 0x0, 0xb3, 0x8}]}]}, {0x51, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x114, 0x15, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x7, 0x3}}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0x5, 0xfff, 0x7}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xb1, 0x6, "4b9740f4c4050ed3c8b84b3356014b8f97236655e94563fc75e59455f4aeb44b2ea148c66c3f56d93909c0c45f84804fa30c248c0be0947afca9b4cc34d8bcdfd8a1314bdcf0bc4a604ce8ffd65822487d5eb92234d25263358f95909f4c6462accaf8d8e8d0a126b75b7f56b05b0551e31af41b30b547a840e0c8375239b336626d6336796506413a704f8430b7281ac81300e8c24c1dab58922c959bfc802eb8c89a74edd9c1c3fdfa7200a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xa4, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x77, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x30, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20048801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 331.848918ms ago: executing program 4 (id=1567): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ec0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000001f40)=r0}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={&(0x7f0000001fc0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x48, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x61e, 0xfffffffc}}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f00000021c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16c, 0x16c, 0x6, [@struct={0x8, 0x9, 0x0, 0x4, 0x1, 0xbed, [{0x7, 0x4, 0x7}, {0x0, 0x1, 0x2}, {0x2, 0x4, 0x1}, {0xf, 0x0, 0xff}, {0x0, 0x3, 0xd8}, {0x6, 0x1, 0x2}, {0x9, 0x1, 0x3}, {0x1, 0x2, 0x8}, {0xc, 0x1, 0x8}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x19, 0x0, 0x3b, 0x1}, @enum64={0x8, 0x8, 0x0, 0x13, 0x1, 0x4, [{0x5, 0x2, 0x101}, {0x1, 0x4, 0x1700}, {0xb}, {0x1, 0x1}, {0xd, 0x2, 0x4}, {0xc, 0x9, 0xa}, {0x8, 0x2}, {0x2, 0x5, 0x9}]}, @union={0x1, 0x3, 0x0, 0x5, 0x1, 0x7, [{0xa, 0x3, 0x1}, {0xa, 0x0, 0x80000001}, {0xf, 0x3, 0x4}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x8, [{0x10, 0x0, 0x4}, {0xd, 0x3, 0xfffffff9}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000002380)=""/84, 0x18a, 0x54, 0x1, 0xab48}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xd, 0x1c, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffb}, @exit, @generic={0x4, 0x0, 0x2, 0x1000, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback=0x24, r7, 0x8, &(0x7f0000002440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002480)={0x2, 0x4, 0xc, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x7, 0x0, &(0x7f00000024c0)=[{0x4, 0x4, 0xc, 0x1}, {0x3, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x8, 0x8}, {0x4, 0x2, 0xc, 0x3}, {0x4, 0x1, 0x7, 0x9}, {0x1, 0x3, 0x3}, {0x0, 0x3, 0xb, 0xd}]}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000070000000401"], 0x10}, 0x331e5c6805043cda) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r9, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 163.224083ms ago: executing program 5 (id=1568): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x4, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffb398, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) 42.806848ms ago: executing program 5 (id=1569): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffff80}}]}, 0x38}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 0s ago: executing program 4 (id=1570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): _slave_0: left allmulticast mode [ 195.473732][ T3501] bridge_slave_0: left promiscuous mode [ 195.495064][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.943393][ T51] Bluetooth: hci0: command tx timeout [ 196.064684][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.075828][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.086768][ T3501] bond0 (unregistering): Released all slaves [ 196.336582][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 196.603676][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.610912][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.627795][ T9923] __nla_validate_parse: 5 callbacks suppressed [ 196.627812][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.921'. [ 196.645139][ T9900] bridge_slave_0: entered allmulticast mode [ 196.654083][ T9900] bridge_slave_0: entered promiscuous mode [ 196.673902][ T9923] netlink: 36 bytes leftover after parsing attributes in process `syz.5.921'. [ 196.739197][ T9920] sit1: entered promiscuous mode [ 196.807021][ T9920] sit1: entered allmulticast mode [ 196.834650][ T3501] hsr_slave_0: left promiscuous mode [ 196.843095][ T3501] hsr_slave_1: left promiscuous mode [ 196.855431][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.880963][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.900908][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.923425][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.014529][ T3501] veth1_macvtap: left promiscuous mode [ 197.020314][ T3501] veth0_macvtap: left promiscuous mode [ 197.026723][ T3501] veth1_vlan: left promiscuous mode [ 197.032644][ T3501] veth0_vlan: left promiscuous mode [ 197.142617][ T51] Bluetooth: hci2: command tx timeout [ 197.255275][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.264624][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.276025][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.285863][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.295825][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.619353][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 197.653805][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 197.970179][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.980899][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.988172][ T9900] bridge_slave_1: entered allmulticast mode [ 198.000461][ T9900] bridge_slave_1: entered promiscuous mode [ 198.056114][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.096429][ T9925] pimreg5: entered allmulticast mode [ 198.124812][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.265030][ T9900] team0: Port device team_slave_0 added [ 198.266704][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'. [ 198.281252][ T9900] team0: Port device team_slave_1 added [ 198.441001][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.461831][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.514317][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.534315][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.549136][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.612031][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.799051][ T3550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.833467][ T9900] hsr_slave_0: entered promiscuous mode [ 198.852722][ T9900] hsr_slave_1: entered promiscuous mode [ 198.858928][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.866580][ T9900] Cannot create hsr debugfs directory [ 198.930247][ T3550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.066984][ T3550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.182262][ T3550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.225218][ T5857] Bluetooth: hci2: command tx timeout [ 199.363400][ T9968] xt_hashlimit: size too large, truncated to 1048576 [ 199.382296][ T5857] Bluetooth: hci3: command tx timeout [ 200.175217][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.938'. [ 200.207135][ T9984] netlink: 92 bytes leftover after parsing attributes in process `syz.0.938'. [ 200.240761][ T9986] netlink: 81 bytes leftover after parsing attributes in process `syz.4.939'. [ 200.284094][ T9988] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.467175][ T3550] bridge_slave_1: left allmulticast mode [ 200.483771][ T3550] bridge_slave_1: left promiscuous mode [ 200.493999][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.516607][ T3550] bridge_slave_0: left allmulticast mode [ 200.527245][ T3550] bridge_slave_0: left promiscuous mode [ 200.537193][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.703527][T10005] netlink: 212404 bytes leftover after parsing attributes in process `syz.5.945'. [ 200.977614][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.988920][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.002759][ T3550] bond0 (unregistering): Released all slaves [ 201.045644][ T9942] chnl_net:caif_netlink_parms(): no params data found [ 201.166726][T10010] netlink: 348 bytes leftover after parsing attributes in process `syz.5.947'. [ 201.301871][ T5857] Bluetooth: hci2: command tx timeout [ 201.413013][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.420283][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.429866][ T9942] bridge_slave_0: entered allmulticast mode [ 201.437377][ T9942] bridge_slave_0: entered promiscuous mode [ 201.461857][ T5857] Bluetooth: hci3: command tx timeout [ 201.514563][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.521967][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.529303][ T9942] bridge_slave_1: entered allmulticast mode [ 201.537220][ T9942] bridge_slave_1: entered promiscuous mode [ 201.682899][ T9900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.750464][ T9942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.788050][ T9942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.913347][ T9900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.932114][T10035] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 201.958400][ T3550] hsr_slave_0: left promiscuous mode [ 201.964628][ T3550] hsr_slave_1: left promiscuous mode [ 201.970474][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.978532][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.997841][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.005499][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.054988][ T3550] veth1_macvtap: left promiscuous mode [ 202.060715][ T3550] veth0_macvtap: left promiscuous mode [ 202.066977][ T3550] veth1_vlan: left promiscuous mode [ 202.072606][ T3550] veth0_vlan: left promiscuous mode [ 202.208629][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.955'. [ 202.220792][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.955'. [ 202.378616][T10045] netlink: 'syz.5.956': attribute type 1 has an invalid length. [ 202.434608][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.956'. [ 202.453504][T10046] netlink: 7 bytes leftover after parsing attributes in process `syz.5.956'. [ 202.576496][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 202.610857][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 202.925885][ T9942] team0: Port device team_slave_0 added [ 202.934942][ T9942] team0: Port device team_slave_1 added [ 202.960696][T10035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.970291][T10035] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 202.979878][ T9900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.999200][ T9900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.017982][T10047] macvlan2: entered promiscuous mode [ 203.024437][T10047] macvlan2: entered allmulticast mode [ 203.104029][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.111005][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.168832][ T9942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.205856][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.217198][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.248772][ T9942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.382872][ T5857] Bluetooth: hci2: command tx timeout [ 203.396908][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 203.408937][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 203.451694][T10062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.959'. [ 203.467541][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.959'. [ 203.481359][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.959'. [ 203.498572][ T9942] hsr_slave_0: entered promiscuous mode [ 203.505787][ T9942] hsr_slave_1: entered promiscuous mode [ 203.511985][ T9942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.519581][ T9942] Cannot create hsr debugfs directory [ 203.542278][ T5857] Bluetooth: hci3: command tx timeout [ 203.670379][T10068] dvmrp0: entered allmulticast mode [ 203.823632][T10074] netlink: 88 bytes leftover after parsing attributes in process `syz.5.964'. [ 203.971181][T10080] sctp: [Deprecated]: syz.4.966 (pid 10080) Use of int in max_burst socket option. [ 203.971181][T10080] Use struct sctp_assoc_value instead [ 204.053915][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.191333][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.218463][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.225672][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.250926][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.258124][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.423574][ T9942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.456750][ T9942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.496750][ T9942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.545996][ T9942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.897157][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.964421][ T9942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.024719][ T9942] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.077655][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.084856][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.108290][ T9900] veth0_vlan: entered promiscuous mode [ 205.152832][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.160026][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.177897][ T9900] veth1_vlan: entered promiscuous mode [ 205.187280][T10134] netlink: 'syz.5.980': attribute type 1 has an invalid length. [ 205.297634][ T9900] veth0_macvtap: entered promiscuous mode [ 205.341050][ T9900] veth1_macvtap: entered promiscuous mode [ 205.370979][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.410949][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.430637][ T9900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.458380][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.481871][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.490615][ T9900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.632051][ T5857] Bluetooth: hci3: command tx timeout [ 205.795009][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.813358][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.890239][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.935454][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.964793][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.078367][ T9942] veth0_vlan: entered promiscuous mode [ 206.108416][ T9942] veth1_vlan: entered promiscuous mode [ 206.160706][T10166] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 206.286166][T10170] netlink: 'syz.5.990': attribute type 39 has an invalid length. [ 206.339354][ T9942] veth0_macvtap: entered promiscuous mode [ 206.365989][ T9942] veth1_macvtap: entered promiscuous mode [ 206.407224][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.423583][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.450709][ T9942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.477409][ T9942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.492404][ T9942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.512202][ T9942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.708188][ T3550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.964985][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.992247][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.087482][ T3550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.127693][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.177192][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.377982][T10189] netlink: 'syz.5.995': attribute type 21 has an invalid length. [ 207.488022][ T3550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.509815][T10200] __nla_validate_parse: 13 callbacks suppressed [ 207.509833][T10200] netlink: 3 bytes leftover after parsing attributes in process `syz.4.998'. [ 207.566114][T10189] netlink: 156 bytes leftover after parsing attributes in process `syz.5.995'. [ 207.808876][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.999'. [ 207.894485][ T3550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.206140][T10193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.235564][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.248116][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.256638][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.266550][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.277235][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.542798][ T3550] bridge_slave_1: left allmulticast mode [ 208.548525][ T3550] bridge_slave_1: left promiscuous mode [ 208.554796][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.568629][ T3550] bridge_slave_0: left allmulticast mode [ 208.574829][ T3550] bridge_slave_0: left promiscuous mode [ 208.580654][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.945253][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.957251][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.968335][ T3550] bond0 (unregistering): Released all slaves [ 209.166974][T10208] chnl_net:caif_netlink_parms(): no params data found [ 209.392960][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 209.480305][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.511386][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.522837][T10208] bridge_slave_0: entered allmulticast mode [ 209.586073][T10208] bridge_slave_0: entered promiscuous mode [ 209.774454][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.798420][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.822308][T10208] bridge_slave_1: entered allmulticast mode [ 209.874828][T10208] bridge_slave_1: entered promiscuous mode [ 210.000745][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 210.098173][T10245] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 210.107719][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.116843][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.129250][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.138564][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.147919][ T3550] hsr_slave_0: left promiscuous mode [ 210.154466][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.188351][ T3550] hsr_slave_1: left promiscuous mode [ 210.198960][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.215110][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.231304][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.247639][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.325771][ T3550] veth1_macvtap: left promiscuous mode [ 210.342011][ T5863] Bluetooth: hci2: command tx timeout [ 210.354665][ T3550] veth0_macvtap: left promiscuous mode [ 210.360489][ T3550] veth1_vlan: left promiscuous mode [ 210.365982][ T3550] veth0_vlan: left promiscuous mode [ 210.780221][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 210.816297][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 211.213741][T10208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.334532][T10208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.449799][T10208] team0: Port device team_slave_0 added [ 211.472139][T10270] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1013'. [ 211.508463][T10208] team0: Port device team_slave_1 added [ 211.632517][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 211.678568][T10278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1015'. [ 211.718534][T10208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.736968][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.824978][T10208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.875706][T10283] netlink: 'syz.5.1017': attribute type 11 has an invalid length. [ 211.886598][T10208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.899450][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.940564][T10208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.960462][T10285] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 212.011177][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 212.123666][T10208] hsr_slave_0: entered promiscuous mode [ 212.132659][T10208] hsr_slave_1: entered promiscuous mode [ 212.139166][T10208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.149706][T10208] Cannot create hsr debugfs directory [ 212.185512][ T3550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.262312][ T51] Bluetooth: hci3: command tx timeout [ 212.336147][ T3550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.432230][ T51] Bluetooth: hci2: command tx timeout [ 212.486311][ T3550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.514914][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 212.567454][ T3550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.749702][T10246] chnl_net:caif_netlink_parms(): no params data found [ 212.858044][T10301] delete_channel: no stack [ 213.085738][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.102002][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.112888][T10246] bridge_slave_0: entered allmulticast mode [ 213.122353][T10246] bridge_slave_0: entered promiscuous mode [ 213.131531][ T3550] bridge_slave_1: left allmulticast mode [ 213.155637][ T3550] bridge_slave_1: left promiscuous mode [ 213.161381][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.183705][ T3550] bridge_slave_0: left allmulticast mode [ 213.189547][ T3550] bridge_slave_0: left promiscuous mode [ 213.196012][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.602287][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'. [ 213.755686][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.766751][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.777265][ T3550] bond0 (unregistering): Released all slaves [ 213.793544][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.800695][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.810805][T10246] bridge_slave_1: entered allmulticast mode [ 213.821988][T10246] bridge_slave_1: entered promiscuous mode [ 213.910539][T10246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.076090][T10246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.168848][T10347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1033'. [ 214.319609][T10246] team0: Port device team_slave_0 added [ 214.352028][ T51] Bluetooth: hci3: command tx timeout [ 214.360455][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 214.362561][T10246] team0: Port device team_slave_1 added [ 214.376091][T10357] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 214.405309][T10357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.512189][ T51] Bluetooth: hci2: command tx timeout [ 214.607940][T10246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.617057][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.645558][T10246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.658313][T10208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.676530][T10208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.690895][T10208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.724772][T10246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.742566][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.798138][T10246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.824662][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1042'. [ 214.839528][T10375] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 214.847697][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'. [ 214.863601][T10208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.963646][T10375] batadv0: entered promiscuous mode [ 214.969164][T10375] batadv0: entered allmulticast mode [ 214.990372][T10375] bond0: (slave batadv0): Releasing backup interface [ 215.003361][T10375] bridge0: port 2(batadv0) entered blocking state [ 215.010033][T10375] bridge0: port 2(batadv0) entered disabled state [ 215.068320][T10246] hsr_slave_0: entered promiscuous mode [ 215.075443][T10246] hsr_slave_1: entered promiscuous mode [ 215.081599][T10246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.089491][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 215.090245][T10246] Cannot create hsr debugfs directory [ 215.099346][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 215.128932][ T3550] hsr_slave_0: left promiscuous mode [ 215.143348][ T3550] hsr_slave_1: left promiscuous mode [ 215.155829][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.171928][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.190551][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.204221][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.274915][ T3550] veth1_macvtap: left promiscuous mode [ 215.280527][ T3550] veth0_macvtap: left promiscuous mode [ 215.306694][ T3550] veth1_vlan: left promiscuous mode [ 215.317592][ T3550] veth0_vlan: left promiscuous mode [ 215.408856][T10394] IPVS: set_ctl: invalid protocol: 103 172.30.1.1:20002 [ 215.771034][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 215.806524][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 216.244253][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 216.258617][T10400] netlink: 'syz.5.1048': attribute type 39 has an invalid length. [ 216.273195][T10401] netlink: 'syz.4.1047': attribute type 11 has an invalid length. [ 216.422239][ T51] Bluetooth: hci3: command tx timeout [ 216.476492][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 216.582543][ T51] Bluetooth: hci2: command tx timeout [ 216.639124][T10208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.690144][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1053'. [ 216.710402][T10208] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.734763][T10420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.784907][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.792127][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.832784][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.840019][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.872559][T10424] block nbd0: Unsupported socket: shutdown callout must be supported. [ 217.225760][T10432] x_tables: duplicate underflow at hook 1 [ 217.296633][T10246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.346041][T10246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.384356][T10441] netem: change failed [ 217.402208][T10246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.433033][T10246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.578051][T10208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.687713][T10458] netlink: 'syz.0.1062': attribute type 10 has an invalid length. [ 217.711050][T10458] veth0_vlan: entered allmulticast mode [ 217.717731][T10458] veth0_vlan: left promiscuous mode [ 217.728948][T10458] veth0_vlan: entered promiscuous mode [ 217.730830][T10459] netlink: 'syz.5.1064': attribute type 178 has an invalid length. [ 217.753469][T10458] team0: Device veth0_vlan failed to register rx_handler [ 217.789007][T10463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1062'. [ 217.801302][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 217.851141][T10465] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.860813][T10208] veth0_vlan: entered promiscuous mode [ 217.917005][T10208] veth1_vlan: entered promiscuous mode [ 217.959232][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1067'. [ 217.984748][T10469] openvswitch: netlink: IP tunnel TTL not specified. [ 217.992545][T10246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.037777][T10208] veth0_macvtap: entered promiscuous mode [ 218.078391][T10208] veth1_macvtap: entered promiscuous mode [ 