last executing test programs: 1m53.741317328s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) 1m45.755720702s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x85ff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m35.312180145s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) 1m33.086258015s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x85ff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m28.459947655s ago: executing program 3 (id=1041): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x24000800) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0xffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x4000080) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m28.086519277s ago: executing program 3 (id=1043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x301, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404}, 0x40008) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0xd216, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x19, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000480)=""/168, &(0x7f0000000540)=0xa8) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000600)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x8, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@initdev, @initdev, 0x0}, &(0x7f0000000940)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x0, @rand_addr=' \x01\x00', @local, 0x8000, 0x11, 0x5, 0xfffffffe}}) (async) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x8, 0xb, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x68, 0x0, 0x3, 0xa58b54eb1e676d7c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x7, [{@loopback, 0x4}, {@loopback, 0x9}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x10, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x1e, 0x34, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x1f, 0x1d, [@local, @empty, @loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x90, 0x18, @mcast1, @local, 0x8, 0x10, 0x9}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x10, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x178, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000c00}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x15c, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x2a, 0x9, 0x1, 0xfe, {0x4e23, 0x4e21, [0x7, 0x1eab, 0x780, 0x3ff], [0x2, 0x2, 0xfffffffd, 0x7], r10, [0x3ff, 0x737]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "5a8fb1a8623ebdf9cd1aafbb5e245132e9c4c4952dca85eea46ed97ed5815601c25f364d4a256c77e9ae0962983d5444af99fbbaa63e539f80b1c8e6983b2722f270d6bb12291da84afbe40e208fc22b"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "49354a1284dae5b72a1e6832dd19"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "88ec8bf541c7ea6d7e481cdf9d9e63e356fd14a755da128dc03fe3fd954006b4127de52c0bff593522d084035cdad79caca2e80ef42a8c35cbc71778517488ded7ff1fe0e2c8124a6ec611d33a5edb271b7fb53c6f7d7e49f9585fb9d092be30bcfea353e82bdd693223be20155559490eba673d900b1f72d8b3b1bbe6558983f468f87c6a9a4cb9cd22a5cb05bfe6f6f8a61262f551a11e305610821d0fddfeaefa"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4081}, 0x4008050) 1m19.031718892s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) 1m15.820044069s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x85ff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m12.535889324s ago: executing program 3 (id=1043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x301, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404}, 0x40008) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0xd216, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x19, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000480)=""/168, &(0x7f0000000540)=0xa8) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000600)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x8, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@initdev, @initdev, 0x0}, &(0x7f0000000940)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x0, @rand_addr=' \x01\x00', @local, 0x8000, 0x11, 0x5, 0xfffffffe}}) (async) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x8, 0xb, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x68, 0x0, 0x3, 0xa58b54eb1e676d7c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x7, [{@loopback, 0x4}, {@loopback, 0x9}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x10, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x1e, 0x34, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x1f, 0x1d, [@local, @empty, @loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x90, 0x18, @mcast1, @local, 0x8, 0x10, 0x9}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x10, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x178, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000c00}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x15c, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x2a, 0x9, 0x1, 0xfe, {0x4e23, 0x4e21, [0x7, 0x1eab, 0x780, 0x3ff], [0x2, 0x2, 0xfffffffd, 0x7], r10, [0x3ff, 0x737]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "5a8fb1a8623ebdf9cd1aafbb5e245132e9c4c4952dca85eea46ed97ed5815601c25f364d4a256c77e9ae0962983d5444af99fbbaa63e539f80b1c8e6983b2722f270d6bb12291da84afbe40e208fc22b"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "49354a1284dae5b72a1e6832dd19"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "88ec8bf541c7ea6d7e481cdf9d9e63e356fd14a755da128dc03fe3fd954006b4127de52c0bff593522d084035cdad79caca2e80ef42a8c35cbc71778517488ded7ff1fe0e2c8124a6ec611d33a5edb271b7fb53c6f7d7e49f9585fb9d092be30bcfea353e82bdd693223be20155559490eba673d900b1f72d8b3b1bbe6558983f468f87c6a9a4cb9cd22a5cb05bfe6f6f8a61262f551a11e305610821d0fddfeaefa"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4081}, 0x4008050) 57.801417028s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) 56.717227613s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x85ff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 54.914253699s ago: executing program 3 (id=1043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x301, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404}, 0x40008) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0xd216, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x19, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000480)=""/168, &(0x7f0000000540)=0xa8) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000600)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x8, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@initdev, @initdev, 0x0}, &(0x7f0000000940)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x0, @rand_addr=' \x01\x00', @local, 0x8000, 0x11, 0x5, 0xfffffffe}}) (async) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x8, 0xb, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x68, 0x0, 0x3, 0xa58b54eb1e676d7c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x7, [{@loopback, 0x4}, {@loopback, 0x9}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x10, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x1e, 0x34, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x1f, 0x1d, [@local, @empty, @loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x90, 0x18, @mcast1, @local, 0x8, 0x10, 0x9}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x10, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x178, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000c00}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x15c, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x2a, 0x9, 0x1, 0xfe, {0x4e23, 0x4e21, [0x7, 0x1eab, 0x780, 0x3ff], [0x2, 0x2, 0xfffffffd, 0x7], r10, [0x3ff, 0x737]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "5a8fb1a8623ebdf9cd1aafbb5e245132e9c4c4952dca85eea46ed97ed5815601c25f364d4a256c77e9ae0962983d5444af99fbbaa63e539f80b1c8e6983b2722f270d6bb12291da84afbe40e208fc22b"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "49354a1284dae5b72a1e6832dd19"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "88ec8bf541c7ea6d7e481cdf9d9e63e356fd14a755da128dc03fe3fd954006b4127de52c0bff593522d084035cdad79caca2e80ef42a8c35cbc71778517488ded7ff1fe0e2c8124a6ec611d33a5edb271b7fb53c6f7d7e49f9585fb9d092be30bcfea353e82bdd693223be20155559490eba673d900b1f72d8b3b1bbe6558983f468f87c6a9a4cb9cd22a5cb05bfe6f6f8a61262f551a11e305610821d0fddfeaefa"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4081}, 0x4008050) 38.524448342s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) 36.550480133s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x85ff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 35.164808261s ago: executing program 3 (id=1043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x301, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404}, 0x40008) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0xd216, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x19, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000480)=""/168, &(0x7f0000000540)=0xa8) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000600)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x8, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@initdev, @initdev, 0x0}, &(0x7f0000000940)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x0, @rand_addr=' \x01\x00', @local, 0x8000, 0x11, 0x5, 0xfffffffe}}) (async) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x8, 0xb, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x68, 0x0, 0x3, 0xa58b54eb1e676d7c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x7, [{@loopback, 0x4}, {@loopback, 0x9}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x10, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x1e, 0x34, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x1f, 0x1d, [@local, @empty, @loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x90, 0x18, @mcast1, @local, 0x8, 0x10, 0x9}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x10, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x178, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000c00}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x15c, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x2a, 0x9, 0x1, 0xfe, {0x4e23, 0x4e21, [0x7, 0x1eab, 0x780, 0x3ff], [0x2, 0x2, 0xfffffffd, 0x7], r10, [0x3ff, 0x737]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "5a8fb1a8623ebdf9cd1aafbb5e245132e9c4c4952dca85eea46ed97ed5815601c25f364d4a256c77e9ae0962983d5444af99fbbaa63e539f80b1c8e6983b2722f270d6bb12291da84afbe40e208fc22b"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "49354a1284dae5b72a1e6832dd19"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "88ec8bf541c7ea6d7e481cdf9d9e63e356fd14a755da128dc03fe3fd954006b4127de52c0bff593522d084035cdad79caca2e80ef42a8c35cbc71778517488ded7ff1fe0e2c8124a6ec611d33a5edb271b7fb53c6f7d7e49f9585fb9d092be30bcfea353e82bdd693223be20155559490eba673d900b1f72d8b3b1bbe6558983f468f87c6a9a4cb9cd22a5cb05bfe6f6f8a61262f551a11e305610821d0fddfeaefa"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4081}, 0x4008050) 18.069956034s ago: executing program 2 (id=416): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) 15.883797298s ago: executing program 3 (id=1043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x301, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404}, 0x40008) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000003c0)=0xd216, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x19, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000480)=""/168, &(0x7f0000000540)=0xa8) (async) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000600)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x8, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@initdev, @initdev, 0x0}, &(0x7f0000000940)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x0, @rand_addr=' \x01\x00', @local, 0x8000, 0x11, 0x5, 0xfffffffe}}) (async) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x8, 0xb, {{0xb, 0x4, 0x3, 0x8, 0x2c, 0x68, 0x0, 0x3, 0xa58b54eb1e676d7c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x7, [{@loopback, 0x4}, {@loopback, 0x9}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x10, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x1e, 0x34, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x1f, 0x1d, [@local, @empty, @loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x90, 0x18, @mcast1, @local, 0x8, 0x10, 0x9}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x1, 0x10, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x178, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000c00}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x15c, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x2a, 0x9, 0x1, 0xfe, {0x4e23, 0x4e21, [0x7, 0x1eab, 0x780, 0x3ff], [0x2, 0x2, 0xfffffffd, 0x7], r10, [0x3ff, 0x737]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "5a8fb1a8623ebdf9cd1aafbb5e245132e9c4c4952dca85eea46ed97ed5815601c25f364d4a256c77e9ae0962983d5444af99fbbaa63e539f80b1c8e6983b2722f270d6bb12291da84afbe40e208fc22b"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "49354a1284dae5b72a1e6832dd19"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "88ec8bf541c7ea6d7e481cdf9d9e63e356fd14a755da128dc03fe3fd954006b4127de52c0bff593522d084035cdad79caca2e80ef42a8c35cbc71778517488ded7ff1fe0e2c8124a6ec611d33a5edb271b7fb53c6f7d7e49f9585fb9d092be30bcfea353e82bdd693223be20155559490eba673d900b1f72d8b3b1bbe6558983f468f87c6a9a4cb9cd22a5cb05bfe6f6f8a61262f551a11e305610821d0fddfeaefa"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4081}, 0x4008050) 14.849786408s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x85ff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.612128667s ago: executing program 1 (id=1409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000058c0)=@delchain={0x1ca8, 0x65, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x93536fa62b4dd0fa, 0x2}, {0x3, 0x3}, {0x2, 0xfff2}}, [@f_rsvp6={{0xa}, {0x1c78, 0x2, [@TCA_RSVP_ACT={0x1c74, 0x6, [@m_pedit={0x1c70, 0x1c, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0xad97, 0x7, 0x45a2, 0xffff}, 0x1, 0xe}, [{0x5, 0x4, 0x6c40, 0x6, 0x1, 0xc00c}, {0x40, 0x1000, 0xe, 0x5, 0x5, 0x10000}, {0xe6, 0x2, 0x9, 0x8000, 0x0, 0x6}, {0x7, 0xd, 0x1000, 0x100, 0x10001, 0x1}, {0x7, 0x8001, 0x9, 0x4, 0x2, 0x4}, {0xbdc5, 0xe202, 0x1, 0x78, 0x1, 0x1}, {0x77, 0x8, 0x0, 0x8, 0x8, 0xb0}, {0x8, 0x2, 0x2, 0x7, 0x8, 0x2}, {0x4, 0x3, 0x4, 0x8, 0x1, 0x6}, {0xb, 0x2, 0x3, 0x7, 0x8}, {0xf7a5, 0x1f, 0x8, 0x6, 0x6, 0x8}, {0x4, 0x7f, 0xa, 0x9, 0x2f, 0x13}, {0xb6ae, 0x5, 0x0, 0xe5, 0x8, 0x9}, {0x2, 0xfff, 0xc, 0x31c727cb, 0xa, 0x4}, {0x51dabcf1, 0x800, 0x4, 0x2, 0x2b, 0x2}, {0xffffffff, 0x7, 0x9, 0xe8, 0x80000001, 0x9}, {0x2, 0x7, 0x0, 0x5, 0x7c2, 0x5717c97}, {0x3, 0x4, 0x5, 0x9, 0xa0ba, 0x400}, {0x982, 0xb, 0xa7, 0x6, 0x7, 0x401}, {0x0, 0x10001, 0x9, 0xfffffffb, 0x2, 0x7fffffff}, {0x6, 0x0, 0x9, 0x5, 0x26}, {0x7, 0x1, 0x2, 0x401, 0x200, 0x101}, {0x7, 0xa, 0x400, 0x7, 0x8000}, {0x7ff, 0x2, 0xfffffffd, 0x2, 0x7f, 0x7f}, {0x807, 0x9, 0x8, 0x3ff, 0x9, 0x7f}, {0x7, 0x40, 0x8275, 0x10, 0x9, 0x4}, {0x71c, 0x0, 0x3, 0x1ff, 0x1c5, 0x6}, {0x8, 0xa5bc, 0x20000000, 0x7, 0xbb, 0xffffffff}, {0x8, 0x3, 0x787, 0x6, 0x3, 0x5}, {0x4c12, 0x7aac, 0x1, 0x9, 0x7fffffff, 0x1}, {0x8001, 0x4, 0x4183, 0x2, 0x2, 0x9}, {0x4, 0xe, 0xc, 0x2, 0x1000, 0x7ff}, {0x714, 0x401, 0x40, 0x3, 0x3, 0x9}, {0x3, 0x9, 0x4bf7, 0x3, 0xebbd, 0x2}, {0x7c5f, 0x4606, 0x5, 0xead6, 0x1, 0x9}, {0x200, 0xff, 0xfffffff9, 0x2, 0x2}, {0xfffffff1, 0x2, 0x6, 0x0, 0x3, 0x9}, {0x7, 0x3, 0x9, 0x9, 0x0, 0x4}, {0x2, 0x997, 0x8, 0x8, 0x3, 0x1000}, {0x8, 0x5, 0x6a86cbbd, 0x889, 0x6, 0x3}, {0x2, 0x6, 0x9, 0x0, 0x3, 0x1}, {0x7fffffff, 0x4, 0x3, 0x8, 0xf4, 0x5}, {0x400, 0x7fffffff, 0x6, 0x9, 0x7fff, 0x80000001}, {0x8, 0x8, 0x10, 0x900, 0x80000000, 0x7fff}, {0x468, 0x768, 0x1, 0x3ff, 0x10001}, {0x5, 0x1, 0x72, 0x0, 0x80, 0x101}, {0x7, 0x4, 0xa, 0x5, 0xfd7c, 0x57}, {0x5, 0x2, 0xdad, 0x1, 0xffff, 0x9}, {0x100, 0x6, 0xd, 0xf00, 0x3, 0x6}, {0xe057, 0x4, 0x7, 0x80000000, 0x80000001, 0x7}, {0x7, 0x5, 0x9, 0x5, 0xfffffff8, 0xffffffff}, {0x4, 0x1, 0x5, 0x6, 0x4, 0x1}, {0x6, 0x0, 0x0, 0x6, 0x4, 0x8}, {0x9, 0x2, 0xff, 0x4, 0x7}, {0x1, 0xfffffffd, 0xd523, 0x5, 0x10, 0x2}, {0x200, 0x40, 0x5, 0x9, 0xfffffe00, 0x9}, {0x1000, 0xfff, 0x4, 0x5, 0x5, 0x4}, {0x5, 0x5, 0x2956, 0x8001, 0xa, 0x9}, {0x1000, 0x87, 0x2c, 0x7f, 0xffff0001, 0x3}, {0x1, 0x200, 0x0, 0x53f, 0x101, 0x5}, {0x7, 0x5, 0xffffff00, 0x5, 0xfffffffb, 0x9}, {0x2e4, 0x5, 0x0, 0x2, 0x7f, 0x3}, {0x16a, 0xc, 0x1f, 0x9, 0x1, 0x2}, {0x2, 0x0, 0x800, 0xf4c5, 0x5, 0x4}, {0x2, 0x1, 0x4, 0x2427, 0x200, 0x4}, {0x3, 0x7, 0x3, 0x4, 0x0, 0x3}, {0x40, 0x8000, 0x8a, 0x14, 0x9, 0x3}, {0x4, 0x8, 0x1, 0x10, 0x8, 0xe}, {0x6e24, 0x3, 0x3, 0x2, 0x101, 0x3}, {0x7fc000, 0x7, 0x6, 0x9, 0x7, 0x800000}, {0x4, 0x2, 0x81, 0x7ff, 0x6, 0x8}, {0x9, 0x6, 0x400, 0x401, 0x5, 0x4}, {0x1, 0x3, 0x40, 0x28273911, 0xfffffff8, 0x2}, {0x8, 0x100, 0x3, 0x1, 0xfffffff2, 0xf}, {0x9, 0x3ff, 0x3, 0x0, 0xdb, 0x3}, {0x400, 0x7, 0x3, 0x100, 0xdcd, 0x4}, {0x86, 0xc, 0x8, 0x3, 0x27c, 0x80000001}, {0x0, 0xfffffffd, 0xfff, 0x8, 0x2, 0x5}, {0x35, 0x8, 0x80, 0x10, 0x6, 0x8}, {0x28, 0xfffffff9, 0x8, 0x4, 0x80000000, 0x80000001}, {0x4, 0x0, 0xfffffffb, 0x10000, 0x7, 0x3e3}, {0x4, 0x5, 0x8, 0x6, 0xa, 0x2}, {0x8, 0x40, 0x8, 0x9, 0x400, 0x20}, {0xb46d, 0x2, 0x5, 0x9, 0xa5, 0xfff}, {0x0, 0x7, 0x13ca, 0xffffffff, 0x0, 0x1}, {0x7, 0x6, 0x2, 0xf, 0x9, 0x9}, {0x7, 0x1000, 0xfffffff8, 0xe08b, 0x401, 0x2}, {0xf126, 0x2, 0xcdee, 0x0, 0x84, 0x5}, {0x10000, 0x40, 0x6, 0x7fff, 0x66d8, 0x9}, {0x8000, 0x9, 0x6, 0xb, 0x81, 0x1}, {0x8, 0x1, 0x3, 0xfffffffa, 0xe2cc, 0xa}, {0x3, 0xe947, 0x7, 0x401, 0x1}, {0xf, 0x2, 0x8, 0x2, 0x47, 0x2}, {0x4, 0xfe3, 0x40, 0x7, 0x9, 0x9419}, {0xea, 0x1, 0xa, 0x8, 0x5, 0x2}, {0x10, 0x2, 0x0, 0x6, 0xd, 0x5}, {0x10000, 0x4ef7, 0x4dd, 0xffff7023, 0x3}, {0x1000, 0x2, 0x3, 0x7, 0x5, 0x8}, {0x2, 0x4, 0x3, 0x7, 0x401, 0xf}, {0x697, 0x5, 0x7, 0x9, 0xbacb, 0x7}, {0x5, 0x80, 0x4, 0x3, 0x1, 0x2}, {0x4, 0x60000000, 0x9, 0x1, 0x40, 0x8}, {0x8507, 0x4, 0xffff, 0x6, 0x101, 0x7}, {0x4, 0x0, 0x10, 0x5645, 0x8, 0x2}, {0x4, 0x5, 0x457f264b, 0x5, 0x4, 0x1}, {0x4, 0x2, 0xfffe0, 0x8a, 0x79, 0x4}, {0x5, 0x4, 0x4, 0x1, 0x7ff, 0x6}, {0xc, 0x7, 0x8, 0x1, 0x7fffffff, 0x7}, {0x4, 0xfffff3c6, 0x2, 0x4, 0x2, 0x400}, {0x80000000, 0x88, 0x0, 0x1, 0x8, 0x9}, {0xa8, 0x1, 0x8, 0x6cbd, 0x3, 0x6b524562}, {0x200, 0xef, 0x8, 0xee48, 0x67}, {0x4, 0x1, 0x90, 0xb, 0x4, 0x8000}, {0x2, 0x80000000, 0x1, 0xfff, 0x10001, 0x7051d845}, {0x9, 0x1, 0x3, 0x4, 0x80000000, 0x6}, {0x8001, 0x40, 0x6, 0x4, 0x81, 0x7}, {0xfffffffb, 0x0, 0x401, 0x7ff, 0xa8, 0x1}, {0xa, 0xffff7fff, 0x154, 0x2, 0x7}, {0x1ff, 0x6, 0x10001, 0x4, 0xe8bf, 0xe6d}, {0x7fffffff, 0x8, 0x400, 0x7, 0x6, 0x2}, {0x4, 0x64a, 0x6, 0x5, 0xfffffffc, 0x6}, {0x8000, 0xc95, 0x4, 0x261, 0x2, 0xff}, {0x5, 0x6, 0x5, 0x1, 0x5, 0x7}, {0x2a981d70, 0x7fffffff, 0x1967d00c, 0x8, 0xa5, 0x7}, {0x6, 0x7, 0x6b, 0xe, 0x2}, {0x2, 0xec, 0x2, 0x5, 0x0, 0x8}, {0x7, 0x3, 0x8001, 0xe3b, 0x6, 0x3ff}, {0x7f, 0x6, 0x9382, 0x9, 0x0, 0x7}], [{0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x90f7c8725a300059, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x8eb1636ab0e1214f, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x3}, {}, {0xc994d64e9bc5f4c6}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x2f016dc8917db28c}, {0x3, 