last executing test programs: 1m12.412658336s ago: executing program 4 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9fe400ac060a09040000000000000000020000031400048001800900df2401006c61737400e7ffff0800010073797a30000000000900020073767a32000000001400000011000100"/102], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f000000a080)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f4305", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRESHEX], 0x33fe0}}, 0x84) 1m11.434645458s ago: executing program 2 (id=1586): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40, 0x5], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 1m4.779527424s ago: executing program 4 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9fe400ac060a09040000000000000000020000031400048001800900df2401006c61737400e7ffff0800010073797a30000000000900020073767a32000000001400000011000100"/102], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f000000a080)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f4305", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRESHEX], 0x33fe0}}, 0x84) 1m0.508347401s ago: executing program 2 (id=1586): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40, 0x5], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 53.943494702s ago: executing program 4 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9fe400ac060a09040000000000000000020000031400048001800900df2401006c61737400e7ffff0800010073797a30000000000900020073767a32000000001400000011000100"/102], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f000000a080)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f4305", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRESHEX], 0x33fe0}}, 0x84) 51.459342455s ago: executing program 2 (id=1586): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40, 0x5], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 40.619600303s ago: executing program 3 (id=2650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) unshare(0x400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x4, r1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getneightbl={0x14, 0x42, 0x1, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x1b8, 0x0, 0x428, 0x428, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xfffffffe, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) 40.411666085s ago: executing program 3 (id=2652): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket(0x0, 0x2, 0x8) 40.302136875s ago: executing program 3 (id=2655): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200efa8a603242cf932c55750b9e507abe900000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x25, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711230000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(r2, 0x9) r6 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x132, 0x132, 0x6, [@enum64={0x8, 0x8, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x5e47, 0x8}, {0x1, 0x1, 0x3}, {0xf, 0x4, 0x30}, {0x4, 0x7fffffff}, {0x2, 0x6e02, 0x1}, {0xf, 0x5, 0x6}, {0xa, 0x4, 0x7f}, {0x5, 0x2, 0x3}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func_proto, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x3, 0xf, 0xfffff8d5}, {0x5, 0x100, 0x3}, {0x3, 0xce58, 0xb57}, {0x5, 0x5, 0x5}, {0x1, 0xffffffff, 0x1}, {0x4, 0x3, 0xc59}, {0x5, 0x6, 0xd633}, {0x5, 0x401, 0x1}, {0x3, 0x7fffffff, 0x7ff}], "cfc6"}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x5}}, @const={0xf, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30]}}, &(0x7f0000000740)=""/139, 0x152, 0x8b, 0x1, 0x5, 0x10000, @value}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000540)={@val={0x8, 0xf6}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}, {0x13, 0x8, 0x0, @empty}}}, 0x2a) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000e80)={0x4bc, 0x0, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x6}, 0x58, 0x8, 0x7f, 0x3, 0x4, 'syz0\x00', "8e90c83c559b676f214ef1bac162f01a89ab048ac1c07c7fd507e5be7821cca8", "7bbec2ad89f69831aba741e4410600000094819c35f11ff7b998addcec0bbf62", [{0x3ff, 0x8001, {0x0, 0x8}}, {0x80, 0x3, {0x2, 0x5}}, {0x5, 0xff68, {0x2, 0x1}}, {0xe764, 0x4, {0x3, 0x4}}, {0x0, 0x2, {0x3}}, {0x4, 0x3, {0x3, 0xd}}, {0x2, 0x4, {0x0, 0xffffffff}}, {0x10, 0xd86b, {0x0, 0xb}}, {0x2, 0x2, {0x1, 0xffffffd2}}, {0x4, 0x0, {0x3, 0xd2}}, {0xf, 0xffd1, {0x2, 0xec}}, {0x0, 0x0, {0x2, 0xbd}}, {0x8, 0x1ff, {0x3, 0x7}}, {0xcd33, 0xfffa, {0x1, 0x7}}, {0xad, 0x8000, {0x0, 0x3ff}}, {0x0, 0x64, {0x1, 0x9}}, {0x5, 0x4, {0x2, 0x2}}, {0x328d, 0x80, {0x2, 0x5}}, {0xa34, 0x2, {0x1, 0x9}}, {0xff, 0xfff9, {0x2}}, {0x8000, 0x3, {0x0, 0xfe8a}}, {0x5, 0x5, {0x0, 0x5}}, {0x8, 0x7, {0x3, 0x9}}, {0x2, 0x5, {0x0, 0xf63}}, {0x1, 0x8, {0x0, 0x9}}, {0x2, 0x2e, {0x3, 0x2}}, {0x4, 0x1, {0x2, 0x76}}, {0xd5e0, 0xff, {0x1, 0xf7e0}}, {0x1, 0x6, {0x1, 0xf}}, {0x800, 0xb, {0x2, 0x8}}, {0xff67, 0x6, {0x2, 0x1}}, {0x2, 0x9, {0x2, 0x200}}, {0x4d8, 0xf64a, {0x3, 0xaf}}, {0x6578, 0xf, {0x1, 0x1ff}}, {0x5, 0x2, {0x1, 0x1}}, {0x7, 0x4, {0x0, 0x4}}, {0x8, 0x3fe, {0x57847ea8df481c13}}, {0xa, 0x83, {0x3}}, {0x5, 0x40, {0x3, 0x6}}, {0x0, 0x5, {0x3, 0x800}}]}}}, {{0x254, 0x1, {{0x3}, 0xfa, 0x5, 0x100, 0xfff9, 0x23, 'syz0\x00', "c6c68a39ebe3eb5d660ecd8c4f4b9bb3ca7f65e7a025578c0ee91753f5069e9f", "39b15c6987b9a71851388ea95e73d2f7d7b2cae20fcf4d731f70d5bed393e55e", [{0x5, 0x200, {0x3, 0xf}}, {0x1, 0xe, {0xdfe6cc73ee87d0d, 0x8}}, {0x5, 0x7, {0x3, 0x1}}, {0xb, 0xc000, {0x0, 0x3}}, {0x200, 0x100, {0x1, 0xa}}, {0x1, 0x4, {0x1, 0xe5a}}, {0xaff, 0x1, {0x0, 0x7}}, {0x9, 0xd9, {0x2, 0x4}}, {0x7fff, 0x6, {0x1, 0x2}}, {0x1, 0x6, {0x2}}, {0x3, 0x2, {0x1, 0x2a6}}, {0x5d2d, 0x8000, {0xa4ce7315a03aa4ae, 0x1ff}}, {0xffff, 0x7, {0x3, 0x9}}, {0x1da4, 0xc5f, {0x1, 0x1}}, {0x0, 0xb, {0x1, 0x4}}, {0x5, 0xff, {0x0, 0x2}}, {0x3, 0xe4, {0x2, 0x2}}, {0x0, 0x3ff, {0x2, 0x1}}, {0x80, 0x3, {0x3, 0x8001}}, {0x6, 0xffff, {0x3, 0x94}}, {0x8, 0x4, {0x1, 0x2}}, {0x3, 0x8, {0x1, 0x61d241f3}}, {0xf805, 0x4, {0x3, 0x4}}, {0x4, 0x3e0, {0x2, 0x8}}, {0xa, 0x9, {0x3, 0x4}}, {0x2, 0x9, {0x3, 0x1000}}, {0x0, 0x8, {0x0, 0x3}}, {0x4, 0x0, {0x2, 0x8}}, {0x3, 0x2, {0x3, 0x7}}, {0x3, 0x3, {0x2, 0x6}}, {0xa, 0x3, {0x3, 0x40}}, {0x4, 0x7, {0x0, 0x8}}, {0x0, 0xfff9, {0x0, 0x7}}, {0x2de, 0x0, {0x2, 0x3}}, {0xee, 0x5}, {0x7, 0x18a, {0x3, 0x2}}, {0x1, 0x30, {0x3, 0x80000000}}, {0xe7, 0x5, {0x2, 0x8}}, {0xfff, 0x2, {0x3, 0x3}}, {0x3, 0x2, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x44000}, 0x10000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40004, 0x0, r3, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r6}, &(0x7f0000000000), &(0x7f0000000ac0)=r5}, 0x20) 39.948044888s ago: executing program 4 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9fe400ac060a09040000000000000000020000031400048001800900df2401006c61737400e7ffff0800010073797a30000000000900020073767a32000000001400000011000100"/102], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f000000a080)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f4305", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRESHEX], 0x33fe0}}, 0x84) 39.335383808s ago: executing program 3 (id=2662): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) r5 = socket(0x22, 0x5, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'vxcan1\x00', 0x3}, 0x18) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r8) socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) preadv(r10, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = getpid() ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000180)=r13) 38.343901619s ago: executing program 2 (id=1586): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40, 0x5], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 22.270440352s ago: executing program 4 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9fe400ac060a09040000000000000000020000031400048001800900df2401006c61737400e7ffff0800010073797a30000000000900020073767a32000000001400000011000100"/102], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f000000a080)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f4305", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRESHEX], 0x33fe0}}, 0x84) 21.687729727s ago: executing program 2 (id=1586): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40, 0x5], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 20.278648358s ago: executing program 3 (id=2662): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) r5 = socket(0x22, 0x5, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'vxcan1\x00', 0x3}, 0x18) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r8) socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) preadv(r10, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = getpid() ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000180)=r13) 7.873560515s ago: executing program 0 (id=2816): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/4, 0x4}], 0x6, &(0x7f0000000640)=""/247, 0xf7}, 0xfff}, {{&(0x7f0000000740)=@ax25={{0x3, @default}, [@bcast, @remote, @bcast, @rose, @netrom, @default, @bcast, @default]}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f0000000840)=""/190, 0xbe}, {&(0x7f0000000900)=""/46, 0x2e}, {&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000a00)=""/186, 0xba}, {&(0x7f0000000ac0)=""/248, 0xf8}], 0x6, &(0x7f0000000c40)=""/95, 0x5f}, 0x7}, {{&(0x7f0000000cc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/95, 0x5f}, 0x3d6}], 0x3, 0x40000040, &(0x7f0000000ec0)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000f80)={r0, &(0x7f0000000f00)="dd749d6f5902b2585a1bb7bcfd5fe7bdcff2411feb96019086fffc2c804467a97a15d9b6326c69cf45ea82d5d636dc98d360730808e37aab6a01957b7e3a967f0afb0fb54cfea42dc4fe4a30aa7c0399ae6c4b605c158da1ae04b4b4604839ae"}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000fc0)={0xffffffffffffffff, 0x0, 0x15, r2, 0x719e}, 0xc) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000001000)={0x8, {0x20, 0x725, 0x10001, 0x101, 0x4}}) splice(r3, &(0x7f0000001040)=0x5, r0, &(0x7f0000001080)=0x6, 0x7, 0x8) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000010c0)={0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001100)={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}]}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept4$unix(r1, 0x0, &(0x7f0000001180), 0x800) splice(r5, &(0x7f00000011c0)=0xad83, r0, &(0x7f0000001200)=0x2, 0x6, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000001240)={0xffffffffffffffff, 0x2c9b45b6, 0x6}) r6 = socket(0xb, 0x0, 0xcc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000001280)={0x1, [0x0]}, &(0x7f00000012c0)=0x8) recvmmsg(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001300)=""/173, 0xad}, {&(0x7f00000013c0)=""/228, 0xe4}, {&(0x7f00000014c0)=""/185, 0xb9}], 0x3, &(0x7f00000015c0)=""/3, 0x3}, 0xdc9e}, {{&(0x7f0000001600)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)=""/115, 0x73}, {&(0x7f0000001700)=""/186, 0xba}], 0x2}, 0x1}, {{&(0x7f0000001800)=@nfc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001880)=""/246, 0xf6}, {&(0x7f0000001980)=""/141, 0x8d}, {&(0x7f0000001a40)=""/188, 0xbc}, {&(0x7f0000001b00)=""/164, 0xa4}], 0x4, &(0x7f0000001c00)=""/58, 0x3a}, 0x6}, {{0xfffffffffffffffc, 0x0, &(0x7f0000003140)=[{&(0x7f0000001c40)=""/236, 0xec}, {&(0x7f0000001d40)=""/49, 0x31}, {&(0x7f0000001d80)=""/74, 0x4a}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/148, 0x94}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/42, 0x2a}, {&(0x7f0000002f40)=""/85, 0x55}, {&(0x7f0000002fc0)=""/225, 0xe1}, {&(0x7f00000030c0)=""/118, 0x76}], 0xa, &(0x7f0000003200)=""/6, 0x6}, 0x6}, {{&(0x7f0000003240)=@x25, 0x80, &(0x7f0000004440)=[{&(0x7f00000032c0)=""/96, 0x60}, {&(0x7f0000003340)=""/60, 0x3c}, {&(0x7f0000003380)=""/141, 0x8d}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x4, &(0x7f0000004480)=""/153, 0x99}, 0xd7f8}, {{0x0, 0x0, &(0x7f0000004540)}, 0x64}, {{&(0x7f0000004580)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004600)=""/187, 0xbb}], 0x1}, 0x4e5a}, {{&(0x7f0000004700)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/185, 0xb9}], 0x1, &(0x7f0000004880)=""/91, 0x5b}, 0xfffffffa}], 0x8, 0x40012020, &(0x7f0000004b00)={0x0, 0x989680}) setsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000004b40)=0x80000000, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004c80)={@ifindex=r7, 0x2b, 0x1, 0x6c3d, &(0x7f0000004b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000004bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004c00)=[0x0, 0x0, 0x0], &(0x7f0000004c40)=[0x0, 0x0]}, 0x40) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000004d00)={'batadv_slave_1\x00', &(0x7f0000004cc0)=@ethtool_regs={0x4, 0x40, 0x3, "9c6a70"}}) close(r4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004e00)={r0, &(0x7f0000004d40)="17d2b1d8eda98a6058af12b2014cbc74d830ac317a91e7ba2b20e10fee36b5209add041cd7acb29a6e80a9ad4236c2e33e15c6a89a16008118899216c9a75f64c43b0050750cf13bad091e4ec03d36ba14e581fafe64f6f4ae0358f0a7ef7501ccb72a59420982ca98c6b1c19076f4194dea0b6a", &(0x7f0000004dc0)=@udp6=r6, 0x4}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004e80), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000005040)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f00)={0xcc, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x5, 0x2}, {0x6, 0x6}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x8}, {0x4, 0x3}, {0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x1}, {0x1, 0x2}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x9, 0x16, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x1, 0xc, 0x18, 0x5, 0x3, 0x1, 0x18, 0x24, 0x18, 0xb8b62370ff072b3f, 0x2, 0x2, 0x6, 0x3, 0x16, 0x2, 0x4, 0x36, 0x4, 0x30, 0x24, 0x6c, 0x24, 0xb, 0x30, 0x30, 0x1b, 0x12, 0x12, 0x6c, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xfffb, 0x401, 0xff, 0x3a, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x3, 0x4, 0x7f, 0xfff3, 0xc, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x9, 0x2, 0x8001, 0x1, 0x0, 0x6, 0x8]}}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000051c0)={r0, &(0x7f0000005080)="475dc6e3f4e5688fba52886e423a015e3cf1d46ace2c4b0f1a8411dfb9e8eb0686d97b0375ee8e8ae52fde8d2667cfb5483aeb8dd8276447419b981f1e427a4e77a08c10188261786d295305ff1f1475a723a94ece0b109b8dea66475a7116b96328f6167c94f12e184cfaeb537dd4f9f8046228622833b992165faf6fc2b84e7ab945a238671736f9970ced5904f1264d5a5059c3090aa85791c7083e38f26c4e5689efaf69388be8f61bb24f63ef43e73adbc898e0520472eea44bf01834f44fae4f2e6d87379bd62aafd94a799af6984586", &(0x7f0000005180)=""/59}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000005200)={0x0, r8}, 0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) 7.779398697s ago: executing program 0 (id=2817): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xb3, 0x3f, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xc7, "c5254133e5d32885289ad308413939e9d5c7ead105d477fa510578c570d3e4b86e6a83f396f3fd597104831f93519dfd5cf71872633dbc8c7ed8ec76ee5771fd1e092f38ca61a21241a4c06961e01c3b0d7cfc38fa7f5a179cb50eea31bf27284e981a3da05f48f5ec6fc590f711857892718de6d1178ce803abdd087363e6b45c2bdfeb4fa367eb55762bf61d22279f49bd9a98da5e5d60ab1673b5794365da78efebf9f38edfc6605b404e23f8bb9fa258a5b22dbd8b429167bd287a290617cafd87a1889407"}, @pad1, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x3, 0x2, 0xff, 0xffff, [0x6]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x1, [0x0]}}, @generic={0x7, 0xdc, "414635338347af74565b6914d825edb33ba9b9b95fd7d3abd1a31ff763687310d718d227156b900d82874c39ecd52ee3c0c1ee950464df7ca72dd1f94ce821c4f135e33bb234f0ebc4a3dad09f02d781e421da2962beaea07f6ab714cfa5b6d238a09291190b8d9528db9e3946d968e8847e2b857f8f327c6b3730fb085ecfb03dba4bc391bee591f18dc91ff466a22f27265e5219343de449810bd8b8a8b14da53909c6cfe9f68ee13517f4244a30fbbdcaba43ee2b34971c4f33c413bc631245ecf394012e7b309b346c391df28ae33c3b4f7eb335c69a78f6311d"}, @jumbo={0xc2, 0x4, 0x3}]}, 0x208) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000002c0)={0x5c, 0x4, 0x1, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback]}, 0x28) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000300)={'virt_wifi0\x00', {0x2, 0x4e23, @multicast2}}) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f0000000340)="c3edd66098d20deda9d9c3e4fba684049ea81d386a77e9fc8abd4966429c6acad8537005eefede41475d46073df7c8", 0x2f, 0x8000, &(0x7f0000000380)={0xa, 0x4e20, 0x2a3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x3}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="75e1a4b3e3ebf4f3b52d4ade348821e685ab9ccc67d61c4d98c916fa6a198be317a35dad46454a8c4fd59f", 