218.091125][T10246] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.119773][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.126998][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.149988][T10208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.166321][T10208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.228014][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.235225][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.265261][T10479] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 218.285268][T10208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.311686][T10208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.321287][T10208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.330271][T10208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.350714][T10479] netlink: 'syz.5.1070': attribute type 1 has an invalid length. [ 218.502138][ T51] Bluetooth: hci3: command tx timeout [ 218.611439][T10490] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 218.663988][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.685656][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.732248][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 218.738125][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.757701][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.859630][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'. [ 218.913780][T10498] openvswitch: netlink: Tunnel attr 16369 out of range max 16 [ 219.059661][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 219.140590][T10246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.259349][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 219.310844][T10246] veth0_vlan: entered promiscuous mode [ 219.346551][T10246] veth1_vlan: entered promiscuous mode [ 219.439231][T10246] veth0_macvtap: entered promiscuous mode [ 219.479244][T10246] veth1_macvtap: entered promiscuous mode [ 219.645735][ T998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.673909][T10246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.718630][T10246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.760217][T10246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.776191][T10246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.793551][T10246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.802927][T10246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.905101][ T998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.960328][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.970382][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.000305][ T998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.031566][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.040562][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.074260][ T998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.242742][ T998] bridge_slave_1: left allmulticast mode [ 220.248464][ T998] bridge_slave_1: left promiscuous mode [ 220.254836][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.266643][ T998] bridge_slave_0: left allmulticast mode [ 220.272754][ T998] bridge_slave_0: left promiscuous mode [ 220.278853][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.565226][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1087'. [ 220.879009][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.892622][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.900378][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.914289][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.922105][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.944957][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.958262][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.969062][ T998] bond0 (unregistering): Released all slaves [ 221.719183][ T998] hsr_slave_0: left promiscuous mode [ 221.726031][ T998] hsr_slave_1: left promiscuous mode [ 221.739989][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.750108][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.758061][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.765539][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.785225][ T998] veth1_macvtap: left promiscuous mode [ 221.790794][ T998] veth0_macvtap: left promiscuous mode [ 221.796603][ T998] veth1_vlan: left promiscuous mode [ 221.801942][ T998] veth0_vlan: left promiscuous mode [ 222.148098][ T998] team0 (unregistering): Port device team_slave_1 removed [ 222.181281][ T998] team0 (unregistering): Port device team_slave_0 removed [ 222.512499][T10565] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1095'. [ 222.656273][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 222.915457][T10577] __nla_validate_parse: 2 callbacks suppressed [ 222.915475][T10577] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1097'. [ 222.983499][T10580] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1097'. [ 222.992660][ T5863] Bluetooth: hci2: command tx timeout [ 223.080151][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.081842][T10550] chnl_net:caif_netlink_parms(): no params data found [ 223.122609][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.133213][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.155510][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.168372][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.212661][T10580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.228103][T10580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.245251][T10580] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 223.266304][T10580] bond0 (unregistering): Released all slaves [ 223.303713][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 223.500395][T10600] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1102'. [ 223.646018][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.778607][T10616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1106'. [ 223.892671][T10620] TCP: TCP_TX_DELAY enabled [ 224.018547][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.029731][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.064213][T10550] bridge_slave_0: entered allmulticast mode [ 224.073665][T10550] bridge_slave_0: entered promiscuous mode [ 224.180437][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.247830][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.262784][T10550] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.278336][T10550] bridge_slave_1: entered allmulticast mode [ 224.297194][T10550] bridge_slave_1: entered promiscuous mode [ 224.377711][T10635] Driver unsupported XDP return value 0 on prog (id 353) dev N/A, expect packet loss! [ 224.389834][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.433574][T10640] nbd: must specify an index to disconnect [ 224.450364][T10636] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 224.463965][T10550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.489018][T10550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.594005][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.610247][T10645] netlink: 'syz.0.1113': attribute type 3 has an invalid length. [ 224.671629][T10550] team0: Port device team_slave_0 added [ 224.736316][T10648] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 224.748126][T10648] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1114'. [ 224.754334][T10550] team0: Port device team_slave_1 added [ 224.761549][T10648] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 224.771037][T10648] netlink: 'syz.0.1114': attribute type 2 has an invalid length. [ 224.779157][T10648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1114'. [ 224.913885][T10550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.920956][T10550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.950035][T10550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.964332][T10659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1117'. [ 225.006529][T10550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.013973][T10550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.040365][T10550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.062316][ T51] Bluetooth: hci2: command tx timeout [ 225.161673][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 225.221905][ T51] Bluetooth: hci3: command tx timeout [ 225.342958][T10550] hsr_slave_0: entered promiscuous mode [ 225.349719][T10550] hsr_slave_1: entered promiscuous mode [ 225.362300][T10550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.369915][T10550] Cannot create hsr debugfs directory [ 225.396877][T10677] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 225.428565][T10675] xt_addrtype: ipv6 does not support BROADCAST matching [ 225.453181][T10679] netlink: 'syz.0.1123': attribute type 7 has an invalid length. [ 225.604176][ T64] bridge_slave_1: left allmulticast mode [ 225.609902][ T64] bridge_slave_1: left promiscuous mode [ 225.633356][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.670648][ T64] bridge_slave_0: left allmulticast mode [ 225.679287][ T64] bridge_slave_0: left promiscuous mode [ 225.702981][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.725130][T10688] netlink: 'syz.5.1124': attribute type 1 has an invalid length. [ 226.175693][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.191131][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.203804][ T64] bond0 (unregistering): Released all slaves [ 226.250942][T10586] chnl_net:caif_netlink_parms(): no params data found [ 226.317151][T10687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.361987][T10690] C: renamed from team_slave_0 [ 226.369845][T10690] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 226.380339][T10690] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 226.746657][T10702] bond0: (slave wlan1): Releasing backup interface [ 227.039745][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.076578][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.089530][T10586] bridge_slave_0: entered allmulticast mode [ 227.108546][T10586] bridge_slave_0: entered promiscuous mode [ 227.142165][ T51] Bluetooth: hci2: command tx timeout [ 227.263985][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.291611][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.302139][ T51] Bluetooth: hci3: command tx timeout [ 227.312567][T10586] bridge_slave_1: entered allmulticast mode [ 227.322928][T10586] bridge_slave_1: entered promiscuous mode [ 227.425904][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.441262][ T64] hsr_slave_0: left promiscuous mode [ 227.455563][ T64] hsr_slave_1: left promiscuous mode [ 227.462397][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.463257][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 227.469973][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.487115][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.494698][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.523247][ T64] veth1_macvtap: left promiscuous mode [ 227.524265][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1137'. [ 227.528993][ T64] veth0_macvtap: left promiscuous mode [ 227.544179][ T64] veth1_vlan: left promiscuous mode [ 227.549554][ T64] veth0_vlan: left promiscuous mode [ 227.979264][ T64] team0 (unregistering): Port device team_slave_1 removed [ 228.021968][ T64] team0 (unregistering): Port device team_slave_0 removed [ 228.376111][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.522029][T10586] team0: Port device team_slave_0 added [ 228.531479][T10586] team0: Port device team_slave_1 added [ 228.667962][T10744] netlink: 'syz.0.1140': attribute type 83 has an invalid length. [ 228.690013][T10744] netlink: 'syz.0.1140': attribute type 83 has an invalid length. [ 228.717642][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.719490][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 228.745001][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.772621][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.792390][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.799436][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.827204][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.866026][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 229.057383][T10586] hsr_slave_0: entered promiscuous mode [ 229.080051][T10586] hsr_slave_1: entered promiscuous mode [ 229.097435][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.115498][T10586] Cannot create hsr debugfs directory [ 229.222301][ T51] Bluetooth: hci2: command tx timeout [ 229.307802][T10550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.349709][T10550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.374207][T10550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.382402][ T51] Bluetooth: hci3: command tx timeout [ 229.425006][T10550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.514700][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1152'. [ 229.631080][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 229.793728][T10550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.847461][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.864866][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.872077][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.890473][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.897684][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.009375][T10803] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1158'. [ 230.145752][T10586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.196257][T10586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.229008][T10586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.259131][T10586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.416147][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 230.536234][T10550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.551418][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.593750][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.618991][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.626153][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.648099][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.655248][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.672265][T10550] veth0_vlan: entered promiscuous mode [ 230.705097][T10550] veth1_vlan: entered promiscuous mode [ 230.766893][T10550] veth0_macvtap: entered promiscuous mode [ 230.792824][T10550] veth1_macvtap: entered promiscuous mode [ 230.831517][T10550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.849559][T10550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.869390][T10550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.887924][T10550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.897741][T10550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.906940][T10550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.034587][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.051351][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.091585][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.096706][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.111622][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.215205][T10586] veth0_vlan: entered promiscuous mode [ 231.240211][T10836] validate_nla: 65 callbacks suppressed [ 231.240229][T10836] netlink: 'syz.0.1165': attribute type 58 has an invalid length. [ 231.258498][T10586] veth1_vlan: entered promiscuous mode [ 231.291568][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1165'. [ 231.434742][T10586] veth0_macvtap: entered promiscuous mode [ 231.459879][T10586] veth1_macvtap: entered promiscuous mode [ 231.466214][ T51] Bluetooth: hci3: command tx timeout [ 231.538173][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.623680][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.650229][T10586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.662634][T10586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.671425][T10586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.690774][T10586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.914853][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.929066][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.027433][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.075606][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.404111][T10886] veth1_macvtap: left promiscuous mode [ 232.409654][T10886] macsec0: entered promiscuous mode [ 232.420042][T10886] macsec0: entered allmulticast mode [ 232.443618][T10886] veth1_macvtap: entered promiscuous mode [ 232.455825][T10886] veth1_macvtap: entered allmulticast mode [ 232.466168][T10886] macsec0: left promiscuous mode [ 232.479442][T10886] macsec0: left allmulticast mode [ 232.486026][T10886] veth1_macvtap: left allmulticast mode [ 232.520288][T10893] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073625665544) [ 232.537749][T10893] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 232.707559][ T3550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.432232][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 233.441380][T10905] netlink: zone id is out of range [ 233.450270][T10905] netlink: zone id is out of range [ 233.472860][T10905] netlink: zone id is out of range [ 233.478206][ T3550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.479506][T10905] netlink: zone id is out of range [ 233.509370][T10905] netlink: zone id is out of range [ 233.517079][T10905] netlink: zone id is out of range [ 233.527383][T10905] netlink: zone id is out of range [ 233.533767][T10905] netlink: zone id is out of range [ 233.539140][T10905] netlink: zone id is out of range [ 233.569256][T10905] netlink: zone id is out of range [ 233.742643][ T3550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.846897][ T3550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.989596][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.001005][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.010785][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.018823][ T3550] bridge_slave_1: left allmulticast mode [ 234.023386][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.025325][ T3550] bridge_slave_1: left promiscuous mode [ 234.034811][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.037495][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.058936][ T3550] bridge_slave_0: left allmulticast mode [ 234.064967][ T3550] bridge_slave_0: left promiscuous mode [ 234.070706][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.356947][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.368428][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.379438][ T3550] bond0 (unregistering): Released all slaves [ 234.829550][ T3550] hsr_slave_0: left promiscuous mode [ 234.838615][ T3550] hsr_slave_1: left promiscuous mode [ 234.844765][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.853483][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.861303][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.868764][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.888288][ T3550] veth1_macvtap: left promiscuous mode [ 234.893850][ T3550] veth0_macvtap: left promiscuous mode [ 234.899435][ T3550] veth1_vlan: left promiscuous mode [ 234.905583][ T3550] veth0_vlan: left promiscuous mode [ 235.030537][T10917] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1188'. [ 235.053867][T10920] IPVS: length: 126 != 8 [ 235.073853][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 235.085315][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1189'. [ 235.123205][T10921] xt_NFQUEUE: number of total queues is 0 [ 235.390977][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.408051][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.425660][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.435446][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.448735][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.530887][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 235.567115][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 236.075403][T10933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1193'. [ 236.102969][ T5863] Bluetooth: hci2: command tx timeout [ 236.199880][T10910] chnl_net:caif_netlink_parms(): no params data found [ 237.219754][T10958] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1201'. [ 237.308638][T10956] veth0: entered promiscuous mode [ 237.365203][T10955] veth0: left promiscuous mode [ 237.531420][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.542445][ T5863] Bluetooth: hci3: command tx timeout [ 237.549261][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.560654][T10910] bridge_slave_0: entered allmulticast mode [ 237.599823][T10910] bridge_slave_0: entered promiscuous mode [ 237.627424][T10975] netlink: 'syz.4.1204': attribute type 13 has an invalid length. [ 237.628882][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.646450][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.657513][T10910] bridge_slave_1: entered allmulticast mode [ 237.669242][T10910] bridge_slave_1: entered promiscuous mode [ 237.720073][T10979] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1206'. [ 237.758902][T10910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.778004][T10910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.844126][T10910] team0: Port device team_slave_0 added [ 237.887057][T10910] team0: Port device team_slave_1 added [ 237.965049][T10984] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 237.977253][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'. [ 238.027018][T10910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.035744][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.071835][T10910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.138129][T10910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.161960][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.163534][T10989] x_tables: duplicate underflow at hook 1 [ 238.208703][ T5863] Bluetooth: hci2: command tx timeout [ 238.218241][T10989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1208'. [ 238.232859][T10910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.363550][ T3440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.400630][T10922] chnl_net:caif_netlink_parms(): no params data found [ 238.442280][T10997] tipc: Enabling not permitted [ 238.447988][T10997] tipc: Enabling of bearer rejected, failed to enable media [ 238.520009][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 238.529414][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 238.552264][ T3440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.662447][ T3440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.756018][T10910] hsr_slave_0: entered promiscuous mode [ 238.763720][T10910] hsr_slave_1: entered promiscuous mode [ 238.770167][T10910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.778293][T10910] Cannot create hsr debugfs directory [ 238.952551][ T3440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.099464][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.122715][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.140454][T10922] bridge_slave_0: entered allmulticast mode [ 239.156295][T10922] bridge_slave_0: entered promiscuous mode [ 239.190089][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.198366][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.205909][T10922] bridge_slave_1: entered allmulticast mode [ 239.215797][T10922] bridge_slave_1: entered promiscuous mode [ 239.335897][T10922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.394425][T10922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.626966][ T5863] Bluetooth: hci3: command tx timeout [ 239.709590][T10922] team0: Port device team_slave_0 added [ 239.726314][T10922] team0: Port device team_slave_1 added [ 239.840657][T10922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.870513][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.897103][T10922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.920147][T11041] netlink: 'syz.5.1221': attribute type 5 has an invalid length. [ 239.928568][T11042] netlink: 'syz.5.1221': attribute type 5 has an invalid length. [ 239.942649][T10922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.961937][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.988152][T10922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.010166][ T3440] bridge_slave_1: left allmulticast mode [ 240.019578][ T3440] bridge_slave_1: left promiscuous mode [ 240.025727][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.041437][ T3440] bridge_slave_0: left allmulticast mode [ 240.064995][ T3440] bridge_slave_0: left promiscuous mode [ 240.070779][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.263159][ T51] Bluetooth: hci2: command tx timeout [ 240.417971][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.436512][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.447756][ T3440] bond0 (unregistering): Released all slaves [ 240.746785][T10922] hsr_slave_0: entered promiscuous mode [ 240.760846][T10922] hsr_slave_1: entered promiscuous mode [ 240.770520][T10922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.779261][T10922] Cannot create hsr debugfs directory [ 240.860674][T11070] __nla_validate_parse: 2 callbacks suppressed [ 240.860694][T11070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1230'. [ 241.465200][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 241.483091][ T3440] hsr_slave_0: left promiscuous mode [ 241.499360][ T3440] hsr_slave_1: left promiscuous mode [ 241.508157][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.509470][T11097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1237'. [ 241.516088][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.547092][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.557222][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.579929][ T3440] veth1_macvtap: left promiscuous mode [ 241.586697][ T3440] veth0_macvtap: left promiscuous mode [ 241.592459][ T3440] veth1_vlan: left promiscuous mode [ 241.597936][ T3440] veth0_vlan: left promiscuous mode [ 241.702132][ T51] Bluetooth: hci3: command tx timeout [ 242.004308][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 242.043984][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 242.345212][ T51] Bluetooth: hci2: command tx timeout [ 242.538278][T11110] net_ratelimit: 394 callbacks suppressed [ 242.538298][T11110] openvswitch: netlink: IP tunnel TTL not specified. [ 242.566861][T11110] xt_cgroup: invalid path, errno=-2 [ 242.609468][T10910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.621246][T11108] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1241'. [ 242.639395][T10910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.666435][T11110] gtp0: entered promiscuous mode [ 242.672461][T11108] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 242.678226][T11110] gtp0: entered allmulticast mode [ 242.704364][T11117] ip6gre1: entered promiscuous mode [ 242.725485][T10910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.783627][T10910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.143527][T11149] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 243.203039][T10910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.225305][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 243.276024][T10910] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.344659][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 243.345789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.360713][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.404500][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.411759][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.447178][T10922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.490381][T11158] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 243.498664][T11158] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1254'. [ 243.526044][T10922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.532985][T11159] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 