last executing test programs: 1m14.701266739s ago: executing program 3 (id=981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) (async) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m10.242301929s ago: executing program 2 (id=1032): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xff60) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket(0x2b, 0x80801, 0x800) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x6, "d5883806"}]}}}}}}, 0x42) (async) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4100000010004b04ba4cc79dab6cd7957a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aaaaaaaaaa000000"], 0x48}}, 0x5a1b6324266e2beb) (async) socket(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 1m9.869376729s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1m2.774476675s ago: executing program 3 (id=981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) (async) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 58.449350031s ago: executing program 0 (id=1110): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa86dd6092c01f00442f00fc020000000000000000000000000001fe800000000000000000000000558f0c2421880b0000000200000021000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 58.301347681s ago: executing program 0 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001300)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x4044844) 48.502514521s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 47.24660538s ago: executing program 3 (id=981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) (async) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 46.256753681s ago: executing program 0 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001300)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x4044844) 37.975937507s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 35.765971063s ago: executing program 4 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0060c60747d03a0900000c0000000800040000000000"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f000000b7c0)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/210, 0xd2}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000580)=""/133, 0x85}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/168, 0xa8}], 0x8, &(0x7f0000000880)=""/74, 0x4a}, 0x4}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000980)=""/240, 0xf0}, {&(0x7f0000000a80)=""/92, 0x5c}], 0x3, &(0x7f00000002c0)=""/43, 0x2b}, 0x2}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/66, 0x42}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/251, 0xfb}], 0x6, &(0x7f0000003e00)=""/4096, 0x1000}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004e00), 0x0, &(0x7f0000004e40)=""/135, 0x87}, 0x31}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000004f00)=""/109, 0x6d}, {&(0x7f0000004f80)=""/159, 0x9f}, {&(0x7f0000005040)=""/127, 0x7f}, {&(0x7f00000050c0)=""/145, 0x91}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/48, 0x30}, {&(0x7f00000071c0)=""/129, 0x81}, {&(0x7f0000007280)=""/20, 0x14}, {&(0x7f00000072c0)=""/56, 0x38}], 0xa, &(0x7f00000073c0)=""/180, 0xb4}, 0x3b}, {{0x0, 0x0, &(0x7f0000007640)=[{&(0x7f0000007480)=""/225, 0xe1}, {&(0x7f0000007580)=""/181, 0xb5}], 0x2, &(0x7f0000007680)=""/118, 0x76}, 0x4}, {{&(0x7f0000007700)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007780)=""/71, 0x47}, {&(0x7f0000007800)=""/38, 0x26}, {&(0x7f0000007840)=""/220, 0xdc}, {&(0x7f0000007940)=""/219, 0xdb}, {&(0x7f0000007a40)=""/18, 0x12}], 0x5, &(0x7f0000007b00)=""/34, 0x22}, 0x5}, {{&(0x7f0000007b40)=@nfc, 0x80, &(0x7f0000009240)=[{&(0x7f0000007bc0)=""/240, 0xf0}, {&(0x7f0000007cc0)=""/77, 0x4d}, {&(0x7f0000007d40)=""/248, 0xf8}, {&(0x7f0000007e40)=""/4096, 0x1000}, {&(0x7f0000008e40)=""/229, 0xe5}, {&(0x7f0000008f40)=""/249, 0xf9}, {&(0x7f0000009040)=""/238, 0xee}, {&(0x7f0000009140)=""/231, 0xe7}], 0x8, &(0x7f00000092c0)=""/109, 0x6d}}, {{&(0x7f0000009340)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a680)=[{&(0x7f00000093c0)=""/243, 0xf3}, {&(0x7f00000094c0)=""/102, 0x66}, {&(0x7f0000009540)=""/27, 0x1b}, {&(0x7f0000009580)=""/12, 0xc}, {&(0x7f00000095c0)=""/173, 0xad}, {&(0x7f0000009680)=""/4096, 0x1000}], 0x6}}, {{&(0x7f000000a700)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=""/4096, 0x1000}, 0xd}], 0xa, 0x2, 0x0) 35.741319527s ago: executing program 3 (id=981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) (async) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 34.859141858s ago: executing program 0 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001300)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x4044844) 34.749235434s ago: executing program 4 (id=1226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r9, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x95}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x41}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x891}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x46}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9b9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044804}, 0xffa03aa8098c188e) r11 = socket$kcm(0xa, 0xc62912119fc89262, 0x11) r12 = socket(0x28, 0x5, 0x0) unshare(0x20000400) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, 0x0, 0x0) setsockopt$inet6_int(r12, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x18a}, {&(0x7f00000002c0)="7bc91eea84d11055ddb85aa6bc44905f19283f16acbf2274a6863372edc19636b4781304be55bc6bb50b083585bdf702afee51634974910ac620f28d47a63a9999e4bf8c08e9bef91912d3d82179b035b32ea415546101da42dbb2ec033ba39b0e10f045ff8918c2de38f58404a29187802759db81e8ef9fc498875975213bdd1abd0158a4e04ef6862c2cbb1f620124f11f2ecb8f47d3", 0x97}], 0x2}, 0x800) 34.605922248s ago: executing program 4 (id=1227): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d0748c3b397737ea49da2aa", 0x0, 0x8a, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.996914988s ago: executing program 4 (id=1231): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000040)=0x80, 0x80c00) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0xd, 0x4) unshare(0x6a040000) r2 = socket$kcm(0x10, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012000) socket$nl_route(0x10, 0x3, 0x0) 25.605939428s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 23.85081451s ago: executing program 3 (id=981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) (async) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 22.436073515s ago: executing program 0 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001300)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x4044844) 20.314616338s ago: executing program 4 (id=1231): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000040)=0x80, 0x80c00) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0xd, 0x4) unshare(0x6a040000) r2 = socket$kcm(0x10, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012000) socket$nl_route(0x10, 0x3, 0x0) 13.12493906s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 10.583785567s ago: executing program 3 (id=981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) (async) syz_emit_ethernet(0x5a, &(0x7f00000013c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xb, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x7, 0xc4, [@loopback]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 9.554455162s ago: executing program 0 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001300)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x4044844) 7.072756868s ago: executing program 4 (id=1231): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000040)=0x80, 0x80c00) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0xd, 0x4) unshare(0x6a040000) r2 = socket$kcm(0x10, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012000) socket$nl_route(0x10, 0x3, 0x0) 1.100333941s ago: executing program 1 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) sendto$packet(r2, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 701.426315ms ago: executing program 1 (id=1349): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x245}, 0x1c) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000340)="207bc9875a5ce52a", 0x8}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 608.786254ms ago: executing program 1 (id=1350): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) (async) r3 = socket$inet(0x2, 0x5, 0x29e) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000004ff8d978fa7ef9850000000000e5ffffffffffffff000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000e2d0be86000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000799e3b3c00000001000000000000000000ffffffff01000000110000000000000000000300736630000011000000000008000064756d6d793000000000000000000000010000000000000000000000000000006c6f00000000200000000000f8fffffffeffffffffff000000000000ffffffffffff000000000000000070000000b40000ffd7000000646e6174000000000000200000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa00000100000000000000726564697265637400000000f6f678c1bcc95568ee000000000000000000000008000000000000000008000000000000"]}, 0x210) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0xbc, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x261328c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb729968}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 513.842538ms ago: executing program 1 (id=1351): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) listen(r1, 0x2) sendto$inet(r2, &(0x7f0000000340)="51de3d421ee68d14c26bf7d21e5c4ebf", 0x10, 0x8040, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x40800) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000040)={0x9, 0x4}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB="3c0000001a00010a00000000000000000000000308000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ac900", 0x9c, 0x2f, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @local}, {[@dstopts={0x3c, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x2, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000000}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x32}}}}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) write$tun(r5, &(0x7f00000002c0)={@void, @val={0x2, 0x3, 0x0, 0x0, 0x8, 0x8b}, @mpls={[{0x9}], @generic="010111eccb035a54787c0aefd907c55f24c92493d17d417b4d69afb6e162723b5f68ea6831ef34a6f24e63a2bc602c548f8c423504f07fc502f0b5e3ef4ba98d61de9b6e3cc84317de6f042c4bb0fc6b669c77737bb23af312d00392eb596391ebde66fdf088bfa663aa7de6107b152a40109b8d4a7c557b0656169813"}}, 0x8b) 313.185568ms ago: executing program 1 (id=1352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000005c40000000030a01020000000000000000010000050900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a30000000002400048020000180080001006475700014000280080001400000001308000140000000161400000011000100c1020000000000000000000a"], 0xd4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4e015) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x300, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0x5}, {0x0, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x37}]}, 0x34}, 0x1, 0x0, 0x0, 0x48041}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000005000000000000009500"/32], &(0x7f0000000440)='syzkaller\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xc}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c00)="510f3f741e18e41498569e8d2b097b12eb30f51397959312e1772b1ae29e44da2eea0c510a277741e1fa2c7e940970899d4395203b3b29459947f5be62c5e6ae3b6f3d40f4816073c4cf994b3efbb9a8b9b6143d97eb45ab6d31068b8e6c4e7bdce052b3", 0x64}, {&(0x7f00000002c0)="d1430800c075f424691fe000"/23, 0xe}, {&(0x7f00000004c0)="93027e57dd69d50ec059e72e7759004b3d835ea7dba7c9161b316e05b5307ce2256dd293233fd9e285c0", 0x2a}, {&(0x7f0000000600)="1e98ffea80bdfee40781eb46cc50efc0df996073f0436c2971d7a962ff1028493ac0b4fd6f47b327861ef2eb95", 0x2d}, {&(0x7f0000000a00)="c46b12ef2a3952097ba56c90b4d22562c963082ec3fc5a4ebd286724cfbca6a8e7938cf4fdb02860e6dc763013e7927ff24b36f0e16b737a6cf84ea8d9080bb96d21dc5bc4ffd44b16f09b2ade67fc1bf666af01982cc640591d73cfd76f9090527b77f78e94815c42c09b043cef1a45782797c5e436853916aed69f0eba64630bce3a2b67f0d6328fb1a1317ec59ca11e7b2f0c3ba95f6ede690bf250fd4c81477e39edee4b6bb831865eba2524cecd8529342081b4aa8de7ef9ed6c2f1fd61a7232766fc4d7cff42ea78f17ea09fb628f7ade17f4568a702af1261b17e8629a8b5cbdac425b625a2", 0xfffffffffffffe9e}, {&(0x7f0000000680)="d34d029c9e42b13829c721c486eea76cfaaf67328fd7e5351015e20ecc5a5df298e7b21f5ec3e4063194e1cd9e0be71537b3bcf4c6af415426bc97471c675ad025b6473a586fea09724bf2eb7ad2fa0b1d232ab02ea39bda52f409b34eec91e64da41edd25aee143276a10dfd95a268cb9d9f6efa5891a191c7b065a7c29321933fd673603dcf8cd98f8affb797235fb87f075e3a73ac8f64f13210b7c2ed329a84c8815d3c27d3af75e43b374ffd34aa8d4527bc4ed67077f5a3b4a3c7d5e38e92f24ac9b8579d327070c52af227134556ef848573c763477c1401c", 0xdc}, {&(0x7f0000000b00)="0e1b2a9455d5ec50fa31d20290623ddc6b21104f1db195b26771de326603aec86672f0701d3c2be34ce0388f16b50fb60c9f8c1389288828ae7dcf64ed492553640bdd968d7d4fd94d7c2cb2e5a06937273a0453d4799c32fbda2976ee31246c82214bbde75711012ab8224c3875f59c250d4e00fd7e8bc2696dc45a315f99eade1fb57ac93d59ad16ed3d24ffc6e58224f92e1b4af708", 0x97}, {&(0x7f00000009c0)="55541c31e4819dcd9ad3236e3a938ba2b9bf9b7bb8655b5fcc455df565", 0x1d}, {&(0x7f0000000c80)="d43f96675b3ce21cecff695aebbbbfd8404ed331151b97637c31a30478ee4ee2e761f380277b728093f256ef32e3404b93f3af22732e13f0409766e8f82b29dcb79392a78f5c756b0b910d1c959c3352b8aa8255c48e62c6e6e1b38a669cbaf542379f3fff4a76c19cfb5a3d500f47a169652b4177e9be77fa08d0df86ca7eb90de0840a02339b2f69c7502ec8595b63fef93294d90cff0f15496d10b7f8dea0e836345930d2707310eb9f402fc4ec318f88e0200705", 0xb6}, {&(0x7f0000001f80)="e70aa1238fbd2bcf4cf05924d81b0bac4d790edc0e7ebafe23f22818fab9508a8f99d2af8eb9473a01db03d6898b12a7079dcce06f142a6fc0e2bf357911b99afcefb2c9c08877a8bc1822d9fa66bcf3f3a43c81a45535c6b419f08de7f6bb13dba5f37404d73bde9bcafd642e4e94cab3357ffc46874792e2da66b6230362f5769991b82832536c9e70ddf59dd75f78556b2865332388206b07927bda054abd8755fb839c1c8d8d02e600b3fd7892eb927c380339c3c20195e6c1b034a0e5b9e45296b4848709e2862329d88604e90b50ddbc3080fc51bc9d43c2e76e55ab7f8778e5e12fcb3a9564fce15d407ef07f338599f403d9162fffec440f3d71fc869a142869de42bb957cd205736c10c2231565597a710be9deb4ec5a914b131f5f80c71641d7e8a730ed5517959b1b050e71e6abd4d947dc947276d1a0fc96d913a485288f49ddd884a1207ca91399c7346439485fe0aec69ba782fea4fef395d73debac89a7c2ab89e3e5fd722ab5918e364adf8600a791fa79168262c08e1bd927a89b20dbc35cb07f1d485a4b924f2304a47fc73ac73b1ea2e783f70d72edde07f6cd5630e9f8c8b6d262ce5ef7f14926e240b643745ddc6134fb1c4b60f4c38e97f527521cab24f5160d3d22b533d710d4857af4cf1bfd91a89657eb7745807139d6e75a5db4e44e45d31f5cd9613d8ca30d82158184e418bac16fc00665d132bdeb36aef91c4dcf3eeb8e86ff0ef8e1d76438b07fab21c0be4aef32e30bcaf3f5ec24f92a18ca62bfef8e2c7b7ce6b0af8f709d3be7a063812e2394aa314e7c829ea4b27a3012c8cca6a3106fa6c4b2e5b5ed7b7b6c6165c228818ea121af3e055cd81c0c7d128c01a6d6bf0a9fe2514cc7ba0761c0ce7c0bfef82c7b3f202808fa6d3f47e192d67ded0cedd2352277f4890a3405331d933e53c16b052c4b12b66e4050b16ff837c4c17e5dc965e182437772ac66b0ade1a7604ac41a0acdee1957458d7f52f8a65e982a6ae02ba8f90e933bae99af8dfe5ccc314085aaaa71a18cadad483cb96d6f9d342e4bf09bec9a9e0a0be27d20ece1c0ae24a797e8938727aa9fa30f87cb186ebfe852f2f84e6bc025fa71fab13491ef1f2f6bb8f34b788be8bfba613144e996d0f41bee5ca8b0256d214ae7b50d25a65de3d8fa045f9690be3cd7d04c9d45df6ea2842a64d31576a27dc9aa2ffe0cdbe4150df541d8da4f932f3710e9336b36949250c53614977fcde306ea32fee793f2e9de6a1faa678d9fa3ae92ad2493a19a143189b107d4dcd4b51cdb5408a81ee9a2c7e5daa79f83d3e80d8ad43d0fe7675b333991845b154fee164d177a3568bf71f3a1a3cc2ecc1e3457ef9393df1a8a0056a94017cea057ec1f7acc0f29c158b986b95250942f6fff0b4a2eab47b617c38fa9ae4ef169c675e966dea0f066aaa61c2af791b9f0cff304ab34f34eaf1fa516f1becad33e6b1efc7f71bbc734ba20dc15808f43921242a595f0c742ce12d46342c8c7d0f280b8dbb7f2d9db4182473a9c60957e977fcad62f36fae0440337441587a86d18a540c0bce9075fb59f7507565d21bf4c249b9a16796eea9b62e32306d6183d12ff12da59d1a77d5a69789e1ab82b01bc79f8fbd04df1ed75bf6d66c51ace39d72bda8b4ff52f53b73545457f0533a5798f4ee52ea420af4b2e58498c97bf5c8dff4e546eef97669175087ce27796e133325b6c28d919210c28ca10d5f2ef94e9d480f5266b9f91d846063f76d148123ce09eceb1514afd35ae2beea83046da9f63753228dd6cff08221df0dabb65bd31b978e4e19da2616fc4740bfdac3a092b9d35a4b18ddb53997439afe3dfd82219cceb71f525d054f19f9a4b840f8f237f41acf133944c93730e987f0db36a537ea0c8f5942462771070ce37d589fa3388a36248f61b17bb8e69aace2da80fd017b74850488802761e9df16700a4c8e2e44696954b4b0a5e0acacd9c16514ea426d2ba740c9ebb3e4e4f8567fac268516eddc3dfb1de72984b5898686a25b05ff81402abd7ec3a0ec159ba6faa531ba947f758f8142db0fc93603c4e8a65720ff0bc365f3ea15bcdfa23c6cdb2f60f16ae179e27c0ac14f50734307f5a7d338c8212a34aff402cec7890f07da625e6f1fc7a23b9f968e6d87610c950d0caad8770ff0765ed5466635557815f177a0c20cfc6fc5cd30b21e0b716afcadb07285ff42537456cf6de99cae2effbad787905eb653e044f91acab25539ed5a3be927e4cf61fdfdb02ab379e412e5ca5d31af3892fd33515c821b68df82e6742eb037ca80d7cea6