0x3}, {}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0xd695777db8558a0b}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x12373a9108c4c9d2}, {0x4}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0xf9c, 0x4, 0x6, 0x1}, 0x1, 0x9e}, [{0xfff, 0x4, 0x8000, 0x3, 0x2, 0xfffffffb}, {0x80000001, 0x9, 0x5, 0x7, 0x8, 0x7}, {0x8001, 0xb14, 0xfffffffe, 0x7e, 0xaf, 0x80000000}, {0xb, 0xffffff2f, 0x4, 0x101, 0x7, 0x4}, {0x3cd, 0x3, 0x214, 0x1, 0x9, 0xc}, {0xffffffff, 0x400, 0x2, 0xffffc012, 0xa2d2, 0x4}, {0x9, 0x1ff, 0x1, 0x4, 0x5, 0xc2}, {0x2, 0x80000000, 0x0, 0x7f, 0x5, 0x6}, {0x9, 0x81, 0x6, 0xfffffff9, 0x0, 0x5}, {0x8308, 0x5, 0x2b, 0x9, 0x2, 0x7fff}, {0x1, 0x2, 0x10000, 0x81, 0x4, 0xe}, {0x6, 0xb74a, 0x7e26, 0x3b182c85, 0x10001, 0x3}, {0x5f340c2e, 0x8001, 0x3c1, 0x0, 0x7, 0x8}, {0x5, 0xb, 0x80, 0x5, 0xc, 0x4}, {0x0, 0x8, 0x7, 0x7, 0x8, 0x7}, {0x1, 0x0, 0xd, 0x7297, 0xffffff81, 0x10}, {0x8, 0x55, 0x0, 0x0, 0x8}, {0xa, 0x46a, 0x5, 0x781, 0x81, 0x8}, {0x9, 0x7, 0x81, 0x62, 0x27, 0x9}, {0x87f9, 0x0, 0x8001, 0x0, 0x3, 0x81}, {0x9, 0x7fff, 0x8000, 0x0, 0x6, 0x100}, {0x8, 0x8, 0x2, 0x80000001, 0x8, 0x7}, {0x1, 0xb9, 0x6, 0x5, 0x3, 0x6}, {0x3ff, 0x2, 0xc, 0x2, 0x9}, {0x8000, 0x480, 0x3, 0x6, 0x2, 0x4}, {0x3de, 0x10000, 0x6, 0x8, 0x10, 0x81}, {0x7fff, 0x101, 0x400, 0x1, 0x9, 0x80000001}, {0xffffffff, 0x8, 0x5, 0x7, 0x1, 0x46}, {0x8, 0x3, 0x34ce2c43, 0x2, 0x2, 0xa}, {0x80000000, 0x9, 0x4, 0x8, 0xfffffff8, 0xe9}, {0xee8f, 0x8000, 0x400, 0x1057414e, 0x7e30, 0x8}, {0x5, 0x4, 0x7fff, 0x5, 0x0, 0x9226}, {0xd, 0x1000, 0x6e, 0x2, 0x828, 0x101}, {0x7, 0x4, 0x74, 0x8, 0x9, 0x35e0000}, {0xb30, 0x2, 0x4, 0x9, 0x7, 0x8}, {0x8, 0x6, 0x8, 0x9, 0x6, 0x86}, {0x8, 0x8f87, 0x2, 0xffff, 0x0, 0x9}, {0x64, 0x4, 0x829, 0x1000, 0x4, 0x80}, {0x4000800, 0xb3, 0x40, 0xe, 0x0, 0x700000}, {0x15e, 0x511e15af, 0x2d, 0x4, 0x4, 0x7}, {0x0, 0x0, 0x8, 0x3, 0x1ff, 0xde8c}, {0x951, 0xffffffff, 0xfffffffb, 0x1, 0x4dea, 0x100}, {0x8, 0x9, 0xa, 0x8001, 0x6, 0x493}, {0x5d, 0x2, 0x9, 0x200, 0x0, 0x5}, {0x3, 0xffffffff, 0x5, 0x8, 0xd2b, 0x3}, {0x7, 0x9, 0x2, 0xfff, 0x800, 0x8}, {0x5, 0xfffffff9, 0x4, 0x7, 0x1ff, 0x80000001}, {0x5, 0x8, 0x0, 0xce03, 0x1000, 0x8001}, {0x200, 0x6, 0x68000, 0x3, 0x5}, {0xffffd323, 0x6524ed8, 0x6, 0x3, 0x7f, 0xffff}, {0x101, 0x80000001, 0x1d3e, 0x467ae000, 0x7, 0x5000}, {0x4, 0xfffffff9, 0xffffffff, 0x3ff, 0x0, 0x2}, {0x5, 0x86b, 0xfffff001, 0x7fff, 0x1}, {0x2, 0xf, 0x10001, 0x9, 0x401, 0x4}, {0x6, 0xe5, 0x7ff, 0x9a3, 0x280c, 0x50c2eaaf}, {0x1, 0x2, 0x3, 0x6, 0x0, 0x7}, {0xfff, 0x54, 0x6, 0x3, 0x5, 0x9}, {0x3, 0x2be, 0x8, 0x8, 0xd64, 0xd6c0}, {0xa, 0x10001, 0x362, 0x9, 0x0, 0x5}, {0xa, 0xfffffffe, 0x7, 0x6, 0x5a5, 0xead}, {0x8, 0x2, 0x9, 0x3, 0x10, 0x9}, {0x7, 0xffffffff, 0x2, 0x3, 0x6, 0x2}, {0x3, 0x9, 0x7, 0xac, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x0, 0x1, 0x3}, {0x1, 0x0, 0x2107a196, 0x10000, 0x200, 0x45}, {0x7, 0x1ff, 0x6, 0x6, 0xfffffffe}, {0x4, 0x1ff, 0x0, 0x8, 0x3, 0xcad}, {0x8001, 0xff, 0xfffffff7, 0x6, 0x5, 0x10001}, {0x1, 0x1000, 0x800, 0x9, 0xfffffe01, 0x6}, {0x1, 0x2, 0x7, 0x0, 0xd6, 0x9}, {0x6, 0x4d, 0x4, 0x2, 0x54c, 0x2}, {0x2, 0xe0, 0x5, 0xfffffffd, 0x10000, 0x9}, {0x7, 0x1000, 0x6, 0x2, 0xe4, 0x8}, {0x0, 0x0, 0x2, 0xfff, 0xa6, 0x1}, {0x3, 0x10000, 0x0, 0x7ff, 0x100, 0x9}, {0x4, 0x100, 0x4, 0x3, 0x9}, {0x7, 0x1ff, 0x466, 0xffffef13, 0x6, 0x100}, {0x3, 0x1, 0x8, 0x9, 0x2000, 0x2}, {0x5, 0x5, 0xff, 0xfffffc91, 0x2800, 0x5}, {0x8, 0x1, 0x3, 0xfff, 0x7f, 0xffff}, {0xd806, 0xa, 0x0, 0x0, 0x7b9, 0x2}, {0x4, 0x0, 0x7, 0x3, 0xffffffff, 0x81}, {0xfff, 0x5, 0x9, 0x4, 0x6, 0x5}, {0x4c88, 0x2e67, 0x1, 0xffffffff, 0x1000, 0x1}, {0x0, 0x8c, 0x4, 0xc1be, 0xfff, 0x3}, {0x9, 0x7, 0x7, 0xd3, 0x667, 0x1}, {0x6, 0x9, 0xfffffff8, 0x0, 0x1000, 0x7}, {0x2, 0x3ff, 0x5, 0x0, 0x9, 0x20}, {0x9, 0x3, 0x3, 0x8001, 0x8, 0x1000}, {0x9, 0xfffff000, 0x4, 0x9, 0x6, 0x4}, {0x9, 0x10000, 0xd, 0x10001, 0x9, 0xffffff71}, {0x9, 0x4, 0x1ff, 0xa, 0x2, 0x8e73}, {0x2, 0x2, 0x8, 0xceba, 0xfde, 0x2}, {0x4, 0x2, 0xfffffffb, 0x3, 0x4, 0x9}, {0x9, 0x7, 0xe8c2, 0x6, 0x3}, {0xbc2, 0x4, 0x4, 0x5, 0x6, 0x8001}, {0x68e, 0xff, 0x100, 0x2, 0xdc, 0x9}, {0x7f, 0x1, 0x10001, 0x7, 0x7, 0x8}, {0xcc, 0x9, 0xa, 0x8001, 0x785d, 0x8001}, {0x5fc4, 0xffffffff, 0x100, 0x10001, 0x1, 0x81}, {0x4, 0x5, 0x6, 0x9, 0x7, 0x7}, {0x7, 0x8000, 0x8000000, 0x6, 0x8, 0x8}, {0x3, 0x0, 0xe3, 0x1, 0x400, 0x1}, {0x0, 0x0, 0x3, 0x8, 0x8, 0x9}, {0x1, 0x0, 0x1, 0x9, 0x8, 0x6}, {0x52, 0x1, 0x2, 0x4, 0x0, 0x5}, {0x4, 0x56f, 0x1, 0x5, 0x4, 0xf1a2}, {0x3, 0x4, 0xfffffffa, 0x3, 0x9, 0x8}, {0xde, 0x10, 0xfffff000, 0x5, 0x2}, {0x10000, 0x6, 0x101, 0x3}, {0x200, 0x5, 0x7, 0x6, 0x4, 0x8}, {0x4, 0x2, 0x4, 0x8, 0x4, 0x9}, {0x7, 0x2cd, 0x3, 0x3, 0x9, 0x200}, {0xd5b1, 0x7, 0x3, 0x3, 0x8, 0x7}, {0x7, 0x797, 0x9, 0x3, 0x80, 0xbc2}, {0x6, 0x2, 0x1, 0x7, 0x6, 0x2}, {0x3ff, 0x6, 0x236, 0x1, 0xf85b27, 0xfffffffb}, {0x9, 0x4, 0xfffffffd, 0x0, 0x4, 0x7}, {0x4, 0x401, 0x7bf, 0x6, 0x200, 0x7}, {0xf1f, 0x1, 0x5, 0x1, 0xa825, 0xd}, {0x7f, 0x3, 0x6, 0xd, 0x7, 0xfffffff8}, {0x4, 0x0, 0x4, 0x5, 0xd3b, 0x12}, {0x1000, 0x0, 0xff60b56, 0x7fff, 0x3}, {0x6, 0x1, 0x5, 0x1, 0x8, 0x6}, {0x2, 0x0, 0x7, 0x0, 0x8c83, 0x8b}, {0x3622, 0x3ff, 0x4, 0x4, 0x2, 0x8}, {0x1, 0x6, 0x2, 0xf, 0x5}, {0x8, 0xfff, 0x8, 0x196, 0xa4d1, 0x7ff}], [{0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x95e46510ffe17da1}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x10ca10a45084c2d1}, {0x3, 0x1}, {0x9edc3bda6b51ecc4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x1}, {0x657fd92da22c3b4f}, {0x4}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x4}, {0x7}, {0x0, 0xdd64e5a1b49936bb}, {0x4, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1ca8}, 0x1, 0x0, 0x0, 0x8004}, 0x4008040) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000200)=""/197, 0xc5}, {0x0}, {&(0x7f0000000400)=""/33, 0x21}], 0x3}, 0x7}], 0x1, 0x1a0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r2, 0x49a17000) (async) bind$inet6(r2, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.504177841s ago: executing program 4 (id=1410): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) syz_emit_ethernet(0x1e2, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x1a4, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x50, 0x6, [@mcast1]}], {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1ff], "99a1a1ce634a3219e17b08faff5c73b654d24a7c95be5af59800110a0a70c4756416745ac0ddf916dc659d38ee817ec13c1fced532b7af2bb96f1c11474bbd05f91991214c0d8fbce03fcf63d2b1a9d9e4391b96c4f35ad0d11869ee3449ab4a03409079d2586591900456c8a33cbdc61ba123d3003b5a5a870bbc"}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) 1.503639392s ago: executing program 1 (id=1411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="5d6c24724082ee1508000600", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) 1.273673346s ago: executing program 4 (id=1412): r0 = socket(0x2a, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a00)="09f7cca49a6a065d62284c1f7fa68677ed18dfb6a407fd4f50d722d1681d47e5ce6d5571580895967a9be001d9901d5053b18beff632845a3e458cedcd88c6506eda5bfd2d302ec435e456d8c33bd663393e15b1ee7b3f9f4e44ef8aef19a6dbb0fa13d3c477c2e9576f58ae4e2f205fdd2cac8aeb0150ba3525f133536bd4eee6785e48c80b5e97f35c9c9fcd01e025578e79c59fda79b64b0a7a022a25f983a764d4643493ef2c165eb39abf57b0706f9db7a3a12ab0b4e9df8b79cff44f52139b0a55fac6f118dc368e3cb52f87b95442c5d5bcc0bcbc19c4f1ec3336af24b370105be54585af81fde3bb6a48501805d167fa7a54700207fc933dc8d146c4843ee286b75f5c16c279e6450a9f1dd2fca2a17875a13d460a7bcf77eb5926171307eca1619f392c17efbae4269c33648ea98898ec5fa0565d8ab4ec3a3b5c669f2a0c3fded695ba981fb3832bf659fc20150073faa56510322cfc584318d4458524b4bbbfb38cf7099561e93c4e644e2b8c5e29998be29bb34d8a3029ffe0d890d05bdb5ea56b890f1ba91dbe2869b3f8acc6f064205824f9c1ec04b9d93da9b3ab009b5b4a38dbea25d48a8d68b3a38a132e55352f70dd4974ba60487844ec1160ffb7e25e0e210e0421078f286094a32c9ed9e05965a9a28beb41ba54b0cbfbc190197e94ef725923defb6e3f033d2826f87e87f1f380a3ab8dfb6e95e211f6e326ec6a1acf946bfbda01559579d937aec28a4943a93716c2dfbe04ca12f3bcbe91a02f4d30b1db0ac13465e3027bba95e4bf8455c9741f12fe6dc38a648cb3d2a8fd0970ba6387280dadb30e5ecb48c9a2a7115ec0c36ffb95a82fb84163f3edb99bdd0003c7397e4c7bfec990c15e65da59c3bd03dcce2c67ca06843333bc81feb7322e215d37944f63c0464f34891cc0510de3ffa9cf9c0976a58579d78e54a9f32193e58e08509aaf3f903d77e8c95cef179ae98620dab0c4a33344649e9ee7f3cdf719c74ca223099068d72118bdeaeab833184347ff3874736416460d027466e53ff158053e2bb9439b79085975872ff3f74a3a7dd326082167c2aaa1fc8b2c11771d09df57464d521f0551aeae87c8171bceb973f774a9f6a4e88c744103bc513b5c856da4fe94ee8b84673681934e60eb0a4976ccf7f56a1507b6ebcbf0c9050a054a7103cd69b513a26a5e1bcd22527a73c15f1a66d67efad2e3092a5059066d75823c56419f484d8b3d0594652f3c1b460d4209f538d424e1a3c84a063bf8fce91acb89108d673ae8c2dc4419ea16d3857fe7eb81899f1cadee5f965b9e28a39d97c8821f346cfe8199ec8fc7a39986a317ba05a8ddc814d6c39b9d851ca2a392f31b82c3ec12088170f1fdc7807eb092cc15d6d24c08714168f27399499024bd285ff01cf69ddc170ff3d3f2d9873e64eb19f143e59380442db35910e27a2bd33560515eb371d50b4dbed052c05c8154677e99b78ec5970b16b1ae656a26253cddbd95ff03d157398cb8131be416b6e4fe1159e6b9e99e568028c79b11e2505d646d54c865346e522fdde34978baf88ba9f5ffff3cfe9825984e8408383d210fdfbc3a1cbb6bf8d30a91ccb59a9dafa48b441c14466a5a4048fb9635947d6ccc2218043d5b1bd79f9b38ac0a8b91c171092ccaf6d417ccc69c958442235bd1360ca8f5983497fee7f5b7013d6cfde8670d935e2b4fedae617486a62aa5a49d4edd950780a7a758d5342876f648d9a580611f834cca71463b3ef1efb4f9aea00dc961643a939258a5cb84b2c5a72c8fcd8cc56966c17c16b4a6639cc7136c6ccd6c3bb3a08276d1f82df61048277d64b2f30f101502e7b63aa9eca5c31fb87549a109a1a248f79db823d49c991e9d3f6983ddf6097268e89d468e2d7a0123070eea3d3c13295462a7b0f6aff78e092c8bda37945deacdf619f32b68105aefd8026a003c4d515b03e9d346d54d1f530cda82d631e3135f5484484c958806d5f934113043b103d1efc177ca8ee4957f87b642ee0ff9a871228e8a6629760f96970be30cfa33ace8b93625b863a7949ece9395270ecb172e6ae1f11f085b44d9726aa463d5fd739c79eb6609ecd566c0eaaa91e68b3f55cb88fc9d7f2fb2ee45c2c04cea3010b4045a0917820adacbcd331ff5b5e2eddaaf3f460562e050ed4aca27960fe59dd3c0fdb0a035", 0x611}], 0x1, 0x0, 0x0, 0x8000}, 0x80c1) recvmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0xfec6, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x3b, 0x10000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x849c7023dcce7afa}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000c000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r7}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0800000000000000000891000000000000f9ffff8dca76d97ec1a43404073ba1fe272065ee58ed1870f49e59b3ef3394ff9fe19a082c857670abd17a006cc50168f3b1c6d12159b166152e0f7ea56792a121093e5e9ff5665cf802aabdbd6610ac7bd4a271e4374010072166904181d8ee88e8dd5cd18c2c794cef9519f2aad2ec3a729d302c4d1b274ac64b69fb33e2083126e12b948782094a05de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000008000000001040000808597e8f52dd5229c8175873f297bafc3e3e86e8c3d41fc9c363939e1b526a17e73433cf015dd407eb7fa880ee31ca61afb7b78d751deae1ffb84a668ba6b78eb80e324368fdd843dd81a25629801ddc2ab14001edf25fce0d50307b7b7cf94c552270b9da29ba782a280bf23399366e82de13bfcbcffdae2d7adfcfca778ba829d56e2a9d13eaeffa120d25d45c6e548df2a8a9c8a6fbb9caedcd7b8b6a6876b71873121e405a3d41f7ebcbf7027e75240ef85cce615654df2c05bc60d24b40f0b35fe9f0cf2d192bbb8f929de6c7c8929b65f0389754a32b06219fbcc11c95fa232540f206ebf88135102640e19d52b13d6b46e4a2b7014bfb9775a73c1ed7dda9c936da3140350f5482b35872ee5cfd35c6154aaac8ce04b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x3, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0xa, 0x3, 0x18, 0x10}], &(0x7f0000000040)='GPL\x00', 0x7, 0x2c, &(0x7f0000000080)=""/44, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, r5, r6, r8, r9, r10, 0xffffffffffffffff, r1], 0x0, 0x10, 0x7b8f, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @dev, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r11, 0x0, 0x5, 0x0, 0x0, 0x10, @dev, @private0, 0x0, 0x0, 0x0, 0x1}}) 1.230244497s ago: executing program 1 (id=1413): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000400)=""/55}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="110000000000000000040000", @ANYRES32=r5, @ANYRES64=0x0], 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r14, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x4, &(0x7f0000000900)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000940)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x45, '\x00', r2, 0x25, r5, 0x8, &(0x7f00000009c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c80)=[r7, r8, r9, r10, r11, r12, r14, 0x1, r15], &(0x7f0000000cc0)=[{0x0, 0x5, 0x7, 0xa}, {0x5, 0x4, 0x3, 0x7}, {0x0, 0x1, 0xa, 0x4}, {0x2, 0x2, 0x8, 0x7}, {0x2, 0x2, 0xe, 0xb}], 0x10, 0xab5, @void, @value}, 0x94) setsockopt$inet_buf(r0, 0x0, 0x13, &(0x7f0000000100)="6a468411f3717c280fa14d18e533fab5575c424d8d0be58b897ec06e40bd342946087ced43201c06007377a0b3a368c81fa4652493fccb6a5f4752e09920496fa50d57feaabe7196615aa8d4b3390d454831d15287c23a6af8c3d5d8c693531705e9bc115bf950be8d9695e09075", 0x6e) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r16) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r16) recvmmsg(r16, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000005c80)=""/4100, 0x1004}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000640)=""/134, 0x86}, {&(0x7f0000000800)=""/230, 0xe6}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000006cc0)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008042, 0x0) 831.951908ms ago: executing program 4 (id=1414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000008ac0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 716.332041ms ago: executing program 1 (id=1415): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/187, 0xbb}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f0000002fc0)=""/4091, 0xffb}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x20, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="010008007000fcdbdf05010000000a000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x50) 484.213301ms ago: executing program 4 (id=1416): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000104000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c001207000000006772659214dd4a11439b512a17fd874c00100002"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 424.162809ms ago: executing program 1 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0xf65de9ab34066b9d, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x104, 0x8, 0x7, 0x801, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@generic="c58e2814546c9964ff8a20363ad561ed5a6b16a96f76521543726388e1fb63cf094b51a7883bad8f1e33a217483abae9ff40d7fa9c0f8baba756a9497898ed1d946f5ab628f9d98dd10ad9bd888c39768f2ff9f366018c98547d8a7ffc073e88223723933b257f15a1327402ae029f86a4c03fd1cf0fcb1c37c5dc892dc41dc19cb3a434433ff72e5e30a1583fefeb63edc59df46723425a736d6f741bca821d93a91d76417cc2439643b8bd1de590b872355a7e5009d80a80c1820eae8868701bc5d11ac80f7a3ef927d8cd5233dc8e7f45c6ce12ba", @typed={0x8, 0x62, 0x0, 0x0, @uid=0xee00}, @nested={0x10, 0xd3, 0x0, 0x1, [@nested={0x4, 0x78}, @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@local}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x41) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', r6, 0x80, 0x7, 0x3, 0x8, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x3c, 0xb4, 0x3, 0xa, [{@multicast2, 0x6}, {@private=0xa010101, 0x401}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@multicast1, 0x80000000}, {@loopback, 0x4}, {@private=0xa010102}, {@local, 0x3}]}, @ssrr={0x89, 0xf, 0x37, [@local, @rand_addr=0x64010100, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r10, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000740)={r2, r10}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r8, 0x800, 0x10000, 0xfffffffd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x80}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x20002000) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002cbd7000fcdbdf256a00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000500d200060000000a00060008021100"/32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) 291.787274ms ago: executing program 1 (id=1418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f00000000c0)={0x6, 'pimreg1\x00', {0x6}, 0x280}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000100)) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d616373656330"], 0x40}}, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'nicvf0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xfff, 0x2ec66469, [0x6, 0x72]}}) 224.195232ms ago: executing program 4 (id=1419): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) 0s ago: executing program 4 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_cmd={0x1f, 0x6, 0x762c, 0x6, 0x0, 0x0, 0x6, 0x1, 0xc, 0xba, 0x8, 0x2, 0x3, 0x1, 0xfd, 0x680, [0x0, 0xfffffffc]}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): eout [ 195.224342][ T9816] Cannot find add_set index 0 as target [ 195.552954][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.560837][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.717869][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.757140][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.116017][ T9858] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 196.132780][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.297746][ T9871] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 196.306293][ T9871] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1002'. [ 196.316375][ T9864] bond1: (slave gretap1): making interface the new active one [ 196.317208][ T9871] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 196.333402][ T9871] netlink: 'syz.1.1002': attribute type 2 has an invalid length. [ 196.339619][ T9864] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 196.341981][ T9871] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1002'. [ 196.477347][ T8662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.575415][ T8662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.627006][ T9561] veth0_vlan: entered promiscuous mode [ 196.648646][ T9561] veth1_vlan: entered promiscuous mode [ 196.681825][ T9561] veth0_macvtap: entered promiscuous mode [ 196.691881][ T9561] veth1_macvtap: entered promiscuous mode [ 196.711706][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.723092][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.733749][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.744857][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.757261][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.786824][ T8662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.803179][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.814342][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.824374][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.835575][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.847362][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.863969][ T9561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.874385][ T9561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.883637][ T9561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.893932][ T9561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.918529][ T8662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.000229][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.008522][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.048931][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.062455][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.178124][ T8662] bridge_slave_1: left allmulticast mode [ 197.197952][ T8662] bridge_slave_1: left promiscuous mode [ 197.228169][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.256501][ T9877] netlink: 'syz.3.1004': attribute type 23 has an invalid length. [ 197.280510][ T8662] bridge_slave_0: left allmulticast mode [ 197.291638][ T5832] Bluetooth: hci3: command 0x041b tx timeout [ 197.315254][ T8662] bridge_slave_0: left promiscuous mode [ 197.337097][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.978030][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.987592][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.996709][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.010403][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.020970][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.227351][ T8662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.238560][ T8662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.249675][ T8662] bond0 (unregistering): Released all slaves [ 198.694327][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 198.979081][ T8662] hsr_slave_0: left promiscuous mode [ 199.001557][ T8662] hsr_slave_1: left promiscuous mode [ 199.008237][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.024263][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.061264][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.068758][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.153746][ T9942] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 199.213054][ T8662] veth1_macvtap: left promiscuous mode [ 199.218689][ T8662] veth0_macvtap: left promiscuous mode [ 199.251302][ T8662] veth1_vlan: left promiscuous mode [ 199.256735][ T8662] veth0_vlan: left promiscuous mode [ 199.446278][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 199.674958][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 199.775244][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.798309][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.810937][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.820433][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.829401][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.077287][ T8662] team0 (unregistering): Port device team_slave_1 removed [ 200.093452][ T5842] Bluetooth: hci2: command tx timeout [ 200.127670][ T8662] team0 (unregistering): Port device team_slave_0 removed [ 200.542834][ T9963] team0: entered promiscuous mode [ 200.640946][ T9964] vlan0: entered allmulticast mode [ 200.654771][ T9964] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 200.694874][ T9963] team0: left promiscuous mode [ 201.025040][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.099057][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.118732][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 201.181717][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.208970][ T9994] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 201.367154][ T8662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.615511][T10003] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 201.648553][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 201.671750][ T8662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.690424][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.705502][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.706098][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1024'. [ 201.715648][ T9911] bridge_slave_0: entered allmulticast mode [ 201.730593][ T9911] bridge_slave_0: entered promiscuous mode [ 201.782011][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 201.867689][ T8662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.927138][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.935489][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.935998][ T5842] Bluetooth: hci3: command tx timeout [ 201.943347][ T9911] bridge_slave_1: entered allmulticast mode [ 201.957281][ T9911] bridge_slave_1: entered promiscuous mode [ 202.130459][ T8662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.173685][ T5842] Bluetooth: hci2: command tx timeout [ 202.189871][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.230604][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.360471][T10045] netlink: 'syz.1.1032': attribute type 9 has an invalid length. [ 202.374753][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 202.418268][ T9911] team0: Port device team_slave_0 added [ 202.438025][ T9911] team0: Port device team_slave_1 added [ 202.480131][ T9966] chnl_net:caif_netlink_parms(): no params data found [ 202.507719][T10052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1034'. [ 202.568601][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.579807][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.613390][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.636090][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.664065][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.741430][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.793705][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1037'. [ 202.906326][ T47] IPVS: starting estimator thread 0... [ 203.001711][T10066] IPVS: using max 26 ests per chain, 62400 per kthread [ 203.169804][ T9911] hsr_slave_0: entered promiscuous mode [ 203.202038][ T9911] hsr_slave_1: entered promiscuous mode [ 203.208693][ T9911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.217739][ T9911] Cannot create hsr debugfs directory [ 203.611193][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.634516][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.646018][ T9966] bridge_slave_0: entered allmulticast mode [ 203.654518][ T9966] bridge_slave_0: entered promiscuous mode [ 203.677227][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.688741][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.699110][ T9966] bridge_slave_1: entered allmulticast mode [ 203.713509][ T9966] bridge_slave_1: entered promiscuous mode [ 203.728423][ T8662] bridge_slave_1: left allmulticast mode [ 203.734739][ T8662] bridge_slave_1: left promiscuous mode [ 203.745046][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.773116][ T8662] bridge_slave_0: left allmulticast mode [ 203.787168][ T8662] bridge_slave_0: left promiscuous mode [ 203.798795][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.011466][ T5842] Bluetooth: hci3: command tx timeout [ 204.098364][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'. [ 204.252176][ T5842] Bluetooth: hci2: command tx timeout [ 204.495347][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.505612][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.515742][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.525799][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.546615][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.637503][ T8662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.648889][ T8662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.664303][ T8662] bond0 (unregistering): Released all slaves [ 204.848969][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.858858][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.956561][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.969762][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.013656][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 205.214136][ T8662] hsr_slave_0: left promiscuous mode [ 205.228749][ T8662] hsr_slave_1: left promiscuous mode [ 205.240163][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.268257][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.295792][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.306612][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.319737][T10128] sctp: [Deprecated]: syz.1.1049 (pid 10128) Use of int in max_burst socket option deprecated. [ 205.319737][T10128] Use struct sctp_assoc_value instead [ 205.347516][ T8662] veth1_macvtap: left promiscuous mode [ 205.353383][ T8662] veth0_macvtap: left promiscuous mode [ 205.359137][ T8662] veth1_vlan: left promiscuous mode [ 205.364801][ T8662] veth0_vlan: left promiscuous mode [ 205.410373][T10130] sctp: [Deprecated]: syz.4.1050 (pid 10130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.410373][T10130] Use struct sctp_sack_info instead [ 205.837288][ T8662] team0 (unregistering): Port device team_slave_1 removed [ 205.877334][ T8662] team0 (unregistering): Port device team_slave_0 removed [ 206.091405][ T5832] Bluetooth: hci3: command tx timeout [ 206.268986][ T9966] team0: Port device team_slave_0 added [ 206.337686][ T5832] Bluetooth: hci2: command tx timeout [ 206.373860][ T9966] team0: Port device team_slave_1 added [ 206.654603][ T5832] Bluetooth: hci4: command tx timeout [ 206.732602][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.740043][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.827731][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.830215][T10149] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.914176][T10149] netlink: 'syz.4.1054': attribute type 32 has an invalid length. [ 206.967637][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.996233][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.032528][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.249396][ T9966] hsr_slave_0: entered promiscuous mode [ 207.273408][ T9966] hsr_slave_1: entered promiscuous mode [ 207.294206][ T9966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.305827][ T9966] Cannot create hsr debugfs directory [ 207.507271][ T9911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.547850][ T9911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.599895][ T9911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.625536][ T9911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.678516][T10116] chnl_net:caif_netlink_parms(): no params data found [ 207.949435][T10116] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.956949][T10116] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.969761][T10116] bridge_slave_0: entered allmulticast mode [ 207.979201][T10116] bridge_slave_0: entered promiscuous mode [ 208.028897][T10116] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.047882][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.064698][T10116] bridge_slave_1: entered allmulticast mode [ 208.073007][T10116] bridge_slave_1: entered promiscuous mode [ 208.171873][ T5832] Bluetooth: hci3: command tx timeout [ 208.201418][T10116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.234535][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1060'. [ 208.251115][T10116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.334995][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.384881][T10116] team0: Port device team_slave_0 added [ 208.395714][T10116] team0: Port device team_slave_1 added [ 208.421648][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1062'. [ 208.499591][T10116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.508126][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.534880][T10116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.550238][T10116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.573267][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.599813][T10116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.716748][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.734478][ T5832] Bluetooth: hci4: command tx timeout [ 208.798630][ T9966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.836804][T10116] hsr_slave_0: entered promiscuous mode [ 208.844335][T10116] hsr_slave_1: entered promiscuous mode [ 208.850813][T10116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.859104][T10116] Cannot create hsr debugfs directory [ 208.867402][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.874560][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.895318][ T9966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.914253][ T9966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.932840][ T9966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.999062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.006306][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.296742][T10217] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1069'. [ 209.307293][T10217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.312132][T10219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.354419][ T9911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.435688][T10116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.549933][T10116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.715851][T10116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.811932][T10233] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 209.928861][T10116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.059729][ T9966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.103389][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.218960][ T9966] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.360626][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.367970][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.393190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.400393][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.567636][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1075'. [ 210.607383][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 210.638344][T10116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.805835][T10116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.812796][ T5845] Bluetooth: hci4: command tx timeout [ 210.824479][T10116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.838961][ T9911] veth0_vlan: entered promiscuous mode [ 210.846919][T10116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.947948][ T9911] veth1_vlan: entered promiscuous mode [ 211.050786][ T9911] veth0_macvtap: entered promiscuous mode [ 211.117836][ T9911] veth1_macvtap: entered promiscuous mode [ 211.204276][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.234839][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.256798][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.297208][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.323867][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.337836][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.377360][ T9911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.397485][ T9911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.424113][ T9911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.445004][ T9911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.476766][T10116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.578932][T10116] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.595528][ T9966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.691809][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 211.699650][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.736173][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.743382][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.750260][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 211.790619][T10290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.813526][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.820742][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.844348][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.867964][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.027690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.058006][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.147930][ T9966] veth0_vlan: entered promiscuous mode [ 212.240524][ T9966] veth1_vlan: entered promiscuous mode [ 212.440385][ T9966] veth0_macvtap: entered promiscuous mode [ 212.507157][ T9966] veth1_macvtap: entered promiscuous mode [ 212.628597][ T9181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.729691][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.791223][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.831099][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.851121][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.876210][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.891465][ T5832] Bluetooth: hci4: command tx timeout [ 212.948473][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.959323][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.976940][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.988522][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.008679][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.050282][ T9181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.078998][T10116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.096134][ T9966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.115203][ T9966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.127478][ T9966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.139218][ T9966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.193827][ T9181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.260486][ T9181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.434977][T10116] veth0_vlan: entered promiscuous mode [ 213.503138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.504731][T10116] veth1_vlan: entered promiscuous mode [ 213.524578][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.712735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.720631][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.767696][T10344] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1086'. [ 213.814220][T10344] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1086'. [ 213.841527][ T9181] bridge_slave_1: left allmulticast mode [ 213.847254][ T9181] bridge_slave_1: left promiscuous mode [ 213.873966][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.952283][ T9181] bridge_slave_0: left allmulticast mode [ 213.958004][ T9181] bridge_slave_0: left promiscuous mode [ 213.986758][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.223409][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1090'. [ 214.370260][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.380873][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.391860][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.402160][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.418337][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.811954][ T9181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.827623][ T9181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.842922][ T9181] bond0 (unregistering): Released all slaves [ 214.868222][T10354] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1089'. [ 