last executing test programs: 1m9.332413159s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ctinfo={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x1, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xed}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb62, 0x3, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5, 0x5, 0xffffb657, 0x2}}]}, {0x2b, 0x6, "04355e6e1c37aa513d1563898e04594d171c4f94e1ca9e5486a1b4b35b0ff79e95bf3a2d47f990"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xb}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) 58.778817657s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ctinfo={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x1, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xed}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb62, 0x3, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5, 0x5, 0xffffb657, 0x2}}]}, {0x2b, 0x6, "04355e6e1c37aa513d1563898e04594d171c4f94e1ca9e5486a1b4b35b0ff79e95bf3a2d47f990"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xb}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) 49.566897966s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ctinfo={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x1, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xed}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb62, 0x3, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5, 0x5, 0xffffb657, 0x2}}]}, {0x2b, 0x6, "04355e6e1c37aa513d1563898e04594d171c4f94e1ca9e5486a1b4b35b0ff79e95bf3a2d47f990"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xb}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) 47.678496924s ago: executing program 4 (id=1434): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) socket$igmp(0x2, 0x3, 0x2) 47.564727746s ago: executing program 4 (id=1436): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) close(0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x4}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x40}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x40}, 0x1, 0xba01}, 0x0) 46.75683615s ago: executing program 4 (id=1439): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r2 = accept4$unix(r1, 0x0, &(0x7f0000000100), 0x100000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) poll(&(0x7f0000000180)=[{r4, 0x206}, {r2, 0x4412}, {r5, 0x9000}], 0x3, 0x10) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @local, 0x3}, 0x10) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000280)=0x7ff) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x7, 0x8, 0x1, @remote, @empty, 0x7, 0x7, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x1c, 0x4a75, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x40, 0x3b98000, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xc, 0x8, {{0x9, 0x4, 0x3, 0x3e, 0x24, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x30}, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x88, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x3, 0x8, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote, {[@noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000740)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x88, 0x7ff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x20, 0x800, 0xfffffff7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3fc, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4008091}, 0x400c8c1) accept4$phonet_pipe(r7, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x80000) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r18, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r18, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x380, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000001000), 0x4) write$cgroup_pid(r7, &(0x7f0000001040)=0xffffffffffffffff, 0x12) 35.63266677s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ctinfo={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x1, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xed}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb62, 0x3, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5, 0x5, 0xffffb657, 0x2}}]}, {0x2b, 0x6, "04355e6e1c37aa513d1563898e04594d171c4f94e1ca9e5486a1b4b35b0ff79e95bf3a2d47f990"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xb}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) 34.491681099s ago: executing program 4 (id=1439): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r2 = accept4$unix(r1, 0x0, &(0x7f0000000100), 0x100000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) poll(&(0x7f0000000180)=[{r4, 0x206}, {r2, 0x4412}, {r5, 0x9000}], 0x3, 0x10) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @local, 0x3}, 0x10) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000280)=0x7ff) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x7, 0x8, 0x1, @remote, @empty, 0x7, 0x7, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x1c, 0x4a75, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x40, 0x3b98000, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xc, 0x8, {{0x9, 0x4, 0x3, 0x3e, 0x24, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x30}, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x88, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x3, 