ac6da337f9c8df87c4d3b36b4c7c1034f37303e7907e88fe85bf526eb2b86128ed970df2d0f64dd214124dead7167e579fdc0968921c78f4100d139b3f215acbeb79b839dadf01392c90438d4bf94df4befae376111cccc1267cee2916f7183174b5e77844224a3a2840e03978f31e51fb63673c2e086def8cb8fa7130a938f15366c825ccd4fffb932a80e18d108d29eb6767132f79624221fb434d62b1e446945973f2202a889ad5dc9fbdbdeef9ecb7eca6fe037ce18404aac688cf8a0157edf33ebf18d089f5ec4dba8551b91d7d6443de5d941b4380dea5818d49cb688018540d799ce84e4b0422207b174d48cdee425c92779fd9319d68c93d76acc7697848d96c28aa469716e883920599a573d043b14e2627b651a951a26a7a9ed915841d6ca89fe1678b2679da1181fbfd2a602e8095e3ac3cf319fe1edd44295c95c8a6e8ecd5fabc2c3c9a43381aa0e2c684d204652ca56ffe3aa814c881c479655698ca09f61b595aff7ae6478dcbb7ce121162c139a937347c857c977a32dec236e05bbdabca2ef3066a95387c4e80627618e04eac7f2005eb146abbaefbe42e15f1030e0dc4bb2cd6a160d2deb58cf41fca5d38dac671a989d1a005a1a804a6bc6a2903d932ede2eef62e6ad2a1f61c292d43b20220d621d92515ebbf86690170331b575cabe5a5ef3db5592f756aff0e85eb6e8621e55af5dc99307b8dac1e045487a20a9d8140e26f65c59d4c7a081b96444ac7155807099ce7d5f589e074e1c9e06f6d25e29de939b058be6ad3d2204ecfc1e27d4ba3644e6ea9837fe9ad55239864a8d9668a24b926a1ca778ab917e40fb86fcc7eeadc7464c41fd9478f343819fe2dfc2d34d1ee035144a2096ce86a806a788f19ef1a41e998ffeef49555200433c7878b5b46ca7043ade89a7eae4048edda24ce3f001a05d469d71a7bdc3e42bb2dada84c962ea1a6a4fcf0a328f977242ada95d199b4da87c9f6e701b9f742a16b24f099fa6a0b1908bffa000a23a6471c47226aabe9675f041b934972e1531086f21c695c5a16930c3ca04478d7463ad0beee17a1228b180b13bc0f4882780b891ebcbb37958a571f657a640abb528b1efc1185ebb8e8254f9ea457fb5a556d1b511b4444c422399f02f754c8b017748aa0a6b1336ab6fa2426eafc363dc86caa30c84fc584c975e6dc4dd7efa1b61ff4720b03f2fde6ad5e91d0f2f1e1502862b66385c350066a6dc55d27c2f5764025e44dc68674588de02db78d8a4503205be00a3068e4636b94ed1964b3d5c5f7eff47aa55955a7b46d0a7e5315872d2ed886410ad9535210754cad9f5de0936f509dabd2f4baf7337b2e62574be2f36d4f8425855c700c684371b509131cc87c4a92597d2f7701754be78230e065d142013b4a28d53121e3ad947e1952633fff8fb707f78db715b59ee06ac6457be5440f8bdbc4c9120559dd9807cbd9a5bb52c20ab8368ce79b3bff241c26de23bf2bbe0cdf007c1a13cad745aacd854f1c578df182e4796aafe1bff8146787d4077420605685fef8c3e67f8f15f98211ac4e9e8f9bce1c6eb5350392fa522c6743b0ad85c2ed7368b383e9c899fc99463c274dbabd7d22bb260be45e4a3ee1a364e366088236f046dd16e8c3ffe7dc4a16f59da7836e8ec78df6eb7e9a6e885c4a6ed1568eaf5e7ff7623be7b39647253f9cfb47711d8f3e2771f9ccdbe1d767eec15b7dc28dc0f80c4bd5849b4ab1cc5d7bfc59634fd73618fc4748171a3927508ff3d5fd90479fbaaf6dd66630712943bb66df7a5a42db058bcab8005a47a51e6dad27f3ae262f6dcab28f8383bfcca0102e956d75899399cf40c499b1c31c471677c294b2a097f0a3fbf924265a746acb72d0777af9e36917d67a9f2dbed85f93599a5adf3e8ffdac2e604c8d4ede1ee8230e87f7b87a10cefa2b8e6e7c0a1d255d5b4ac353a6c5d4aa7df6f50d7ef262acbf0bbea65b9df3129e109556eea3578858ff023154e4b50edbb302ff0927ef841cb9c591b730f13dc3c03625a4b6c12665e748e3484d74c329468a003e6c4ee0ec6a819d452d56041ceaa587a75d92535edd347d95a8953746e4aee74da804b5a94459022985fc699d12159fb4eca95bf689cc244aa1ade960bccaffff2f40847e7b46e5ef4427a9ec397bb7ae582c41b7ea53bd94fb8ad868575e4aeb047efb590af8592d62e8e914d6df76b339ef94442ab9f585fbed4105cdbcde8b8891b8c14fc429a21d3c8b8e3a048c3bc67c06bd094cbc1bd706ac5483f180fed7df4a5191d88654459c9c8926920934121e640ed34109cdd3ee5701f76804275cef301581c7bafed2b4f8c6a4d528ccaaa06f7bcf87c8ba266538cd5ba5d4633631490b3d686ce136a4bd13434ae7067d485feaa2b8be55adb08053cd4247c1e34550b22403b7a88d5107bd7b72e153ef09c4a3d9ddea40d9171eae0973fbc3ceab5d00cbffff93919ce37185d6424c211e1d37d0449fdf306ec06984fe6fa6ba8a40df551893b2318d2c73cf35273a6df097131dd9c6ed51801f6d8280a0f74b4373b2c56991d506e547a45a2ec629bc6ffcbdd6dbe06569386d845f989bc43f2638f79401f01e724335582ff6e42f1b8c67a6518753e4517b12e1bebb3ddfe73d5b81174c27c19791cebcbedb969f5c85074dffb807f41ef81c201ce65ea94440b3d1845cd4a38d14a2f0c3ca745b4dd4b1d4d8326fab92debe2cfcff4983982d80d6f6b97b21c20cdfd7eb1a7e24069fcb93ea7bf86a9d551509a08218f5eea056d7d26b22cf2497dc0eb2395c64f740909b8587ba7d7d37cf0eb288f1e3b69bc8c05270297843eba53f3360629f1b56f45c030d44e4589068a68474ef7a3bb53ad6fd71fbd0c07e32809faa931667d0f038284850d13704b672fddf6383794edcf194ab2ee433559d0a030a27fe999e9240f732ff4a6a4e2c3c43317c7e3e62093116d8f56651d2d58fa9ef5d887d8b1cc2c3c84c91cc5ba3e2231fe6036f9ffae2fd4766a80c0b575c6d765985fc38e535e4c4d1134c700a261af9c69b1e47de123658d56add080cf2ff83a98888d894ee9b79d2d080de2a60ad9245fced0695f19901e47ce81e5ce831793b100faeea8a23b2c552387e5163c97c19560350e15d7c70d03df729de3b9ba9c63b0452bf2a28ec28f6bd8ba9d376c660a9542766226330769d3275fe73d3db459c84261788582b2a5fdd8cb900d517d398c0645231c47fee7b8915b3bbe17b7b6cb28b9fed8fbbd7998140d1ffd2e77c865bb893144bdfe0ee224eb221e5ef33529d3df2a6cf7efbf80b4203967e0eddf699e6af6e30e6d680d75dcfb212958d9d9c5ba9e975a88c07ed12571ab47896a835d5223c5a7e09960802be6a71db577a7e2ee8df73174a4a440406a308ccb434b8282b68d9dd0e6da4d97febba9f7699e80894145454d12372fb1b05b4ee26be4ea33a9c6c93ea8640d246e58b1c6a602738d06706853", 0x100f}], 0xa}, 0x200060d1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d40)=ANY=[@ANYBLOB="54010000100033060000000000000000fc000000000000000000000000000a000000000000000000000000000000f3e01e3bd8cabf76000000000000000000000000020002000000359eb2070030a7bc82433770d9fb1b61b507c6d9deb11be8e05fc4e64c2ec096be092eb732d64a42b534bda289c084cbdbcda7bd0ae1f543dfa615a0d09637248a28afc316d5f94392f4c63d6f", @ANYRES32=0x0, @ANYBLOB="6ede2d9f1c9c41f9851f5e6e2fd136eebbd8eedc1c3461972325dd3483fe1e12683de3d5feb6bab4c4d804abfa3a491a927a48cf46e73a7cd2daa19246befa1dec546ed209b509f7755014272172d78e634b36e0b0bf839827c83afa1f4c6a4119db329874b459ef1d6ba8038bbb1456143622b8082369f17cf27b47c43cdc08ac9ac96657c3584198c95be407e2b9a8469da0b1ef9127d20d50faa0b95510e913dd0ffaa89fe27c498f448dea17c4856a6977b737a451bef6", @ANYRES32=r1], 0x154}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4044040}, 0x4814) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x400c800}, 0x20040000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYRES32=r5, @ANYRESDEC, @ANYRESHEX=r7], 0x108}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ac1414aa00000000000000004fd305000000000002000400ac1e00010000000000000000020013000200"/80], 0x50}, 0x1, 0x7}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 0s ago: executing program 1 (id=1353): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000009500000000000000959bd4450ebc1490ef330737a49740098d63cd105bef567d6f7e87712a566dce51151b7fb056254d99e3771253a68f53a1cc2f2a06376f75000d4c946c4e6b01aedc2777bbd88c312a78ed283285d1f568fa0b5a2a2404c6a0d0389f3a12354993989b9256d2c37ca9caef9a8faca59326e9ac6e3b1ef99951941159ec1f387321cc366498ef73"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000380)={0x0, 0x6}, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) sendmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000640)="677aecfe797f8d51d044ffe055cad917bec425f37e820d7bf3139d969938bb9555deb072de644dddf4e6f6a34f8321785db05d761836e6168b5fcf9f0d36b713fb378e75f0d11d21e17c24142f4c7a661f8c732a0c4b99aae62873e2918d478bcfcb4574028110654d62", 0x6a}, {&(0x7f00000007c0)="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", 0x1c9}, {&(0x7f0000001700)="3bfaf02721041965812a2356457bdc49d359b0ca77b8e8c0fb6df29cc7ed8cb2b359aa3dc1b66b0162181f15d30e446f4079d6a8479d53d8e33c4ccf04f92cabfc989f63beab63ca8cb51232a2884be67c5b739caf95cf74ac91931f8ac6c82be35802acc8624c67223f8d07cbacf9240b04ce262a3f4013dde2a3f6305b0fe2c2ec69ce5e3521388550be4318e0fe6f872e869ee068f16a40898e7fd0be18715916257dc7f44e4ed32b3ff7bbb1026356c9aa38e59b62d636376cffe5a6bb2f8ec50b48f3737c2a61d2e974b4c6c4f64f208ec9abfa6fc9dcb79bdb34c3d0e16964eae39e720d2427b63167fc5bf5b2a6799f5df2f908a0e941f8abec1e0f188a44a688e2485ef10e6f14638bce3801b8be076c1b34a1afffb9e6b8ab232b4f2737a68dbe5daf8b107e8f6bf9784b02cae940c0c921860a0e98cf32100a9cba5f1297f789c3c2680830b6b2ef906d56b747324a4ae71f465b19fd9d016ecdbfe9fe6bd8e911626367926ef34834898ae09adde46443237f50375ae9faabdefc571359107a9279306381d9bcd8840faefdbaf44449f58bb7f75bdb0df2abc44da4e242090ac11e9521ad56f418a0ce2e0429631dd8de590b5bda0711382f04fc739d2daa6bef112959cc2df333f7fafa3c063ef1ec7fc7714e104abfeda8fbb5d3f6e6e1af007ff2ac5ebff1c226c87b9c6cdee329000d652e7d4a2e343e6169d337a71f848b97c1783d11a2f0fdc601769176ce2babf735d8d75fa46597a07e7e9dddebdb2f8bc58f25feb61e4634d274b4b530c11c1321e8130d28eb2e32ab875cac3f819a9cd3164f1d73552a1b61d296249b559b7c67a254fdc0c6fdcaa951a86f534e634ca0707e704219deb7a1199ac8e391d1d25dd15a2e35e1d4e73ce38ad89e9bcf4585976f4c2ef83f1b1e762dbba1aecd6b5c6caf51ddb6052f0b479c1db2f0acbf186d098e7d963e9241a8177ff19ed935cb26b4cce0bae0ccb18707d52c8024457b4be9e2d2bd3154100042c457e9ab03ef0bfdc25e4e42dabce7a5d49d260db84cc10d54629fec1883e45995c64aa06abf7c3ade8fafda982191c1e9a6d7784fe0916d7505df37a1b8337d708cbbe762cdf8e53df649ac2c54c682da6941a8d65807c24b146a298def9e0c6788e64bf9677c2a01337aef289e365e9853a2ce403ad8197a0984e0e1d82527ba9e388a3a85150efb0a926542a5a6781f06e3b48d8bd6b6b7898ffeff826759158a87f0134b5a57371b66452eded8c0288740415de3db60c527ad2dd7b126234ba1bf21da531d66a25d3994f97a310d2445647036748d2262406e235be75379e6689a0ff21b326ba790eb63fe7b3f14f06903003c9d5d94a81415446bac4b64ec3a70a3a395b3a6d3dd7e9c2eab245a533eea62db6670e4b99be25df1d777dbea1e92b2c5afa89d1b470e6439bc6526629f8868368b6cd22ff6307d099c4bf5dfc2843084aabb997ead35e43315556028db7ccd10bb9a26d870ee43a7685a0573c6e909192569518139bc66de60e585ed1788663da5c63b1bc35a436ac40a1541c154af346eb82347af47e64ab410cc473f29d04bb3c326b1eb075966b9361c474bb2dae96663355a1c202f7d7d204545f1ba13b5a271590e56629a18a2938ef0e9a3536245f6e988b056e0d95e0ed263cc3b5cf5f0a23bdaf88854f6cc1155a97ae1e1d7d9c88ae3283e39cdad90c2cc34cce6af639aa2adc16fa205171508f7813ad55d0ef78bca8ae9fc804e362303870ab5283b0500d4cb1c99bba5d8e0fb010c56bf4716c1c26fa012693973958edacb52cb33b9371ab185a0a5e2d3e4170179be345c4038b3ead7fc2e91a321225fe7c9accf949d6c3cdf89f5345719b812867fbc1bb95d8527b3c8008e0e2fa39ad4a156db33beb42125d4e9c3ba7a4b37b8f326b9e0a5cbcb9ef264fc86f4bb183aa390c5dc2d2827e6e89e7d32805902268b9d4498001dfa9833ad2d3b118689f38833f028af49c546ad1e1b8a88cd2b3cb37b31cc738c88458a394e002be193b8e38e3b5e71f20d9137b8fe86c8709b5776e20aff9d456c5dcaf99d44305b8c2e6e6cad907f1372273dbb3406a54d5424df320abad1be13069d81ded83d8f37c298b8396ebcb377b7c1aea77281c4c3a9e50946a1a85d0d601614ecb3fd25607142ca4c6a78023193fcf9bcb25afd28e9bd6dfd9e61c70615841be4f6c34d1a01b55b91f1e84dc82e42a87af5905b92038b5f5f75677bead90d34198eaa58a27561e62d0072f86885a49f786af84d354d9951ff784e05c3855f904ee91c1ad4a0ee7f928c0f9bfb49a78eb0f165b73f49be4d4b5e5bda5e0c19fdf4de5a5bd5cf3647386a71700b3e3f9c0833afd76f930dad9d42aae8062b240e04a0779f56917959426de836e6ccb04e446441ed3543ec52475ea62039f3dbecc9cacd079a6ca229a531b0894dc6c48330b98c7c0e6718d4cfe3eb9c34a2a4bbdc794b970768da81a463c82720ae1e3f146cc827328b25ddaf23f76d09579020bc79d64e001f9ed5ab827ba0e56156e225425c780741491b92d74da0406a60a98a7e7f8ec90f992108a04c2236a81a9c31ecee4588f05fc4521cbb7337c4ae91df9df91766482cc6655f4932978494b20df98aac64f834a9fceec3e2997aeedd120df8d3188719cd0a3692ff8b632a426433011d9392d44bbfcb3ff972f8773832d114c59e09f58ee1e9ca97bae8014e550d966ce1558c510195f09823d43fceab37d64aab11eae8e15bf7cc0edb14e7c87fecaf584ab83339e738b4d4d831acd4381f5a28d8d3b12f7487ce062291591e4923cf2d2609e6c2a64eab218173f1bf4140166f969b09fd7e2db0e2e2c1c045644777d3bbe40b4e17ef516dabe76d40404d5bdf161a613c201504ff41108ea685ea72a57601a8d449c8e8feb05bf327559de8a775aef7ab11ebbfc77e2695b02fccd4b3a942a3dcd95e5f29d429f8746f7b260820a999320fcf332af87355046162bcc04b5172670dbd5792ad9880650b1fea1ea6c3811375f1f4759574ab906c0b21bcd6f5176c6bfe99140f7f0f3927801c1f49ed663ca8190727b5a1f22ec22da6c82a6955044964b570c71c1bdd006539e1433cb952738e581dc873b738a3850b984562e9612f60ba526e6b63d1e599c05046c94ac0498333fd7c67e19e3aef5fa3e6261f108a4fe6db2020853779a4f89f646e415133165aea611e7c246f19afaa7d44384ba86733db07f0c561bd049e094d152678374dd61d1df92cd1822d839ecc6961c0e3414ff7da2dda59738d84de48a0a7d985d315aec2348cadb3d2ac4fbf4a7dda96ae1f626c39020ffbc6d43c8d2be607a4017f0e47143e643d96aeb12efe58bc2a7dd98bbb182fcfdab062dc5f20fdf5e3aea3b8e990bec2c284262c67c155596015315ed53efe2a10fbd43156f7fdb7b88e35422eacb0fb276d090c7f0d4082f81c50ccd646808f27da93eef4f0ceb54e7bfc3a057a2a1467acca3216ed38a8155627d30ca686c531769d93b1126d20f42eeb1e7db0d096d2032d5324928916ff42f62c75b59ab2b2ff8e6999750808db2209cedd6f7593cee6864e2bb66fd741cb3a2e2a2fc9b4fab9c4c1946625934374760ef0efb9444e6c5ce9c1814f0db0ec22ae4ec9ce64f1dc555b727d98d548b2487188344c237c43bbabe72e624d2831f49622b4f3ceedca4142eac847fc07479001232c7e6657739a90209979fef7f66e2af6b5547eb29876c4cc8f3b79d12e7c1a9c4abeb5b94c56d8de08f546bdcbac5314ddb71460aa2c9cda5e6d674420ddaf846bee2ef6e5af7e74fad4d71518b7096c262020774d762ab5184050522c46483f2c4ae2f1e49bde406758dc73a50eaad386e0363452cb70f59800ae9909cbbc47b737f3d053337488c87fd91f8d43fb9d8ceaf816ee2276408acf322f076aabcd67e45ddf59c8b8d3ef7a516d9193d0ebf84c75f907c8ca8ae508e3659ae903a1e1676c39065109247ec755f4fec7e47a53c09fdd0ebca2b30c419890e4e99f163068095450803c82918e22252e8d69910e6cc6c875e21f1929809564821b55b59ed862e79d74bf872314f0643b2297f2e88e3b6af57ce7a54712b14ccd148c232287d6ac3537422d2e501fba2126574876a331423e2a9e7885e17b1ad2796f87a08a6ae60dfaebe65839041563824ae9877aeaf5cb223da95a0178d89427ff1eaa8b5eb726ffa4290ed56acd2cb702606ffb249254c1faff3d5c3b8a165ef73a9149a2ba5a7f32324af161c4cb68a1fb46e148efa584896c8580386754cf71a74e88116520fba184810dc74e80d341f14ef70c387347bca9a1a4c8cd6acb984b150db422c339dfb7c38d1d398c6df6aa28a798e3d799031c919ebb83e01c44954ae993a20a62e1353d2240db87105f54b1e21a09e2ba1ab28a9969452efc6ad807a13aad4fc30ed58901c2619fb046857e52d31cab5e0925adb75864da4a1386ac2ddca8c7df3e68f455c39d6f7c6256f28778b30291a9c0c60498d10292af8b959a1f75fdea12cddad30aac0f699b237b6e7735284fe5b42e55414ba565a67667edd15e8f5b43d72259f86e47bf1db472283df62deacb346488a6994a46544c1f24b571e82d9f02f5841907366972d4f1a5aa4ce7f75a919fb23582a17aed0cea74d82d9e23f883405c96511f5e3b98c86f005fdc4ab1bac4d260f395c8136d3c30e9f0d3528724017e176edb159f1f2b4c4106ed332f78b87127270448b5aee11b77ec164b21cc9c6bbd48c6dcbad17f420082c581a36c046f52474632ddc6390fc274d19a8d092cdc07fbd8ffe862247d9a4275194df4dd6c665c4ba25227ecea8bd96db58387ec02ac562cbec467464b0beb656a924aa98de5a7870e9393befcdbc9333e133a4fe829c65e6b24bdf85c6294581c043c4d70378cc8651e39", 0xdad}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1118}}], 0x1, 0x400c894) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): cvtap: entered allmulticast mode [ 157.206836][ T8879] bridge0: port 3(macsec0) entered blocking state [ 157.213658][ T8879] bridge0: port 3(macsec0) entered forwarding state [ 157.369598][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.377486][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.426686][ T8887] netlink: 'syz.2.918': attribute type 24 has an invalid length. [ 157.572446][ T8900] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 157.605880][ T8881] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 157.619160][ T8902] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 157.749212][ T8900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.894902][ T8903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.902680][ T8903] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 157.922218][ T8903] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 157.971353][ T8920] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 157.979480][ T8905] vlan2: entered allmulticast mode [ 157.990086][ T8905] bond3: entered allmulticast mode [ 158.033509][ T8924] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.488758][ T8952] ksmbd: Unknown IPC event: 3, ignore. [ 158.513410][ T8952] ksmbd: Unknown IPC event: 3, ignore. [ 158.782500][ T8965] xt_cgroup: xt_cgroup: no path or classid specified [ 158.879019][ T8971] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.024838][ T8982] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 159.137882][ T8982] bond4: entered promiscuous mode [ 159.144606][ T8982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.187596][ T8987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.195341][ T8987] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 159.206614][ T8987] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 159.230398][ T8987] bond4: (slave wireguard0): making interface the new active one [ 159.249677][ T8987] wireguard0: entered promiscuous mode [ 159.282536][ T8987] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 159.474509][ T9000] smc: net device erspan0 applied user defined pnetid SYZ0 [ 159.748928][ T9027] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.758893][ T9027] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.767894][ T9027] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.778411][ T9027] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.824920][ T9027] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.834528][ T9027] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.844769][ T9027] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.855287][ T9027] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.866537][ T9031] openvswitch: netlink: IPv6 tunnel dst address is zero [ 160.213381][ T9047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.267435][ T9048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.287376][ T9053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.801282][ T9084] __nla_validate_parse: 49 callbacks suppressed [ 160.801300][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 161.116192][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.976'. [ 161.389206][ T9106] x_tables: duplicate underflow at hook 2 [ 161.623903][ T9113] ipt_ECN: cannot use operation on non-tcp rule [ 161.652127][ T9114] ipt_ECN: cannot use operation on non-tcp rule [ 161.668754][ T9114] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20002 [ 161.863181][ T9121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.985'. [ 161.999607][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 162.024391][ T9128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 162.074761][ T9128] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.110578][ T9128] gretap1: entered promiscuous mode [ 162.115862][ T9128] gretap1: entered allmulticast mode [ 162.281599][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 162.338928][ T9140] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 162.350332][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.366442][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.379670][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.400934][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.414774][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.443897][ T9140] bridge_slave_0: left allmulticast mode [ 162.463670][ T9140] bridge_slave_0: left promiscuous mode [ 162.470120][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.519875][ T9140] bridge_slave_1: left allmulticast mode [ 162.531193][ T9140] bridge_slave_1: left promiscuous mode [ 162.537092][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.597042][ T9140] bond0: (slave bond_slave_0): Releasing backup interface [ 162.630893][ T9160] netlink: 256 bytes leftover after parsing attributes in process `syz.4.995'. [ 162.663801][ T9160] xt_cluster: node mask cannot exceed total number of nodes [ 162.682408][ T9140] bond0: (slave bond_slave_1): Releasing backup interface [ 162.788334][ T9140] team0: Port device team_slave_0 removed [ 162.843173][ T9140] team0: Port device team_slave_1 removed [ 162.872302][ T9140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.879791][ T9140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.899313][ T9140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.915387][ T9140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.951442][ T7227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.013726][ T7227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.057251][ T9171] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 163.298249][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'. [ 163.366756][ T9184] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 163.385057][ T9185] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 163.394746][ T9185] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 163.404793][ T9184] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 163.420238][ T9184] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 163.440628][ T7227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.978965][ T9147] chnl_net:caif_netlink_parms(): no params data found [ 164.214695][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.235018][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.249723][ T9147] bridge_slave_0: entered allmulticast mode [ 164.268617][ T9147] bridge_slave_0: entered promiscuous mode [ 164.294393][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.302261][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.310140][ T9147] bridge_slave_1: entered allmulticast mode [ 164.318495][ T9147] bridge_slave_1: entered promiscuous mode [ 164.414116][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.433660][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.491183][ T51] Bluetooth: hci1: command tx timeout [ 164.508111][ T9147] team0: Port device team_slave_0 added [ 164.519068][ T9147] team0: Port device team_slave_1 added [ 164.568094][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.575664][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.602789][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.616374][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.623552][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.651042][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.748212][ T9147] hsr_slave_0: entered promiscuous mode [ 164.766367][ T9147] hsr_slave_1: entered promiscuous mode [ 164.773546][ T9147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.781542][ T9147] Cannot create hsr debugfs directory [ 164.822897][ T9253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1020'. [ 165.097506][ T9147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.151169][ T9260] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 165.161615][ T9260] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 165.169499][ T9260] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 165.184720][ T9260] netlink: 'syz.0.1023': attribute type 2 has an invalid length. [ 165.204149][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 165.221801][ T9147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.265446][ T9264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.327123][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 165.375029][ T9271] netlink: 'syz.4.1026': attribute type 18 has an invalid length. [ 165.388513][ T9147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.405835][ T9266] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 165.473631][ T9147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.559324][ T30] audit: type=1804 audit(1751822986.320:2): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1029" name="/newroot/176/cgroup.controllers" dev="tmpfs" ino=910 res=1 errno=0 [ 165.606709][ T30] audit: type=1800 audit(1751822986.350:3): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1029" name="cgroup.controllers" dev="tmpfs" ino=910 res=0 errno=0 [ 165.737969][ T9147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.767130][ T9147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.799352][ T9147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.847189][ T9147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.937229][ T9294] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 166.275545][ T6163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.385576][ T6163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.417897][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.441825][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.461368][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.469224][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.553402][ T6163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.570712][ T51] Bluetooth: hci1: command tx timeout [ 166.632890][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.640178][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.757196][ T6163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.956479][ T9327] ipvlan0: entered promiscuous mode [ 166.982733][ T9327] ipvlan0: entered allmulticast mode [ 166.988745][ T9327] veth0_vlan: entered allmulticast mode [ 167.106920][ T9336] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 167.138696][ T9337] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 167.226212][ T6163] macsec0: left allmulticast mode [ 167.247705][ T6163] veth1_macvtap: left allmulticast mode [ 167.260843][ T6163] macsec0: left promiscuous mode [ 167.269503][ T6163] bridge0: port 3(macsec0) entered disabled state [ 167.343673][ T6163] bridge_slave_1: left allmulticast mode [ 167.365730][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.368461][ T6163] bridge_slave_1: left promiscuous mode [ 167.385741][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.394656][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.404322][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.413869][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.426654][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.468837][ T6163] bridge_slave_0: left allmulticast mode [ 167.475832][ T6163] bridge_slave_0: left promiscuous mode [ 167.484467][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.399067][ T6163] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 168.410716][ T6163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.421536][ T6163] bond0 (unregistering): Released all slaves [ 168.521278][ T6163] bond1 (unregistering): Released all slaves [ 168.607112][ T6163] bond2 (unregistering): Released all slaves [ 168.622315][ T6163] bond3 (unregistering): Released all slaves [ 168.663088][ T51] Bluetooth: hci1: command tx timeout [ 168.724581][ T6163] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 168.734039][ T6163] wireguard0: left promiscuous mode [ 168.745565][ T6163] bond4 (unregistering): Released all slaves [ 168.883140][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.001318][ T9362] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 169.059050][ T9362] sctp: [Deprecated]: syz.4.1054 (pid 9362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.059050][ T9362] Use struct sctp_sack_info instead [ 169.220957][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 169.271385][ T9370] netlink: 'syz.4.1058': attribute type 8 has an invalid length. [ 169.361186][ T9147] veth0_vlan: entered promiscuous mode [ 169.405963][ T9147] veth1_vlan: entered promiscuous mode [ 169.456924][ T51] Bluetooth: hci0: command tx timeout [ 169.622000][ T9376] netlink: 'syz.4.1060': attribute type 3 has an invalid length. [ 169.809575][ T6163] hsr_slave_0: left promiscuous mode [ 169.834448][ T6163] hsr_slave_1: left promiscuous mode [ 169.851260][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.858877][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.893995][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 169.894627][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.916108][ T6163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.947943][ T6163] veth1_macvtap: left promiscuous mode [ 169.954406][ T6163] veth0_macvtap: left promiscuous mode [ 170.516961][ T6163] team0 (unregistering): Port device team_slave_1 removed [ 170.558956][ T6163] team0 (unregistering): Port device team_slave_0 removed [ 170.740115][ T51] Bluetooth: hci1: command tx timeout [ 170.954630][ T9393] macvlan0: entered promiscuous mode [ 170.960216][ T9393] macvlan0: entered allmulticast mode [ 170.980665][ T9147] veth0_macvtap: entered promiscuous mode [ 171.058522][ T9147] veth1_macvtap: entered promiscuous mode [ 171.114042][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.142918][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1069'. [ 171.156221][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.203248][ T9147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.223351][ T9147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.233341][ T9147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.246934][ T9147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.530198][ T51] Bluetooth: hci0: command tx timeout [ 171.582399][ T9346] chnl_net:caif_netlink_parms(): no params data found [ 171.617765][ T9437] syz.1.1075: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.646605][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.1.1075 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 171.646643][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.646664][ T9437] Call Trace: [ 171.646673][ T9437] [ 171.646683][ T9437] dump_stack_lvl+0x189/0x250 [ 171.646719][ T9437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.646746][ T9437] ? __pfx__printk+0x10/0x10 [ 171.646776][ T9437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.646807][ T9437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.646837][ T9437] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 171.646869][ T9437] warn_alloc+0x214/0x310 [ 171.646900][ T9437] ? stack_depot_save_flags+0x40/0x900 [ 171.646938][ T9437] ? __pfx_warn_alloc+0x10/0x10 [ 171.646971][ T9437] ? kasan_save_track+0x4f/0x80 [ 171.646996][ T9437] ? xskq_create+0x56/0x170 [ 171.647026][ T9437] ? xsk_init_queue+0xb0/0x110 [ 171.647054][ T9437] ? xsk_setsockopt+0x43f/0x710 [ 171.647086][ T9437] ? do_sock_setsockopt+0x25a/0x3e0 [ 171.647111][ T9437] ? __x64_sys_setsockopt+0x18b/0x220 [ 171.647135][ T9437] ? do_syscall_64+0xfa/0x3b0 [ 171.647154][ T9437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.647185][ T9437] __vmalloc_node_range_noprof+0x125/0x12f0 [ 171.647253][ T9437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.647291][ T9437] ? __kasan_kmalloc+0x93/0xb0 [ 171.647321][ T9437] vmalloc_user_noprof+0xad/0xf0 [ 171.647352][ T9437] ? xskq_create+0xbf/0x170 [ 171.647385][ T9437] xskq_create+0xbf/0x170 [ 171.647429][ T9437] xsk_init_queue+0xb0/0x110 [ 171.647463][ T9437] xsk_setsockopt+0x43f/0x710 [ 171.647497][ T9437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.647526][ T9437] ? __lock_acquire+0xab9/0xd20 [ 171.647563][ T9437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 171.647582][ T9437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.647614][ T9437] do_sock_setsockopt+0x25a/0x3e0 [ 171.647644][ T9437] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 171.647677][ T9437] ? __fget_files+0x2a/0x420 [ 171.647717][ T9437] __x64_sys_setsockopt+0x18b/0x220 [ 171.647752][ T9437] do_syscall_64+0xfa/0x3b0 [ 171.647771][ T9437] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.647804][ T9437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.647824][ T9437] ? clear_bhb_loop+0x60/0xb0 [ 171.647850][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.647871][ T9437] RIP: 0033:0x7f6eab18e929 [ 171.647890][ T9437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.647907][ T9437] RSP: 002b:00007f6ea8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.647929][ T9437] RAX: ffffffffffffffda RBX: 00007f6eab3b5fa0 RCX: 00007f6eab18e929 [ 171.647944][ T9437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 171.647956][ T9437] RBP: 00007f6eab210b39 R08: 0000000000000004 R09: 0000000000000000 [ 171.647969][ T9437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.647982][ T9437] R13: 0000000000000000 R14: 00007f6eab3b5fa0 R15: 00007ffeaddcbdb8 [ 171.648019][ T9437] [ 171.648155][ T9437] Mem-Info: [ 171.784872][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 171.797977][ T9437] active_anon:3605 inactive_anon:0 isolated_anon:0 [ 171.797977][ T9437] active_file:1162 inactive_file:39861 isolated_file:0 [ 171.797977][ T9437] unevictable:768 dirty:70 writeback:0 [ 171.797977][ T9437] slab_reclaimable:11098 slab_unreclaimable:101233 [ 171.797977][ T9437] mapped:28719 shmem:1364 pagetables:921 [ 171.797977][ T9437] sec_pagetables:0 bounce:0 [ 171.797977][ T9437] kernel_misc_reclaimable:0 [ 171.797977][ T9437] free:1329961 free_pcp:16003 free_cma:0 [ 171.860372][ T9438] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 171.862716][ T9437] Node 0 active_anon:14420kB inactive_anon:0kB active_file:4648kB inactive_file:159244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114876kB dirty:272kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12296kB pagetables:3524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.868679][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 171.873679][ T9437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 172.110291][ T9437] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.140570][ T9437] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 172.147340][ T9437] Node 0 DMA32 free:1407380kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14280kB inactive_anon:0kB active_file:4648kB inactive_file:157680kB unevictable:1536kB writepending:268kB present:3129332kB managed:2558404kB mlocked:0kB bounce:0kB free_pcp:41376kB local_pcp:15748kB free_cma:0kB [ 172.195976][ T9437] lowmem_reserve[]: 0 0 1 1 1 [ 172.226628][ T9437] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 172.267711][ T9437] lowmem_reserve[]: 0 0 0 0 0 [ 172.271891][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.272619][ T9437] Node 1 Normal free:3898428kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19876kB local_pcp:9700kB free_cma:0kB [ 172.312786][ T9437] lowmem_reserve[]: 0 0 0 0 0 [ 172.315776][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.326277][ T9437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.359145][ T9437] Node 0 DMA32: 203*4kB (ME) 42*8kB (UME) 