0x2b}], 0x1, 0x0, 0x0, 0x801}, 0x200080d0) r2 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000540)="a0b8349d540f856a7f92faa7c0d51526c7158b646cf0056ca4b14b9cef6eec14f4c220c4edcba0b3a909f6073c0e19e7fd010d7e1fa3945d6fc40e70cbb03e688523a82ab79f3b7a0ae9b7306aca3f25777ae18db7b24d24a89714cf", 0x5c}, {&(0x7f00000005c0)="a67c", 0x2}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={r3, @in6={{0xa, 0x4e24, 0xe, @private1, 0x8}}, 0x40, 0x8df5, 0x2, 0x4, 0x1, 0x4, 0xb}, 0x9c) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000700), &(0x7f0000000740)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x80) shutdown(r1, 0x1) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x4e21, 0x8, @local, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000940)={r3, 0xc, 0x5}, &(0x7f0000000980)=0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001a80)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/147, 0x93}, &(0x7f0000001ac0)=0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001dc0)={'syztnl2\x00', &(0x7f0000001d40)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x40, 0x1000, 0x8, @private0, @local, 0x40, 0x40, 0xfffffffe, 0x7}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e40)={0x8000, 0x0}, 0x8) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001e80), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x18, 0x13, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x0, 0xd, 0x8, 0x2, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000001c00)='syzkaller\x00', 0x4, 0xca, &(0x7f0000001c40)=""/202, 0x40f00, 0x11, '\x00', r8, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x4, 0x2, 0x1, 0x8}, 0x10, r9, r10, 0x7, 0x0, &(0x7f0000001ec0)=[{0x1, 0x5, 0x7, 0x4}, {0x3, 0x2, 0xb, 0x4}, {0x3, 0x5, 0xd, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x5, 0x2, 0xe, 0xb}, {0x2, 0x1, 0x6, 0x9}, {0x2, 0x2, 0xf, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000002300)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002080)={0x208, 0x0, 0x726, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "c353d4ce062438a50f81385fc4ffdc0f48d365c25c10089766921f1401b927cdc06c44d99e1941cdfee3416eca9cc1f4c932d493388882209c45ca882b2117462665678e9907e3879468244f2d5313a8cb5e589ca02066ec59980e40624084b5069fd0a178ebfc08436290a54be84c11707f22a656edb818318bc8de0b8fa330ec4e04196f6c5ce5881029"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa962}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7befa653}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb0}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff52c}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcdd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), r5) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r12, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 7.541430298s ago: executing program 1 (id=2818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000020000000000000e0500000001000000002e2e5f2e30"], 0x0, 0x33, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x43c, 0x28, 0xd27, 0x1000001, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0x1fff2, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4e2f, 0x4, 0xf0f, 0x1, 0x9, 0x8000, 0x8, 0x44, 0x8, 0xfffffffb, 0x6, 0x7fff, 0xfaa, 0x0, 0x7, 0x6, 0x1, 0xff, 0x1e6dac10, 0x1, 0xa9c, 0x1ff, 0x4, 0x9, 0x2ff, 0xb, 0x8000, 0x1, 0x80000000, 0x5, 0x40, 0x9, 0x3, 0x5, 0x0, 0x1, 0x10, 0x3, 0x5877, 0xe, 0x6d, 0x80000001, 0xe, 0x9, 0x4, 0x8, 0x3ff, 0x6, 0x2, 0x40000000, 0xcfd1, 0x1, 0x7, 0x1d, 0x6, 0xbc, 0x2, 0x3, 0xfffffff8, 0x7, 0x3, 0x9, 0xb, 0xef, 0x5, 0x10001, 0x10000, 0x4, 0x3, 0x8, 0x1, 0x2, 0x10, 0x5, 0x1588, 0x1, 0x2, 0x877, 0xfbc, 0x9, 0xfffffff7, 0x9, 0x32, 0x7, 0x1, 0x400, 0x9, 0x7ff, 0x2, 0x8, 0x2, 0x9, 0xf, 0x58173d29, 0x7b7, 0xffffffff, 0x7f, 0x5, 0x7, 0x4, 0x4, 0x6, 0x5, 0x8b, 0x1, 0x7, 0xe, 0x4, 0x7, 0x9, 0x8000, 0xf7, 0x3, 0x401, 0x5, 0x7ff, 0x1, 0x0, 0x8, 0x10001, 0x6fb, 0x7, 0x9, 0x9, 0x5, 0x7, 0x8, 0x200, 0x6, 0x41f0, 0xc2, 0x241, 0x80000001, 0xfffffffd, 0x9, 0x8, 0x9, 0x3, 0xfffffff9, 0x41, 0x1, 0x2, 0x2, 0x9, 0xc0ff, 0x101, 0x7, 0x8, 0x7f, 0xeb, 0x6, 0x10001, 0x401, 0xffffffff, 0x10001, 0x8a, 0x7ff, 0x3, 0xc32, 0x0, 0x7, 0x2, 0xfffff752, 0x6, 0x5, 0x3a81, 0x1, 0x2, 0x4, 0x9, 0x0, 0x40, 0x949, 0x3, 0x1ff, 0x4, 0x9, 0xfffffffc, 0x9, 0x1, 0x4, 0x3, 0x200, 0xedb3, 0x1c95, 0x1, 0x0, 0x4, 0x8, 0x2, 0x401, 0x9, 0x3, 0x6, 0x1, 0xb2cb, 0x3, 0x5fe, 0x6e8, 0x3, 0x8, 0x8, 0x1, 0x80, 0x3b, 0xfffffffe, 0x115167e2, 0x6, 0x0, 0x40, 0x6, 0x8e, 0x6, 0x6, 0x3, 0x86cb, 0x8e, 0xd, 0x3e, 0x67d6f434, 0x7, 0x7f, 0x2, 0x9d, 0xae1, 0x5, 0x6, 0x86aa, 0x9, 0x9d8, 0x0, 0x8, 0x690, 0x2ce9, 0x100, 0x3, 0x2, 0xaf71, 0x7f, 0x3ff, 0x9c, 0x3, 0x4993, 0x8, 0x100, 0xf68ed3, 0x80000001, 0x2, 0x8, 0x1, 0x7c, 0x200, 0x3ef3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x20000084}, 0x8040) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 7.536889942s ago: executing program 0 (id=2819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) recvfrom(r1, &(0x7f0000000600)=""/212, 0xd4, 0x40000002, &(0x7f00000001c0)=@sco, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x450080, 0x0) 7.352683143s ago: executing program 3 (id=2662): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) r5 = socket(0x22, 0x5, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'vxcan1\x00', 0x3}, 0x18) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r8) socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) preadv(r10, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = getpid() ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000180)=r13) 7.339252005s ago: executing program 4 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9fe400ac060a09040000000000000000020000031400048001800900df2401006c61737400e7ffff0800010073797a30000000000900020073767a32000000001400000011000100"/102], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f000000a080)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f4305", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRESHEX], 0x33fe0}}, 0x84) 4.837669177s ago: executing program 1 (id=2820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000ec0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0xc6, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x90, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0xf, "36dad83aea8df15d20889b6a4b488367e6c6cba5844d6d576950aae4e0af85d7922746edc7abaa7b25516c034d4b8474b922a5df0be178ccb65ae4eaabef5f63a5df9cc8e9b0c9fef787cb50058e6375665a79abec0a2808518db033c86bb7e1be26e4ef08f20bfb122d51786403c40883d6626b35a9"}]}}}}}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0xa}, [@nested={0x7, 0x0, 0x0, 0x1, [@generic="05a0d5"]}]}, 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802e"], 0x30}], 0x1}, 0x0) 2.602180804s ago: executing program 0 (id=2821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x18) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100"], 0x90}}, 0x0) 2.379385322s ago: executing program 1 (id=2822): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r3, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x4000010}, 0x40882) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xe23, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}, @TCA_RATE={0x6, 0x2}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.249090487s ago: executing program 0 (id=2823): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x104}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c90d1b9e0262139f617f13bb5600ee9bc149204b5aa4bf6e32c241d652b9deffbf49fc8b50eadc37691642383a2ae485d9bece82020280000000000", @ANYRES16=r3, @ANYBLOB="00022dbd7000fbdbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="05002e000000000005002e0001000000050029000100000008003200010000000500350000000000050037000000000008003200060000000500370001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200027bd7000fedbdf2510000000600002802c000380080001000900000008000200f6ffffff08000100e0da0000080001000eaa0000080002002539fd3b08000200ef0b000008000200090000000400040008000100a27200001400038008000200edcb4c650800010052000000100002800800020002000000040003803c0003800800020007000000080001000800000008000200000400000800020000000080080003000300000008000100010000000800010006000000140001800d0001007564703a73797a3100000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x83}], 0x18, 0x2004c095}, 0x14000012) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x3}}}, 0x24}}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000b40)=""/266, 0x10a}], 0x2}, 0x40002020) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001180)={0x0, 0x1000, "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"}, &(0x7f0000000840)=0x1008) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$igmp6(0xa, 0x3, 0x2) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.1400246s ago: executing program 1 (id=2824): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x11, 0x800000003, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.827026099s ago: executing program 2 (id=1586): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40, 0x5], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 148.732916ms ago: executing program 0 (id=2825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d00000000000000000000050b000100697036746e6c000010000400ff0f0000"], 0x48}}, 0x0) 148.128011ms ago: executing program 1 (id=2826): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x1, @remote, 0x4e22, 0x4, 'nq\x00', 0x8, 0x80000001, 0x6b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x1, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=2827): r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006"], 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x31, 0x0, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async, rerun: 32) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000091000000000000000000000200000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) kernel console output (not intermixed with test programs): ve_0: entered allmulticast mode [ 252.452454][T14028] bond_slave_1: entered allmulticast mode [ 252.459903][T14028] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 252.470048][T14028] bond0: left allmulticast mode [ 252.475659][T14028] bond_slave_0: left allmulticast mode [ 252.481314][T14028] bond_slave_1: left allmulticast mode [ 252.487041][T14028] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 252.494469][T14028] bond0: left promiscuous mode [ 252.527105][T14028] bond_slave_0: left promiscuous mode [ 252.532632][T14028] bond_slave_1: left promiscuous mode [ 252.538299][T14028] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 252.685454][ T5849] Bluetooth: hci2: command tx timeout [ 253.024239][T14037] veth1_macvtap: left promiscuous mode [ 253.042284][T14037] macsec0: entered promiscuous mode [ 253.070823][T14038] veth1_macvtap: entered promiscuous mode [ 253.083169][T14038] macsec0: left promiscuous mode [ 253.401188][T13853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.460305][T14060] __nla_validate_parse: 7 callbacks suppressed [ 253.460323][T14060] netlink: 1648 bytes leftover after parsing attributes in process `syz.3.2400'. [ 253.482340][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2401'. [ 253.495029][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 253.541492][T13853] veth0_vlan: entered promiscuous mode [ 253.593459][T13853] veth1_vlan: entered promiscuous mode [ 253.737390][T13853] veth0_macvtap: entered promiscuous mode [ 253.755687][T14080] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 253.851326][T13853] veth1_macvtap: entered promiscuous mode [ 253.883388][T14087] team0: entered promiscuous mode [ 253.889626][T14087] team_slave_0: entered promiscuous mode [ 253.900669][T14087] team_slave_1: entered promiscuous mode [ 253.908483][T14088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.963568][T14067] team0: left promiscuous mode [ 253.969008][T14067] team_slave_0: left promiscuous mode [ 253.977918][T14067] team_slave_1: left promiscuous mode [ 253.997258][T13853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.008901][T13853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.019359][T13853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.030094][T13853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.041322][T13853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.052247][T13853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.065804][T13853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.095652][T13853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.116401][T13853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.128301][T13853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.159572][T13853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.176432][T13853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.187846][T13853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.199545][T13853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.219891][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 254.252466][T13853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.266776][T13853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.284008][T13853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.302082][T13853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.457800][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.475766][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.553421][ T7707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.560412][T14113] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 254.562698][ T7707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.630814][T14113] netlink: 'syz.3.2413': attribute type 14 has an invalid length. [ 254.669325][T14115] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2414'. [ 254.706918][T14123] xt_bpf: check failed: parse error [ 254.715936][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 254.764066][ T5849] Bluetooth: hci2: command tx timeout [ 254.962489][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'. [ 255.090815][T14134] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 255.105163][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 255.119388][T14134] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2422'. [ 255.133628][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 255.277402][T14141] IPv6: sit2: Disabled Multicast RS [ 255.283416][T14141] sit2: entered allmulticast mode [ 255.356959][T14144] netlink: 'syz.3.2424': attribute type 32 has an invalid length. [ 255.382614][T14144] (unnamed net_device) (uninitialized): option coupled_control: invalid value (232) [ 255.501490][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.513733][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.521973][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.531024][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.539883][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.548574][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.708008][ T7710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.810030][T14147] xfrm0 speed is unknown, defaulting to 1000 [ 255.817536][T14147] lo speed is unknown, defaulting to 1000 [ 255.904672][T14147] chnl_net:caif_netlink_parms(): no params data found [ 255.951488][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.958950][T14147] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.967290][T14147] bridge_slave_0: entered allmulticast mode [ 255.974015][T14147] bridge_slave_0: entered promiscuous mode [ 255.981317][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.989082][T14147] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.996524][T14147] bridge_slave_1: entered allmulticast mode [ 256.004019][T14147] bridge_slave_1: entered promiscuous mode [ 256.028593][T14147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.040557][T14147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.073280][T14147] team0: Port device team_slave_0 added [ 256.082182][T14147] team0: Port device team_slave_1 added [ 256.103001][T14147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.110433][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.136818][T14147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.150321][T14147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.157388][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.184720][T14147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.222156][T14147] hsr_slave_0: entered promiscuous mode [ 256.228665][T14147] hsr_slave_1: entered promiscuous mode [ 256.234806][T14147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.242366][T14147] Cannot create hsr debugfs directory [ 256.317904][ T7710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.381461][T14147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.479791][T14147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.558683][ T7710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.591752][T14147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.621377][ T7710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.657098][T14147] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.701371][ T7710] bridge_slave_1: left allmulticast mode [ 256.708181][ T7710] bridge_slave_1: left promiscuous mode [ 256.714240][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.726050][ T7710] bridge_slave_0: left allmulticast mode [ 256.731710][ T7710] bridge_slave_0: left promiscuous mode [ 256.737635][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.180450][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.198914][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.212033][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.232266][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.241496][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.255781][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.268006][ T7710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.284680][ T7710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.295157][ T7710] bond0 (unregistering): Released all slaves [ 257.357723][T14177] xfrm0 speed is unknown, defaulting to 1000 [ 257.393354][T14177] lo speed is unknown, defaulting to 1000 [ 257.429627][T14180] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 257.644277][ T5846] Bluetooth: hci2: command tx timeout [ 257.694697][T14147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.706642][T14147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.750404][T14147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.781825][T14147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.892270][ T7710] hsr_slave_0: left promiscuous mode [ 257.909519][T14201] netlink: 'syz.3.2438': attribute type 3 has an invalid length. [ 257.927832][T14201] unsupported nlmsg_type 40 [ 257.933922][ T7710] hsr_slave_1: left promiscuous mode [ 257.940077][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.964258][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.986081][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.993549][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.056961][ T7710] veth1_macvtap: left promiscuous mode [ 258.062533][ T7710] veth0_macvtap: left promiscuous mode [ 258.093240][ T7710] veth1_vlan: left promiscuous mode [ 258.106028][ T7710] veth0_vlan: left promiscuous mode [ 258.178248][T14221] x_tables: duplicate entry at hook 1 [ 258.609094][ T7710] team0 (unregistering): Port device team_slave_1 removed [ 258.654438][ T7710] team0 (unregistering): Port device team_slave_0 removed [ 259.295373][T14243] xt_SECMARK: invalid mode: 0 [ 259.324100][ T5846] Bluetooth: hci3: command tx timeout [ 259.383423][T14147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.458498][T14177] chnl_net:caif_netlink_parms(): no params data found [ 259.490405][T14147] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.618598][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.625790][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.640340][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.647527][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.728334][ T5846] Bluetooth: hci2: command tx timeout [ 259.736071][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.743232][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.750862][T14177] bridge_slave_0: entered allmulticast mode [ 259.757920][T14177] bridge_slave_0: entered promiscuous mode [ 259.820284][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.830656][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.852060][T14177] bridge_slave_1: entered allmulticast mode [ 259.859522][T14177] bridge_slave_1: entered promiscuous mode [ 259.949463][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.951846][T14276] netlink: 'syz.1.2455': attribute type 72 has an invalid length. [ 259.973625][T14276] __nla_validate_parse: 12 callbacks suppressed [ 259.973645][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 259.980957][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.047868][T14177] team0: Port device team_slave_0 added [ 260.067442][T14177] team0: Port device team_slave_1 added [ 260.148629][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.156024][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.183097][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.200657][T14286] rdma_rxe: rxe_newlink: failed to add wlan0 [ 260.217707][T14286] netlink: 'syz.3.2458': attribute type 5 has an invalid length. [ 260.237751][T14288] rdma_rxe: rxe_newlink: failed to add wlan0 [ 260.238410][T14286] netlink: 'syz.3.2458': attribute type 5 has an invalid length. [ 260.281038][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.300586][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.327683][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.397250][T14147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.411169][T14177] hsr_slave_0: entered promiscuous mode [ 260.431247][T14177] hsr_slave_1: entered promiscuous mode [ 260.458994][T14177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.481406][T14177] Cannot create hsr debugfs directory [ 260.615899][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 260.651437][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 260.672845][T14306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2462'. [ 260.859938][T14313] dummy0: entered allmulticast mode [ 260.930392][T14147] veth0_vlan: entered promiscuous mode [ 260.986623][T14147] veth1_vlan: entered promiscuous mode [ 261.080571][T14147] veth0_macvtap: entered promiscuous mode [ 261.117763][T14147] veth1_macvtap: entered promiscuous mode [ 261.202377][T14327] netlink: 'syz.0.2467': attribute type 72 has an invalid length. [ 261.230208][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.242871][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 261.273941][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.290986][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.302761][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.320290][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.333138][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.346051][T14147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.353638][T14177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.373266][T14177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.400963][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.421331][ T5846] Bluetooth: hci3: command tx timeout [ 261.434460][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.445119][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.455845][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.466133][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.477096][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.489919][T14147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.511944][T14177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.527746][T14177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.578529][T14147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.601479][T14147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.612431][T14147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.622196][T14147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.800309][ T7709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.808831][ T5846] Bluetooth: hci2: command tx timeout [ 261.816298][ T7709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.884711][T14342] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 261.908248][T14342] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 261.923360][ T7743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.951035][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.964538][ T7743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.985311][T14345] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2471'. [ 262.022852][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.074670][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.081803][ T7743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.135549][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.142709][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.230030][T14177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.412815][T14365] xt_TCPMSS: Only works on TCP SYN packets [ 262.523597][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.669888][T14377] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2479'. [ 262.688892][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.731917][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 262.765878][T14177] veth0_vlan: entered promiscuous mode [ 262.817285][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.849780][T14177] veth1_vlan: entered promiscuous mode [ 262.911920][T14177] veth0_macvtap: entered promiscuous mode [ 262.935638][T14177] veth1_macvtap: entered promiscuous mode [ 262.993526][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.107422][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.154861][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.183617][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.197970][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.209322][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.219986][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.230937][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.242290][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.261772][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.283450][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.294362][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.302906][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.311802][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.311845][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.333841][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.341366][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.435617][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.484360][ T5849] Bluetooth: hci3: command tx timeout [ 263.493908][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.520125][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.543965][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.564357][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.583573][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.593662][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.605239][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.615394][T14406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2485'. [ 263.625719][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.661371][T14389] xfrm0 speed is unknown, defaulting to 1000 [ 263.677940][T14177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.688304][T14177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.697178][T14177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.706172][T14177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.725895][T14389] lo speed is unknown, defaulting to 1000 [ 263.875575][ T12] bridge_slave_1: left allmulticast mode [ 263.892744][ T12] bridge_slave_1: left promiscuous mode [ 263.899246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.908881][ T12] bridge_slave_0: left allmulticast mode [ 263.917037][ T12] bridge_slave_0: left promiscuous mode [ 263.922783][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.333484][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.357961][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.362914][T14425] netlink: 'syz.0.2492': attribute type 2 has an invalid length. [ 264.375272][T14425] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2492'. [ 264.378014][ T12] bond0 (unregistering): Released all slaves [ 264.409175][T14412] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 264.814153][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.822020][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.875564][ T12] hsr_slave_0: left promiscuous mode [ 264.903369][ T12] hsr_slave_1: left promiscuous mode [ 264.912026][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.924439][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.932481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.940497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.967064][ T12] veth1_macvtap: left promiscuous mode [ 264.972618][ T12] veth0_macvtap: left promiscuous mode [ 264.978551][ T12] veth1_vlan: left promiscuous mode [ 264.984554][ T12] veth0_vlan: left promiscuous mode [ 265.408986][ T5849] Bluetooth: hci2: command tx timeout [ 265.491853][ T12] team0 (unregistering): Port device team_slave_1 removed [ 265.539349][ T12] team0 (unregistering): Port device team_slave_0 removed [ 265.564060][ T5849] Bluetooth: hci3: command tx timeout [ 265.979038][T14389] chnl_net:caif_netlink_parms(): no params data found [ 265.996512][T14450] syzkaller1: entered promiscuous mode [ 266.002327][T14450] syzkaller1: entered allmulticast mode [ 266.036572][ T7710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.053015][ T7710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.163654][T14461] vlan4: entered allmulticast mode [ 266.247678][T14467] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 266.276272][T14467] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2501'. [ 266.288088][T14467] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 266.331248][T14467] netlink: 'syz.3.2501': attribute type 10 has an invalid length. [ 266.360156][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.361171][T14467] netlink: 'syz.3.2501': attribute type 4 has an invalid length. [ 266.373479][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.383179][T14389] bridge_slave_0: entered allmulticast mode [ 266.391041][T14389] bridge_slave_0: entered promiscuous mode [ 266.399833][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.407359][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.415479][T14389] bridge_slave_1: entered allmulticast mode [ 266.422683][T14389] bridge_slave_1: entered promiscuous mode [ 266.424921][T14467] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2501'. [ 266.511793][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 266.566877][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.673268][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.811422][T14389] team0: Port device team_slave_0 added [ 266.851739][T14389] team0: Port device team_slave_1 added [ 266.884014][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2508'. [ 266.902087][T14489] netlink: 'syz.3.2507': attribute type 13 has an invalid length. [ 266.912079][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2508'. [ 267.028297][T14493] netlink: 'syz.0.2509': attribute type 7 has an invalid length. [ 267.066930][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.112241][T14489] veth0_macvtap: left promiscuous mode [ 267.118328][T14489] macvtap0: entered allmulticast mode [ 267.125434][T14489] macvtap0: refused to change device tx_queue_len [ 267.213626][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.229221][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.236292][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.263549][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.277360][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.284674][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.310987][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.342130][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.376935][T14389] hsr_slave_0: entered promiscuous mode [ 267.383075][T14389] hsr_slave_1: entered promiscuous mode [ 267.389348][T14389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.397262][T14389] Cannot create hsr debugfs directory [ 