0x8, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote, {[@noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000740)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x88, 0x7ff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x20, 0x800, 0xfffffff7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3fc, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4008091}, 0x400c8c1) accept4$phonet_pipe(r7, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x80000) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r18, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r18, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x380, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000001000), 0x4) write$cgroup_pid(r7, &(0x7f0000001040)=0xffffffffffffffff, 0x12) 20.037080711s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ctinfo={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x1, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xed}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb62, 0x3, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5, 0x5, 0xffffb657, 0x2}}]}, {0x2b, 0x6, "04355e6e1c37aa513d1563898e04594d171c4f94e1ca9e5486a1b4b35b0ff79e95bf3a2d47f990"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xb}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) 18.662713867s ago: executing program 4 (id=1439): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r2 = accept4$unix(r1, 0x0, &(0x7f0000000100), 0x100000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) poll(&(0x7f0000000180)=[{r4, 0x206}, {r2, 0x4412}, {r5, 0x9000}], 0x3, 0x10) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @local, 0x3}, 0x10) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000280)=0x7ff) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x7, 0x8, 0x1, @remote, @empty, 0x7, 0x7, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x1c, 0x4a75, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x40, 0x3b98000, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xc, 0x8, {{0x9, 0x4, 0x3, 0x3e, 0x24, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x30}, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x88, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x3, 0x8, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote, {[@noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000740)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x88, 0x7ff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x20, 0x800, 0xfffffff7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3fc, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4008091}, 0x400c8c1) accept4$phonet_pipe(r7, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x80000) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r18, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r18, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x380, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000001000), 0x4) write$cgroup_pid(r7, &(0x7f0000001040)=0xffffffffffffffff, 0x12) 5.018551535s ago: executing program 3 (id=1755): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) (async) close(r0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x40}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000080) 4.794527421s ago: executing program 4 (id=1439): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r2 = accept4$unix(r1, 0x0, &(0x7f0000000100), 0x100000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) poll(&(0x7f0000000180)=[{r4, 0x206}, {r2, 0x4412}, {r5, 0x9000}], 0x3, 0x10) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @local, 0x3}, 0x10) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000280)=0x7ff) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x7, 0x8, 0x1, @remote, @empty, 0x7, 0x7, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x1c, 0x4a75, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x40, 0x3b98000, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xc, 0x8, {{0x9, 0x4, 0x3, 0x3e, 0x24, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x30}, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x88, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x3, 0x8, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote, {[@noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000740)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x88, 0x7ff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x20, 0x800, 0xfffffff7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3fc, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4008091}, 0x400c8c1) accept4$phonet_pipe(r7, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x80000) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r18, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r18, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x380, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000001000), 0x4) write$cgroup_pid(r7, &(0x7f0000001040)=0xffffffffffffffff, 0x12) 4.786187135s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ctinfo={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x1, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xed}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb62, 0x3, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x5, 0x5, 0xffffb657, 0x2}}]}, {0x2b, 