243.547594][T11159] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1254'. [ 243.570566][T10922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.600481][T10922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.783326][ T51] Bluetooth: hci3: command tx timeout [ 243.825101][T11174] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'. [ 243.838225][T11171] lo: entered promiscuous mode [ 243.862065][T11171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.880247][T11177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'. [ 243.983834][T10922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.037740][T10922] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.101591][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.108783][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.150887][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.158106][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.180960][T11188] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 244.394934][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.607311][T10910] veth0_vlan: entered promiscuous mode [ 244.663797][T10910] veth1_vlan: entered promiscuous mode [ 244.772990][T10910] veth0_macvtap: entered promiscuous mode [ 244.816951][T10910] veth1_macvtap: entered promiscuous mode [ 244.854760][T11207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.859430][T10910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.876304][T10910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.889162][T10910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.899889][T10910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.909259][T10910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.931752][T10910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.019194][T10922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.184896][T11217] netlink: 'syz.5.1270': attribute type 5 has an invalid length. [ 245.210814][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.236672][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.263226][T10922] veth0_vlan: entered promiscuous mode [ 245.311429][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.311502][T10922] veth1_vlan: entered promiscuous mode [ 245.341981][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.420602][T10922] veth0_macvtap: entered promiscuous mode [ 245.444491][T10922] veth1_macvtap: entered promiscuous mode [ 245.474143][T11223] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 245.505506][T10922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.607004][T10922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.657994][T10922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.673425][T10922] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.683797][T10922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.694010][T10922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.851212][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.865719][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.930178][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.953286][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.997265][T11241] netlink: 'syz.4.1279': attribute type 17 has an invalid length. [ 246.305823][ T3501] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.421583][ T3501] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.626336][ T3501] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.893946][ T3501] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.215970][ T3501] bridge_slave_1: left allmulticast mode [ 247.227745][ T3501] bridge_slave_1: left promiscuous mode [ 247.236766][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.246614][ T3501] bridge_slave_0: left allmulticast mode [ 247.256207][ T3501] bridge_slave_0: left promiscuous mode [ 247.264023][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.298262][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.307216][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.317776][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.327220][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.335531][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.576284][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.587107][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.599437][ T3501] bond0 (unregistering): Released all slaves [ 248.026656][ T3501] hsr_slave_0: left promiscuous mode [ 248.032844][ T3501] hsr_slave_1: left promiscuous mode [ 248.039320][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.046950][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.057876][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.065415][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.084393][ T3501] veth1_macvtap: left promiscuous mode [ 248.089914][ T3501] veth0_macvtap: left promiscuous mode [ 248.095733][ T3501] veth1_vlan: left promiscuous mode [ 248.101045][ T3501] veth0_vlan: left promiscuous mode [ 248.475443][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.487977][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.499486][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.512133][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.522656][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.869938][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 248.909181][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 249.250980][T11266] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 249.401788][ T51] Bluetooth: hci2: command tx timeout [ 249.444516][T11273] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.492539][T11278] __nla_validate_parse: 8 callbacks suppressed [ 249.492557][T11278] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1291'. [ 249.528863][T11253] chnl_net:caif_netlink_parms(): no params data found [ 249.588994][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1292'. [ 249.676602][T11286] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.870711][T11293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1295'. [ 249.896855][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.909249][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.916887][T11253] bridge_slave_0: entered allmulticast mode [ 249.925129][T11253] bridge_slave_0: entered promiscuous mode [ 249.951320][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.959455][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.967048][T11253] bridge_slave_1: entered allmulticast mode [ 249.975717][T11253] bridge_slave_1: entered promiscuous mode [ 250.078014][T11253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.138862][ T3501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.162903][T11253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.292429][ T3501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.312222][T11253] team0: Port device team_slave_0 added [ 250.333723][T11253] team0: Port device team_slave_1 added [ 250.471207][ T3501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.487360][T11253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.495336][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.522630][T11253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.539927][T11253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.547019][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.573484][T11253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.584850][ T5863] Bluetooth: hci3: command tx timeout [ 250.804893][ T3501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.990550][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 251.117349][T11253] hsr_slave_0: entered promiscuous mode [ 251.124060][T11253] hsr_slave_1: entered promiscuous mode [ 251.130784][T11253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.146885][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 251.147241][T11253] Cannot create hsr debugfs directory [ 251.156790][T11338] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1309'. [ 251.289846][T11269] chnl_net:caif_netlink_parms(): no params data found [ 251.326243][T11346] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 251.417768][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 251.461813][ T5863] Bluetooth: hci2: command tx timeout [ 251.522123][T11347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.531266][T11347] bond4: (slave bond5): making interface the new active one [ 251.539552][T11347] bond4: (slave bond5): Enslaving as an active interface with an up link [ 251.609241][T11359] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 251.678882][ T3501] bridge_slave_1: left allmulticast mode [ 251.688073][ T3501] bridge_slave_1: left promiscuous mode [ 251.696448][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.706544][ T3501] bridge_slave_0: left allmulticast mode [ 251.712717][ T3501] bridge_slave_0: left promiscuous mode [ 251.718669][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.740241][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 252.066793][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.078256][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.088597][ T3501] bond0 (unregistering): Released all slaves [ 252.235117][T11269] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.251970][T11269] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.259235][T11269] bridge_slave_0: entered allmulticast mode [ 252.273804][T11269] bridge_slave_0: entered promiscuous mode [ 252.324554][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.335351][T11269] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.348595][T11269] bridge_slave_1: entered allmulticast mode [ 252.365142][T11269] bridge_slave_1: entered promiscuous mode [ 252.451481][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1320'. [ 252.661963][ T5863] Bluetooth: hci3: command 0x041b tx timeout [ 252.730389][T11269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.788338][T11403] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 252.844557][T11269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.900529][T11406] gretap0: left promiscuous mode [ 252.915826][T11406] sit0: left promiscuous mode [ 253.019928][T11406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.185035][T11421] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1329'. [ 253.199117][ T3501] hsr_slave_0: left promiscuous mode [ 253.210747][ T3501] hsr_slave_1: left promiscuous mode [ 253.222733][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.234958][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.257788][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.270183][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.301658][ T3501] veth1_macvtap: left promiscuous mode [ 253.307625][ T3501] veth0_macvtap: left promiscuous mode [ 253.313709][ T3501] veth1_vlan: left promiscuous mode [ 253.319105][ T3501] veth0_vlan: left promiscuous mode [ 253.542948][ T51] Bluetooth: hci2: command tx timeout [ 253.777348][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 253.815527][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 254.154759][T11269] team0: Port device team_slave_0 added [ 254.174507][T11269] team0: Port device team_slave_1 added [ 254.350555][T11269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.359573][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.408467][T11269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.424787][T11437] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 254.446593][T11269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.454164][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.485984][T11269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.505748][T11441] dvmrp1: entered allmulticast mode [ 254.636590][T11443] tipc: Enabled bearer , priority 10 [ 254.663098][T11269] hsr_slave_0: entered promiscuous mode [ 254.670247][T11269] hsr_slave_1: entered promiscuous mode [ 254.681493][T11269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.689798][T11269] Cannot create hsr debugfs directory [ 254.743802][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 254.897737][T11453] netlink: 'syz.5.1341': attribute type 1 has an invalid length. [ 254.958787][T11253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.976510][T11455] __nla_validate_parse: 3 callbacks suppressed [ 254.976529][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1343'. [ 255.021259][T11253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.076194][T11253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.099011][T11253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.480936][T11482] netlink: 'syz.0.1349': attribute type 8 has an invalid length. [ 255.484495][T11253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.500670][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 255.548245][T11253] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.585887][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.593092][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.627471][ T51] Bluetooth: hci2: command tx timeout [ 255.633255][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.666331][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.673553][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.804340][T11493] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 255.897910][T11269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.930230][T11269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.957384][T11269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.007325][T11269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.038906][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1354'. [ 256.071984][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1354'. [ 256.116890][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1354'. [ 256.165918][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1354'. [ 