267.428505][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.484098][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 267.542352][ T12] bridge_slave_1: left allmulticast mode [ 267.548174][ T12] bridge_slave_1: left promiscuous mode [ 267.560596][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.571685][ T12] bridge_slave_0: left allmulticast mode [ 267.577958][ T12] bridge_slave_0: left promiscuous mode [ 267.584003][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.898211][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.911326][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.921429][ T12] bond0 (unregistering): Released all slaves [ 268.168395][ T12] hsr_slave_0: left promiscuous mode [ 268.176474][ T12] hsr_slave_1: left promiscuous mode [ 268.182150][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.189840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.198816][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.207156][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.237336][ T12] veth1_macvtap: left promiscuous mode [ 268.242916][ T12] veth0_macvtap: left promiscuous mode [ 268.271528][ T12] veth1_vlan: left promiscuous mode [ 268.283230][ T12] veth0_vlan: left promiscuous mode [ 268.292806][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 268.316746][T14496] netlink: 'syz.0.2510': attribute type 3 has an invalid length. [ 268.335881][T14500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2511'. [ 268.559357][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.577498][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.591794][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.613543][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.630248][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.641538][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.900943][ T12] team0 (unregistering): Port device team_slave_1 removed [ 268.950894][ T12] team0 (unregistering): Port device team_slave_0 removed [ 269.416839][T14496] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.426265][T14496] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.435217][T14496] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.444084][T14496] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.521420][T14507] dvmrp0: entered allmulticast mode [ 269.567119][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 269.576432][T14504] xfrm0 speed is unknown, defaulting to 1000 [ 269.583491][T14504] lo speed is unknown, defaulting to 1000 [ 269.601740][T14389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.638324][T14510] syzkaller0: entered promiscuous mode [ 269.644434][T14510] syzkaller0: entered allmulticast mode [ 269.656096][T14389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.664720][T14510] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 269.687967][T14389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.751507][T14389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.949757][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2518'. [ 270.157957][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.180377][T14504] chnl_net:caif_netlink_parms(): no params data found [ 270.232730][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.322025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.329247][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.351027][T14552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 270.369337][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.376523][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.433657][T14504] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.455406][T14504] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.462682][T14504] bridge_slave_0: entered allmulticast mode [ 270.469612][T14504] bridge_slave_0: entered promiscuous mode [ 270.477565][T14504] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.484920][T14504] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.492112][T14504] bridge_slave_1: entered allmulticast mode [ 270.498956][T14504] bridge_slave_1: entered promiscuous mode [ 270.540478][T14504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.558911][T14504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.614509][T14504] team0: Port device team_slave_0 added [ 270.628117][T14504] team0: Port device team_slave_1 added [ 270.660748][T14504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.668425][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.694865][T14504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.704511][ T5846] Bluetooth: hci3: command tx timeout [ 270.722392][T14504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.730153][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.756726][T14504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.775765][T14564] netlink: 'syz.1.2526': attribute type 24 has an invalid length. [ 270.840932][T14504] hsr_slave_0: entered promiscuous mode [ 270.861744][T14504] hsr_slave_1: entered promiscuous mode [ 270.868717][T14504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.878646][T14504] Cannot create hsr debugfs directory [ 271.060848][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.187565][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2530'. [ 271.463147][T14389] veth0_vlan: entered promiscuous mode [ 271.497921][T14389] veth1_vlan: entered promiscuous mode [ 271.521223][T14606] pimreg: entered allmulticast mode [ 271.644076][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 271.686718][T14389] veth0_macvtap: entered promiscuous mode [ 271.699699][T14504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.739911][T14389] veth1_macvtap: entered promiscuous mode [ 271.757433][T14504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.767962][T14504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.799810][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.812175][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.823103][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.834267][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.849514][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.860623][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.881610][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.903164][T14504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.928426][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.953902][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.971923][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.985140][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.995185][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.005818][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.018422][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.033591][T14628] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2540'. [ 272.045673][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 272.080048][T14389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.090462][T14389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.099589][T14389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.108747][T14389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.233873][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 272.254224][T14635] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.271791][ T7707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.283311][ T7707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.294095][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 272.303593][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 272.313357][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 272.329431][T14634] netlink: 'syz.0.2542': attribute type 11 has an invalid length. [ 272.369637][ T7743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.378953][T14504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.399569][T14504] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.403880][ T7743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.426843][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.434024][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.443421][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.450575][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.474165][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 272.763956][ T5846] Bluetooth: hci3: command tx timeout [ 272.944400][T14504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.030132][T14504] veth0_vlan: entered promiscuous mode [ 273.050775][T14504] veth1_vlan: entered promiscuous mode [ 273.131235][T14504] veth0_macvtap: entered promiscuous mode [ 273.153143][T14504] veth1_macvtap: entered promiscuous mode [ 273.187981][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.203266][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.237834][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.269318][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.281818][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.296412][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.306922][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.317597][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.335763][T14504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.386967][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.401279][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.412160][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.423057][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.435724][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.463933][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.487165][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.528772][T14689] netlink: 'syz.0.2557': attribute type 10 has an invalid length. [ 273.537187][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.558571][T14504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.598038][T14689] macvlan0: entered promiscuous mode [ 273.604816][T14689] macvlan0: entered allmulticast mode [ 273.634723][T14689] veth1_vlan: entered allmulticast mode [ 273.640688][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 273.656064][T14689] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 273.678140][T14504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.702639][T14504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.721397][T14504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.730909][T14504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.798784][ T7707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.840199][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 273.901275][T14696] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2558'. [ 274.074340][ T7707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.255844][ T7707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.387428][ T7707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.413095][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.424417][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.432846][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.442530][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.454250][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.461658][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.513032][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.548745][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.627761][T14721] xfrm0 speed is unknown, defaulting to 1000 [ 274.650386][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.660985][T14721] lo speed is unknown, defaulting to 1000 [ 274.679850][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.828836][ T7707] bridge_slave_1: left allmulticast mode [ 274.841462][ T7707] bridge_slave_1: left promiscuous mode [ 274.848777][ T5846] Bluetooth: hci3: command tx timeout [ 274.855282][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.887669][ T7707] bridge_slave_0: left allmulticast mode [ 274.911812][ T7707] bridge_slave_0: left promiscuous mode [ 274.930502][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.423248][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.439885][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.449970][ T7707] bond0 (unregistering): Released all slaves [ 275.461716][T14743] netlink: 'syz.0.2568': attribute type 21 has an invalid length. [ 275.696497][T14766] openvswitch: netlink: Flow key attr not present in new flow. [ 275.711410][T14768] netlink: get zone limit has 8 unknown bytes [ 275.809824][T14721] chnl_net:caif_netlink_parms(): no params data found [ 275.980177][T14777] macvlan1: entered promiscuous mode [ 275.986006][T14777] macvlan1: entered allmulticast mode [ 276.128596][ T7707] hsr_slave_0: left promiscuous mode [ 276.153621][ T7707] hsr_slave_1: left promiscuous mode [ 276.162944][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.170571][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.180543][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.188262][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.210890][ T7707] veth1_macvtap: left promiscuous mode [ 276.219528][ T7707] veth0_macvtap: left promiscuous mode [ 276.226528][ T7707] veth1_vlan: left promiscuous mode [ 276.231791][ T7707] veth0_vlan: left promiscuous mode [ 276.530377][ T5846] Bluetooth: hci2: command tx timeout [ 276.691103][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 276.738460][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 277.243469][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.251422][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.260462][T14721] bridge_slave_0: entered allmulticast mode [ 277.268977][T14721] bridge_slave_0: entered promiscuous mode [ 277.277902][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.285543][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.293957][T14721] bridge_slave_1: entered allmulticast mode [ 277.300538][T14721] bridge_slave_1: entered promiscuous mode [ 277.338441][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.349768][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.445355][T14790] netlink: 'syz.0.2580': attribute type 11 has an invalid length. [ 277.495191][T14794] __nla_validate_parse: 6 callbacks suppressed [ 277.495209][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 277.520794][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2581'. [ 277.524872][T14721] team0: Port device team_slave_0 added [ 277.559270][T14721] team0: Port device team_slave_1 added [ 277.654835][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.682484][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.721110][T14796] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2583'. [ 277.734256][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.756491][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.772035][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.799020][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.812064][T14796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2583'. [ 277.822410][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.833047][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.843008][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.851028][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.859309][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.866785][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.937231][T14721] hsr_slave_0: entered promiscuous mode [ 277.947115][T14721] hsr_slave_1: entered promiscuous mode [ 277.953371][T14721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.961822][T14721] Cannot create hsr debugfs directory [ 277.998387][T14801] xfrm0 speed is unknown, defaulting to 1000 [ 278.113312][ T7707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.160455][T14801] lo speed is unknown, defaulting to 1000 [ 278.262013][ T7707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.308971][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 278.357384][T14815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2588'. [ 278.388553][T14817] pimreg3: entered allmulticast mode [ 278.489181][ T7707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.609894][ T5846] Bluetooth: hci2: command tx timeout [ 278.620541][T14829] netlink: 'syz.3.2591': attribute type 2 has an invalid length. [ 278.643882][T14829] netlink: 'syz.3.2591': attribute type 8 has an invalid length. [ 