0x6, "04355e6e1c37aa513d1563898e04594d171c4f94e1ca9e5486a1b4b35b0ff79e95bf3a2d47f990"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xb}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) 4.772336902s ago: executing program 3 (id=1758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) syz_emit_ethernet(0xda, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf02b4e2a3bdb4aa40b248a"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0) 3.758657401s ago: executing program 0 (id=1759): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x97ffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 2.192119103s ago: executing program 3 (id=1761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = accept4(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80, 0x80000) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000300)=0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "c653eb788ca744ab49b0bc8b7c38c5386a9f8fc329b0c08aa1974b55df51358e", "becc2b963fc758b093f0c3162721cc2c6db0e11fe93cb921e31b7afc9848f9f8", "9d5e255e876cef6a5e8b322ceb9f9f59f92f7b7e5f4cb64b0dba0d27e79083f6", "f1c9a32e2ff71a89cd1b6471db6af48500491adb8c4b1c0a8fdf46f4f3168fee", "6a5ac82f1f76e71cf5cc5d665c6006929a314c0c4e1c2a4c43afe8074197b481", "11f18e6d4f5d4f4e717b780f", 0x200, 0xc, 0x8, 0x9, 0xd1ba}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000280)=0x24) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cd6e9709eb0"}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='THAWED\x00', 0x7) 2.190299493s ago: executing program 0 (id=1762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="d95ca6bf8726951ee388cee0b4cebd93753d6f648eeaee2f36b22f7bb7591a6f7350a3dee1e77c7d43eab4d1649d591a2d39065d21e0a1b46315e391b2c57e009d363fad43bdcfb9154a8a4aa894fde282494f45c3741b1c5821e2e50e608fe1b5ace3d4da3c60bfdf94b25a4af29d0835bdbcae160026809ad3b711bc0def26e2a871c9043077847a035aaafe9978233f03d8b17d9d085dc91eca7857d802491773e08598835f439aa7a108703088e8dbbc07b0842b4f2e8cb9658a4b1264e42bc17edfbbfc46876544f252929b767044014ca521ed298c793c6aeb205327467bf066999dbc44f5803d55cd7c8463f9816d80707186f26fe95ae6dca5", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x40000}, 0x4008140) 1.250254454s ago: executing program 3 (id=1763): socket(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0x2}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008009c48cdc10500080000003e"], 0x44}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x104, @mcast2, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="59d7b55d416d7e3aae073509dd", 0xd}], 0x1}}], 0x2, 0x44) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffff000}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000680600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0e2000090780000fe04f9892212601ccfbb8e35117787e5544fb88b33670013120a40ed3baebd20a8d088cd171068ede8fe13f98959bf8f4b8e23c2652d5bc0368c1800110d347a84e7e481eb2a9f0d1102040000fe04f989000000"], 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) 1.208261129s ago: executing program 2 (id=1764): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) close(r3) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r9, 0x0, 0x4e, 0x20000800, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) 1.086458014s ago: executing program 0 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002f007a000000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000c0000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002f007a000000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000c0000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) 966.509414ms ago: executing program 3 (id=1766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) sendmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}}], 0x2, 0x801) 922.978272ms ago: executing program 2 (id=1767): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r1, r4}) 868.820059ms ago: executing program 0 (id=1768): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x8081) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x8081) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)) (async) socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) unshare(0x20000400) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x12, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newqdisc={0x470, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x9, 0x3, 0x38, 0x8d, 0xffffffe0, 0x8, 0x4, 0x0, 0x1, 0x4, 0xfffff4bf, 0xa, 0x6, 0x6, 0x6, 0x6e5, 0x5, 0x9, 0x4, 0x401, 0x7ff, 0x8, 0x0, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0xf8, 0x3, 0x4, 0x2, 0x9e21, 0x7ecf, 0x2, 0xc, 0x8977, 0x4312, 0x5, 0x80000000, 0xa, 0x1, 0x4, 0xd9, 0x4, 0x3, 0x3, 0x2d, 0x7a8, 0x7, 0x0, 0x1000, 0x0, 0x1, 0xe, 0xfffffffb, 0x8000, 0x27, 0xffffffff, 0xffff, 0x5, 0x5, 0xfffffffe, 0x5, 0xe, 0x101, 0x9677, 0xffffffa2, 0x8000, 0xeeec, 0x60, 0xe35, 0x9, 0xfee, 0x81, 0x400, 0x81, 0x3, 0x3362, 0x8, 0x9b6, 0x400, 0x5, 0x9, 0x7fffffff, 0x1000, 0xe6d, 0x7fffffff, 0x4, 0x1, 0x7, 0xff, 0x6, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x3ff, 0xe2, 0x1, 0x8, 0x6, 0x0, 0x7fffffff, 0xfffffff9, 0x140, 0x2, 0x7, 0x81, 0x7, 0x5, 0x6, 0x69b, 0x9, 0x7fffffff, 0x7, 0xf, 0xd3bd, 0x453, 0x7, 0x8, 0x4, 0xf, 0x6, 0x400, 0x7, 0x7ff, 0x4, 0x0, 0x9, 0xdf60, 0x7, 0x10000000, 0xd, 0xfffffffc, 0x80000001, 0xfffffff8, 0xf, 0x7ff, 0x6, 0x2c8, 0x40, 0x9, 0xfffffffe, 0x0, 0x3, 0x9603, 