256.269709][T11269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.311641][T11269] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.351152][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.358374][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.393818][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.401039][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.429934][T11523] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 256.495234][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.686079][T11253] veth0_vlan: entered promiscuous mode [ 256.713071][T11537] syzkaller1: entered promiscuous mode [ 256.722243][T11537] syzkaller1: entered allmulticast mode [ 256.744304][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1359'. [ 256.760312][T11540] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.800760][T11269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.808498][T11253] veth1_vlan: entered promiscuous mode [ 256.821991][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 256.878271][T11253] veth0_macvtap: entered promiscuous mode [ 256.934294][T11253] veth1_macvtap: entered promiscuous mode [ 256.955363][T11269] veth0_vlan: entered promiscuous mode [ 256.989870][T11269] veth1_vlan: entered promiscuous mode [ 257.036472][T11253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.077588][T11253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.103211][T11253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.121833][T11253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.136040][T11253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.146247][T11253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.167241][T11269] veth0_macvtap: entered promiscuous mode [ 257.228400][T11269] veth1_macvtap: entered promiscuous mode [ 257.295244][T11269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.330238][T11269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.384354][T11269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.386459][T11550] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 257.406282][T11269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.417520][T11269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.440194][T11269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.469357][T11552] syz_tun: entered promiscuous mode [ 257.475117][T11552] syz_tun: entered allmulticast mode [ 257.501173][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.513401][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.595244][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.607483][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.720427][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.751203][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.854778][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.878434][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.042373][T11567] netlink: 'syz.0.1369': attribute type 2 has an invalid length. [ 258.058217][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 258.408833][ T998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.504488][ T998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.649061][ T998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.716823][ T998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.945518][ T998] bridge_slave_1: left allmulticast mode [ 258.951214][ T998] bridge_slave_1: left promiscuous mode [ 258.957209][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.967277][ T998] bridge_slave_0: left allmulticast mode [ 258.973715][ T998] bridge_slave_0: left promiscuous mode [ 258.979526][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.330916][T11589] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1376'. [ 259.362032][T11589] netlink: 'syz.5.1376': attribute type 9 has an invalid length. [ 259.545584][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.566730][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.579745][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.588578][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.597689][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.606026][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.615002][ T998] bond0 (unregistering): Released all slaves [ 259.621986][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.648206][T11592] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 260.121531][ T998] hsr_slave_0: left promiscuous mode [ 260.128695][ T998] hsr_slave_1: left promiscuous mode [ 260.134914][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.142379][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.150201][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.157787][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.178432][ T998] veth1_macvtap: left promiscuous mode [ 260.184242][ T998] veth0_macvtap: left promiscuous mode [ 260.189930][ T998] veth1_vlan: left promiscuous mode [ 260.195417][ T998] veth0_vlan: left promiscuous mode [ 260.484567][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.522363][T11601] x_tables: duplicate underflow at hook 1 [ 260.765056][ T998] team0 (unregistering): Port device team_slave_1 removed [ 260.818952][ T998] team0 (unregistering): Port device team_slave_0 removed [ 260.832195][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.845694][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.857429][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.870446][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.884755][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.177398][T11607] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.1380'. [ 261.363950][T11590] chnl_net:caif_netlink_parms(): no params data found [ 261.517060][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 261.526296][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.663207][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.702781][ T5863] Bluetooth: hci2: command tx timeout [ 261.720304][T11628] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1386'. [ 261.788120][T11633] netlink: 'syz.5.1384': attribute type 4 has an invalid length. [ 261.888663][T11590] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.902816][T11590] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.910025][T11590] bridge_slave_0: entered allmulticast mode [ 261.919344][T11590] bridge_slave_0: entered promiscuous mode [ 261.929389][T11590] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.936668][T11590] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.944190][T11590] bridge_slave_1: entered allmulticast mode [ 261.951539][T11590] bridge_slave_1: entered promiscuous mode [ 261.970328][T11637] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 262.048350][T11590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.075604][T11590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.321365][T11590] team0: Port device team_slave_0 added [ 262.465336][ T998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.496121][T11590] team0: Port device team_slave_1 added [ 262.507173][T11662] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 262.590770][ T998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.645551][T11608] chnl_net:caif_netlink_parms(): no params data found [ 262.689769][T11672] IPv6: sit2: Disabled Multicast RS [ 262.717530][T11590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.725276][T11590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.757122][T11590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.770030][T11590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.780873][T11590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.816764][T11590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.841200][ T998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.895806][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 262.912880][ T5863] Bluetooth: hci3: command tx timeout [ 262.927020][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 262.944744][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 262.959546][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 262.989841][T11683] netlink: 'syz.5.1399': attribute type 25 has an invalid length. [ 263.027861][ T998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.048685][T11677] bridge0: port 3(vlan2) entered blocking state [ 263.055418][T11677] bridge0: port 3(vlan2) entered disabled state [ 263.063788][T11677] vlan2: entered allmulticast mode [ 263.069049][T11677] bridge0: entered allmulticast mode [ 263.079672][T11677] vlan2: left allmulticast mode [ 263.084842][T11677] bridge0: left allmulticast mode [ 263.106472][T11678] bridge0: port 3(vlan2) entered blocking state [ 263.113907][T11678] bridge0: port 3(vlan2) entered disabled state [ 263.120326][T11678] vlan2: entered allmulticast mode [ 263.129020][T11678] bridge0: entered allmulticast mode [ 263.138050][T11678] vlan2: left allmulticast mode [ 263.145451][T11678] bridge0: left allmulticast mode [ 263.155723][T11684] dvmrp1: left allmulticast mode [ 263.180384][T11590] hsr_slave_0: entered promiscuous mode [ 263.186931][T11590] hsr_slave_1: entered promiscuous mode [ 263.194979][T11590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.202714][T11590] Cannot create hsr debugfs directory [ 263.387787][T11608] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.414539][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.428452][T11608] bridge_slave_0: entered allmulticast mode [ 263.437633][T11608] bridge_slave_0: entered promiscuous mode [ 263.487095][T11699] xt_ecn: cannot match TCP bits for non-tcp packets [ 263.517976][T11608] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.533830][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.541026][T11608] bridge_slave_1: entered allmulticast mode [ 263.564904][T11608] bridge_slave_1: entered promiscuous mode [ 263.606587][T11702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1401'. [ 263.623928][T11702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1401'. [ 263.638023][T11701] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1401'. [ 263.756769][T11608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.781416][T11713] dvmrp0: entered allmulticast mode [ 263.787287][ T5863] Bluetooth: hci2: command tx timeout [ 263.822361][T11714] dvmrp0: left allmulticast mode [ 263.860172][T11608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.030405][T11608] team0: Port device team_slave_0 added [ 264.055652][T11608] team0: Port device team_slave_1 added [ 264.074207][ T998] bridge_slave_1: left allmulticast mode [ 264.079890][ T998] bridge_slave_1: left promiscuous mode [ 264.089144][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.118413][ T998] bridge_slave_0: left allmulticast mode [ 264.125911][ T998] bridge_slave_0: left promiscuous mode [ 264.132911][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.475146][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.489601][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.500335][ T998] bond0 (unregistering): Released all slaves [ 264.735138][T11608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.747559][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.803818][T11608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.954576][T11608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.961572][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.993858][ T5863] Bluetooth: hci3: command tx timeout [ 265.017849][T11608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.263965][T11777] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 265.281664][T11777] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 265.432278][T11608] hsr_slave_0: entered promiscuous mode [ 265.455063][T11608] hsr_slave_1: entered promiscuous mode [ 265.467921][T11608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.492047][T11608] Cannot create hsr debugfs directory [ 265.535769][ T998] hsr_slave_0: left promiscuous mode [ 265.555559][ T998] hsr_slave_1: left promiscuous mode [ 265.567812][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.591473][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.605610][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.614507][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.670914][ T998] veth1_macvtap: left promiscuous mode [ 265.680717][ T998] veth0_macvtap: left promiscuous mode [ 265.700543][ T998] veth1_vlan: left promiscuous mode [ 265.706022][ T998] veth0_vlan: left promiscuous mode [ 265.863861][ T5863] Bluetooth: hci2: command tx timeout [ 266.187259][ T998] team0 (unregistering): Port device team_slave_1 removed [ 266.225662][ T998] team0 (unregistering): Port device team_slave_0 removed [ 266.922444][T11814] __nla_validate_parse: 6 callbacks suppressed [ 266.922462][T11814] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1432'. [ 267.062907][ T5863] Bluetooth: hci3: command tx timeout [ 267.222807][T11590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.238746][T11590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.257779][T11590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.297306][T11590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.594623][T11837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1438'. [ 267.649108][T11837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1438'. [ 267.847434][T11590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.913575][T11608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.931313][T11590] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.942296][ T5863] Bluetooth: hci2: command tx timeout [ 267.957424][T11608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.992129][T11608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.035947][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.043142][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.061170][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.068380][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.080983][T11847] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1441'. [ 