278.663983][T14829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2591'. [ 278.741783][ T7707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.806379][T14831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2591'. [ 279.072786][T14801] chnl_net:caif_netlink_parms(): no params data found [ 279.159237][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 279.211314][ T7707] bridge_slave_1: left allmulticast mode [ 279.220707][ T7707] bridge_slave_1: left promiscuous mode [ 279.231722][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.248371][ T7707] bridge_slave_0: left allmulticast mode [ 279.255599][ T7707] bridge_slave_0: left promiscuous mode [ 279.261328][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.385217][T14869] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 279.502992][T14872] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2600'. [ 279.515500][T14872] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 279.703643][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.715643][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.727471][ T7707] bond0 (unregistering): Released all slaves [ 279.746453][T14856] netlink: 'syz.3.2597': attribute type 7 has an invalid length. [ 279.787746][T14721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.913521][T14721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.936681][T14721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.964160][ T5846] Bluetooth: hci3: command tx timeout [ 280.076399][T14721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.101685][T14896] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 280.133576][T14801] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.141471][T14801] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.152531][T14801] bridge_slave_0: entered allmulticast mode [ 280.159950][T14801] bridge_slave_0: entered promiscuous mode [ 280.261889][T14902] netlink: 'syz.0.2609': attribute type 4 has an invalid length. [ 280.271379][T14801] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.279707][T14801] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.288109][T14801] bridge_slave_1: entered allmulticast mode [ 280.300924][T14801] bridge_slave_1: entered promiscuous mode [ 280.316525][T14904] netlink: 'syz.0.2609': attribute type 4 has an invalid length. [ 280.396700][T14801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.416349][T14801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.489681][ T7707] hsr_slave_0: left promiscuous mode [ 280.503897][ T7707] hsr_slave_1: left promiscuous mode [ 280.509780][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.522313][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.533401][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.545867][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.568601][ T7707] veth1_macvtap: left promiscuous mode [ 280.574404][ T7707] veth0_macvtap: left promiscuous mode [ 280.580045][ T7707] veth1_vlan: left promiscuous mode [ 280.585681][ T7707] veth0_vlan: left promiscuous mode [ 280.685916][ T5846] Bluetooth: hci2: command tx timeout [ 281.035366][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 281.085309][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 281.362293][T14916] sctp: [Deprecated]: syz.3.2613 (pid 14916) Use of int in max_burst socket option. [ 281.362293][T14916] Use struct sctp_assoc_value instead [ 281.691665][T14801] team0: Port device team_slave_0 added [ 281.700990][T14801] team0: Port device team_slave_1 added [ 281.836389][T14801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.866254][T14801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.914751][T14801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.018060][T14801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.029761][T14801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.055857][T14940] netlink: 'syz.3.2617': attribute type 12 has an invalid length. [ 282.074012][ T5846] Bluetooth: hci3: command tx timeout [ 282.081543][T14801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.765358][ T5846] Bluetooth: hci2: command tx timeout [ 284.025394][T14801] hsr_slave_0: entered promiscuous mode [ 284.050738][T14801] hsr_slave_1: entered promiscuous mode [ 284.058590][T14801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.066527][T14801] Cannot create hsr debugfs directory [ 284.101694][T14951] __nla_validate_parse: 3 callbacks suppressed [ 284.101706][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 284.124151][ T5846] Bluetooth: hci3: command tx timeout [ 284.279649][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.300156][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.350367][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.357528][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.382306][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2625'. [ 284.429275][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.436476][ T7739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.549275][T14959] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.710796][T14970] pim6reg1: entered promiscuous mode [ 284.732417][T14970] pim6reg1: entered allmulticast mode [ 284.746688][T14976] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2631'. [ 285.003026][T14721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.193119][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 285.216075][T14801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.243423][T14801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.289684][T14801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.331511][T14801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.537893][T14721] veth0_vlan: entered promiscuous mode [ 285.562525][T14721] veth1_vlan: entered promiscuous mode [ 285.576394][T15004] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.2637'. [ 285.604153][T15004] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 285.634337][T14801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.697484][T14801] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.750599][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.757790][ T7743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.822410][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.829578][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.872507][T14721] veth0_macvtap: entered promiscuous mode [ 285.901831][T14721] veth1_macvtap: entered promiscuous mode [ 285.933015][T15015] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 285.947106][T15015] netlink: 'syz.3.2641': attribute type 2 has an invalid length. [ 285.958967][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.979171][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.000550][T15015] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2641'. [ 286.013998][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.062334][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.072931][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.084514][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.097876][T14721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.126286][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.151825][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.166178][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.189824][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.204592][ T5846] Bluetooth: hci3: command tx timeout [ 286.236525][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.247824][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.260170][T14721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.273542][T14721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.285546][T14721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.295173][T14721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.305066][T14721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.364333][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2646'. [ 286.370435][T14801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.466605][ T7743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.488132][ T7743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.527327][T14801] veth0_vlan: entered promiscuous mode [ 286.542621][ T7719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.558277][T14801] veth1_vlan: entered promiscuous mode [ 286.564429][ T7719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.641301][T14801] veth0_macvtap: entered promiscuous mode [ 286.648783][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 286.660257][T15036] Bluetooth: MGMT ver 1.23 [ 286.860424][T15044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.985483][T15053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2653'. [ 287.042696][T15038] veth1_vlan (unregistering): left allmulticast mode [ 287.107143][T15055] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2654'. [ 287.118867][T15038] bond0: (slave macvlan0): Releasing backup interface [ 287.212329][T14801] veth1_macvtap: entered promiscuous mode [ 287.237239][T15062] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 287.264944][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.277036][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.288118][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.300745][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.311299][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.337862][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.348621][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.359303][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.372825][T14801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.401591][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.419576][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.442416][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.464260][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.482247][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.532242][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.550150][T14801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.563651][T14801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.570846][T15071] openvswitch: netlink: Missing key (keys=40, expected=100) [ 287.575557][T14801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.646191][T14801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.659650][T14801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.671082][T14801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.680080][T14801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.751897][ T7707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.882496][ T7707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.984834][ T7709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.992716][ T7709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.116577][ T7707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.196266][ T7743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.235643][ T7743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.308995][ T7707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.331989][T15083] ip6t_srh: unknown srh invflags 5F00 [ 288.383444][T15083] bridge0: port 1(wlan0) entered blocking state [ 288.423995][T15083] bridge0: port 1(wlan0) entered disabled state [ 288.445494][T15083] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 288.461410][T15083] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 288.615453][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.626331][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.636941][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.653281][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.663011][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.671266][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.696648][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.707603][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.722338][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.730569][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.741623][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.749540][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.839648][ T7707] bridge_slave_1: left allmulticast mode [ 288.847792][T15091] xfrm0 speed is unknown, defaulting to 1000 [ 288.857925][ T7707] bridge_slave_1: left promiscuous mode [ 288.866980][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.878581][ T7707] bridge_slave_0: left allmulticast mode [ 288.884661][ T7707] bridge_slave_0: left promiscuous mode [ 288.890349][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.391381][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.402724][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.417787][ T7707] bond0 (unregistering): Released all slaves [ 289.431500][T15091] lo speed is unknown, defaulting to 1000 [ 289.489099][T15093] xfrm0 speed is unknown, defaulting to 1000 [ 289.515481][T15093] lo speed is unknown, defaulting to 1000 [ 289.709277][ T7707] hsr_slave_0: left promiscuous mode [ 289.715245][ T7707] hsr_slave_1: left promiscuous mode [ 289.720950][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.731731][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.740092][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.747732][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.767865][ T7707] veth1_macvtap: left promiscuous mode [ 289.773384][ T7707] veth0_macvtap: left promiscuous mode [ 289.779200][ T7707] veth1_vlan: left promiscuous mode [ 289.785381][ T7707] veth0_vlan: left promiscuous mode [ 290.211364][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 290.258239][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 290.769235][ T5849] Bluetooth: hci4: command tx timeout [ 290.775435][ T5846] Bluetooth: hci2: command tx timeout [ 290.869644][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.885724][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.899630][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.911294][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.921722][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.929250][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.992328][T15091] chnl_net:caif_netlink_parms(): no params data found [ 291.153200][T15115] xfrm0 speed is unknown, defaulting to 1000 [ 291.201213][T15093] chnl_net:caif_netlink_parms(): no params data found [ 291.218924][T15115] lo speed is unknown, defaulting to 1000 [ 291.348858][T15091] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.368606][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.377903][T15091] bridge_slave_0: entered allmulticast mode [ 291.385546][T15091] bridge_slave_0: entered promiscuous mode [ 291.421038][T15091] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.428815][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.436265][T15091] bridge_slave_1: entered allmulticast mode [ 291.443082][T15091] bridge_slave_1: entered promiscuous mode [ 291.462734][T15132] __nla_validate_parse: 1 callbacks suppressed [ 291.462751][T15132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2673'. [ 291.480046][T15093] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.489400][T15093] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.499291][T15093] bridge_slave_0: entered allmulticast mode [ 291.507262][T15093] bridge_slave_0: entered promiscuous mode [ 291.528406][T15093] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.536582][T15093] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.544650][T15093] bridge_slave_1: entered allmulticast mode [ 291.551800][T15093] bridge_slave_1: entered promiscuous mode [ 291.727333][T15146] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2675'. [ 291.758778][ T7707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.784257][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.797823][T15093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.830741][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.909136][ T7707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.920912][T15148] sctp: [Deprecated]: syz.0.2676 (pid 15148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.920912][T15148] Use struct sctp_sack_info instead [ 291.958871][T15093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.106508][ T7707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.152952][T15091] team0: Port device team_slave_0 added [ 292.173614][T15091] team0: Port device team_slave_1 added [ 292.307118][ T7707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.355360][T15093] team0: Port device team_slave_0 added [ 292.362744][T15093] team0: Port device team_slave_1 added [ 292.517297][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.524601][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.551549][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.568019][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.575660][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.602219][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.628977][T15171] xfrm0 speed is unknown, defaulting to 1000 [ 292.640397][T15115] chnl_net:caif_netlink_parms(): no params data found [ 292.696343][T15171] lo speed is unknown, defaulting to 1000 [ 292.737966][T15093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.745483][T15093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.773477][T15093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.786373][T15093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.793347][T15093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.819790][T15093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.844462][ T5849] Bluetooth: hci2: command tx timeout [ 292.849964][ T5846] Bluetooth: hci4: command tx timeout [ 292.854207][T15177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2681'. [ 292.943649][T15091] hsr_slave_0: entered promiscuous mode [ 292.955378][T15091] hsr_slave_1: entered promiscuous mode [ 292.961567][T15091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.969655][T15091] Cannot create hsr debugfs directory [ 293.003915][ T5849] Bluetooth: hci3: command tx timeout [ 293.047911][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2684'. [ 293.142288][T15115] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.151993][T15115] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.166567][T15115] bridge_slave_0: entered allmulticast mode [ 293.174091][T15115] bridge_slave_0: entered promiscuous mode [ 293.181996][T15115] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.190550][T15115] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.202709][T15115] bridge_slave_1: entered allmulticast mode [ 293.210406][T15115] bridge_slave_1: entered promiscuous mode [ 293.234328][T15093] hsr_slave_0: entered promiscuous mode [ 293.240785][T15093] hsr_slave_1: entered promiscuous mode [ 293.254686][T15093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.262756][T15093] Cannot create hsr debugfs directory [ 293.362889][T15115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.429612][ T7707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.464423][T15115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.570722][ T7707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.632388][T15115] team0: Port device team_slave_0 added [ 293.679378][ T7707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.699262][T15115] team0: Port device team_slave_1 added [ 293.784360][ T7707] bond0: (slave netdevsim0): Releasing backup interface [ 293.813032][ T7707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.856616][T15115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.863635][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.895405][T15115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.957781][T15204] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 293.991838][T15115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.014000][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.049010][T15115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.078522][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 294.100124][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 294.229745][T15115] hsr_slave_0: entered promiscuous mode [ 294.251823][T15115] hsr_slave_1: entered promiscuous mode [ 294.260545][T15115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.273883][T15115] Cannot create hsr debugfs directory [ 294.308546][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'. [ 294.440903][ T7707] bridge_slave_1: left allmulticast mode [ 294.449141][ T7707] bridge_slave_1: left promiscuous mode [ 294.457078][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.467626][ T7707] bridge_slave_0: left allmulticast mode [ 294.473641][ T7707] bridge_slave_0: left promiscuous mode [ 294.480110][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.826758][ T7707] dvmrp0 (unregistering): left allmulticast mode [ 294.924165][ T5846] Bluetooth: hci4: command tx timeout [ 294.930429][ T5849] Bluetooth: hci2: command tx timeout [ 295.083893][ T5849] Bluetooth: hci3: command tx timeout [ 295.231954][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.242747][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.254020][ T7707] bond0 (unregistering): Released all slaves [ 295.378039][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.390175][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.402491][ T7707] bond0 (unregistering): Released all slaves [ 295.416340][ T7707] bond1 (unregistering): Released all slaves [ 295.541740][ T7707] : left promiscuous mode [ 295.572413][T15238] openvswitch: netlink: IP tunnel TTL not specified. [ 295.667746][ T7707] tipc: Disabling bearer [ 295.684349][ T7707] tipc: Disabling bearer [ 295.689922][ T7707] tipc: Disabling bearer [ 295.702175][T15242] syzkaller0: entered allmulticast mode [ 295.711853][ T7707] tipc: Left network mode [ 295.767213][ T7707] IPVS: stopping master sync thread 10320 ... [ 296.077230][T15254] openvswitch: netlink: IP tunnel TTL not specified. [ 296.370718][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2710'. [ 296.427785][ T7707] hsr_slave_0: left promiscuous mode [ 296.440939][ T7707] hsr_slave_1: left promiscuous mode [ 296.457026][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.473862][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.482713][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.491781][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.508690][ T7707] hsr_slave_0: left promiscuous mode [ 296.517277][ T7707] hsr_slave_1: left promiscuous mode [ 296.546068][ T7707] veth1_macvtap: left promiscuous mode [ 296.551686][ T7707] veth0_macvtap: left promiscuous mode [ 296.557883][ T7707] veth1_vlan: left promiscuous mode [ 296.563376][ T7707] veth0_vlan: left promiscuous mode [ 296.570378][ T7707] veth1_macvtap: left promiscuous mode [ 296.576134][ T7707] veth1_vlan: left promiscuous mode [ 296.581448][ T7707] veth0_vlan: left promiscuous mode [ 297.009090][ T5849] Bluetooth: hci2: command tx timeout [ 297.013913][ T5846] Bluetooth: hci4: command tx timeout [ 297.081980][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 297.131311][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 297.165611][ T5846] Bluetooth: hci3: command tx timeout [ 298.011382][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 298.045122][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 298.429278][T15280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2713'. [ 298.823539][T15091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.857112][T15091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.884441][T15091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.936110][T15091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.016627][ T7707] IPVS: stop unused estimator thread 0... [ 299.092196][T15093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.108418][T15093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.128357][T15093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.147009][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2721'. [ 299.172943][T15093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.243122][T15115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.244234][ T5846] Bluetooth: hci3: command tx timeout [ 299.259605][T15115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.310295][T15115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.333944][T15115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.430857][T15091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.495083][T15091] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.523714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.530883][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.563017][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.570160][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.598745][T15093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.689478][T15093] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.728886][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.736090][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.144768][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 301.810915][T15313] tipc: Enabled bearer , priority 10 [ 301.819428][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.826611][ T7719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.853494][T15115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.907780][T15115] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.975596][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.982695][ T7743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.013663][T15091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.033503][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.040720][ T7719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.107780][T15319] netlink: 'syz.1.2726': attribute type 33 has an invalid length. [ 302.144006][T15319] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2726'. [ 302.440973][T15093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.538266][T15115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.558387][T15091] veth0_vlan: entered promiscuous mode [ 302.583012][T15091] veth1_vlan: entered promiscuous mode [ 302.631880][T15093] veth0_vlan: entered promiscuous mode [ 302.660911][T15093] veth1_vlan: entered promiscuous mode [ 302.720644][T15091] veth0_macvtap: entered promiscuous mode [ 302.766161][T15115] veth0_vlan: entered promiscuous mode [ 302.780181][T15091] veth1_macvtap: entered promiscuous mode [ 302.838150][T15093] veth0_macvtap: entered promiscuous mode [ 302.861446][T15115] veth1_vlan: entered promiscuous mode [ 302.873402][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.891213][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.909977][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.920893][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.932410][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.943175][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.962669][T15091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.973049][T15093] veth1_macvtap: entered promiscuous mode [ 302.988496][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.000543][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.012437][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.024604][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.037714][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.051160][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.062207][T15091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.142110][T15115] veth0_macvtap: entered promiscuous mode [ 303.156723][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.185624][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.200959][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.211644][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.221766][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.232649][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.250234][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.266070][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.278863][T15093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.288318][T15091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.300174][T15091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.309254][T15091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.318340][T15091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.352887][T15356] xfrm0 speed is unknown, defaulting to 1000 [ 303.354443][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.372155][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.382472][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.393158][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.405137][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.415767][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.425700][T15093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.446089][T15093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.461750][T15093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.479951][T15356] lo speed is unknown, defaulting to 1000 [ 303.482336][T15115] veth1_macvtap: entered promiscuous mode [ 303.520662][T15093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.529873][T15093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.538740][T15093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.548752][T15093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.608881][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.619795][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.629879][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.640450][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.651226][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.661695][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.671741][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.687852][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.697805][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.713079][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.724764][T15115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.767241][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.779215][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.795184][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.807742][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.817800][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.828362][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.838328][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.848825][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.858672][T15115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.869324][T15115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.880478][T15115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.948155][T15115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.965992][T15115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.983620][T15115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.995388][T15115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.105256][T15366] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 304.119724][T15368] bridge6: entered promiscuous mode [ 304.137977][T15368] bridge6: entered allmulticast mode [ 304.230357][ T7719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.246552][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.266046][ T7719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.274456][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.340953][T15366] veth7: entered promiscuous mode [ 304.360565][T15366] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 304.420216][ T7719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.429429][ T7719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.440679][T15374] netlink: 'syz.0.2736': attribute type 2 has an invalid length. [ 304.463467][ T7743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.493194][ T7743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.507956][T15374] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2736'. [ 304.664804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.684847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.768049][T15383] netlink: 'syz.1.2739': attribute type 11 has an invalid length. [ 304.777378][ T7743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.794631][ T7743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.164987][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 