0x719b, 0x5, 0x7, 0x10000, 0xfff, 0x5, 0x6, 0x6, 0x20000, 0xfffffff7, 0x49d, 0xf, 0x7fffffff, 0x200, 0x6, 0x0, 0x7, 0x6, 0xa, 0x2f28, 0x10000, 0x400, 0x8001, 0x6, 0x5, 0x5a2, 0x7, 0x800, 0x2, 0xaa, 0x7348fb54, 0x93a8, 0x5, 0x8000, 0x80000001, 0xfff, 0x5, 0x5, 0x3, 0xc, 0xc5, 0x4, 0x4, 0x7, 0x8001, 0x3, 0xfffffff8, 0x3ff, 0xff, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x1be, 0xffffa9ab, 0x5868b5c9, 0x401, 0x1, 0x0, 0x3, 0x9, 0x7f, 0x200, 0x4b4975b4, 0xf39, 0x1, 0x101, 0x800, 0x4, 0x1000, 0xc, 0x80, 0x1dff, 0xc, 0x7, 0x8, 0xb390, 0x7f, 0xff, 0x8, 0x0, 0x8001, 0x1, 0x2, 0xddf5, 0x2, 0x5, 0xfffc0000, 0x6541, 0x5, 0x9, 0x69c, 0x2, 0x2, 0x7, 0x8001, 0x0, 0x8, 0x400, 0xfff, 0x474861a7, 0x8, 0x3, 0xd, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x2, 0x1, 0x8d}, {0x7, 0x0, 0x64, 0x40, 0x424, 0xe}, 0x0, 0x1, 0xdd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x97bdea2cc2d43cda}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0008004503005cffff0000002f907800000000e0000001248022eb000000000004000510000800000086dd88a888be86ddffff10fe00000100000000000000080022eb000000002000000002000000000000c8260000000800655800000000"], 0x0) 786.776421ms ago: executing program 3 (id=1769): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private2, 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 709.212426ms ago: executing program 2 (id=1770): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x330, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x80000}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x3}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x258, 0x1, [@m_gact={0x9c, 0x16, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x750, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x121, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x3, 0xffffffffffffffff, 0x1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfffffff8, 0x7, 0xb, 0x100}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2128, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18d9, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x206f, 0xffffffffbfffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x1b8, 0xb, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x4, 0x9, 0x5c}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x29b11b42, 0x4fde, 0x6, 0xe, 0xc37}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x6, 0x6, 0x8, 0x17a5}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0xffffffff, 0x0, 0x4b2d0548}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9a52, 0xd, 0x0, 0xd3, 0x101}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x8, 0x10000}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6645, 0x98b8, 0x4, 0x3, 0xe}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3, 0xffffffffffffffff, 0xfff, 0x6}, 0x7e}}]}, {0xaa, 0x6, "b606757bb18e77bb5ad3098ebf68285831663b489cda3cce119a5151e3252153bbc2a0be36a84afcee75231532155d2f96e1d1682a459ea7ec7a4e12a64f8a390044475e2526e354037dbc8d566dba4e3b93eb673b076fe2c12ef2193e86f8cb760919bcb028947f497b73b3895bd8633835917e41a478e496f25c32e46920b16b4a0605f091a2fa3897eef285665be8067730606d3699639bdab0cfcc03926e3c9bf5dd1239"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x330}}, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a00000014001a80100004800c000280"], 0x34}}, 0x0) 406.816369ms ago: executing program 2 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x23}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000147fbf728803319d034c204a13a95a45e24726673d037aa07722224d81be542daadac5836934d201c17f793204c6c2ba255919b444e9693cd0fcb7f354f2b81482fc04d494d6194da009258b9809a2868ebbf0a46bc4c349a9e93ab93d06f7c70ad8349a5940086ffc7ae277bdfc9dc72"], 0x7c}}, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 270.674275ms ago: executing program 0 (id=1772): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(r0, 0x6) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 236.909611ms ago: executing program 2 (id=1773): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x29}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x98, 0x0, 0x0, 0x0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'virt_wifi0\x00', {}, {}, 0x6, 0x0, 0x4c}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) socket$netlink(0x10, 0x3, 0x6) 189.679513ms ago: executing program 0 (id=1774): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050026bd7000fddbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="24002380060012000700000005001100"], 0x40}}, 0x40000) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="0081b3", 0x3}], 0x1) shutdown(r2, 0x0) 0s ago: executing program 2 (id=1775): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000481}, 0x4040810) kernel console output (not intermixed with test programs): 19] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.457814][ T6519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.909956][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.933135][ T9033] tipc: Started in network mode [ 177.939128][ T9033] tipc: Node identity , cluster identity 4711 [ 177.945925][ T9033] tipc: Failed to obtain node identity [ 177.951476][ T9033] tipc: Enabling of bearer rejected, failed to enable media [ 178.104503][ T8855] veth0_vlan: entered promiscuous mode [ 178.135243][ T8855] veth1_vlan: entered