52*16kB (UME) 77*32kB (UM) 34*64kB (ME) 25*128kB (ME) 18*256kB (UME) 59*512kB (UME) 24*1024kB (UME) 7*2048kB (UM) 323*4096kB (UM) = 1406556kB [ 172.411516][ T9437] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 172.432551][ T9437] Node 1 Normal: 195*4kB (UE) 48*8kB (UME) 39*16kB (UME) 114*32kB (UME) 30*64kB (UME) 9*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898428kB [ 172.472606][ T9437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.483995][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.498876][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.515004][ T9437] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 172.517584][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.538110][ T9437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.541679][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.571360][ T9346] bridge_slave_0: entered allmulticast mode [ 172.583119][ T9437] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 172.594618][ T9346] bridge_slave_0: entered promiscuous mode [ 172.599837][ T9437] 42384 total pagecache pages [ 172.631107][ T9437] 0 pages in swap cache [ 172.635418][ T9437] Free swap = 124996kB [ 172.635898][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.639590][ T9437] Total swap = 124996kB [ 172.659763][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.669246][ T9346] bridge_slave_1: entered allmulticast mode [ 172.682661][ T9437] 2097051 pages RAM [ 172.683716][ T9346] bridge_slave_1: entered promiscuous mode [ 172.686599][ T9437] 0 pages HighMem/MovableOnly [ 172.725012][ T9437] 425408 pages reserved [ 172.738373][ T9437] 0 pages cma reserved [ 172.977757][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.999570][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.269124][ T9346] team0: Port device team_slave_0 added [ 173.300744][ T9346] team0: Port device team_slave_1 added [ 173.387321][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.554132][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.585694][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.604575][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.633347][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.640945][ T51] Bluetooth: hci0: command tx timeout [ 173.678357][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.702173][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.709662][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.743138][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.861575][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.017618][ T9346] hsr_slave_0: entered promiscuous mode [ 174.032931][ T9346] hsr_slave_1: entered promiscuous mode [ 174.043751][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.054281][ T9346] Cannot create hsr debugfs directory [ 174.080185][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.124664][ T9500] netlink: 'syz.0.1091': attribute type 29 has an invalid length. [ 174.256643][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.265807][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.269718][ T9500] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1091'. [ 174.277522][ T9501] netlink: 'syz.0.1091': attribute type 29 has an invalid length. [ 174.291876][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.300508][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.324236][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.470451][ T37] bridge_slave_1: left allmulticast mode [ 174.476874][ T37] bridge_slave_1: left promiscuous mode [ 174.499632][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.516004][ T37] bridge_slave_0: left allmulticast mode [ 174.523507][ T37] bridge_slave_0: left promiscuous mode [ 174.529583][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.654717][ T9524] ksmbd: Unknown IPC event: 3, ignore. [ 174.663843][ T9524] Bluetooth: MGMT ver 1.23 [ 174.953956][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.965706][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.977601][ T37] bond0 (unregistering): Released all slaves [ 175.009447][ T9512] gtp0: entered promiscuous mode [ 175.014559][ T9512] gtp0: entered allmulticast mode [ 175.261165][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 175.296072][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 175.694192][ T51] Bluetooth: hci0: command tx timeout [ 176.144383][ T37] hsr_slave_0: left promiscuous mode [ 176.154030][ T37] hsr_slave_1: left promiscuous mode [ 176.161325][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.170184][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.178630][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.186449][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.216455][ T37] veth1_macvtap: left promiscuous mode [ 176.222797][ T37] veth0_macvtap: left promiscuous mode [ 176.228598][ T37] veth1_vlan: left promiscuous mode [ 176.234534][ T37] veth0_vlan: left promiscuous mode [ 176.413042][ T51] Bluetooth: hci1: command tx timeout [ 176.571542][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 176.987435][ T37] team0 (unregistering): Port device team_slave_1 removed [ 177.031914][ T37] team0 (unregistering): Port device team_slave_0 removed [ 177.510424][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1109'. [ 177.847730][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 177.927293][ T9346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.984464][ T9346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.027135][ T9346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.054917][ T9588] netlink: 'syz.4.1115': attribute type 10 has an invalid length. [ 178.073485][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 178.089773][ T9346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.120244][ T9505] chnl_net:caif_netlink_parms(): no params data found [ 178.490855][ T51] Bluetooth: hci1: command tx timeout [ 178.511812][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.525309][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.534301][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.544876][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.553727][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.608841][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.616502][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.624198][ T9505] bridge_slave_0: entered allmulticast mode [ 178.633136][ T9505] bridge_slave_0: entered promiscuous mode [ 178.647764][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.656080][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.663512][ T9505] bridge_slave_1: entered allmulticast mode [ 178.672772][ T9505] bridge_slave_1: entered promiscuous mode [ 178.749216][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.793384][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.884002][ T9505] team0: Port device team_slave_0 added [ 178.928071][ T9505] team0: Port device team_slave_1 added [ 179.032932][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.050672][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.086773][ T9505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.108585][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.116488][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.144075][ T9505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.226528][ T37] bridge_slave_1: left promiscuous mode [ 179.232793][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.242789][ T37] bridge_slave_0: left allmulticast mode [ 179.248499][ T37] bridge_slave_0: left promiscuous mode [ 179.254587][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.486508][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 179.665948][ T37] bond1 (unregistering): Released all slaves [ 179.758414][ T37] bond0 (unregistering): Released all slaves [ 179.795277][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.994692][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 180.090647][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 180.136574][ T9505] hsr_slave_0: entered promiscuous mode [ 180.151175][ T9505] hsr_slave_1: entered promiscuous mode [ 180.157566][ T9505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.171232][ T9505] Cannot create hsr debugfs directory [ 180.218473][ T9618] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 180.346503][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'. [ 180.356236][ T9625] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1122'. [ 180.404394][ T9625] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1122'. [ 180.418137][ T9346] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.431869][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.439075][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.570271][ T51] Bluetooth: hci1: command tx timeout [ 180.634407][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.641658][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.650545][ T51] Bluetooth: hci3: command tx timeout [ 180.675283][ T24] IPVS: starting estimator thread 0... [ 180.675718][ T9627] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 180.780434][ T9631] IPVS: using max 27 ests per chain, 64800 per kthread [ 180.885706][ T37] hsr_slave_0: left promiscuous mode [ 180.896419][ T37] hsr_slave_1: left promiscuous mode [ 180.904253][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.925279][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.958937][ T9638] netlink: 'syz.1.1126': attribute type 10 has an invalid length. [ 181.392322][ T6177] smc: removing ib device syz2 [ 181.660649][ T9638] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 181.691316][ T9638] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.853501][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 182.119810][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1130'. [ 182.143370][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 182.360952][ T9658] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 182.509368][ T9663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.547886][ T9663] netlink: 'syz.4.1132': attribute type 10 has an invalid length. [ 182.647052][ T9658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.660465][ T51] Bluetooth: hci1: command tx timeout [ 182.730553][ T51] Bluetooth: hci3: command tx timeout [ 182.855334][ T9662] bond4: (slave veth0_to_bond): making interface the new active one [ 182.866373][ T9662] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 182.910291][ T9664] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 182.949850][ T9663] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.957134][ T9664] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1133'. [ 183.020175][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.027643][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.037040][ T9605] bridge_slave_0: entered allmulticast mode [ 183.065166][ T9605] bridge_slave_0: entered promiscuous mode [ 183.082223][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.089614][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.105185][ T9605] bridge_slave_1: entered allmulticast mode [ 183.130469][ T9605] bridge_slave_1: entered promiscuous mode [ 183.385699][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.410230][ T9677] netlink: 'syz.1.1134': attribute type 11 has an invalid length. [ 183.418128][ T9677] netlink: 'syz.1.1134': attribute type 11 has an invalid length. [ 183.456613][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1134'. [ 183.509380][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.878907][ T9605] team0: Port device team_slave_0 added [ 183.914971][ T9605] team0: Port device team_slave_1 added [ 183.993057][ T9505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.013093][ T9505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.076866][ T9505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.104983][ T9505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.128252][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.141207][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.167940][ T9605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.187783][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.204472][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.261402][ T9605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.289460][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.401826][ T9605] hsr_slave_0: entered promiscuous mode [ 184.408965][ T9605] hsr_slave_1: entered promiscuous mode [ 184.422611][ T9605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.435800][ T9605] Cannot create hsr debugfs directory [ 184.536391][ T9721] veth1_macvtap: left promiscuous mode [ 184.545639][ T9721] macsec0: entered promiscuous mode [ 184.554055][ T9721] macsec0: entered allmulticast mode [ 184.562001][ T9725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.810135][ T51] Bluetooth: hci3: command tx timeout [ 184.883249][ T9346] veth0_vlan: entered promiscuous mode [ 185.114302][ T9739] tap0: tun_chr_ioctl cmd 1074025676 [ 185.119662][ T9739] tap0: owner set to 0 [ 185.637329][ T9346] veth1_vlan: entered promiscuous mode [ 185.732809][ T9741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 185.809140][ T9505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.882659][ T9346] veth0_macvtap: entered promiscuous mode [ 185.916603][ T9744] delete_channel: no stack [ 185.926390][ T9346] veth1_macvtap: entered promiscuous mode [ 185.988600][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.024420][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.031812][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.047954][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.109952][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.117258][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.163321][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.193582][ T9346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.215307][ T9346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.230573][ T9346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.239343][ T9346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.294928][ T9760] lo: left promiscuous mode [ 186.299888][ T9760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.426268][ T9605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.455392][ T9605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.503906][ T9605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.518578][ T9767] __nla_validate_parse: 2 callbacks suppressed [ 186.518596][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 186.542382][ T9605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.624421][ T9767] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1155'. [ 186.679067][ T9767] wg2: entered promiscuous mode [ 186.686236][ T9767] wg2: entered allmulticast mode [ 186.787891][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.802212][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.881563][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.889453][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.892189][ T51] Bluetooth: hci3: command tx timeout [ 187.063259][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.117974][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.173737][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.181027][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.243170][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.250426][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.395139][ T9505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.484792][ T9505] veth0_vlan: entered promiscuous mode [ 187.521371][ T9505] veth1_vlan: entered promiscuous mode [ 187.611911][ T9505] veth0_macvtap: entered promiscuous mode [ 187.637274][ T9505] veth1_macvtap: entered promiscuous mode [ 187.686266][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.715670][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.754749][ T9505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.776171][ T9505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.786984][ T9505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.796189][ T9505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.924559][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.003704][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.021307][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.124914][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.152641][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.177809][ T9605] veth0_vlan: entered promiscuous mode [ 188.206337][ T9810] bridge0: entered allmulticast mode [ 188.271598][ T9605] veth1_vlan: entered promiscuous mode [ 188.471132][ T9605] veth0_macvtap: entered promiscuous mode [ 188.491925][ T9605] veth1_macvtap: entered promiscuous mode [ 188.546393][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.565944][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.589757][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.599623][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.608525][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.626303][ T9605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.635658][ T9605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.642204][ T9819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1166'. [ 188.653621][ T9605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.653691][ T9605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.675831][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.691257][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.862602][ T9821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.910645][ T6163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.941102][ T6163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.028962][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.054550][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.314389][ T9816] chnl_net:caif_netlink_parms(): no params data found [ 189.590846][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.598421][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.607326][ T9816] bridge_slave_0: entered allmulticast mode [ 189.618223][ T9816] bridge_slave_0: entered promiscuous mode [ 189.631668][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.639037][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.646840][ T9816] bridge_slave_1: entered allmulticast mode [ 189.655532][ T9816] bridge_slave_1: entered promiscuous mode [ 189.811958][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.871003][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.005708][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.016936][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.035231][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.035880][ T9816] team0: Port device team_slave_0 added [ 190.058940][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.062204][ T9816] team0: Port device team_slave_1 added [ 190.079755][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.162532][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.169620][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.203817][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.219307][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.232486][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.271880][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.427382][ T9848] netlink: 'syz.4.1172': attribute type 2 has an invalid length. [ 190.465999][ T9816] hsr_slave_0: entered promiscuous mode [ 190.474185][ T9816] hsr_slave_1: entered promiscuous mode [ 190.488980][ T9816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.505626][ T9816] Cannot create hsr debugfs directory [ 190.519405][ T9848] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1172'. [ 190.737626][ T51] Bluetooth: hci0: command tx timeout [ 190.746618][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 190.802744][ T9853] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1173'. [ 190.941755][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.951551][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.963046][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.979780][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.988310][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.054784][ T9816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.110082][ T9862] tipc: Started in network mode [ 191.115177][ T9862] tipc: Node identity 86cde7eee087, cluster identity 4711 [ 191.141029][ T9862] tipc: Enabled bearer , priority 0 [ 191.179863][ T9816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.243269][ T9862] syzkaller0: entered promiscuous mode [ 191.248785][ T9862] syzkaller0: entered allmulticast mode [ 191.256671][ T9862] tipc: Resetting bearer [ 191.297477][ T9816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.319530][ T9860] tipc: Resetting bearer [ 192.163195][ T7219] tipc: Node number set to 1716185070 [ 192.170617][ T51] Bluetooth: hci1: command tx timeout [ 192.633916][ T9860] tipc: Disabling bearer [ 192.648431][ T9841] chnl_net:caif_netlink_parms(): no params data found [ 192.674285][ T9816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.811801][ T51] Bluetooth: hci0: command tx timeout [ 193.043184][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.053144][ T51] Bluetooth: hci3: command tx timeout [ 193.067767][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.076486][ T9841] bridge_slave_0: entered allmulticast mode [ 193.077420][ T9882] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1180'. [ 193.085872][ T9841] bridge_slave_0: entered promiscuous mode [ 193.113385][ T9879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1179'. [ 193.127819][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.138803][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.147241][ T9841] bridge_slave_1: entered allmulticast mode [ 193.156411][ T9841] bridge_slave_1: entered promiscuous mode [ 193.324963][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 193.345399][ T9841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.392029][ T9891] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.405971][ T9841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.525060][ T9816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.557727][ T9841] team0: Port device team_slave_0 added [ 193.569774][ T9841] team0: Port device team_slave_1 added [ 193.601986][ T9816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.626584][ T9816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.688149][ T9816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.701730][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.709729][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.737276][ T9841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.753990][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 193.778082][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.787016][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.814040][ T9841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.043808][ T9841] hsr_slave_0: entered promiscuous mode [ 194.054773][ T9841] hsr_slave_1: entered promiscuous mode [ 194.061716][ T9841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.069359][ T9841] Cannot create hsr debugfs directory [ 194.232320][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.245692][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.254159][ T9858] bridge_slave_0: entered allmulticast mode [ 194.260870][ T51] Bluetooth: hci1: command tx timeout [ 194.269891][ T9858] bridge_slave_0: entered promiscuous mode [ 194.279225][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.287389][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.295197][ T9858] bridge_slave_1: entered allmulticast mode [ 194.303049][ T9858] bridge_slave_1: entered promiscuous mode [ 194.379183][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.407421][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.424094][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.438650][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585134][ T9858] team0: Port device team_slave_0 added [ 194.644650][ T9858] team0: Port device team_slave_1 added [ 194.790631][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.797727][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.825695][ T9858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.839465][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.847192][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.876213][ T9858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.896680][ T51] Bluetooth: hci0: command tx timeout [ 194.998884][ T9841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.090470][ T9858] hsr_slave_0: entered promiscuous mode [ 195.097240][ T9858] hsr_slave_1: entered promiscuous mode [ 195.104538][ T9858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.113990][ T9858] Cannot create hsr debugfs directory [ 195.130241][ T51] Bluetooth: hci3: command tx timeout [ 195.149688][ T9841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.179216][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 195.247446][ T9841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.294949][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.336791][ T9841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.442045][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.458052][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.465425][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.507128][ T9858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.535021][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.542235][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.633306][ T9858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.681971][ T9953] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1197'. [ 195.732215][ T9858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.823162][ T9858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.078552][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.122351][ T9968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 196.161808][ T9968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1200'. [ 196.179374][ T9841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.225283][ T9841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.251788][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 196.260877][ T9841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.274308][ T9841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.308719][ T9816] veth0_vlan: entered promiscuous mode [ 196.341839][ T51] Bluetooth: hci1: command tx timeout [ 196.364572][ T9816] veth1_vlan: entered promiscuous mode [ 196.502875][ T9858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.561915][ T9858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.604818][ T9858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.629232][ T9858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.673108][ T9816] veth0_macvtap: entered promiscuous mode [ 196.772640][ T9816] veth1_macvtap: entered promiscuous mode [ 196.781414][ T9995] syzkaller1: entered promiscuous mode [ 196.786941][ T9995] syzkaller1: entered allmulticast mode [ 196.857825][ T9998] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 196.879109][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.934824][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.972216][ T51] Bluetooth: hci0: command tx timeout [ 197.011277][ T9816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.021679][ T9816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.030771][ T9816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.039709][ T9816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.134693][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.210733][ T51] Bluetooth: hci3: command tx timeout [ 197.281371][T10005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.312845][T10007] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 197.338544][ T9841] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.367656][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 197.405963][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.422739][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.437974][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.479847][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.487136][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.531129][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.548694][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.555914][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.559378][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.620456][ T9858] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.674639][T10017] netlink: 'syz.4.1213': attribute type 11 has an invalid length. [ 197.695783][T10017] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1213'. [ 197.706466][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.713875][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.798659][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.805917][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.100729][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 198.199803][T10029] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1216'. [ 198.401566][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.410245][ T51] Bluetooth: hci1: command tx timeout [ 198.482478][ T9841] veth0_vlan: entered promiscuous mode [ 198.496636][ T9841] veth1_vlan: entered promiscuous mode [ 198.614777][ T9858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.641685][ T9841] veth0_macvtap: entered promiscuous mode [ 198.724995][ T9841] veth1_macvtap: entered promiscuous mode [ 198.816795][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.835379][ T9858] veth0_vlan: entered promiscuous mode [ 198.886502][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.951893][ T9858] veth1_vlan: entered promiscuous mode [ 198.982133][ T6172] wlan1: Trigger new scan to find an IBSS to join [ 198.991889][ T9841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.012490][ T9841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.030446][ T9841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.067567][ T9841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.292406][ T51] Bluetooth: hci3: command tx timeout [ 199.337326][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.355718][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.365897][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.376314][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.389214][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.413363][ T9858] veth0_macvtap: entered promiscuous mode [ 199.435476][ T9858] veth1_macvtap: entered promiscuous mode [ 199.467618][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.494723][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.577311][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.640793][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.660970][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.668917][ T9858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.668957][ T9858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.668986][ T9858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.669015][ T9858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.776959][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.943574][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.969434][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.072180][T10059] netlink: 'syz.4.1222': attribute type 33 has an invalid length. [ 200.129391][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.154415][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.363514][T10052] chnl_net:caif_netlink_parms(): no params data found [ 200.645413][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.654516][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.662935][T10052] bridge_slave_0: entered allmulticast mode [ 200.672157][T10052] bridge_slave_0: entered promiscuous mode [ 200.682410][T10052] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.691328][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.698891][T10052] bridge_slave_1: entered allmulticast mode [ 200.717681][T10052] bridge_slave_1: entered promiscuous mode [ 200.795062][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.817980][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.872708][T10052] team0: Port device team_slave_0 added [ 200.898668][T10052] team0: Port device team_slave_1 added [ 200.978490][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.988316][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.019876][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.033769][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.041802][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.070974][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.443769][T10052] hsr_slave_0: entered promiscuous mode [ 201.454665][ T5862] Bluetooth: hci0: command tx timeout [ 201.501778][T10052] hsr_slave_1: entered promiscuous mode [ 201.509718][T10052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.553636][T10052] Cannot create hsr debugfs directory [ 