268.101970][T11608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.118398][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1441'. [ 268.510212][T11608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.609913][T11882] netlink: 'syz.5.1450': attribute type 1 has an invalid length. [ 268.633937][T11608] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.737411][T11892] bond0: (slave bridge4): making interface the new active one [ 268.748625][T11892] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 268.771305][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.778503][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.827300][T11590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.860452][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.867672][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.991050][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 269.141883][ T5863] Bluetooth: hci3: command tx timeout [ 269.186536][T11590] veth0_vlan: entered promiscuous mode [ 269.244470][T11590] veth1_vlan: entered promiscuous mode [ 269.370082][T11590] veth0_macvtap: entered promiscuous mode [ 269.405351][T11590] veth1_macvtap: entered promiscuous mode [ 269.532151][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1457'. [ 269.739378][T11590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.843645][T11590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.888444][T11590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.908704][T11590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.923921][T11590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.933956][T11590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.990886][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.286473][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.301746][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.352347][T11608] veth0_vlan: entered promiscuous mode [ 270.389331][T11608] veth1_vlan: entered promiscuous mode [ 270.406192][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.422872][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.517759][T11608] veth0_macvtap: entered promiscuous mode [ 270.525210][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 270.566042][T11608] veth1_macvtap: entered promiscuous mode [ 270.580278][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1470'. [ 270.609260][T11982] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.615663][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1470'. [ 270.660919][T11982] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.689855][T11608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.710708][T11608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.756790][T11982] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.780149][T11982] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.816259][T11608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.840799][T11608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.856913][T11608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.866189][T11608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.997810][T11996] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1477'. [ 271.024473][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.105049][T11998] tipc: Enabling of bearer rejected, already enabled [ 271.184185][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.338001][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.378394][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.401779][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.437818][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.449223][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.525105][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.699612][ T64] bridge_slave_1: left allmulticast mode [ 271.705858][ T64] bridge_slave_1: left promiscuous mode [ 271.711586][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.722780][ T64] bridge_slave_0: left allmulticast mode [ 271.728454][ T64] bridge_slave_0: left promiscuous mode [ 271.734664][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.121260][T12004] __nla_validate_parse: 1 callbacks suppressed [ 272.121278][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 272.165665][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.174918][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 272.200365][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 272.224803][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.234077][T12011] netlink: 'syz.5.1481': attribute type 30 has an invalid length. [ 272.263605][ T64] bond0 (unregistering): Released all slaves [ 272.320989][T12011] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.330589][T12011] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.340209][T12011] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.349870][T12011] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.394665][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 272.403740][T12011] netlink: 'syz.5.1481': attribute type 30 has an invalid length. [ 272.564909][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.580798][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.592002][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.600414][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.610628][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.664151][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.012097][ T64] hsr_slave_0: left promiscuous mode [ 273.018010][ T64] hsr_slave_1: left promiscuous mode [ 273.025033][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.034389][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.043500][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.050913][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.072217][ T64] veth1_macvtap: left promiscuous mode [ 273.077764][ T64] veth0_macvtap: left promiscuous mode [ 273.083624][ T64] veth1_vlan: left promiscuous mode [ 273.088917][ T64] veth0_vlan: left promiscuous mode [ 273.517610][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 273.566564][ T64] team0 (unregistering): Port device team_slave_1 removed [ 273.617109][ T64] team0 (unregistering): Port device team_slave_0 removed [ 273.782320][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.791681][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.811542][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.826429][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.843432][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.278724][T12012] chnl_net:caif_netlink_parms(): no params data found [ 274.466886][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 274.529515][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 274.663131][ T5863] Bluetooth: hci2: command tx timeout [ 274.670039][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.689622][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.714144][T12012] bridge_slave_0: entered allmulticast mode [ 274.722788][T12012] bridge_slave_0: entered promiscuous mode [ 274.734484][T12012] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.747551][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.755878][T12012] bridge_slave_1: entered allmulticast mode [ 274.763254][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1494'. [ 274.774078][T12012] bridge_slave_1: entered promiscuous mode [ 274.880223][T12012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.920317][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 274.932913][T12012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.035486][T12012] team0: Port device team_slave_0 added [ 275.052832][T12069] Bluetooth: MGMT ver 1.23 [ 275.159818][ T3550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.195690][T12012] team0: Port device team_slave_1 added [ 275.296267][ T3550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.436834][ T3550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.497314][T12012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.504861][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.535569][T12012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.550870][T12012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.561671][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.594217][T12012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.647830][ T3550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.840381][T12012] hsr_slave_0: entered promiscuous mode [ 275.859811][T12012] hsr_slave_1: entered promiscuous mode [ 275.870054][T12012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.878290][T12012] Cannot create hsr debugfs directory [ 275.887330][T12097] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.905906][T12028] chnl_net:caif_netlink_parms(): no params data found [ 275.942045][ T5863] Bluetooth: hci3: command tx timeout [ 276.148751][T12106] tipc: Enabled bearer , priority 0 [ 276.206333][T12116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.216610][T12106] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 276.224470][T12106] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 276.260811][ T3550] bridge_slave_1: left allmulticast mode [ 276.270574][ T3550] bridge_slave_1: left promiscuous mode [ 276.279433][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.289068][ T3550] bridge_slave_0: left allmulticast mode [ 276.295578][ T3550] bridge_slave_0: left promiscuous mode [ 276.303192][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.605775][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.618215][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.631316][ T3550] bond0 (unregistering): Released all slaves [ 276.666580][T12122] tipc: Resetting bearer [ 276.745881][ T5863] Bluetooth: hci2: command tx timeout [ 276.897454][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.906838][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.918744][T12028] bridge_slave_0: entered allmulticast mode [ 276.928529][T12028] bridge_slave_0: entered promiscuous mode [ 276.937265][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.945552][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.952924][T12028] bridge_slave_1: entered allmulticast mode [ 276.960281][T12028] bridge_slave_1: entered promiscuous mode [ 277.120451][T12137] netlink: 'syz.4.1515': attribute type 18 has an invalid length. [ 277.139552][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.174704][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.241994][ T7342] tipc: Node number set to 2823274276 [ 277.288669][T12141] netlink: 'syz.4.1517': attribute type 4 has an invalid length. [ 277.337571][T12028] team0: Port device team_slave_0 added [ 277.383015][T12028] team0: Port device team_slave_1 added [ 277.498054][ T3550] hsr_slave_0: left promiscuous mode [ 277.508789][ T3550] hsr_slave_1: left promiscuous mode [ 277.515883][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.526563][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.536259][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.560058][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.600621][ T3550] veth1_macvtap: left promiscuous mode [ 277.610749][ T3550] veth0_macvtap: left promiscuous mode [ 277.616865][ T3550] veth1_vlan: left promiscuous mode [ 277.622392][ T3550] veth0_vlan: left promiscuous mode [ 278.025441][ T5857] Bluetooth: hci3: command 0x041b tx timeout [ 278.059420][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 278.106692][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 278.528912][T12168] netlink: 'syz.0.1523': attribute type 11 has an invalid length. [ 278.651553][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.659231][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.685849][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.722296][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.741868][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.773462][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.824258][ T51] Bluetooth: hci2: command tx timeout [ 278.978705][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1526'. [ 279.002186][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 279.015162][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1526'. [ 279.034841][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 279.046310][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 279.080007][T12028] hsr_slave_0: entered promiscuous mode [ 279.088691][T12028] hsr_slave_1: entered promiscuous mode [ 279.098725][T12028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.107407][T12028] Cannot create hsr debugfs directory [ 279.113672][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 279.182744][T12181] veth5: entered allmulticast mode [ 279.266619][T12181] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 279.282492][T12181] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 279.411323][T12201] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1530'. [ 279.440724][T12012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.481328][T12012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.510974][T12012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.581566][T12012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.655462][T12213] netlink: 'syz.4.1535': attribute type 13 has an invalid length. [ 279.684621][T12213] veth0_macvtap: left promiscuous mode [ 279.700289][T12213] macvtap0: entered allmulticast mode [ 279.709683][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1535'. [ 279.712834][T12213] macvtap0: refused to change device tx_queue_len [ 279.750889][T12211] wg2: entered promiscuous mode [ 279.756876][T12211] wg2: entered allmulticast mode [ 279.767219][T12213] sctp: [Deprecated]: syz.4.1535 (pid 