promiscuous mode [ 178.174289][ T8855] veth0_macvtap: entered promiscuous mode [ 178.185231][ T8855] veth1_macvtap: entered promiscuous mode [ 178.220347][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.248056][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.291409][ T8855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.311141][ T8855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.320033][ T8855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.328906][ T8855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.463389][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.494032][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.569760][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.594275][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.687250][ T6080] IPVS: starting estimator thread 0... [ 178.693642][ T9055] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.790298][ T9056] IPVS: using max 27 ests per chain, 64800 per kthread [ 179.009123][ T9073] Cannot find add_set index 0 as target [ 179.021671][ T9073] Cannot find add_set index 0 as target [ 179.224946][ T9088] netlink: 'syz.3.746': attribute type 12 has an invalid length. [ 179.387450][ T9100] netlink: 'syz.3.751': attribute type 30 has an invalid length. [ 179.902305][ T9126] ip6gretap0: entered promiscuous mode [ 179.942048][ T9126] macvtap1: entered promiscuous mode [ 179.974343][ T9126] macvtap1: entered allmulticast mode [ 179.979789][ T9126] ip6gretap0: entered allmulticast mode [ 180.047329][ T6534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.070173][ T9149] x_tables: duplicate underflow at hook 1 [ 181.072518][ T6534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.124454][ T9148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.262999][ T9158] __nla_validate_parse: 9 callbacks suppressed [ 181.263017][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 181.301248][ T6534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.568307][ T6534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.670752][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 181.686989][ T9177] netlink: 11 bytes leftover after parsing attributes in process `syz.3.771'. [ 181.697841][ T9177] netlink: 11 bytes leftover after parsing attributes in process `syz.3.771'. [ 181.725218][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 181.760701][ T9174] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 181.838785][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.4.770'. [ 182.011844][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 182.038917][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 182.089039][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.104596][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.115660][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.127500][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.139022][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.187973][ T9196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.200405][ T9196] bond0: (slave bond1): Enslaving as an active interface with a down link [ 182.260440][ T6534] bridge_slave_1: left allmulticast mode [ 182.270696][ T6534] bridge_slave_1: left promiscuous mode [ 182.297956][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.351292][ T6534] bridge_slave_0: left allmulticast mode [ 182.359464][ T6534] bridge_slave_0: left promiscuous mode [ 182.373360][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.689596][ T6534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.700750][ T6534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.711334][ T6534] bond0 (unregistering): Released all slaves [ 183.200452][ T6534] hsr_slave_0: left promiscuous mode [ 183.208578][ T6534] hsr_slave_1: left promiscuous mode [ 183.217463][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.227570][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.238498][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.247166][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.275516][ T6534] veth1_macvtap: left promiscuous mode [ 183.281242][ T6534] veth0_macvtap: left promiscuous mode [ 183.287933][ T6534] veth1_vlan: left promiscuous mode [ 183.293402][ T6534] veth0_vlan: left promiscuous mode [ 183.670314][ T6534] team0 (unregistering): Port device team_slave_1 removed [ 183.716106][ T6534] team0 (unregistering): Port device team_slave_0 removed [ 184.223934][ T5839] Bluetooth: hci1: command tx timeout [ 184.271295][ T9194] chnl_net:caif_netlink_parms(): no params data found [ 184.340208][ T9246] netlink: 84 bytes leftover after parsing attributes in process `syz.4.787'. [ 184.363090][ T9246] netlink: 'syz.4.787': attribute type 8 has an invalid length. [ 184.406782][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 184.627257][ T9261] veth0: entered promiscuous mode [ 184.650335][ T9260] veth0: left promiscuous mode [ 184.839224][ T9275] netlink: 'syz.0.797': attribute type 29 has an invalid length. [ 184.852920][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.867756][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.876458][ T9194] bridge_slave_0: entered allmulticast mode [ 184.892449][ T9194] bridge_slave_0: entered promiscuous mode [ 184.907200][ T9275] netlink: 