214.948231][T10116] veth0_macvtap: entered promiscuous mode [ 214.992302][T10116] veth1_macvtap: entered promiscuous mode [ 215.128802][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.140795][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.151284][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.171096][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.189138][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.201115][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.216811][T10116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.466267][T10397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1094'. [ 215.505977][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.543260][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.576353][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.605622][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.621315][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.639776][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.678728][T10116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.869249][T10116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.894229][T10116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.932048][T10116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.940833][T10116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.151807][ T9181] hsr_slave_0: left promiscuous mode [ 216.157919][ T9181] hsr_slave_1: left promiscuous mode [ 216.174139][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.212138][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.249706][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.271887][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.325562][ T9181] veth1_macvtap: left promiscuous mode [ 216.336248][ T9181] veth0_macvtap: left promiscuous mode [ 216.342517][ T9181] veth1_vlan: left promiscuous mode [ 216.348001][ T9181] veth0_vlan: left promiscuous mode [ 216.492038][ T5832] Bluetooth: hci2: command tx timeout [ 216.898691][ T9181] team0 (unregistering): Port device team_slave_1 removed [ 216.958241][ T9181] team0 (unregistering): Port device team_slave_0 removed [ 217.106730][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.116403][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.132508][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.152773][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.160777][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.665409][T10367] chnl_net:caif_netlink_parms(): no params data found [ 218.174742][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.193030][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.356384][T10462] batadv_slave_1: entered promiscuous mode [ 218.371364][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.382210][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.389541][T10367] bridge_slave_0: entered allmulticast mode [ 218.403038][T10367] bridge_slave_0: entered promiscuous mode [ 218.489409][T10470] macvlan2: entered promiscuous mode [ 218.500667][T10470] macvlan2: entered allmulticast mode [ 218.507987][T10367] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.515782][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.523500][T10367] bridge_slave_1: entered allmulticast mode [ 218.530780][T10367] bridge_slave_1: entered promiscuous mode [ 218.571628][ T5832] Bluetooth: hci2: command tx timeout [ 218.591135][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.599008][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.612250][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 218.724938][T10367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.797007][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 218.815635][T10367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.906073][T10474] veth1_macvtap: left promiscuous mode [ 218.912005][T10474] macsec0: entered allmulticast mode [ 218.919939][T10427] chnl_net:caif_netlink_parms(): no params data found [ 218.950631][T10475] veth1_macvtap: entered promiscuous mode [ 218.956586][T10475] veth1_macvtap: entered allmulticast mode [ 218.964405][T10475] macsec0: left allmulticast mode [ 218.969585][T10475] veth1_macvtap: left allmulticast mode [ 219.038083][T10367] team0: Port device team_slave_0 added [ 219.105241][T10480] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1108'. [ 219.122393][T10367] team0: Port device team_slave_1 added [ 219.178471][ T9181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.217306][ T5832] Bluetooth: hci3: command tx timeout [ 219.533171][ T9181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.557726][T10367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.575622][T10496] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 219.588756][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.625889][T10367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.695500][T10494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1111'. [ 219.817237][ T9181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.917725][T10367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.952920][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.991227][T10367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.004548][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.017556][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.051391][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.076819][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.094540][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.217976][ T9181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.235429][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1115'. [ 220.261743][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.269857][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.278863][T10427] bridge_slave_0: entered allmulticast mode [ 220.293301][T10427] bridge_slave_0: entered promiscuous mode [ 220.301209][T10522] netlink: 'syz.4.1114': attribute type 4 has an invalid length. [ 220.310164][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.353218][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.353653][T10529] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 220.360736][T10427] bridge_slave_1: entered allmulticast mode [ 220.384355][T10427] bridge_slave_1: entered promiscuous mode [ 220.514018][T10533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.625627][T10367] hsr_slave_0: entered promiscuous mode [ 220.633798][T10367] hsr_slave_1: entered promiscuous mode [ 220.645977][T10367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.653858][ T5832] Bluetooth: hci2: command tx timeout [ 220.676184][T10367] Cannot create hsr debugfs directory [ 220.720687][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.797268][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.087360][T10427] team0: Port device team_slave_0 added [ 221.127527][T10427] team0: Port device team_slave_1 added [ 221.129176][T10550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.170653][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.178002][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.205597][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.218304][ T9181] bridge_slave_1: left allmulticast mode [ 221.225096][ T9181] bridge_slave_1: left promiscuous mode [ 221.231049][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.242589][ T9181] bridge_slave_0: left allmulticast mode [ 221.248293][ T9181] bridge_slave_0: left promiscuous mode [ 221.254261][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.297014][ T5832] Bluetooth: hci3: command tx timeout [ 221.404789][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 221.481440][T10559] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1123'. [ 221.498359][T10559] unsupported nlmsg_type 40 [ 221.752424][ T9181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.764517][ T9181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.776053][ T9181] bond0 (unregistering): Released all slaves [ 221.847040][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.857021][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.885845][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.124537][T10567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1126'. [ 222.143239][T10567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1126'. [ 222.171218][ T5832] Bluetooth: hci4: command tx timeout [ 222.205499][T10427] hsr_slave_0: entered promiscuous mode [ 222.212588][T10427] hsr_slave_1: entered promiscuous mode [ 222.219041][T10427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.232674][T10427] Cannot create hsr debugfs directory [ 222.505240][T10579] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1129'. [ 222.527364][ T9181] hsr_slave_0: left promiscuous mode [ 222.538333][ T9181] hsr_slave_1: left promiscuous mode [ 222.545974][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.553821][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.564390][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.578591][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.600759][ T9181] veth1_macvtap: left promiscuous mode [ 222.606527][ T9181] veth0_macvtap: left promiscuous mode [ 222.613369][ T9181] veth1_vlan: left promiscuous mode [ 222.618780][ T9181] veth0_vlan: left promiscuous mode [ 222.737412][ T5832] Bluetooth: hci2: command tx timeout [ 223.068965][ T9181] team0 (unregistering): Port device team_slave_1 removed [ 223.112959][ T9181] team0 (unregistering): Port device team_slave_0 removed [ 223.373333][ T5832] Bluetooth: hci3: command tx timeout [ 223.716503][T10507] chnl_net:caif_netlink_parms(): no params data found [ 224.144114][T10602] netlink: 'syz.4.1136': attribute type 21 has an invalid length. [ 224.162253][T10602] __nla_validate_parse: 1 callbacks suppressed [ 224.162271][T10602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1136'. [ 224.196056][T10602] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1136'. [ 224.223456][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 224.241519][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.251143][ T5832] Bluetooth: hci4: command tx timeout [ 224.261433][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.268722][T10507] bridge_slave_0: entered allmulticast mode [ 224.277550][T10507] bridge_slave_0: entered promiscuous mode [ 224.298608][T10367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.354097][T10507] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.367334][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.380129][T10507] bridge_slave_1: entered allmulticast mode [ 224.388223][T10507] bridge_slave_1: entered promiscuous mode [ 224.437458][T10367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.579780][ T9181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.633046][T10367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.650864][T10367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.694977][T10507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.717016][T10507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.769364][T10620] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 224.770021][ T9181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.948660][T10624] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 224.959043][T10624] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 224.972637][T10624] bond5: (slave vcan1): making interface the new active one [ 224.980968][T10624] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 225.009435][ T9181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.035927][T10507] team0: Port device team_slave_0 added [ 225.046879][T10507] team0: Port device team_slave_1 added [ 225.183911][ T9181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.207575][T10507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.229118][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.261694][T10507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.287691][T10507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.304635][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.336796][T10507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.454148][ T5832] Bluetooth: hci3: command tx timeout [ 225.656786][T10507] hsr_slave_0: entered promiscuous mode [ 225.667204][T10507] hsr_slave_1: entered promiscuous mode [ 225.677206][T10507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.689583][T10507] Cannot create hsr debugfs directory [ 225.838860][T10427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.860566][T10647] bridge0: port 1(batadv1) entered blocking state [ 225.867902][T10647] bridge0: port 1(batadv1) entered disabled state [ 225.876357][T10647] batadv1: entered allmulticast mode [ 225.883548][T10647] batadv1: entered promiscuous mode [ 225.951253][T10427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.978872][ T9181] bridge_slave_1: left allmulticast mode [ 225.990260][ T9181] bridge_slave_1: left promiscuous mode [ 226.014112][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.025561][ T9181] bridge_slave_0: left allmulticast mode [ 226.031662][ T9181] bridge_slave_0: left promiscuous mode [ 226.037720][T10648] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 226.037763][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.062763][T10648] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1148'. [ 226.341427][ T5832] Bluetooth: hci4: command tx timeout [ 226.351415][ T53] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 226.361378][ T53] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 226.448260][ T9181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.459782][ T9181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.470097][ T9181] bond0 (unregistering): Released all slaves [ 226.505449][T10427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.528894][T10646] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1148'. [ 226.631727][T10427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.948754][T10367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.195169][T10367] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.246168][ T9181] hsr_slave_0: left promiscuous mode [ 227.261959][T10676] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 227.281728][ T9181] hsr_slave_1: left promiscuous mode [ 227.288021][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.311211][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.319464][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.330631][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.360198][ T9181] veth1_macvtap: left promiscuous mode [ 227.365889][ T9181] veth0_macvtap: left promiscuous mode [ 227.371997][ T9181] veth1_vlan: left promiscuous mode [ 227.377374][ T9181] veth0_vlan: left promiscuous mode [ 227.866898][ T9181] team0 (unregistering): Port device team_slave_1 removed [ 227.909624][ T9181] team0 (unregistering): Port device team_slave_0 removed [ 228.324628][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.331881][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.412129][ T5832] Bluetooth: hci4: command tx timeout [ 228.419944][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.427176][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.801735][T10698] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 228.813187][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.977713][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.110813][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.118070][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.144110][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.151348][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.208865][T10713] No such timeout policy "syz1" [ 229.349302][T10723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 229.377083][T10723] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 229.386616][T10723] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1166'. [ 229.899510][ T9181] bond0 (unregistering): (slave team0): Releasing backup interface [ 229.910095][ T9181] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 229.920401][ T9181] bond0 (unregistering): Released all slaves [ 229.939603][ T9181] bond1 (unregistering): Released all slaves [ 229.960772][ T9181] bond2 (unregistering): Released all slaves [ 230.082404][ T9181] bond3 (unregistering): Released all slaves [ 230.189984][T10507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.224333][T10507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.289332][ T9181] : left promiscuous mode [ 230.324370][T10507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.347114][T10507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.394226][T10367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.452621][ T9181] tipc: Left network mode [ 231.080059][T10367] veth0_vlan: entered promiscuous mode [ 231.150790][T10367] veth1_vlan: entered promiscuous mode [ 231.307437][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.405070][ T9181] hsr_slave_0: left promiscuous mode [ 231.411358][ T9181] hsr_slave_1: left promiscuous mode [ 231.426788][ T9181] veth0_macvtap: left promiscuous mode [ 232.113702][T10367] veth0_macvtap: entered promiscuous mode [ 232.134068][T10367] veth1_macvtap: entered promiscuous mode [ 232.164973][T10507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.280226][T10507] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.323305][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.336686][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.352073][T10367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.362419][T10427] veth0_vlan: entered promiscuous mode [ 232.380963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.388208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.430456][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.452478][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.467924][T10367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.490334][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.497541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.536386][T10367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.563304][T10367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.582603][T10367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.596623][T10367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.633729][T10427] veth1_vlan: entered promiscuous mode [ 232.808492][T10427] veth0_macvtap: entered promiscuous mode [ 232.830434][ T9181] IPVS: stop unused estimator thread 0... [ 232.837170][T10427] veth1_macvtap: entered promiscuous mode [ 