12213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.767219][T12213] Use struct sctp_sack_info instead [ 280.102164][ T5863] Bluetooth: hci3: command 0x041b tx timeout [ 280.238326][T12012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.300756][T12012] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.347911][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.355149][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.399491][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.406693][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.507415][T12028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.565613][T12028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.581945][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 280.591668][T12012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.621176][T12028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.647806][T12028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.775781][ T5937] IPVS: starting estimator thread 0... [ 280.781517][T12247] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.881901][T12250] IPVS: using max 29 ests per chain, 69600 per kthread [ 280.884395][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.902075][ T5863] Bluetooth: hci2: command tx timeout [ 280.933787][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.950893][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.958113][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.998063][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.005247][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.048517][T12012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.157272][T12012] veth0_vlan: entered promiscuous mode [ 281.175892][T12012] veth1_vlan: entered promiscuous mode [ 281.248139][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1544'. [ 281.262827][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1544'. [ 281.274619][T12012] veth0_macvtap: entered promiscuous mode [ 281.288118][T12012] veth1_macvtap: entered promiscuous mode [ 281.360344][T12012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.397838][T12012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.434894][T12012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.451899][T12012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.460633][T12012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.480097][T12012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.550355][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.712397][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.738241][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.813585][T12028] veth0_vlan: entered promiscuous mode [ 281.843572][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.855178][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.873520][T12028] veth1_vlan: entered promiscuous mode [ 281.958776][T12028] veth0_macvtap: entered promiscuous mode [ 281.978373][T12028] veth1_macvtap: entered promiscuous mode [ 282.019226][T12028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.101479][T12028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.158738][T12028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.177845][T12028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.187232][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 282.210768][T12028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.225773][T12028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.295280][T12290] openvswitch: netlink: IPv6 tunnel dst address is zero [ 282.366378][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.413043][T12297] bridge6: port 1(ip6gretap1) entered blocking state [ 282.419822][T12297] bridge6: port 1(ip6gretap1) entered disabled state [ 282.428636][T12297] ip6gretap1: entered allmulticast mode [ 282.445186][T12297] ip6gretap1: entered promiscuous mode [ 282.451950][T12300] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 282.468413][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.480735][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.494543][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.505436][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.533796][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.615982][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.664664][T12297] veth7: entered promiscuous mode [ 282.670639][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.689345][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.712530][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.748156][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.760548][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.785236][T12292] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 282.823374][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.838140][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.908787][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.225456][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.302185][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 283.387355][ T3506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.568070][ T3506] bridge_slave_1: left allmulticast mode [ 283.574547][ T3506] bridge_slave_1: left promiscuous mode [ 283.580322][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.589823][ T3506] bridge_slave_0: left allmulticast mode [ 283.596173][ T3506] bridge_slave_0: left promiscuous mode [ 283.602290][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.054234][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.115301][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.148256][ T3506] bond0 (unregistering): Released all slaves [ 284.270361][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.285888][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.300716][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.309710][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.317947][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.710830][ T3506] hsr_slave_0: left promiscuous mode [ 284.727950][ T3506] hsr_slave_1: left promiscuous mode [ 284.734060][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.741468][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.752389][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.759799][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.778651][ T3506] veth1_macvtap: left promiscuous mode [ 284.784338][ T3506] veth0_macvtap: left promiscuous mode [ 284.789947][ T3506] veth1_vlan: left promiscuous mode [ 284.795267][ T3506] veth0_vlan: left promiscuous mode [ 285.164571][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 285.198110][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 285.620488][T12320] tipc: Enabling of bearer rejected, already enabled [ 285.679883][T12325] __nla_validate_parse: 4 callbacks suppressed [ 285.679903][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 285.716173][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1564'. [ 285.778432][T12314] chnl_net:caif_netlink_parms(): no params data found [ 286.059682][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.070691][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.078483][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.086972][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.095905][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.155523][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.187872][T12314] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.238227][T12314] bridge_slave_0: entered allmulticast mode [ 286.246154][T12314] bridge_slave_0: entered promiscuous mode [ 286.275983][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.283909][T12314] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.291065][T12314] bridge_slave_1: entered allmulticast mode [ 286.298401][T12314] bridge_slave_1: entered promiscuous mode [ 286.321856][T12353] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1570'. [ 286.339783][T12350] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 286.351710][T12350] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 286.360166][T12350] CPU: 0 UID: 0 PID: 12350 Comm: syz.5.1569 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 286.372243][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.382325][T12350] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 286.388784][T12350] Code: 89 ef e8 a0 17 ab f8 4d 89 ef 85 db 74 0d e8 c4 94 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 69 17 ab f8 48 8b [ 286.408413][T12350] RSP: 0018:ffffc9000429f0c8 EFLAGS: 00010202 [ 286.414517][T12350] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000 [ 286.422509][T12350] RDX: ffff88801ab65a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.430491][T12350] RBP: 0000000000000000 R08: ffff88801ab65a00 R09: 0000000000000002 [ 286.438471][T12350] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000a0000 [ 286.446446][T12350] R13: ffff888028313800 R14: dffffc0000000000 R15: ffff888028313800 [ 286.454474][T12350] FS: 00007f0f6c3d76c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 286.463419][T12350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.470010][T12350] CR2: 00007faa0f71bd58 CR3: 0000000027d6a000 CR4: 00000000003526f0 [ 286.478003][T12350] Call Trace: [ 286.481290][T12350] [ 286.484218][T12350] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 286.489936][T12350] pie_change+0x96d/0xca0 [ 286.494396][T12350] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 286.500297][T12350] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.505494][T12350] ? __pfx_pie_change+0x10/0x10 [ 286.510432][T12350] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.516376][T12350] ? timer_init_key+0x171/0x2d0 [ 286.521231][T12350] ? __pfx_pie_init+0x10/0x10 [ 286.525910][T12350] pie_init+0x2a3/0x3f0 [ 286.530069][T12350] qdisc_create+0x7a9/0xea0 [ 286.534600][T12350] tc_modify_qdisc+0x1426/0x2010 [ 286.539558][T12350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 286.544891][T12350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 286.550190][T12350] rtnetlink_rcv_msg+0x77c/0xb70 [ 286.555148][T12350] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 286.560277][T12350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.565731][T12350] ? ref_tracker_free+0x63a/0x7d0 [ 286.570751][T12350] ? __copy_skb_header+0xa7/0x550 [ 286.575783][T12350] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.581150][T12350] ? __skb_clone+0x63/0x7a0 [ 286.585744][T12350] netlink_rcv_skb+0x205/0x470 [ 286.590513][T12350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.595979][T12350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.601272][T12350] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.606476][T12350] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.611707][T12350] netlink_unicast+0x759/0x8e0 [ 286.616505][T12350] netlink_sendmsg+0x805/0xb30 [ 286.621290][T12350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.626578][T12350] ? aa_sock_msg_perm+0x94/0x160 [ 286.631541][T12350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.636839][T12350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.642140][T12350] __sock_sendmsg+0x219/0x270 [ 286.646836][T12350] ____sys_sendmsg+0x505/0x830 [ 286.651604][T12350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.656906][T12350] ? import_iovec+0x74/0xa0 [ 286.661439][T12350] ___sys_sendmsg+0x21f/0x2a0 [ 286.666147][T12350] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.671392][T12350] ? __fget_files+0x2a/0x420 [ 286.676012][T12350] ? __fget_files+0x3a0/0x420 [ 286.680726][T12350] __x64_sys_sendmsg+0x19b/0x260 [ 286.685692][T12350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.691160][T12350] ? rcu_is_watching+0x15/0xb0 [ 286.695929][T12350] ? do_syscall_64+0xbe/0x3b0 [ 286.700608][T12350] do_syscall_64+0xfa/0x3b0 [ 286.705113][T12350] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.710319][T12350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.716386][T12350] ? clear_bhb_loop+0x60/0xb0 [ 286.721067][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.726957][T12350] RIP: 0033:0x7f0f6b58e929 [ 286.731374][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.750985][T12350] RSP: 002b:00007f0f6c3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.759410][T12350] RAX: ffffffffffffffda RBX: 00007f0f6b7b5fa0 RCX: 00007f0f6b58e929 [ 286.767390][T12350] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 286.775372][T12350] RBP: 00007f0f6b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 286.783348][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.791313][T12350] R13: 0000000000000000 R14: 00007f0f6b7b5fa0 R15: 00007ffdab04b908 [ 286.799303][T12350] [ 286.802327][T12350] Modules linked in: [ 286.806461][T12350] ---[ end trace 0000000000000000 ]--- [ 286.811976][T12350] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 286.818424][T12350] Code: 89 ef e8 a0 17 ab f8 4d 89 ef 85 db 74 0d e8 c4 94 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 69 17 ab f8 48 8b [ 286.838071][T12350] RSP: 0018:ffffc9000429f0c8 EFLAGS: 00010202 [ 286.844185][T12350] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000 [ 286.852178][T12350] RDX: ffff88801ab65a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.860163][T12350] RBP: 0000000000000000 R08: ffff88801ab65a00 R09: 0000000000000002 [ 286.868167][T12350] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000a0000 [ 286.876171][T12350] R13: ffff888028313800 R14: dffffc0000000000 R15: ffff888028313800 [ 286.884169][T12350] FS: 00007f0f6c3d76c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 286.893236][T12350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.899833][T12350] CR2: 00007faa0f71bd58 CR3: 0000000027d6a000 CR4: 00000000003526f0 [ 286.907843][T12350] Kernel panic - not syncing: Fatal exception in interrupt [ 286.915373][T12350] Kernel Offset: disabled [ 286.919705][T12350] Rebooting in 86400 seconds..