305.230495][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.279357][T15395] syzkaller1: entered promiscuous mode [ 305.296779][T15395] syzkaller1: entered allmulticast mode [ 305.545896][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.698038][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.881196][T15413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2746'. [ 305.951640][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.970946][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.981615][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.991750][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.002551][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.012635][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 306.020360][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.063208][T15414] xfrm0 speed is unknown, defaulting to 1000 [ 306.070037][T15414] lo speed is unknown, defaulting to 1000 [ 306.200711][T15414] chnl_net:caif_netlink_parms(): no params data found [ 306.241151][ T12] bridge_slave_1: left allmulticast mode [ 306.247142][ T12] bridge_slave_1: left promiscuous mode [ 306.252822][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.262063][ T12] bridge_slave_0: left allmulticast mode [ 306.269105][ T12] bridge_slave_0: left promiscuous mode [ 306.274985][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.651448][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.663664][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.677915][ T12] bond0 (unregistering): Released all slaves [ 306.773639][T15414] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.787819][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.795653][T15414] bridge_slave_0: entered allmulticast mode [ 306.802935][T15414] bridge_slave_0: entered promiscuous mode [ 306.816161][T15414] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.823217][T15414] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.830964][T15414] bridge_slave_1: entered allmulticast mode [ 306.838584][T15414] bridge_slave_1: entered promiscuous mode [ 306.885052][T15414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.902127][T15414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.980732][T15414] team0: Port device team_slave_0 added [ 306.989891][T15414] team0: Port device team_slave_1 added [ 307.033054][ T12] hsr_slave_0: left promiscuous mode [ 307.040902][ T12] hsr_slave_1: left promiscuous mode [ 307.046817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.055868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.063611][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.071310][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.158312][ T12] veth1_macvtap: left promiscuous mode [ 307.193910][ T12] veth0_macvtap: left promiscuous mode [ 307.200933][ T12] veth1_vlan: left promiscuous mode [ 307.212365][ T12] veth0_vlan: left promiscuous mode [ 307.590428][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.614015][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.623210][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.648177][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.672396][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 307.679920][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.689851][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.707076][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.735293][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.743395][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.751351][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.763177][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.044445][ T5849] Bluetooth: hci2: command tx timeout [ 308.103647][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.177969][ T12] team0 (unregistering): Port device team_slave_0 removed [ 308.251462][T15447] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2752'. [ 308.272064][T15447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2752'. [ 308.675588][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.687361][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.716973][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.746506][T15447] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 308.762604][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.795493][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.835463][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.837685][T15455] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 308.859305][T15454] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2753'. [ 308.906736][T15455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.914528][T15435] xfrm0 speed is unknown, defaulting to 1000 [ 308.944103][T15455] bond6: (slave gretap1): making interface the new active one [ 308.953336][T15455] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 308.975533][T15437] xfrm0 speed is unknown, defaulting to 1000 [ 308.976364][T15435] lo speed is unknown, defaulting to 1000 [ 308.997592][T15414] hsr_slave_0: entered promiscuous mode [ 309.004665][T15414] hsr_slave_1: entered promiscuous mode [ 309.010813][T15414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.020152][T15414] Cannot create hsr debugfs directory [ 309.058268][T15437] lo speed is unknown, defaulting to 1000 [ 309.427761][T15469] xt_ct_set_helper: 1 callbacks suppressed [ 309.427774][T15469] xt_CT: No such helper "snmp" [ 309.460893][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 309.463914][T15469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2757'. [ 309.723470][T15494] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2762'. [ 309.804814][ T5849] Bluetooth: hci3: command tx timeout [ 309.805959][ T5834] Bluetooth: hci4: command tx timeout [ 309.828627][ T7707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.848316][T15501] Bluetooth: MGMT ver 1.23 [ 309.870425][T15503] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2765'. [ 309.873353][T15437] chnl_net:caif_netlink_parms(): no params data found [ 309.942709][ T7707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.000757][T15435] chnl_net:caif_netlink_parms(): no params data found [ 310.097962][ T7707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.124354][ T5834] Bluetooth: hci2: command tx timeout [ 310.225233][ T7707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.306273][T15437] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.316204][ T7743] tipc: Subscription rejected, illegal request [ 310.325082][T15437] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.332477][T15437] bridge_slave_0: entered allmulticast mode [ 310.353210][T15437] bridge_slave_0: entered promiscuous mode [ 310.366338][T15437] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.376840][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2768'. [ 310.377886][T15437] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.393205][T15437] bridge_slave_1: entered allmulticast mode [ 310.402476][T15437] bridge_slave_1: entered promiscuous mode [ 310.489623][T15437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.499070][T15435] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.506354][T15435] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.514522][T15435] bridge_slave_0: entered allmulticast mode [ 310.521139][T15435] bridge_slave_0: entered promiscuous mode [ 310.530999][T15437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.561817][T15435] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.570629][T15435] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.578430][T15435] bridge_slave_1: entered allmulticast mode [ 310.586098][T15435] bridge_slave_1: entered promiscuous mode [ 310.646665][T15437] team0: Port device team_slave_0 added [ 310.695741][T15437] team0: Port device team_slave_1 added [ 310.741811][ T7707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.769558][T15435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.786606][T15435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.802320][T15414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.846256][T15437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.853239][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.880143][T15437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.894723][T15414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.920738][ T7707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.939573][T15435] team0: Port device team_slave_0 added [ 310.946304][T15437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.953446][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.980870][T15437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.992523][T15414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.027298][T15435] team0: Port device team_slave_1 added [ 311.090909][ T7707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.119627][T15528] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2770'. [ 311.144292][T15529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2771'. [ 311.145025][T15528] nbd: illegal input index -8454144 [ 311.165829][T15414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.196740][T15531] netlink: 'syz.0.2771': attribute type 3 has an invalid length. [ 311.204963][T15531] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 311.252361][ T7707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.290392][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'. [ 311.303650][T15435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.310881][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.341930][T15435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.357121][T15437] hsr_slave_0: entered promiscuous mode [ 311.363533][T15437] hsr_slave_1: entered promiscuous mode [ 311.372817][T15437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.380597][T15437] Cannot create hsr debugfs directory [ 311.394365][T15435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.401343][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.431982][T15435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.580116][T15435] hsr_slave_0: entered promiscuous mode [ 311.615974][T15435] hsr_slave_1: entered promiscuous mode [ 311.621920][T15435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.642066][T15435] Cannot create hsr debugfs directory [ 311.749166][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'. [ 311.878567][ T7707] bridge_slave_1: left allmulticast mode [ 311.885038][ T5834] Bluetooth: hci3: command tx timeout [ 311.885993][ T5849] Bluetooth: hci4: command tx timeout [ 311.891050][ T7707] bridge_slave_1: left promiscuous mode [ 311.924273][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.941643][ T7707] bridge_slave_0: left allmulticast mode [ 311.960569][ T7707] bridge_slave_0: left promiscuous mode [ 311.982019][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.999789][ T7707] bridge_slave_1: left allmulticast mode [ 312.013804][ T7707] bridge_slave_1: left promiscuous mode [ 312.019523][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.028659][ T7707] bridge_slave_0: left allmulticast mode [ 312.038539][ T7707] bridge_slave_0: left promiscuous mode [ 312.048961][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.209795][ T5849] Bluetooth: hci2: command tx timeout [ 312.683312][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.696263][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.706703][ T7707] bond0 (unregistering): Released all slaves [ 312.839491][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.850888][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.860956][ T7707] bond0 (unregistering): Released all slaves [ 313.527297][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.609420][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.735704][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.742866][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.781618][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.788804][ T7739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.815233][ T7707] hsr_slave_0: left promiscuous mode [ 313.824439][ T7707] hsr_slave_1: left promiscuous mode [ 313.830367][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.848437][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.863922][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.881758][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.914208][ T7707] hsr_slave_0: left promiscuous mode [ 313.944329][ T7707] hsr_slave_1: left promiscuous mode [ 313.950465][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.966148][ T5849] Bluetooth: hci3: command tx timeout [ 313.966157][ T5834] Bluetooth: hci4: command tx timeout [ 313.968564][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.990555][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.008946][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.062635][ T7707] veth1_macvtap: left promiscuous mode [ 314.069557][ T7707] veth0_macvtap: left promiscuous mode [ 314.079627][ T7707] veth1_vlan: left promiscuous mode [ 314.085300][ T7707] veth0_vlan: left promiscuous mode [ 314.091375][ T7707] veth1_macvtap: left promiscuous mode [ 314.097106][ T7707] veth0_macvtap: left promiscuous mode [ 314.102733][ T7707] veth1_vlan: left promiscuous mode [ 314.108372][ T7707] veth0_vlan: left promiscuous mode [ 314.285160][ T5849] Bluetooth: hci2: command tx timeout [ 314.648119][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 314.698348][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 315.451017][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 315.493089][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 315.938979][T15437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.976304][T15437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.023163][T15437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.044602][ T5849] Bluetooth: hci4: command tx timeout [ 316.045997][ T5834] Bluetooth: hci3: command tx timeout [ 316.100842][T15437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.142081][T15596] netlink: 'syz.0.2795': attribute type 12 has an invalid length. [ 316.448494][T15437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.482489][T15607] xt_ipcomp: unknown flags B [ 316.497333][T15437] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.549037][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.556217][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.635287][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.642429][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.695156][T15615] delete_channel: no stack [ 316.757825][T15617] netlink: 'syz.0.2801': attribute type 3 has an invalid length. [ 316.779931][T15617] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2801'. [ 316.790386][T15617] xt_TCPMSS: Only works on TCP SYN packets [ 316.794254][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.873005][T15435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.907898][T15437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.953946][T15435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.972035][T15435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.990170][T15435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.356111][T15435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.430549][T15435] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.445956][T15640] xt_CT: No such helper "snmp" [ 317.458866][T15437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.472624][T15645] xfrm0 speed is unknown, defaulting to 1000 [ 317.506225][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.513352][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.562567][T15645] lo speed is unknown, defaulting to 1000 [ 317.596678][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.603858][ T7739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.688296][T15437] veth0_vlan: entered promiscuous mode [ 317.729440][T15414] veth0_vlan: entered promiscuous mode [ 317.764349][T15435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.814261][T15437] veth1_vlan: entered promiscuous mode [ 317.841997][T15414] veth1_vlan: entered promiscuous mode [ 317.950026][T15414] veth0_macvtap: entered promiscuous mode [ 317.973273][T15414] veth1_macvtap: entered promiscuous mode [ 317.989194][T15437] veth0_macvtap: entered promiscuous mode [ 