232.916218][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.947143][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.974735][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.996792][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.011420][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.041079][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.060725][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.073265][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.090289][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.116831][T10427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.138015][T10427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.162577][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.216998][T10427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.228409][T10427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.246272][T10427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.256399][T10427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.296733][ T8662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.325021][ T8662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.466666][T10507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.608925][T10804] team0: left allmulticast mode [ 233.617872][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.630532][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.645958][T10804] team_slave_0: left allmulticast mode [ 233.652473][T10804] team_slave_1: left allmulticast mode [ 233.658491][T10804] geneve0: left allmulticast mode [ 233.666862][T10804] team0: left promiscuous mode [ 233.673458][T10804] team_slave_0: left promiscuous mode [ 233.679086][T10804] team_slave_1: left promiscuous mode [ 233.684944][T10804] geneve0: left promiscuous mode [ 233.690323][T10804] bridge0: port 3(team0) entered disabled state [ 233.709245][T10804] bridge_slave_0: left allmulticast mode [ 233.715372][T10804] bridge_slave_0: left promiscuous mode [ 233.722517][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.737145][T10804] bridge_slave_1: left allmulticast mode [ 233.743048][T10804] bridge_slave_1: left promiscuous mode [ 233.748887][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.777832][T10804] bond0: (slave bond_slave_0): Releasing backup interface [ 233.810797][T10804] bond0: (slave bond_slave_1): Releasing backup interface [ 233.857291][T10804] team0: Port device team_slave_0 removed [ 233.902491][T10804] team0: Port device team_slave_1 removed [ 233.909448][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.922998][T10804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.937567][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.947242][T10804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.010782][T10804] team0: Port device geneve0 removed [ 234.026522][T10804] bond1: (slave gretap1): Releasing active interface [ 234.160493][ T9182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.206759][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.216721][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.242399][T10507] veth0_vlan: entered promiscuous mode [ 234.285067][ T9182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.403757][ T9182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.436510][T10507] veth1_vlan: entered promiscuous mode [ 234.497961][T10507] veth0_macvtap: entered promiscuous mode [ 234.529841][ T9182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.556612][T10507] veth1_macvtap: entered promiscuous mode [ 234.620318][T10507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.636549][T10507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.646583][T10507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.663569][T10507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.677927][T10507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.697328][T10507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.714470][T10507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.727572][T10507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.745814][T10507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.758264][T10507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.769885][T10507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.778823][T10507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.788661][T10507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.803058][T10507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.043087][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.063354][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.093798][ T9182] bridge_slave_1: left allmulticast mode [ 235.099560][ T9182] bridge_slave_1: left promiscuous mode [ 235.117262][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.128769][ T9182] bridge_slave_0: left allmulticast mode [ 235.142342][ T9182] bridge_slave_0: left promiscuous mode [ 235.148186][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.288333][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.299866][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.314789][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.330762][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.346673][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.842923][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.852063][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.858604][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.872268][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.882255][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.890034][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.890426][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.939898][ T9182] bond0 (unregistering): Released all slaves [ 236.020722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.039661][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.673259][T10842] vlan1: entered allmulticast mode [ 236.683101][T10842] veth0_vlan: entered allmulticast mode [ 236.875122][ T9182] hsr_slave_0: left promiscuous mode [ 236.911221][ T9182] hsr_slave_1: left promiscuous mode [ 236.931324][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.938868][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.987572][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.001091][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.039828][ T9182] veth1_macvtap: left promiscuous mode [ 237.063581][ T9182] veth0_macvtap: left promiscuous mode [ 237.069389][ T9182] veth1_vlan: left promiscuous mode [ 237.091224][ T9182] veth0_vlan: left promiscuous mode [ 237.118055][T10830] infiniband syz0: set down [ 237.133098][T10830] infiniband syz0: added bridge_slave_0 [ 237.140933][T10830] syz0: rxe_create_cq: returned err = -12 [ 237.153370][T10830] infiniband syz0: Couldn't create ib_mad CQ [ 237.159624][T10830] infiniband syz0: Couldn't open port 1 [ 237.259824][T10830] RDS/IB: syz0: added [ 237.272409][T10830] smc: adding ib device syz0 with port count 1 [ 237.290375][T10830] smc: ib device syz0 port 1 has pnetid [ 237.378262][T10854] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 237.452552][ T5832] Bluetooth: hci2: command tx timeout [ 237.666663][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.684160][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.695002][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.708512][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.718381][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.859956][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 237.899040][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 237.941051][ T5842] Bluetooth: hci3: command tx timeout [ 238.728122][T10863] team0: Mode changed to "loadbalance" [ 238.846947][T10868] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1191'. [ 238.980278][T10825] chnl_net:caif_netlink_parms(): no params data found [ 239.052458][T10813] chnl_net:caif_netlink_parms(): no params data found [ 239.536909][ T5842] Bluetooth: hci2: command tx timeout [ 239.718785][ T9182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.751761][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.770550][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.779413][ T5842] Bluetooth: hci4: command tx timeout [ 239.789829][T10813] bridge_slave_0: entered allmulticast mode [ 239.802659][T10813] bridge_slave_0: entered promiscuous mode [ 239.822092][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.829272][T10825] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.841535][T10825] bridge_slave_0: entered allmulticast mode [ 239.849515][T10825] bridge_slave_0: entered promiscuous mode [ 239.887965][ T9182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.908060][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.918644][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.927399][T10813] bridge_slave_1: entered allmulticast mode [ 239.951112][T10813] bridge_slave_1: entered promiscuous mode [ 239.964602][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.980970][T10825] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.007199][T10825] bridge_slave_1: entered allmulticast mode [ 240.024051][ T5842] Bluetooth: hci3: command tx timeout [ 240.035701][T10825] bridge_slave_1: entered promiscuous mode [ 240.159638][ T9182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.202553][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.258655][ T9182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.365267][T10825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.390148][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.455929][T10825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.722776][T10813] team0: Port device team_slave_0 added [ 240.753261][T10825] team0: Port device team_slave_0 added [ 240.823878][T10927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 240.825695][T10813] team0: Port device team_slave_1 added [ 240.909530][T10825] team0: Port device team_slave_1 added [ 241.050791][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1199'. [ 241.113474][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.120487][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.181161][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.297492][T10825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.316146][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.353415][T10825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.367602][T10825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.375055][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.401907][T10825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.413909][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.420880][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.447184][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.599730][ T9182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.611841][ T5842] Bluetooth: hci2: command tx timeout [ 241.613445][T10940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 241.794990][T10825] hsr_slave_0: entered promiscuous mode [ 241.812234][T10825] hsr_slave_1: entered promiscuous mode [ 241.818695][T10825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.828367][T10825] Cannot create hsr debugfs directory [ 241.840839][T10813] hsr_slave_0: entered promiscuous mode [ 241.851196][ T5842] Bluetooth: hci4: command tx timeout [ 241.857569][T10813] hsr_slave_1: entered promiscuous mode [ 241.864275][T10813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.872538][T10813] Cannot create hsr debugfs directory [ 241.932538][ T9182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.079749][ T9182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.098398][ T5842] Bluetooth: hci3: command tx timeout [ 242.287442][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1204'. [ 242.450009][ T9182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.830643][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 242.832651][T10858] chnl_net:caif_netlink_parms(): no params data found [ 242.903425][T10972] can: request_module (can-proto-4) failed. [ 243.164397][T10990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1210'. [ 243.243107][T10992] Bluetooth: MGMT ver 1.23 [ 243.266526][ T5842] block nbd0: Receive control failed (result -32) [ 243.459701][T11001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1214'. [ 243.497483][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.506818][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.515322][T10858] bridge_slave_0: entered allmulticast mode [ 243.529475][T10858] bridge_slave_0: entered promiscuous mode [ 243.637681][T10858] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.644982][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.659550][T10858] bridge_slave_1: entered allmulticast mode [ 243.667740][T10858] bridge_slave_1: entered promiscuous mode [ 243.691398][ T5842] Bluetooth: hci2: command tx timeout [ 243.693796][T11006] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 243.729520][T11006] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 243.761095][T11006] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 243.907420][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.918671][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.931501][ T5842] Bluetooth: hci4: command tx timeout [ 243.939278][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.958867][ T9182] bridge_slave_1: left allmulticast mode [ 243.965446][ T9182] bridge_slave_1: left promiscuous mode [ 243.977250][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.987171][ T9182] bridge_slave_0: left allmulticast mode [ 243.993532][ T9182] bridge_slave_0: left promiscuous mode [ 243.999327][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.009973][ T9182] bridge_slave_1: left allmulticast mode [ 244.018347][ T9182] bridge_slave_1: left promiscuous mode [ 244.024768][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.039209][ T9182] bridge_slave_0: left allmulticast mode [ 244.045513][ T9182] bridge_slave_0: left promiscuous mode [ 244.053516][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.187263][ T5842] Bluetooth: hci3: command tx timeout [ 244.658209][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.669682][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.680841][ T9182] bond0 (unregistering): Released all slaves [ 244.776162][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.787572][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.797853][ T9182] bond0 (unregistering): Released all slaves [ 244.843114][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.011892][T10858] team0: Port device team_slave_0 added [ 245.033924][T10858] team0: Port device team_slave_1 added [ 245.356639][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.365898][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.394067][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.413948][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.432091][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.465085][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.489690][T11036] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 245.498955][T11036] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1224'. [ 245.542540][T11033] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 245.705789][T10813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.784490][T10858] hsr_slave_0: entered promiscuous mode [ 245.791588][T10858] hsr_slave_1: entered promiscuous mode [ 245.797821][T10858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.807465][T10858] Cannot create hsr debugfs directory [ 245.823794][T10813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.849918][T10813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.928035][T10813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.005894][T11044] netlink: 'syz.4.1227': attribute type 1 has an invalid length. [ 246.025654][ T5842] Bluetooth: hci4: command tx timeout [ 246.307351][T11047] batadv_slave_0: entered promiscuous mode [ 246.546950][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 246.564335][T11064] x_tables: duplicate underflow at hook 1 [ 246.646616][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1230'. [ 247.101951][ T9182] hsr_slave_0: left promiscuous mode [ 247.119601][ T9182] hsr_slave_1: left promiscuous mode [ 247.126290][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.138927][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.149672][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.158910][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.174659][ T9182] hsr_slave_0: left promiscuous mode [ 247.181586][ T9182] hsr_slave_1: left promiscuous mode [ 247.187444][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.196315][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.205219][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.213109][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.250553][ T9182] veth1_macvtap: left promiscuous mode [ 247.258019][ T9182] veth0_macvtap: left promiscuous mode [ 247.264404][ T9182] veth1_vlan: left promiscuous mode [ 247.271198][ T9182] veth0_vlan: left promiscuous mode [ 247.278516][ T9182] veth1_macvtap: left promiscuous mode [ 247.284161][ T9182] veth0_macvtap: left promiscuous mode [ 247.289755][ T9182] veth1_vlan: left promiscuous mode [ 247.301260][ T9182] veth0_vlan: left promiscuous mode [ 247.884779][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 247.926282][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 248.673303][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 248.719277][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 249.206304][T10825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.373333][T10825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.406103][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.508144][T10825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.542955][T10825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.900447][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.964556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.971812][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.044390][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.051630][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.435125][T10858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.478105][T10825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.493649][T10858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.526748][T10858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.565801][T10858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.607865][T10825] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.671638][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.678900][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.723168][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.730411][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.916267][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.079765][T10813] veth0_vlan: entered promiscuous mode [ 251.129001][T10813] veth1_vlan: entered promiscuous mode [ 251.186613][T10858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.269920][T11164] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 251.287822][T10858] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.308238][T11164] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 