201.840982][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.867027][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.875698][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.885594][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.895498][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.929646][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.939855][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.948268][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.956631][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.964874][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.024329][ T6172] wlan1: Trigger new scan to find an IBSS to join [ 202.311994][T10052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.554366][T10052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.643159][T10052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.792687][T10052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.836181][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.851686][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.860883][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.878869][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.887549][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.139431][T10084] chnl_net:caif_netlink_parms(): no params data found [ 203.275707][T10088] chnl_net:caif_netlink_parms(): no params data found [ 203.279509][T10117] xt_CT: No such helper "snmp" [ 203.397041][T10126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.509045][T10052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.531018][ T51] Bluetooth: hci0: command tx timeout [ 203.584268][T10052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.633162][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'. [ 203.642814][T10084] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.650383][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.658846][T10084] bridge_slave_0: entered allmulticast mode [ 203.667039][T10084] bridge_slave_0: entered promiscuous mode [ 203.731880][T10052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.816496][T10084] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.842825][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.851265][T10084] bridge_slave_1: entered allmulticast mode [ 203.873011][T10084] bridge_slave_1: entered promiscuous mode [ 203.890924][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.908333][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.916356][T10088] bridge_slave_0: entered allmulticast mode [ 203.925609][T10088] bridge_slave_0: entered promiscuous mode [ 203.931705][ T51] Bluetooth: hci1: command tx timeout [ 203.955024][T10052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.011337][ T51] Bluetooth: hci2: command tx timeout [ 204.041118][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.048596][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.064405][T10088] bridge_slave_1: entered allmulticast mode [ 204.080842][T10088] bridge_slave_1: entered promiscuous mode [ 204.137993][T10084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.164167][T10084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.239189][T10105] chnl_net:caif_netlink_parms(): no params data found [ 204.280733][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.294203][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.335283][T10084] team0: Port device team_slave_0 added [ 204.408963][T10084] team0: Port device team_slave_1 added [ 204.422521][T10154] IPVS: Unknown mcast interface: vcan0 [ 204.513256][T10088] team0: Port device team_slave_0 added [ 204.586995][T10158] netlink: 'syz.1.1242': attribute type 7 has an invalid length. [ 204.599314][T10084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.606687][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.633696][T10084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.671903][T10088] team0: Port device team_slave_1 added [ 204.701804][T10084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.708786][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.737169][T10084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.914844][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.938531][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.971302][ T51] Bluetooth: hci3: command tx timeout [ 204.972122][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.049242][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.051224][ T6165] wlan1: Trigger new scan to find an IBSS to join [ 205.069345][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.088206][T10105] bridge_slave_0: entered allmulticast mode [ 205.111202][T10105] bridge_slave_0: entered promiscuous mode [ 205.130691][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.137881][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.157111][T10105] bridge_slave_1: entered allmulticast mode [ 205.182980][T10105] bridge_slave_1: entered promiscuous mode [ 205.233699][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.244394][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.271301][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.411766][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.459212][T10084] hsr_slave_0: entered promiscuous mode [ 205.479101][T10084] hsr_slave_1: entered promiscuous mode [ 205.486852][T10084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.495167][T10084] Cannot create hsr debugfs directory [ 205.509080][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.543915][T10088] hsr_slave_0: entered promiscuous mode [ 205.551059][T10088] hsr_slave_1: entered promiscuous mode [ 205.557514][T10088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.566329][T10088] Cannot create hsr debugfs directory [ 205.610638][ T51] Bluetooth: hci0: command tx timeout [ 205.625566][T10105] team0: Port device team_slave_0 added [ 205.744648][T10105] team0: Port device team_slave_1 added [ 205.829559][T10052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.932503][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.939606][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.968372][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.983721][ T6172] wlan1: Creating new IBSS network, BSSID 02:bf:9c:51:f6:82 [ 205.985038][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.999108][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.025227][ T51] Bluetooth: hci1: command tx timeout [ 206.041643][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.091168][ T51] Bluetooth: hci2: command tx timeout [ 206.197693][T10052] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.461982][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.469180][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.548195][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.555434][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.597728][T10105] hsr_slave_0: entered promiscuous mode [ 206.614793][T10105] hsr_slave_1: entered promiscuous mode [ 206.631241][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.638872][T10105] Cannot create hsr debugfs directory [ 206.654280][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1257'. [ 206.672623][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1257'. [ 206.817122][T10084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.945033][T10084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.055176][ T51] Bluetooth: hci3: command tx timeout [ 207.065578][T10084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.168920][T10084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.567096][T10088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.609090][T10084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.623360][T10084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.634768][T10084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.649200][T10084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.694012][ T51] Bluetooth: hci0: command tx timeout [ 207.696368][T10088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.713122][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.799534][T10088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.852451][T10052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.901705][T10088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.043127][T10084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.090819][ T51] Bluetooth: hci1: command tx timeout [ 208.094866][T10105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.125521][T10238] x_tables: unsorted underflow at hook 3 [ 208.135044][T10052] veth0_vlan: entered promiscuous mode [ 208.151052][T10052] veth1_vlan: entered promiscuous mode [ 208.167312][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 208.177064][ T51] Bluetooth: hci2: command tx timeout [ 208.192405][T10084] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.233215][T10105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.317681][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.324870][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.376945][T10105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.395184][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.402446][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.429022][T10052] veth0_macvtap: entered promiscuous mode [ 208.458225][T10052] veth1_macvtap: entered promiscuous mode [ 208.524580][T10105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.587791][T10052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.639839][T10052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.689756][T10052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.711948][T10052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.732576][T10052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.749407][T10052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.060592][T10088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.086363][T10088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.107718][T10088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.136925][ T51] Bluetooth: hci3: command tx timeout [ 209.166438][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.177568][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.222943][T10088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.413062][T10105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.473479][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.484859][T10105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.502216][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.514139][T10105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.548023][T10105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.605120][T10084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.905585][T10084] veth0_vlan: entered promiscuous mode [ 209.988747][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.076618][T10084] veth1_vlan: entered promiscuous mode [ 210.146507][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.171782][ T51] Bluetooth: hci1: command tx timeout [ 210.250937][ T51] Bluetooth: hci2: command tx timeout [ 210.346884][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.354151][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.369100][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.376356][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.448208][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.583942][T10084] veth0_macvtap: entered promiscuous mode [ 210.615979][T10084] veth1_macvtap: entered promiscuous mode [ 210.665484][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.753734][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.761005][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.834303][T10088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.867494][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.874758][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.926738][T10084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.995963][T10105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.006916][T10105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.059033][T10084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.093212][T10084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.111320][T10084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.121239][T10084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.130995][T10084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.213220][ T51] Bluetooth: hci3: command tx timeout [ 211.382996][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.421761][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.561453][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.569426][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.633588][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.766334][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.881067][T10088] veth0_vlan: entered promiscuous mode [ 211.937057][T10088] veth1_vlan: entered promiscuous mode [ 212.104094][T10088] veth0_macvtap: entered promiscuous mode [ 212.134525][T10088] veth1_macvtap: entered promiscuous mode [ 212.146028][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.155324][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.170875][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.182510][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.192506][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.273956][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.355491][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.393966][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1274'. [ 212.479581][T10088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.499763][T10088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.540007][T10088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.548868][T10088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.807535][T10105] veth0_vlan: entered promiscuous mode [ 212.865248][ T6167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.887774][ T6167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.925167][T10105] veth1_vlan: entered promiscuous mode [ 213.026191][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.059671][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.115450][T10301] chnl_net:caif_netlink_parms(): no params data found [ 213.315104][T10105] veth0_macvtap: entered promiscuous mode [ 213.373904][T10105] veth1_macvtap: entered promiscuous mode [ 213.414557][T10320] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 3, id = 0 [ 213.553241][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.576448][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.603473][T10301] bridge_slave_0: entered allmulticast mode [ 213.626803][T10301] bridge_slave_0: entered promiscuous mode [ 213.672609][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.701109][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.717590][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.769224][T10301] bridge_slave_1: entered allmulticast mode [ 213.798954][T10301] bridge_slave_1: entered promiscuous mode [ 213.868342][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.911291][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.921438][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.935126][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.939332][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.961065][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.968922][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.981610][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.993370][T10105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.027980][T10105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.045067][T10105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.054239][T10105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.117548][T10301] team0: Port device team_slave_0 added [ 214.128700][T10301] team0: Port device team_slave_1 added [ 214.219562][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.228416][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.257024][ T5859] Bluetooth: hci0: command tx timeout [ 214.257601][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.279374][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.286531][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.316632][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.452000][T10301] hsr_slave_0: entered promiscuous mode [ 214.458929][T10301] hsr_slave_1: entered promiscuous mode [ 214.466206][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.474269][T10301] Cannot create hsr debugfs directory [ 214.790637][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 214.918500][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.942185][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.994068][T10333] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 214.997655][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.007653][T10333] bond1: (slave vcan0): Error -95 calling set_mac_address [ 215.019439][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.031863][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.041809][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.049606][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.205306][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.231456][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.275005][T10339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.423059][T10324] chnl_net:caif_netlink_parms(): no params data found [ 215.516035][T10301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.658119][T10301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.806987][T10301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.959019][T10301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.980639][T10324] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.987822][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.010809][T10324] bridge_slave_0: entered allmulticast mode [ 216.011570][ T51] Bluetooth: hci1: command tx timeout [ 216.021482][T10324] bridge_slave_0: entered promiscuous mode [ 216.090733][T10324] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.097897][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.122822][T10324] bridge_slave_1: entered allmulticast mode [ 216.144478][T10324] bridge_slave_1: entered promiscuous mode [ 216.299643][T10324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.330664][ T51] Bluetooth: hci0: command tx timeout [ 216.443008][T10324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.540969][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.551442][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.571967][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.588481][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.596395][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.694525][T10324] team0: Port device team_slave_0 added [ 216.710898][T10335] chnl_net:caif_netlink_parms(): no params data found [ 216.753169][T10324] team0: Port device team_slave_1 added [ 216.877727][T10301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.913144][T10324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.920537][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.947389][T10324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.967361][T10324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.984740][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.011642][T10324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.042904][T10301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.061406][T10301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.138203][T10301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.140201][ T5859] Bluetooth: hci2: command tx timeout [ 217.355327][T10324] hsr_slave_0: entered promiscuous mode [ 217.372711][T10324] hsr_slave_1: entered promiscuous mode [ 217.386682][T10324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.394458][T10324] Cannot create hsr debugfs directory [ 217.508662][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.527886][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.537098][T10335] bridge_slave_0: entered allmulticast mode [ 217.545969][T10335] bridge_slave_0: entered promiscuous mode [ 217.631726][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.655751][T10301] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.782607][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.795366][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.805846][T10335] bridge_slave_1: entered allmulticast mode [ 217.814694][T10335] bridge_slave_1: entered promiscuous mode [ 217.846098][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.853376][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.864399][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.871731][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.981837][T10335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.007243][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1287'. [ 218.056008][T10335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.100158][ T5859] Bluetooth: hci1: command tx timeout [ 218.196751][T10394] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 218.207184][ T6177] bond0: (slave netdevsim0): interface is now down [ 218.222665][ T67] bond0: (slave netdevsim0): interface is now down [ 218.244583][ T67] bond0: now running without any active interface! [ 218.420907][ T5859] Bluetooth: hci0: command tx timeout [ 218.432373][T10335] team0: Port device team_slave_0 added [ 218.488659][T10357] chnl_net:caif_netlink_parms(): no params data found [ 218.519687][T10335] team0: Port device team_slave_1 added [ 218.626503][T10335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.634102][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.664349][T10335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.671989][ T5859] Bluetooth: hci3: command tx timeout [ 218.760713][T10335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.767728][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.807712][T10335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.876491][T10412] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 218.939253][T10324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.067722][T10335] hsr_slave_0: entered promiscuous mode [ 219.089445][T10335] hsr_slave_1: entered promiscuous mode [ 219.096482][T10335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.105534][T10335] Cannot create hsr debugfs directory [ 219.163080][T10324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.220520][ T5859] Bluetooth: hci2: command tx timeout [ 219.296868][T10324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.379473][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.403582][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.417330][T10422] netlink: 'syz.1.1295': attribute type 2 has an invalid length. [ 219.420203][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.432232][T10423] netlink: 'syz.1.1295': attribute type 2 has an invalid length. [ 219.446562][T10357] bridge_slave_0: entered allmulticast mode [ 219.456276][T10357] bridge_slave_0: entered promiscuous mode [ 219.538067][T10324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.560355][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.567934][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.577213][T10357] bridge_slave_1: entered allmulticast mode [ 219.587510][T10357] bridge_slave_1: entered promiscuous mode [ 219.684678][T10357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.728180][T10357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.876905][T10357] team0: Port device team_slave_0 added [ 219.973448][T10357] team0: Port device team_slave_1 added [ 220.170962][ T5859] Bluetooth: hci1: command tx timeout [ 220.179386][T10357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.199324][T10357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.218672][T10441] netlink: 'syz.1.1301': attribute type 20 has an invalid length. [ 220.230892][T10443] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1301'. [ 220.234103][T10357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.260675][T10357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.267684][T10357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.294014][T10357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.328846][T10324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.392896][T10301] veth0_vlan: entered promiscuous mode [ 220.414489][T10324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.432071][T10324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.490540][ T5859] Bluetooth: hci0: command tx timeout [ 220.527130][T10357] hsr_slave_0: entered promiscuous mode [ 220.549188][T10357] hsr_slave_1: entered promiscuous mode [ 220.561671][T10357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.569389][T10357] Cannot create hsr debugfs directory [ 220.604053][T10335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.632120][T10324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.662856][T10301] veth1_vlan: entered promiscuous mode [ 220.730361][ T5859] Bluetooth: hci3: command tx timeout [ 220.742442][T10335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.866970][T10335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.009522][T10335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.221370][T10301] veth0_macvtap: entered promiscuous mode [ 221.258969][T10301] veth1_macvtap: entered promiscuous mode [ 221.298020][ T5859] Bluetooth: hci2: command tx timeout [ 221.445018][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.516316][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.545972][T10335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.575515][T10301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.596803][T10301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.606461][T10301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.616054][T10301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.666061][T10357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.694793][T10335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.758621][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.817309][T10357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.833558][T10335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.846835][T10335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.916573][T10468] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1308'. [ 221.971541][T10357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.012948][T10324] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.087917][T10357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.124890][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.132151][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.186000][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.193263][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.237431][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.246223][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.255368][ T5859] Bluetooth: hci1: command tx timeout [ 222.395957][T10324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.460875][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.468164][T10357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.476292][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.491381][T10357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.551178][T10357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.578311][T10357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.664549][T10335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.811479][ T5859] Bluetooth: hci3: command tx timeout [ 222.833064][T10335] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.905424][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.912714][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.022381][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.030059][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.123646][T10324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.329278][T10357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.371760][ T5859] Bluetooth: hci2: command tx timeout [ 223.415581][T10357] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.452695][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.459870][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.498867][T10324] veth0_vlan: entered promiscuous mode [ 223.542038][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.549325][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.608475][T10324] veth1_vlan: entered promiscuous mode [ 223.683426][T10335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.746961][T10324] veth0_macvtap: entered promiscuous mode [ 223.763716][T10324] veth1_macvtap: entered promiscuous mode [ 223.910769][T10324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.992787][T10324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.049640][T10335] veth0_vlan: entered promiscuous mode [ 224.086574][T10324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.116738][T10324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.145205][T10324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.171354][T10324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.273020][T10335] veth1_vlan: entered promiscuous mode [ 224.317883][T10357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.536119][T10335] veth0_macvtap: entered promiscuous mode [ 224.604585][T10335] veth1_macvtap: entered promiscuous mode [ 224.635691][ T6167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.662161][ T6167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.690972][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.701148][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.709409][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.720554][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.729382][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.779717][T10335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.860684][T10335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.896595][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.910335][ T5859] Bluetooth: hci3: command tx timeout [ 224.917656][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.928284][T10335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.937936][T10335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.947919][T10335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.962219][T10335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.350414][ T6163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.358809][ T6163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.569228][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.609736][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.636998][T10512] chnl_net:caif_netlink_parms(): no params data found [ 225.684614][T10357] veth0_vlan: entered promiscuous mode [ 225.754391][T10357] veth1_vlan: entered promiscuous mode [ 226.004007][T10512] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.013757][T10512] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.022690][T10512] bridge_slave_0: entered allmulticast mode [ 226.031323][T10512] bridge_slave_0: entered promiscuous mode [ 226.041123][T10512] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.048797][T10512] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.056987][T10512] bridge_slave_1: entered allmulticast mode [ 226.065531][T10512] bridge_slave_1: entered promiscuous mode [ 226.238693][T10512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.256164][T10357] veth0_macvtap: entered promiscuous mode [ 226.304407][T10512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.374078][T10357] veth1_macvtap: entered promiscuous mode [ 226.476166][T10512] team0: Port device team_slave_0 added [ 226.529041][T10512] team0: Port device team_slave_1 added [ 226.622977][T10512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.640931][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.670295][T10512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.691723][T10357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.726219][T10512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.747962][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.781579][T10512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.811164][ T5859] Bluetooth: hci0: command tx timeout [ 226.851527][T10357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.884745][T10357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.920200][T10357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.928951][T10357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.948503][T10357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.948519][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.979163][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.987635][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.010235][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.022607][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.046674][T10512] hsr_slave_0: entered promiscuous mode [ 227.093529][T10512] hsr_slave_1: entered promiscuous mode [ 227.111750][T10512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.127919][T10512] Cannot create hsr debugfs directory [ 227.685250][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.709800][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.727645][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.736416][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.745726][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.892889][ T6163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.920583][ T6163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.977927][T10546] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 227.978234][T10512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.996879][T10546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.048940][T10546] lo: left allmulticast mode [ 228.055612][T10546] tunl0: left promiscuous mode [ 228.061923][T10546] tunl0: left allmulticast mode [ 228.067122][T10546] gre0: left promiscuous mode [ 228.078696][T10546] gre0: left allmulticast mode [ 228.084005][T10546] gretap0: left promiscuous mode [ 228.089115][T10546] gretap0: left allmulticast mode [ 228.173570][T10546] wg2: left promiscuous mode [ 228.178472][T10546] wg2: left allmulticast mode [ 228.262885][T10546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.355385][T10512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.408982][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 228.460622][T10512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.526834][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.548259][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.618981][T10512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.898810][ T5859] Bluetooth: hci0: command tx timeout [ 228.909492][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 229.047431][T10528] chnl_net:caif_netlink_parms(): no params data found [ 229.056090][ T5859] Bluetooth: hci1: command tx timeout [ 229.403974][T10541] chnl_net:caif_netlink_parms(): no params data found [ 229.574436][T10512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.606908][T10512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.714281][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.725288][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.733773][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.744213][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.755052][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.773403][ T51] Bluetooth: hci2: command tx timeout [ 229.793351][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 229.802888][T10512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.814122][T10575] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1323'. [ 229.965678][T10512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.995283][T10528] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.003515][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.011833][T10528] bridge_slave_0: entered allmulticast mode [ 230.020532][T10528] bridge_slave_0: entered promiscuous mode [ 230.094271][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.102149][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.119779][T10528] bridge_slave_1: entered allmulticast mode [ 230.145337][T10528] bridge_slave_1: entered promiscuous mode [ 230.188315][T10541] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.196093][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.204105][T10541] bridge_slave_0: entered allmulticast mode [ 230.212804][T10541] bridge_slave_0: entered promiscuous mode [ 230.269085][T10528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.278594][T10541] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.296120][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.304500][T10541] bridge_slave_1: entered allmulticast mode [ 230.313947][T10541] bridge_slave_1: entered promiscuous mode [ 230.371233][T10528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.502917][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.534731][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.596479][T10528] team0: Port device team_slave_0 added [ 230.625423][T10528] team0: Port device team_slave_1 added [ 230.727439][T10600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1328'. [ 230.737992][T10600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1328'. [ 230.761656][T10541] team0: Port device team_slave_0 added [ 230.804600][T10528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.818602][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.858987][T10528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.889044][T10541] team0: Port device team_slave_1 added [ 230.924804][T10528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.933554][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.960706][T10528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.971857][ T5859] Bluetooth: hci0: command tx timeout [ 231.028681][T10541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.036121][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.063048][T10541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.084756][T10604] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 231.092894][T10604] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.130170][ T5859] Bluetooth: hci1: command tx timeout [ 231.161631][T10541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.168702][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.198261][T10541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.324875][T10528] hsr_slave_0: entered promiscuous mode [ 231.333613][T10528] hsr_slave_1: entered promiscuous mode [ 231.340665][T10528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.348383][T10528] Cannot create hsr debugfs directory [ 231.521855][T10541] hsr_slave_0: entered promiscuous mode [ 231.532145][T10541] hsr_slave_1: entered promiscuous mode [ 231.541932][T10541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.549656][T10541] Cannot create hsr debugfs directory [ 231.851013][ T5859] Bluetooth: hci2: command tx timeout [ 231.851108][ T51] Bluetooth: hci3: command tx timeout [ 231.864045][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.887744][T10617] team0: Cannot enslave team device to itself [ 231.909673][T10571] chnl_net:caif_netlink_parms(): no params data found [ 232.319341][T10512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.384534][T10528] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.518825][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.540616][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.548098][T10571] bridge_slave_0: entered allmulticast mode [ 232.572346][T10571] bridge_slave_0: entered promiscuous mode [ 232.628245][T10528] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.665174][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.676816][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.687938][T10571] bridge_slave_1: entered allmulticast mode [ 232.698937][T10571] bridge_slave_1: entered promiscuous mode [ 232.720491][T10512] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.763670][T10528] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.884920][T10528] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.924508][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.964756][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.990713][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.998258][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.051187][ T51] Bluetooth: hci0: command tx timeout [ 233.102739][T10571] team0: Port device team_slave_0 added [ 233.114146][T10571] team0: Port device team_slave_1 added [ 233.210459][ T51] Bluetooth: hci1: command tx timeout [ 233.230899][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 233.244167][T10541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.304645][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.311918][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.351301][T10650] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1343'. [ 233.366052][T10651] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1343'. [ 233.369302][T10541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.396185][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.404167][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.434517][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.448413][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.467053][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.493619][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.574308][T10541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.705296][T10541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.749839][T10657] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1345'. [ 233.758915][T10571] hsr_slave_0: entered promiscuous mode [ 233.775522][T10571] hsr_slave_1: entered promiscuous mode [ 233.788337][T10571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.796776][T10571] Cannot create hsr debugfs directory [ 233.930702][ T51] Bluetooth: hci3: command tx timeout [ 233.936679][ T5859] Bluetooth: hci2: command tx timeout [ 234.218066][T10528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.230292][T10528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.243880][T10528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.259483][T10528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.437494][T10571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.470456][T10541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 234.505517][T10512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.531869][T10541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 234.574999][T10571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.632979][T10541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.661339][T10541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.712053][T10571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.836781][T10571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.938457][T10512] veth0_vlan: entered promiscuous mode [ 234.999699][T10512] veth1_vlan: entered promiscuous mode [ 235.034123][T10685] netlink: 'syz.1.1348': attribute type 23 has an invalid length. [ 235.213560][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.287600][T10571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.295249][ T51] Bluetooth: hci1: command tx timeout [ 235.322751][T10512] veth0_macvtap: entered promiscuous mode [ 235.334917][T10512] veth1_macvtap: entered promiscuous mode [ 235.347938][T10571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.388312][T10571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.442082][T10571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.528790][T10528] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.562245][T10512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.586367][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.593617][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.645567][T10512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.686462][T10512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.701490][T10512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.734954][T10512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.744493][T10512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.766237][T10541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.779304][T10703] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1352'. [ 235.779683][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.796070][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.888455][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.977981][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.985236][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.020247][ T51] Bluetooth: hci3: command tx timeout [ 236.025744][ T51] Bluetooth: hci2: command tx timeout [ 236.034106][ T1321] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.052648][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.059851][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.067565][ T1321] ------------[ cut here ]------------ [ 236.076663][ T1321] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 236.099350][ T1321] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.188089][ T1321] CPU: 0 UID: 0 PID: 1321 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 236.188119][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.188132][ T1321] Workqueue: events_unbound cfg80211_wiphy_work [ 236.188175][ T1321] Call Trace: [ 236.188184][ T1321] [ 236.188193][ T1321] dump_stack_lvl+0x189/0x250 [ 236.188222][ T1321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.188241][ T1321] ? __pfx__printk+0x10/0x10 [ 236.188275][ T1321] ubsan_epilogue+0xa/0x40 [ 236.188298][ T1321] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 236.188323][ T1321] ieee80211_request_ibss_scan+0x600/0x8b0 [ 236.188363][ T1321] ieee80211_ibss_work+0xd85/0x1060 [ 236.188387][ T1321] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.188415][ T1321] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 236.188440][ T1321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 236.188463][ T1321] ? kcov_remote_stop+0x17e/0x6d0 [ 236.188478][ T1321] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 236.188508][ T1321] ? skb_dequeue+0x10e/0x150 [ 236.188524][ T1321] ? ieee80211_iface_work+0xcd4/0xfe0 [ 236.188544][ T1321] ? ieee80211_iface_work+0xf39/0xfe0 [ 236.188572][ T1321] cfg80211_wiphy_work+0x2df/0x460 [ 236.188593][ T1321] ? process_scheduled_works+0x9ef/0x17b0 [ 236.188614][ T1321] process_scheduled_works+0xade/0x17b0 [ 236.188661][ T1321] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.188699][ T1321] worker_thread+0x8a0/0xda0 [ 236.188724][ T1321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 236.188758][ T1321] ? __kthread_parkme+0x7b/0x200 [ 236.188790][ T1321] kthread+0x70e/0x8a0 [ 236.188821][ T1321] ? __pfx_worker_thread+0x10/0x10 [ 236.188844][ T1321] ? __pfx_kthread+0x10/0x10 [ 236.188874][ T1321] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.188900][ T1321] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.188927][ T1321] ? __pfx_kthread+0x10/0x10 [ 236.188955][ T1321] ret_from_fork+0x3fc/0x770 [ 236.188979][ T1321] ? __pfx_ret_from_fork+0x10/0x10 [ 236.189007][ T1321] ? __switch_to_asm+0x39/0x70 [ 236.189032][ T1321] ? __switch_to_asm+0x33/0x70 [ 236.189055][ T1321] ? __pfx_kthread+0x10/0x10 [ 236.189084][ T1321] ret_from_fork_asm+0x1a/0x30 [ 236.189129][ T1321] [ 236.189419][ T1321] ---[ end trace ]--- [ 236.580407][ T1321] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 236.587677][ T1321] CPU: 0 UID: 0 PID: 1321 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 236.599962][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.610054][ T1321] Workqueue: events_unbound cfg80211_wiphy_work [ 236.616320][ T1321] Call Trace: [ 236.619614][ T1321] [ 236.622562][ T1321] dump_stack_lvl+0x99/0x250 [ 236.627181][ T1321] ? __asan_memcpy+0x40/0x70 [ 236.631807][ T1321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.637038][ T1321] ? __pfx__printk+0x10/0x10 [ 236.641683][ T1321] panic+0x2db/0x790 [ 236.645627][ T1321] ? __pfx_panic+0x10/0x10 [ 236.650063][ T1321] ? _printk+0xcf/0x120 [ 236.654255][ T1321] ? __pfx__printk+0x10/0x10 [ 236.658872][ T1321] check_panic_on_warn+0x89/0xb0 [ 236.663843][ T1321] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 236.669585][ T1321] ieee80211_request_ibss_scan+0x600/0x8b0 [ 236.675432][ T1321] ieee80211_ibss_work+0xd85/0x1060 [ 236.680656][ T1321] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.685878][ T1321] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 236.691810][ T1321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 236.698174][ T1321] ? kcov_remote_stop+0x17e/0x6d0 [ 236.703219][ T1321] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 236.708885][ T1321] ? skb_dequeue+0x10e/0x150 [ 236.713491][ T1321] ? ieee80211_iface_work+0xcd4/0xfe0 [ 236.718968][ T1321] ? ieee80211_iface_work+0xf39/0xfe0 [ 236.724365][ T1321] cfg80211_wiphy_work+0x2df/0x460 [ 236.729519][ T1321] ? process_scheduled_works+0x9ef/0x17b0 [ 236.735263][ T1321] process_scheduled_works+0xade/0x17b0 [ 236.740963][ T1321] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.746996][ T1321] worker_thread+0x8a0/0xda0 [ 236.751698][ T1321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 236.758157][ T1321] ? __kthread_parkme+0x7b/0x200 [ 236.763124][ T1321] kthread+0x70e/0x8a0 [ 236.767243][ T1321] ? __pfx_worker_thread+0x10/0x10 [ 236.772414][ T1321] ? __pfx_kthread+0x10/0x10 [ 236.777168][ T1321] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.782488][ T1321] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.787716][ T1321] ? __pfx_kthread+0x10/0x10 [ 236.792348][ T1321] ret_from_fork+0x3fc/0x770 [ 236.796964][ T1321] ? __pfx_ret_from_fork+0x10/0x10 [ 236.802104][ T1321] ? __switch_to_asm+0x39/0x70 [ 236.806884][ T1321] ? __switch_to_asm+0x33/0x70 [ 236.811665][ T1321] ? __pfx_kthread+0x10/0x10 [ 236.816295][ T1321] ret_from_fork_asm+0x1a/0x30 [ 236.821101][ T1321] [ 236.824393][ T1321] Kernel Offset: disabled [ 236.828806][ T1321] Rebooting in 86400 seconds..