318.049399][T15437] veth1_macvtap: entered promiscuous mode [ 318.070546][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.081950][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.092212][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.103225][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.113350][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.124546][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.135815][T15437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.150699][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.165545][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.183650][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.203602][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.229247][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.242235][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.257857][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.271081][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.274948][T15661] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 318.287690][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.322718][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.344696][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.354957][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.366708][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.380013][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.390533][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.401623][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.412145][T15414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.429074][T15414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.438789][T15414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.449746][T15414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.464659][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'. [ 318.474975][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.485516][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.495483][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.506223][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.516497][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.527308][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.537561][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.548350][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.559658][T15437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.570415][T15435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.636327][T15437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.646488][T15437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.655989][T15437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.678499][T15437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.850277][T15435] veth0_vlan: entered promiscuous mode [ 318.938393][T15435] veth1_vlan: entered promiscuous mode [ 318.961308][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.976191][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.015129][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.025485][T15435] veth0_macvtap: entered promiscuous mode [ 319.033928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.102080][T15435] veth1_macvtap: entered promiscuous mode [ 319.157206][ T7709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.167666][ T7709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.176525][ T7719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.202294][ T7719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.255278][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.286853][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.304433][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.319238][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.330321][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.340981][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.351175][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.370157][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.380812][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.391296][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.414962][T15435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.461666][T15687] tap0: tun_chr_ioctl cmd 2148553947 [ 319.497607][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.529732][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.541882][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.552493][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.562792][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.574044][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.585012][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.595529][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.605464][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.621056][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.642856][T15435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.714283][T15435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.733892][T15435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.742983][T15435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.793912][T15435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.869902][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 319.941713][T15701] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2818'. [ 320.135179][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.574587][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.601333][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.621314][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.637438][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.668266][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 320.676059][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.274629][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.307226][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.318512][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.349398][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.358906][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 321.368238][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.519186][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.580733][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.603023][ T7719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.620204][ T7719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.764129][ T5834] Bluetooth: hci2: command tx timeout [ 323.415835][ T5834] Bluetooth: hci4: command tx timeout [ 324.660055][T15711] xfrm0 speed is unknown, defaulting to 1000 [ 324.695259][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.734526][T15711] lo speed is unknown, defaulting to 1000 [ 324.783564][ T7743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.783634][T15708] xfrm0 speed is unknown, defaulting to 1000 [ 324.792954][ T7743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.845399][ T5834] Bluetooth: hci2: command tx timeout [ 324.856414][T15708] lo speed is unknown, defaulting to 1000 [ 324.948358][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2821'. [ 324.981119][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'. [ 324.991528][T15723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2821'. [ 325.162802][T15732] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2823'. [ 325.188010][ T12] bridge_slave_1: left allmulticast mode [ 325.195937][ T12] bridge_slave_1: left promiscuous mode [ 325.201682][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.213277][ T12] bridge_slave_0: left allmulticast mode [ 325.219559][ T12] bridge_slave_0: left promiscuous mode [ 325.227984][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.297659][T15737] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 325.306009][T15737] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2823'. [ 325.495028][ T5834] Bluetooth: hci4: command tx timeout [ 325.747851][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.758705][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.769498][ T12] bond0 (unregistering): Released all slaves [ 326.003442][T15711] chnl_net:caif_netlink_parms(): no params data found [ 326.162281][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.169600][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.177021][T15711] bridge_slave_0: entered allmulticast mode [ 326.184982][T15711] bridge_slave_0: entered promiscuous mode [ 326.191814][T15708] chnl_net:caif_netlink_parms(): no params data found [ 326.212869][ T12] hsr_slave_0: left promiscuous mode [ 326.219286][ T12] hsr_slave_1: left promiscuous mode [ 326.226320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.233821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.243194][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.251346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.272007][ T12] veth1_macvtap: left promiscuous mode [ 326.277996][ T12] veth0_macvtap: left promiscuous mode [ 326.283536][ T12] veth1_vlan: left promiscuous mode [ 326.288954][ T12] veth0_vlan: left promiscuous mode [ 326.729272][ T12] team0 (unregistering): Port device team_slave_1 removed [ 326.777660][ T12] team0 (unregistering): Port device team_slave_0 removed [ 326.929201][ T5834] Bluetooth: hci2: command tx timeout [ 327.273289][T15760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2825'. [ 327.280726][T15761] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 327.355521][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.392739][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.414100][T15711] bridge_slave_1: entered allmulticast mode [ 327.432621][T15711] bridge_slave_1: entered promiscuous mode [ 327.450638][T15763] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] PREEMPT SMP KASAN PTI [ 327.463263][T15763] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 327.472979][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.1.2827 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 327.483723][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 327.493764][T15763] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3270 [ 327.499757][T15763] Code: 80 3c 2c 00 74 08 48 89 df e8 c3 2e 85 f6 48 89 5c 24 30 48 8b 1b 48 85 db 0f 84 2d 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 98 2e 85 f6 48 8b 44 24 28 4c 8d [ 327.519359][T15763] RSP: 0018:ffffc90003aaee80 EFLAGS: 00010206 [ 327.525419][T15763] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff88802a771e00 [ 327.533376][T15763] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 327.541333][T15763] RBP: ffffc90003aaf310 R08: ffffffff89cd8d12 R09: 1ffff1100c1f790b [ 327.549303][T15763] R10: dffffc0000000000 R11: ffffed100c1f790c R12: 1ffff1100c1f79ab [ 327.557274][T15763] R13: dffffc0000000000 R14: ffff888060fbc800 R15: ffff888049748010 [ 327.565245][T15763] FS: 00007f9fd0d3f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 327.574159][T15763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.580725][T15763] CR2: 000020000000e000 CR3: 000000002ef48000 CR4: 00000000003526f0 [ 327.588683][T15763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.596638][T15763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.604594][T15763] Call Trace: [ 327.607861][T15763] [ 327.610778][T15763] ? __die_body+0x5f/0xb0 [ 327.615105][T15763] ? die_addr+0xb0/0xe0 [ 327.619246][T15763] ? exc_general_protection+0x3dd/0x5d0 [ 327.624785][T15763] ? asm_exc_general_protection+0x26/0x30 [ 327.630493][T15763] ? sock_diag_save_cookie+0x42/0xd0 [ 327.635764][T15763] ? smc_diag_dump_proto+0x6d9/0x3270 [ 327.641124][T15763] ? __lock_acquire+0x1397/0x2100 [ 327.646148][T15763] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 327.651766][T15763] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 327.657297][T15763] ? __phys_addr+0xba/0x170 [ 327.661787][T15763] ? __kasan_kmalloc_large+0x8a/0xa0 [ 327.667062][T15763] ? rcu_is_watching+0x15/0xb0 [ 327.671813][T15763] ? rcu_is_watching+0x15/0xb0 [ 327.676557][T15763] ? trace_kmalloc+0x1f/0xd0 [ 327.681128][T15763] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 327.687700][T15763] ? __build_skb_around+0x245/0x3d0 [ 327.692888][T15763] ? __alloc_skb+0x28f/0x440 [ 327.697467][T15763] ? __pfx___alloc_skb+0x10/0x10 [ 327.702395][T15763] smc_diag_dump+0x59/0xa0 [ 327.706800][T15763] netlink_dump+0x64d/0xe10 [ 327.711297][T15763] ? __pfx_netlink_dump+0x10/0x10 [ 327.716321][T15763] __netlink_dump_start+0x5a2/0x790 [ 327.721513][T15763] smc_diag_handler_dump+0x1ab/0x250 [ 327.726785][T15763] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 327.732575][T15763] ? __pfx_smc_diag_dump+0x10/0x10 [ 327.737673][T15763] ? sock_diag_lock_handler+0x19/0x280 [ 327.743142][T15763] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 327.748951][T15763] sock_diag_rcv_msg+0x3dc/0x5f0 [ 327.753889][T15763] netlink_rcv_skb+0x1e3/0x430 [ 327.758650][T15763] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 327.764098][T15763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.769378][T15763] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.774558][T15763] netlink_unicast+0x7f6/0x990 [ 327.779318][T15763] ? __pfx_netlink_unicast+0x10/0x10 [ 327.784592][T15763] ? __virt_addr_valid+0x45f/0x530 [ 327.789695][T15763] ? __phys_addr_symbol+0x2f/0x70 [ 327.794705][T15763] ? __check_object_size+0x47a/0x730 [ 327.799978][T15763] netlink_sendmsg+0x8e4/0xcb0 [ 327.804732][T15763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.810001][T15763] ? aa_sock_msg_perm+0x91/0x160 [ 327.814935][T15763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.820202][T15763] __sock_sendmsg+0x221/0x270 [ 327.824869][T15763] ____sys_sendmsg+0x52a/0x7e0 [ 327.829620][T15763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.834887][T15763] ? __fget_files+0x2a/0x410 [ 327.839462][T15763] ? __fget_files+0x2a/0x410 [ 327.844043][T15763] __sys_sendmsg+0x269/0x350 [ 327.848618][T15763] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.853730][T15763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.860053][T15763] ? do_syscall_64+0x100/0x230 [ 327.864813][T15763] ? do_syscall_64+0xb6/0x230 [ 327.869476][T15763] do_syscall_64+0xf3/0x230 [ 327.873968][T15763] ? clear_bhb_loop+0x35/0x90 [ 327.878638][T15763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.884519][T15763] RIP: 0033:0x7f9fcff8cde9 [ 327.888922][T15763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.908515][T15763] RSP: 002b:00007f9fd0d3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.916922][T15763] RAX: ffffffffffffffda RBX: 00007f9fd01a5fa0 RCX: 00007f9fcff8cde9 [ 327.924882][T15763] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000002c [ 327.932838][T15763] RBP: 00007f9fd000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.940795][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.948749][T15763] R13: 0000000000000000 R14: 00007f9fd01a5fa0 R15: 00007ffcdd093c38 [ 327.956709][T15763] [ 327.959713][T15763] Modules linked in: [ 327.966050][T15763] ---[ end trace 0000000000000000 ]--- [ 327.971520][T15763] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3270 [ 327.978880][T15763] Code: 80 3c 2c 00 74 08 48 89 df e8 c3 2e 85 f6 48 89 5c 24 30 48 8b 1b 48 85 db 0f 84 2d 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 98 2e 85 f6 48 8b 44 24 28 4c 8d [ 327.998852][T15763] RSP: 0018:ffffc90003aaee80 EFLAGS: 00010206 [ 328.004932][T15763] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff88802a771e00 [ 328.012893][T15763] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 328.020922][T15763] RBP: ffffc90003aaf310 R08: ffffffff89cd8d12 R09: 1ffff1100c1f790b [ 328.029157][T15763] R10: dffffc0000000000 R11: ffffed100c1f790c R12: 1ffff1100c1f79ab [ 328.037151][T15763] R13: dffffc0000000000 R14: ffff888060fbc800 R15: ffff888049748010 [ 328.045261][T15763] FS: 00007f9fd0d3f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 328.054383][T15763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.060956][T15763] CR2: 000020000000e000 CR3: 000000002ef48000 CR4: 00000000003526f0 [ 328.068948][T15763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.076942][T15763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.085368][T15763] Kernel panic - not syncing: Fatal exception [ 328.091555][T15763] Kernel Offset: disabled [ 328.095863][T15763] Rebooting in 86400 seconds..