251.340666][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.347874][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.408022][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.415257][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.512420][T10813] veth0_macvtap: entered promiscuous mode [ 251.588519][T10813] veth1_macvtap: entered promiscuous mode [ 251.610107][T11171] pim6reg1: entered promiscuous mode [ 251.618106][T11171] pim6reg1: entered allmulticast mode [ 251.692504][T10825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.765316][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.836776][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.864852][T10813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.879297][T10813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.890420][T10813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.904501][T10813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.914771][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 252.202342][T10825] veth0_vlan: entered promiscuous mode [ 252.332856][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.345108][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.376431][T10825] veth1_vlan: entered promiscuous mode [ 252.557470][T10858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.575539][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.596291][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.620284][T10825] veth0_macvtap: entered promiscuous mode [ 252.678554][T10825] veth1_macvtap: entered promiscuous mode [ 252.734866][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1257'. [ 252.754631][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1257'. [ 252.860923][T10858] veth0_vlan: entered promiscuous mode [ 252.906520][T10825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.930694][T10825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.952967][T10825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.964603][T10858] veth1_vlan: entered promiscuous mode [ 252.992243][T10825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.004390][T10825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.016824][T10825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.141997][T11205] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 253.197643][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.287826][T10825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.311767][T10825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.320622][T10825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.356083][T10825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.435062][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.543912][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.593859][T10858] veth0_macvtap: entered promiscuous mode [ 253.632084][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.700398][T10858] veth1_macvtap: entered promiscuous mode [ 253.779187][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.798290][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.809619][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.820293][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.833143][T10858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.866508][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.891206][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.914796][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.926069][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.937174][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.948638][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.959705][T10858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.038918][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.048476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.057330][T10858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.066409][T10858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.075929][T10858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.085996][T10858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.147601][ T66] bridge_slave_1: left allmulticast mode [ 254.157816][ T66] bridge_slave_1: left promiscuous mode [ 254.166574][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.183427][ T66] bridge_slave_0: left allmulticast mode [ 254.189161][ T66] bridge_slave_0: left promiscuous mode [ 254.196846][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.491338][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 254.688148][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.697445][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.706571][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.730858][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.745023][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.796745][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.807750][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.819689][ T66] bond0 (unregistering): Released all slaves [ 255.310960][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1263'. [ 255.545311][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.583133][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.702141][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.709115][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.837521][ T8662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.866559][ T8662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.583753][ T66] hsr_slave_0: left promiscuous mode [ 256.621106][ T66] hsr_slave_1: left promiscuous mode [ 256.632091][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.675229][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.702774][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.710329][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.792812][ T66] veth1_macvtap: left promiscuous mode [ 256.811966][ T5832] Bluetooth: hci2: command tx timeout [ 256.818414][ T66] veth0_macvtap: left promiscuous mode [ 256.824286][ T66] veth1_vlan: left promiscuous mode [ 256.829659][ T66] veth0_vlan: left promiscuous mode [ 257.088300][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.097803][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.109193][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.135790][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.151233][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.525899][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1267'. [ 257.783249][ T66] team0 (unregistering): Port device team_slave_1 removed [ 257.827997][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.843539][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.857933][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.859611][T11333] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 257.873047][T11333] netlink: 'syz.4.1271': attribute type 3 has an invalid length. [ 257.891383][T11333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1271'. [ 257.900895][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.917324][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.933631][ T66] team0 (unregistering): Port device team_slave_0 removed [ 258.891446][ T5845] Bluetooth: hci2: command tx timeout [ 259.002297][T11254] chnl_net:caif_netlink_parms(): no params data found [ 259.211786][ T5845] Bluetooth: hci3: command tx timeout [ 259.314350][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.449853][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.615993][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.669874][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.677600][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.684993][T11254] bridge_slave_0: entered allmulticast mode [ 259.693054][T11254] bridge_slave_0: entered promiscuous mode [ 259.705825][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.713516][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.720777][T11254] bridge_slave_1: entered allmulticast mode [ 259.729396][T11254] bridge_slave_1: entered promiscuous mode [ 259.788266][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.927588][T11377] bond0: entered promiscuous mode [ 259.960369][T11377] batadv0: entered promiscuous mode [ 259.979291][T11377] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 260.002539][T11377] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 260.021233][ T5845] Bluetooth: hci4: command tx timeout [ 260.028699][T11377] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 260.044683][T11377] bond0: left promiscuous mode [ 260.069255][T11377] batadv0: left promiscuous mode [ 260.190946][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.229936][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.462509][T11254] team0: Port device team_slave_0 added [ 260.518157][T11254] team0: Port device team_slave_1 added [ 260.649453][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1283'. [ 260.676657][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1283'. [ 260.765477][T11413] erspan0: entered promiscuous mode [ 260.777990][T11413] erspan0: left promiscuous mode [ 260.802520][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.809523][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.839214][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.949962][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.963104][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.973610][ T5845] Bluetooth: hci2: command tx timeout [ 261.002027][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.014560][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 261.079207][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 261.178651][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.205077][T11330] chnl_net:caif_netlink_parms(): no params data found [ 261.268305][T11254] hsr_slave_0: entered promiscuous mode [ 261.279434][T11254] hsr_slave_1: entered promiscuous mode [ 261.289009][T11254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.291526][ T5845] Bluetooth: hci3: command 0x041b tx timeout [ 261.300697][T11254] Cannot create hsr debugfs directory [ 261.446758][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.688332][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.883925][T11311] chnl_net:caif_netlink_parms(): no params data found [ 261.983006][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.092009][ T5845] Bluetooth: hci4: command tx timeout [ 262.370010][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.383802][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.395310][T11330] bridge_slave_0: entered allmulticast mode [ 262.405599][T11330] bridge_slave_0: entered promiscuous mode [ 262.456617][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.481623][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.502186][T11330] bridge_slave_1: entered allmulticast mode [ 262.525990][T11330] bridge_slave_1: entered promiscuous mode [ 262.698704][T11330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.858617][T11330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.876266][T11515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'. [ 262.936045][T11516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'. [ 263.026624][T11330] team0: Port device team_slave_0 added [ 263.051276][ T5845] Bluetooth: hci2: command tx timeout [ 263.064038][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.071760][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.078978][T11311] bridge_slave_0: entered allmulticast mode [ 263.087066][T11311] bridge_slave_0: entered promiscuous mode [ 263.095059][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.102318][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.109565][T11311] bridge_slave_1: entered allmulticast mode [ 263.118129][T11311] bridge_slave_1: entered promiscuous mode [ 263.124694][T11519] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 263.161121][T11519] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1299'. [ 263.169590][T11330] team0: Port device team_slave_1 added [ 263.293245][ T66] bridge_slave_1: left allmulticast mode [ 263.308046][ T66] bridge_slave_1: left promiscuous mode [ 263.315642][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.330788][ T66] bridge_slave_0: left allmulticast mode [ 263.337962][ T66] bridge_slave_0: left promiscuous mode [ 263.344124][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.357166][ T66] bridge_slave_1: left allmulticast mode [ 263.363129][ T66] bridge_slave_1: left promiscuous mode [ 263.368916][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.371254][ T5845] Bluetooth: hci3: command 0x041b tx timeout [ 263.384644][ T66] bridge_slave_0: left allmulticast mode [ 263.391722][ T66] bridge_slave_0: left promiscuous mode [ 263.397463][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.043470][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.060529][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.078436][ T66] bond0 (unregistering): Released all slaves [ 264.171301][ T5845] Bluetooth: hci4: command tx timeout [ 264.249495][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.271954][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.292236][ T66] bond0 (unregistering): Released all slaves [ 264.311235][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.321650][T11330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.328636][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.355816][T11330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.537285][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.547371][T11330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.555103][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.584189][T11330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.966622][T11311] team0: Port device team_slave_0 added [ 265.057551][T11311] team0: Port device team_slave_1 added [ 265.140232][T11551] netlink: 'syz.4.1306': attribute type 7 has an invalid length. [ 265.224112][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.242688][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.276846][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.294200][T11330] hsr_slave_0: entered promiscuous mode [ 265.300848][T11330] hsr_slave_1: entered promiscuous mode [ 265.309998][T11330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.317720][T11330] Cannot create hsr debugfs directory [ 265.328484][T11551] : entered promiscuous mode [ 265.358362][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.375796][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.405257][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.456160][ T5845] Bluetooth: hci3: command 0x041b tx timeout [ 266.054796][T11311] hsr_slave_0: entered promiscuous mode [ 266.075600][T11311] hsr_slave_1: entered promiscuous mode [ 266.097286][T11311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.121422][T11311] Cannot create hsr debugfs directory [ 266.252691][ T5845] Bluetooth: hci4: command tx timeout [ 266.270652][T11588] pim6reg: entered allmulticast mode [ 266.308165][T11590] pim6reg: left allmulticast mode [ 266.498789][ T66] hsr_slave_0: left promiscuous mode [ 266.509985][ T66] hsr_slave_1: left promiscuous mode [ 266.517756][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.530064][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.540145][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.555232][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.577480][ T66] hsr_slave_0: left promiscuous mode [ 266.586140][ T66] hsr_slave_1: left promiscuous mode [ 266.597301][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.608215][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.620124][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.630423][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.679857][ T66] veth1_macvtap: left promiscuous mode [ 266.686448][ T66] veth0_macvtap: left promiscuous mode [ 266.692276][ T66] veth1_vlan: left promiscuous mode [ 266.697597][ T66] veth0_vlan: left promiscuous mode [ 266.704418][ T66] veth1_macvtap: left promiscuous mode [ 266.709980][ T66] veth0_macvtap: left promiscuous mode [ 266.716056][ T66] veth1_vlan: left promiscuous mode [ 266.721454][ T66] veth0_vlan: left promiscuous mode [ 267.258286][ T66] team0 (unregistering): Port device team_slave_1 removed [ 267.299575][ T66] team0 (unregistering): Port device team_slave_0 removed [ 267.531317][ T5845] Bluetooth: hci3: command 0x041b tx timeout [ 268.015829][ T66] team0 (unregistering): Port device team_slave_1 removed [ 268.050702][ T66] team0 (unregistering): Port device team_slave_0 removed [ 268.504686][T11254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.540021][T11254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.589566][T11254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.670865][T11254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.747339][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 268.756573][T11595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 269.550816][T11613] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 269.831875][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.980242][T11623] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.1320'. [ 269.997645][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.057451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.064649][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.097842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.105040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.438724][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1323'. [ 270.458583][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1323'. [ 270.550062][T11330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.601473][T11330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.696145][T11330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.726004][T11330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.886708][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.942961][T11311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.978545][T11311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.032062][T11311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.127191][T11311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.264808][T11675] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 271.356543][T11254] veth0_vlan: entered promiscuous mode [ 271.483077][T11254] veth1_vlan: entered promiscuous mode [ 271.546505][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.652226][T11689] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 271.702410][T11254] veth0_macvtap: entered promiscuous mode [ 271.744830][T11689] veth0_macvtap: left allmulticast mode [ 271.750842][T11689] veth0_macvtap: left promiscuous mode [ 271.768257][T11689] team0: Device veth0_macvtap failed to register rx_handler [ 271.809440][T11254] veth1_macvtap: entered promiscuous mode [ 271.855150][T11330] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.978017][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.985263][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.039309][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.046523][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.137916][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.188140][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.235595][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.284313][T11254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.315553][T11254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.326350][T11254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.344953][T11254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.467853][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.554910][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.562142][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.593296][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.600509][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.827112][ T9182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.839201][ T9182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.959695][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 273.005623][ T8662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.032915][ T8662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.095075][T11330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.113957][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 273.163595][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 273.266386][T11330] veth0_vlan: entered promiscuous mode [ 273.386432][T11330] veth1_vlan: entered promiscuous mode [ 273.478940][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.582843][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 273.613232][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1350'. [ 273.626585][ T9182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.764951][ T9182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.797864][T11330] veth0_macvtap: entered promiscuous mode [ 273.824232][T11330] veth1_macvtap: entered promiscuous mode [ 273.863972][ T9182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.905456][T11330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.917781][T11330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.937633][T11330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.948405][T11330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.959773][T11330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.970795][T11330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.993178][ T9182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.019009][T11330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.029428][T11330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.040695][T11330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.050949][T11330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.068746][T11311] veth0_vlan: entered promiscuous mode [ 274.141701][T11311] veth1_vlan: entered promiscuous mode [ 274.280782][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.291925][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.305530][T11311] veth0_macvtap: entered promiscuous mode [ 274.316694][ T9182] bridge_slave_1: left allmulticast mode [ 274.322755][ T9182] bridge_slave_1: left promiscuous mode [ 274.328461][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.342942][ T9182] bridge_slave_0: left allmulticast mode [ 274.349076][ T9182] bridge_slave_0: left promiscuous mode [ 274.355481][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.658559][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.674507][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.685803][ T9182] bond0 (unregistering): Released all slaves [ 274.714790][T11311] veth1_macvtap: entered promiscuous mode [ 274.738757][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.777305][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.823326][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.871888][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.882570][T11760] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 274.903025][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.923937][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.953854][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.974814][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.022133][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.041487][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.061011][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.097682][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.144367][T11311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.163884][T11311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.198447][T11311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.210672][T11311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.269466][T11772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'. [ 275.298795][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 275.356271][T11772] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 275.650836][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.660790][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.696628][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.707407][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.716906][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.944472][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.971230][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.078358][ T8662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.102932][ T8662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.835470][ T9182] hsr_slave_0: left promiscuous mode [ 276.853885][ T9182] hsr_slave_1: left promiscuous mode [ 276.859991][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.886387][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.929804][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.945499][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.024902][ T9182] veth1_macvtap: left promiscuous mode [ 277.030519][ T9182] veth0_macvtap: left promiscuous mode [ 277.055518][ T9182] veth1_vlan: left promiscuous mode [ 277.060942][ T9182] veth0_vlan: left promiscuous mode [ 277.338069][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.347043][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.362705][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.371336][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.388183][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.619450][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 277.658676][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 277.776520][ T5842] Bluetooth: hci2: command tx timeout [ 278.020514][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.035421][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.045003][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.058618][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.071671][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.291672][T11803] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1355'. [ 278.531360][T11812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 278.987468][T11780] chnl_net:caif_netlink_parms(): no params data found [ 279.230586][ T9182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.453751][ T5845] Bluetooth: hci3: command tx timeout [ 279.517934][ T9182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.753780][T11850] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 279.766081][T11850] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1362'. [ 279.786484][ T9182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.854134][ T5845] Bluetooth: hci2: command tx timeout [ 279.882914][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.890198][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.900087][T11780] bridge_slave_0: entered allmulticast mode [ 279.907969][T11780] bridge_slave_0: entered promiscuous mode [ 279.977238][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 279.996313][ T9182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.998069][T11858] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1364'. [ 280.046577][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.055062][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.062836][T11780] bridge_slave_1: entered allmulticast mode [ 280.070420][T11780] bridge_slave_1: entered promiscuous mode [ 280.184266][ T5845] Bluetooth: hci4: command tx timeout [ 280.227467][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 280.244183][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.257090][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.501531][T11780] team0: Port device team_slave_0 added [ 280.606310][T11780] team0: Port device team_slave_1 added [ 280.650876][T11883] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 280.665981][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 280.682867][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 280.733618][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.740610][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.781507][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.794556][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.805758][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.832170][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.099486][T11807] chnl_net:caif_netlink_parms(): no params data found [ 281.223580][T11780] hsr_slave_0: entered promiscuous mode [ 281.230067][T11780] hsr_slave_1: entered promiscuous mode [ 281.236360][T11780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.244000][T11780] Cannot create hsr debugfs directory [ 281.273583][ T9182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.488374][ T9182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.531291][ T5845] Bluetooth: hci3: command tx timeout [ 281.572680][T11799] chnl_net:caif_netlink_parms(): no params data found [ 281.718152][ T9182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.873670][ T9182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.931545][ T5845] Bluetooth: hci2: command tx timeout [ 281.942879][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.950284][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.959924][T11807] bridge_slave_0: entered allmulticast mode [ 281.972773][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'. [ 281.974646][T11807] bridge_slave_0: entered promiscuous mode [ 282.031476][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.038754][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.048081][T11807] bridge_slave_1: entered allmulticast mode [ 282.058791][T11807] bridge_slave_1: entered promiscuous mode [ 282.151966][T11930] netlink: 'syz.1.1378': attribute type 39 has an invalid length. [ 282.204696][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.251354][ T5842] Bluetooth: hci4: command tx timeout [ 282.340624][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.479984][T11799] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.505560][T11799] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.517980][T11799] bridge_slave_0: entered allmulticast mode [ 282.529454][T11799] bridge_slave_0: entered promiscuous mode [ 282.546477][T11807] team0: Port device team_slave_0 added [ 282.754480][T11799] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.762213][T11799] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.773247][T11954] x_tables: duplicate underflow at hook 1 [ 282.777515][T11799] bridge_slave_1: entered allmulticast mode [ 282.793329][T11799] bridge_slave_1: entered promiscuous mode [ 282.830874][T11807] team0: Port device team_slave_1 added [ 283.075532][T11799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.155950][T11807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.163088][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.191830][T11807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.210019][T11799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.269552][T11807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.279351][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.306067][T11807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.423996][T11967] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 283.459761][T11799] team0: Port device team_slave_0 added [ 283.477652][T11799] team0: Port device team_slave_1 added [ 283.505014][ T9182] bridge_slave_1: left allmulticast mode [ 283.510700][ T9182] bridge_slave_1: left promiscuous mode [ 283.517358][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.529529][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 283.539808][ T9182] bridge_slave_0: left allmulticast mode [ 283.545693][ T9182] bridge_slave_0: left promiscuous mode [ 283.552003][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.564540][ T9182] bridge_slave_1: left allmulticast mode [ 283.570208][ T9182] bridge_slave_1: left promiscuous mode [ 283.576561][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.589076][ T9182] bridge_slave_0: left allmulticast mode [ 283.595200][ T9182] bridge_slave_0: left promiscuous mode [ 283.600985][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.611585][ T5842] Bluetooth: hci3: command tx timeout [ 284.022938][ T5842] Bluetooth: hci2: command tx timeout [ 284.159783][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.170925][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.183250][ T9182] bond0 (unregistering): Released all slaves [ 284.285360][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.296476][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.307153][ T9182] bond0 (unregistering): Released all slaves [ 284.341276][ T5842] Bluetooth: hci4: command tx timeout [ 284.541237][T11799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.548409][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.575411][T11799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.596693][T11807] hsr_slave_0: entered promiscuous mode [ 284.599278][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 284.613249][T11807] hsr_slave_1: entered promiscuous mode [ 284.617036][T11981] nbd: nbd0 already in use [ 284.619813][T11807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.631922][T11807] Cannot create hsr debugfs directory [ 284.667022][T11979] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 284.723616][T11799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.724494][T11984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1389'. [ 284.734433][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.791190][T11799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.935252][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 285.099987][T11994] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 285.119876][T11799] hsr_slave_0: entered promiscuous mode [ 285.143417][T11799] hsr_slave_1: entered promiscuous mode [ 285.149996][T11799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.159310][T11799] Cannot create hsr debugfs directory [ 285.258591][T11780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.367331][T11780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.382103][T11780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.415951][T11780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.691151][ T5842] Bluetooth: hci3: command tx timeout [ 286.075496][ T9182] hsr_slave_0: left promiscuous mode [ 286.097952][ T9182] hsr_slave_1: left promiscuous mode [ 286.111505][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.119089][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.140878][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.151198][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.184983][ T9182] hsr_slave_0: left promiscuous mode [ 286.198096][ T9182] hsr_slave_1: left promiscuous mode [ 286.211838][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.232016][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.247425][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.262955][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.330357][ T9182] veth1_macvtap: left promiscuous mode [ 286.338431][ T9182] veth0_macvtap: left promiscuous mode [ 286.344294][ T9182] veth1_vlan: left promiscuous mode [ 286.356860][ T9182] veth0_vlan: left promiscuous mode [ 286.366602][ T9182] veth1_macvtap: left promiscuous mode [ 286.375663][ T9182] veth0_macvtap: left promiscuous mode [ 286.387172][ T9182] veth1_vlan: left promiscuous mode [ 286.398313][ T9182] veth0_vlan: left promiscuous mode [ 286.414270][ T5842] Bluetooth: hci4: command tx timeout [ 287.075430][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 287.119133][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 287.866613][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 287.908239][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 288.296862][T12020] lo speed is unknown, defaulting to 1000 [ 288.386051][T12020] lo speed is unknown, defaulting to 1000 [ 288.406032][T12020] lo speed is unknown, defaulting to 1000 [ 288.425926][T12020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 288.485205][T12020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 288.572269][T12020] lo speed is unknown, defaulting to 1000 [ 288.608650][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 288.621140][T12020] lo speed is unknown, defaulting to 1000 [ 288.627857][T11780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.656757][T12020] lo speed is unknown, defaulting to 1000 [ 288.678494][T12020] lo speed is unknown, defaulting to 1000 [ 288.703068][T12020] lo speed is unknown, defaulting to 1000 [ 288.726489][T11780] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.758244][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.765424][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.800824][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 288.917324][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1399'. [ 288.929439][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.936670][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.158970][T11807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.219221][T11807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.256665][T11807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.346833][T11807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.713463][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 289.734786][T12078] netlink: 'syz.4.1407': attribute type 2 has an invalid length. [ 289.875279][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.908985][T11780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.973674][T11799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.016482][T11807] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.047721][T11799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.075797][T11799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.107184][T12093] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1410'. [ 290.142758][T11799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.159554][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.166810][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.182727][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 290.189056][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.198850][ T8662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.251827][T12096] gtp0: entered promiscuous mode [ 290.256855][T12096] gtp0: entered allmulticast mode [ 290.337540][T11780] veth0_vlan: entered promiscuous mode [ 290.417481][T11780] veth1_vlan: entered promiscuous mode [ 290.486226][T12107] x_tables: duplicate entry at hook 3 [ 290.661836][T11780] veth0_macvtap: entered promiscuous mode [ 290.717912][T11780] veth1_macvtap: entered promiscuous mode [ 290.919272][T11780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.958764][T11780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.998700][T11780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.016257][T11780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.027520][T11780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.041318][T11780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.084384][T11799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.193800][T11807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.228594][T11799] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.298855][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.306125][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.354608][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.361867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.508482][ T9182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.531354][ C1] ================================================================== [ 291.539499][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 291.547443][ C1] Read of size 2 at addr ffff88802560882a by task modprobe/12148 [ 291.555207][ C1] [ 291.557539][ C1] CPU: 1 UID: 0 PID: 12148 Comm: modprobe Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 291.557562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 291.557585][ C1] Call Trace: [ 291.557593][ C1] [ 291.557600][ C1] dump_stack_lvl+0x189/0x250 [ 291.557629][ C1] ? __virt_addr_valid+0x18c/0x540 [ 291.557650][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.557674][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.557697][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.557721][ C1] ? lock_release+0x4b/0x3e0 [ 291.557745][ C1] ? __virt_addr_valid+0x18c/0x540 [ 291.557766][ C1] ? __virt_addr_valid+0x469/0x540 [ 291.557787][ C1] print_report+0xb4/0x290 [ 291.557806][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.557829][ C1] kasan_report+0x118/0x150 [ 291.557851][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.557883][ C1] rose_timer_expiry+0x471/0x4b0 [ 291.557918][ C1] call_timer_fn+0x17b/0x5f0 [ 291.557938][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.557960][ C1] ? call_timer_fn+0xbe/0x5f0 [ 291.557979][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 291.558003][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.558018][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.558034][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.558056][ C1] __run_timer_base+0x61a/0x860 [ 291.558074][ C1] ? ktime_get+0x3e/0x1f0 [ 291.558094][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 291.558113][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 291.558137][ C1] run_timer_softirq+0xb7/0x180 [ 291.558156][ C1] handle_softirqs+0x283/0x870 [ 291.558182][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 291.558198][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 291.558224][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 291.558244][ C1] __irq_exit_rcu+0xca/0x1f0 [ 291.558257][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 291.558275][ C1] irq_exit_rcu+0x9/0x30 [ 291.558286][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 291.558302][ C1] [ 291.558308][ C1] [ 291.558314][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.558333][ C1] RIP: 0010:__mod_node_page_state+0xe/0x170 [ 291.558356][ C1] Code: eb a7 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 89 d3 41 89 f7 49 89 fc 48 bd 00 00 00 00 00 fc ff df 4c 8d b7 [ 291.558370][ C1] RSP: 0018:ffffc90004387530 EFLAGS: 00000246 [ 291.558386][ C1] RAX: 1ffff11028093987 RBX: 0000000000000011 RCX: 0000000000000000 [ 291.558398][ C1] RDX: ffffffffffffffff RSI: 0000000000000011 RDI: ffff88813fffb400 [ 291.558409][ C1] RBP: ffff88801a0a76a0 R08: 0000000000000000 R09: 0000000000000000 [ 291.558420][ C1] R10: 0000000000000000 R11: ffffffff822910b9 R12: ffff88801a0a7048 [ 291.558431][ C1] R13: 1ffff11003414ed4 R14: 00000000ffffffff R15: ffff88813fffb400 [ 291.558446][ C1] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 291.558480][ C1] __lruvec_stat_mod_folio+0x191/0x2f0 [ 291.558504][ C1] ? __folio_rmap_sanity_checks+0x2f2/0x6e0 [ 291.558521][ C1] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 291.558546][ C1] folio_remove_rmap_ptes+0x14b/0xaf0 [ 291.558562][ C1] ? page_table_check_clear+0x165/0x6e0 [ 291.558581][ C1] ? page_table_check_clear+0x4b0/0x6e0 [ 291.558602][ C1] unmap_page_range+0x17f2/0x4210 [ 291.558641][ C1] ? mas_next_slot+0xc20/0xcf0 [ 291.558661][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 291.558686][ C1] ? unmap_single_vma+0x1b2/0x2a0 [ 291.558714][ C1] unmap_vmas+0x25d/0x3c0 [ 291.558739][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 291.558772][ C1] exit_mmap+0x245/0xba0 [ 291.558795][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 291.558813][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 291.558837][ C1] ? __pfx_exit_aio+0x10/0x10 [ 291.558864][ C1] ? uprobe_clear_state+0x274/0x290 [ 291.558883][ C1] __mmput+0x118/0x420 [ 291.558907][ C1] exit_mm+0x1da/0x2c0 [ 291.558927][ C1] ? __pfx_exit_mm+0x10/0x10 [ 291.558946][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 291.558972][ C1] ? taskstats_exit+0x43c/0xa30 [ 291.558995][ C1] ? tty_audit_exit+0x153/0x200 [ 291.559012][ C1] do_exit+0x859/0x2550 [ 291.559040][ C1] ? __pfx_do_exit+0x10/0x10 [ 291.559066][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.559084][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.559106][ C1] do_group_exit+0x21c/0x2d0 [ 291.559132][ C1] __x64_sys_exit_group+0x3f/0x40 [ 291.559156][ C1] x64_sys_call+0x21ba/0x21c0 [ 291.559175][ C1] do_syscall_64+0xf6/0x210 [ 291.559197][ C1] ? clear_bhb_loop+0x45/0xa0 [ 291.559217][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.559236][ C1] RIP: 0033:0x7f91d0e7aa90 [ 291.559252][ C1] Code: Unable to access opcode bytes at 0x7f91d0e7aa66. [ 291.559283][ C1] RSP: 002b:00007ffe8378b0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 291.559303][ C1] RAX: ffffffffffffffda RBX: 00007f91d0f6b860 RCX: 00007f91d0e7aa90 [ 291.559318][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001 [ 291.559330][ C1] RBP: 00007f91d0f6b860 R08: 00007ffe8378af30 R09: 00007ffe8378b010 [ 291.559344][ C1] R10: 00007ffe8378af70 R11: 0000000000000246 R12: 0000000000000000 [ 291.559356][ C1] R13: 0000000000000001 R14: 00007f91d0f6f658 R15: 0000000000000001 [ 291.559388][ C1] [ 291.559395][ C1] [ 292.068847][ C1] Allocated by task 11807: [ 292.073264][ C1] kasan_save_track+0x3e/0x80 [ 292.077948][ C1] __kasan_kmalloc+0x93/0xb0 [ 292.082543][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 292.087400][ C1] fib6_info_alloc+0x30/0xf0 [ 292.092033][ C1] ip6_route_info_create+0x4b3/0x1360 [ 292.097501][ C1] addrconf_f6i_alloc+0x1c6/0x3f0 [ 292.102530][ C1] ipv6_add_addr+0x56e/0x1090 [ 292.107212][ C1] inet6_addr_add+0x387/0xc00 [ 292.111894][ C1] inet6_rtm_newaddr+0x93d/0xd20 [ 292.116837][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 292.121775][ C1] netlink_rcv_skb+0x219/0x490 [ 292.126548][ C1] netlink_unicast+0x758/0x8d0 [ 292.131343][ C1] netlink_sendmsg+0x805/0xb30 [ 292.136114][ C1] __sock_sendmsg+0x219/0x270 [ 292.140824][ C1] __sys_sendto+0x3bd/0x520 [ 292.145330][ C1] __x64_sys_sendto+0xde/0x100 [ 292.150112][ C1] do_syscall_64+0xf6/0x210 [ 292.154736][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.160644][ C1] [ 292.162983][ C1] Freed by task 5827: [ 292.166967][ C1] kasan_save_track+0x3e/0x80 [ 292.171654][ C1] kasan_save_free_info+0x46/0x50 [ 292.176691][ C1] __kasan_slab_free+0x62/0x70 [ 292.181479][ C1] kfree+0x193/0x440 [ 292.185416][ C1] rcu_core+0xca5/0x1710 [ 292.189678][ C1] handle_softirqs+0x283/0x870 [ 292.194458][ C1] __irq_exit_rcu+0xca/0x1f0 [ 292.199051][ C1] irq_exit_rcu+0x9/0x30 [ 292.203294][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 292.208930][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.214926][ C1] [ 292.217253][ C1] Last potentially related work creation: [ 292.222969][ C1] kasan_save_stack+0x3e/0x60 [ 292.227672][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 292.232882][ C1] call_rcu+0x142/0x990 [ 292.237038][ C1] addrconf_permanent_addr+0x37a/0x9d0 [ 292.242522][ C1] addrconf_notify+0x887/0x1010 [ 292.247382][ C1] notifier_call_chain+0x1b3/0x3e0 [ 292.252492][ C1] __dev_notify_flags+0x18d/0x2e0 [ 292.257528][ C1] netif_change_flags+0xe8/0x1a0 [ 292.262489][ C1] do_setlink+0xcb9/0x40d0 [ 292.266908][ C1] rtnl_newlink+0x160b/0x1c70 [ 292.271602][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 292.276629][ C1] netlink_rcv_skb+0x219/0x490 [ 292.281399][ C1] netlink_unicast+0x758/0x8d0 [ 292.286172][ C1] netlink_sendmsg+0x805/0xb30 [ 292.290935][ C1] __sock_sendmsg+0x219/0x270 [ 292.295631][ C1] __sys_sendto+0x3bd/0x520 [ 292.300135][ C1] __x64_sys_sendto+0xde/0x100 [ 292.304903][ C1] do_syscall_64+0xf6/0x210 [ 292.309413][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.315310][ C1] [ 292.317636][ C1] The buggy address belongs to the object at ffff888025608800 [ 292.317636][ C1] which belongs to the cache kmalloc-512 of size 512 [ 292.331799][ C1] The buggy address is located 42 bytes inside of [ 292.331799][ C1] freed 512-byte region [ffff888025608800, ffff888025608a00) [ 292.345529][ C1] [ 292.347884][ C1] The buggy address belongs to the physical page: [ 292.354309][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25608 [ 292.363102][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.371606][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 292.379605][ C1] page_type: f5(slab) [ 292.383590][ C1] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 292.392176][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.400771][ C1] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 292.409447][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.418128][ C1] head: 00fff00000000002 ffffea0000958201 00000000ffffffff 00000000ffffffff [ 292.426801][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 292.435467][ C1] page dumped because: kasan: bad access detected [ 292.441895][ C1] page_owner tracks the page as allocated [ 292.447656][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5825, tgid 5825 (syz-executor), ts 90539660017, free_ts 90457472315 [ 292.469031][ C1] post_alloc_hook+0x1d8/0x230 [ 292.473814][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 292.479375][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 292.485195][ C1] alloc_pages_mpol+0x232/0x4a0 [ 292.490062][ C1] allocate_slab+0x8a/0x3b0 [ 292.494578][ C1] ___slab_alloc+0xbfc/0x1480 [ 292.499268][ C1] __kmalloc_noprof+0x305/0x4f0 [ 292.504126][ C1] fib6_info_alloc+0x30/0xf0 [ 292.508727][ C1] ip6_route_info_create+0x4b3/0x1360 [ 292.514113][ C1] ip6_route_add+0x28/0x160 [ 292.518618][ C1] add_v4_addrs+0x8fa/0xc30 [ 292.523129][ C1] addrconf_init_auto_addrs+0x221/0xb80 [ 292.528679][ C1] addrconf_notify+0xacc/0x1010 [ 292.533550][ C1] notifier_call_chain+0x1b3/0x3e0 [ 292.538684][ C1] __dev_notify_flags+0x18d/0x2e0 [ 292.543724][ C1] netif_change_flags+0xe8/0x1a0 [ 292.548700][ C1] page last free pid 5825 tgid 5825 stack trace: [ 292.555027][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 292.560172][ C1] __put_partials+0x161/0x1c0 [ 292.564873][ C1] put_cpu_partial+0x17c/0x250 [ 292.569652][ C1] __slab_free+0x2f7/0x400 [ 292.574089][ C1] qlist_free_all+0x9a/0x140 [ 292.578683][ C1] kasan_quarantine_reduce+0x148/0x160 [ 292.584146][ C1] __kasan_slab_alloc+0x22/0x80 [ 292.589006][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 292.594473][ C1] sk_prot_alloc+0x57/0x220 [ 292.598982][ C1] sk_alloc+0x3a/0x370 [ 292.603056][ C1] unix_create1+0xb0/0x790 [ 292.607474][ C1] unix_create+0x154/0x200 [ 292.611886][ C1] __sock_create+0x4b0/0x9f0 [ 292.616474][ C1] __sys_socket+0xd7/0x1b0 [ 292.620889][ C1] __x64_sys_socket+0x7a/0x90 [ 292.625566][ C1] do_syscall_64+0xf6/0x210 [ 292.630075][ C1] [ 292.632396][ C1] Memory state around the buggy address: [ 292.638024][ C1] ffff888025608700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.646085][ C1] ffff888025608780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.654174][ C1] >ffff888025608800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.662236][ C1] ^ [ 292.667616][ C1] ffff888025608880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.675763][ C1] ffff888025608900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.683830][ C1] ================================================================== [ 292.691977][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.699214][ C1] CPU: 1 UID: 0 PID: 12148 Comm: modprobe Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 292.711136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 292.721228][ C1] Call Trace: [ 292.724543][ C1] [ 292.727415][ C1] dump_stack_lvl+0x99/0x250 [ 292.732065][ C1] ? __asan_memcpy+0x40/0x70 [ 292.736695][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.741945][ C1] ? __pfx__printk+0x10/0x10 [ 292.746561][ C1] panic+0x2db/0x790 [ 292.750470][ C1] ? __pfx_panic+0x10/0x10 [ 292.754898][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 292.760802][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.766694][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.773026][ C1] ? print_memory_metadata+0x314/0x400 [ 292.778493][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.783614][ C1] check_panic_on_warn+0x89/0xb0 [ 292.788561][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.793685][ C1] end_report+0x78/0x160 [ 292.797941][ C1] kasan_report+0x129/0x150 [ 292.802456][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.807585][ C1] rose_timer_expiry+0x471/0x4b0 [ 292.812551][ C1] call_timer_fn+0x17b/0x5f0 [ 292.817149][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 292.822616][ C1] ? call_timer_fn+0xbe/0x5f0 [ 292.827299][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 292.832422][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.837629][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.842832][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 292.848304][ C1] __run_timer_base+0x61a/0x860 [ 292.853165][ C1] ? ktime_get+0x3e/0x1f0 [ 292.857501][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 292.862879][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 292.869135][ C1] run_timer_softirq+0xb7/0x180 [ 292.874170][ C1] handle_softirqs+0x283/0x870 [ 292.878954][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 292.883732][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 292.889032][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 292.894242][ C1] __irq_exit_rcu+0xca/0x1f0 [ 292.898922][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 292.904130][ C1] irq_exit_rcu+0x9/0x30 [ 292.908373][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 292.914049][ C1] [ 292.916984][ C1] [ 292.919921][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.925909][ C1] RIP: 0010:__mod_node_page_state+0xe/0x170 [ 292.931899][ C1] Code: eb a7 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 89 d3 41 89 f7 49 89 fc 48 bd 00 00 00 00 00 fc ff df 4c 8d b7 [ 292.951514][ C1] RSP: 0018:ffffc90004387530 EFLAGS: 00000246 [ 292.957588][ C1] RAX: 1ffff11028093987 RBX: 0000000000000011 RCX: 0000000000000000 [ 292.965564][ C1] RDX: ffffffffffffffff RSI: 0000000000000011 RDI: ffff88813fffb400 [ 292.973552][ C1] RBP: ffff88801a0a76a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.981529][ C1] R10: 0000000000000000 R11: ffffffff822910b9 R12: ffff88801a0a7048 [ 292.989595][ C1] R13: 1ffff11003414ed4 R14: 00000000ffffffff R15: ffff88813fffb400 [ 292.997576][ C1] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 293.003149][ C1] __lruvec_stat_mod_folio+0x191/0x2f0 [ 293.008624][ C1] ? __folio_rmap_sanity_checks+0x2f2/0x6e0 [ 293.014525][ C1] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 293.020089][ C1] folio_remove_rmap_ptes+0x14b/0xaf0 [ 293.025486][ C1] ? page_table_check_clear+0x165/0x6e0 [ 293.031046][ C1] ? page_table_check_clear+0x4b0/0x6e0 [ 293.036600][ C1] unmap_page_range+0x17f2/0x4210 [ 293.041653][ C1] ? mas_next_slot+0xc20/0xcf0 [ 293.046445][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 293.051835][ C1] ? unmap_single_vma+0x1b2/0x2a0 [ 293.056886][ C1] unmap_vmas+0x25d/0x3c0 [ 293.061266][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 293.066140][ C1] exit_mmap+0x245/0xba0 [ 293.070395][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 293.075171][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 293.080819][ C1] ? __pfx_exit_aio+0x10/0x10 [ 293.085516][ C1] ? uprobe_clear_state+0x274/0x290 [ 293.090727][ C1] __mmput+0x118/0x420 [ 293.094810][ C1] exit_mm+0x1da/0x2c0 [ 293.098974][ C1] ? __pfx_exit_mm+0x10/0x10 [ 293.103571][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 293.109048][ C1] ? taskstats_exit+0x43c/0xa30 [ 293.113907][ C1] ? tty_audit_exit+0x153/0x200 [ 293.118761][ C1] do_exit+0x859/0x2550 [ 293.122950][ C1] ? __pfx_do_exit+0x10/0x10 [ 293.127552][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.132768][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.137976][ C1] do_group_exit+0x21c/0x2d0 [ 293.142577][ C1] __x64_sys_exit_group+0x3f/0x40 [ 293.147609][ C1] x64_sys_call+0x21ba/0x21c0 [ 293.152287][ C1] do_syscall_64+0xf6/0x210 [ 293.156798][ C1] ? clear_bhb_loop+0x45/0xa0 [ 293.161486][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.167389][ C1] RIP: 0033:0x7f91d0e7aa90 [ 293.171894][ C1] Code: Unable to access opcode bytes at 0x7f91d0e7aa66. [ 293.178941][ C1] RSP: 002b:00007ffe8378b0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 293.187364][ C1] RAX: ffffffffffffffda RBX: 00007f91d0f6b860 RCX: 00007f91d0e7aa90 [ 293.195340][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001 [ 293.203315][ C1] RBP: 00007f91d0f6b860 R08: 00007ffe8378af30 R09: 00007ffe8378b010 [ 293.211298][ C1] R10: 00007ffe8378af70 R11: 0000000000000246 R12: 0000000000000000 [ 293.219281][ C1] R13: 0000000000000001 R14: 00007f91d0f6f658 R15: 0000000000000001 [ 293.227261][ C1] [ 293.230592][ C1] Kernel Offset: disabled [ 293.234923][ C1] Rebooting in 86400 seconds..