'syz.0.797': attribute type 29 has an invalid length. [ 184.920497][ T9284] netlink: 'syz.0.797': attribute type 29 has an invalid length. [ 184.944053][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.951215][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.980088][ T9194] bridge_slave_1: entered allmulticast mode [ 184.988590][ T9194] bridge_slave_1: entered promiscuous mode [ 184.998015][ T9286] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 185.015336][ T9286] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 185.034242][ T9287] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 185.041927][ T9287] netlink: 'syz.4.798': attribute type 11 has an invalid length. [ 185.086257][ T9294] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 185.120602][ T9294] netlink: 'syz.4.798': attribute type 11 has an invalid length. [ 185.130217][ T9194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.178085][ T9194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.239426][ T9299] bond0: option use_carrier: invalid value (9) [ 185.301810][ T9297] syz_tun: entered promiscuous mode [ 185.322592][ T9194] team0: Port device team_slave_0 added [ 185.357434][ T9194] team0: Port device team_slave_1 added [ 185.476663][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.503914][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.535098][ T9194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.554734][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.571918][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.629404][ T9194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.666412][ T9314] tc_dump_action: action bad kind [ 185.852756][ T9194] hsr_slave_0: entered promiscuous mode [ 185.866486][ T9194] hsr_slave_1: entered promiscuous mode [ 186.303936][ T5839] Bluetooth: hci1: command tx timeout [ 186.429755][ T9358] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 186.490708][ T9348] veth5: entered promiscuous mode [ 186.501768][ T9348] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 186.649967][ T9367] __nla_validate_parse: 10 callbacks suppressed [ 186.649985][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 186.803140][ T9194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.818047][ T9194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.851459][ T9194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.923472][ T9194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.075369][ T9386] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.110996][ T9388] set match dimension is over the limit! [ 187.182903][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.336689][ T9194] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.397104][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.404358][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.483676][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.490938][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.766370][ T9413] netlink: 192 bytes leftover after parsing attributes in process `syz.3.840'. [ 187.835151][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 188.012951][ T9414] team0 (unregistering): Port device team_slave_0 removed [ 188.032864][ T9414] team0 (unregistering): Port device team_slave_1 removed [ 188.071697][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 188.207654][ T9437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.846'. [ 188.384678][ T5839] Bluetooth: hci1: command tx timeout [ 188.430129][ T9194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.479654][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 188.557001][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 188.734757][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 188.833569][ T9194] veth0_vlan: entered promiscuous mode [ 188.890711][ T9194] veth1_vlan: entered promiscuous mode [ 189.059017][ T9194] veth0_macvtap: entered promiscuous mode [ 189.095050][ T9194] veth1_macvtap: entered promiscuous mode [ 189.178701][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.247828][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.257254][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.860'. [ 189.290406][ T9194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.327465][ T9194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.339268][ T9194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.354881][ T9194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.480559][ T9496] validate_nla: 4 callbacks suppressed [ 189.480578][ T9496] netlink: 'syz.2.861': attribute type 39 has an invalid length. [ 189.662518][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.683313][ T9505] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 189.702160][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.748490][ T9506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.865'. [ 189.815253][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.839372][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.456946][ T6534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.547674][ T9543] Unsupported ieee802154 address type: 0 [ 190.579174][ T6534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.701730][ T6534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.849094][ T6534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.984623][ T6534] bridge_slave_1: left allmulticast mode [ 190.990317][ T6534] bridge_slave_1: left promiscuous mode [ 190.996928][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.007379][ T6534] bridge_slave_0: left allmulticast mode [ 191.013180][ T6534] bridge_slave_0: left promiscuous mode [ 191.019245][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.281807][ T6534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.292990][ T6534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.307077][ T6534] bond0 (unregistering): Released all slaves [ 191.576722][ T6534] hsr_slave_0: left promiscuous mode [ 191.631370][ T6534] hsr_slave_1: left promiscuous mode [ 191.654851][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.662301][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.676544][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.684239][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.709061][ T6534] veth1_macvtap: left promiscuous mode [ 191.714957][ T6534] veth0_macvtap: left promiscuous mode [ 191.720630][ T6534] veth1_vlan: left promiscuous mode [ 191.730399][ T9555] __nla_validate_parse: 69 callbacks suppressed [ 191.730414][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 191.731907][ T6534] veth0_vlan: left promiscuous mode [ 191.751746][ T9546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.769088][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 191.821688][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 191.831469][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 191.840529][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 192.016749][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.030421][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.041996][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.051524][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.061113][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.278759][ T6534] team0 (unregistering): Port device team_slave_1 removed [ 192.315063][ T6534] team0 (unregistering): Port device team_slave_0 removed [ 192.649971][ T9555] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.661311][ T9555] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.672527][ T9555] gretap1: entered promiscuous mode [ 192.680876][ T9555] gretap1: entered allmulticast mode [ 192.825007][ T9564] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.933660][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.886'. [ 193.064973][ T9576] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 193.119099][ T9578] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 193.271882][ T9561] chnl_net:caif_netlink_parms(): no params data found [ 193.578182][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.892'. [ 193.618105][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.634437][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.651929][ T9561] bridge_slave_0: entered allmulticast mode [ 193.672433][ T9561] bridge_slave_0: entered promiscuous mode [ 193.695078][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.702246][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.747858][ T9561] bridge_slave_1: entered allmulticast mode [ 193.768876][ T9561] bridge_slave_1: entered promiscuous mode [ 193.996457][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.040855][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.149911][ T5150] Bluetooth: hci1: command tx timeout [ 194.157365][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.181658][ T9626] netlink: 'syz.2.899': attribute type 20 has an invalid length. [ 194.199452][ T9627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.213447][ T9627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.225844][ T9619] syz_tun: left promiscuous mode [ 194.300562][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'. [ 194.316058][ T9630] netlink: 272 bytes leftover after parsing attributes in process `syz.0.901'. [ 194.325728][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 194.346554][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.367756][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.428040][ T9619] ï‰Oܼ: left promiscuous mode [ 194.465679][ T9640] x_tables: duplicate underflow at hook 2 [ 194.487706][ T9641] Driver unsupported XDP return value 0 on prog (id 235) dev N/A, expect packet loss! [ 194.560617][ T9619] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.570685][ T9619] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.580165][ T9619] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.590323][ T9619] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.630062][ T9619] veth5: left promiscuous mode [ 194.636898][ T9619] ip6gretap0: left allmulticast mode [ 194.642890][ T9619] macvtap1: left promiscuous mode [ 194.649267][ T9619] macvtap1: left allmulticast mode [ 194.658158][ T9619] gretap1: left promiscuous mode [ 194.663175][ T9619] gretap1: left allmulticast mode [ 194.785307][ T9561] team0: Port device team_slave_0 added [ 194.826427][ T9561] team0: Port device team_slave_1 added [ 194.984724][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.991801][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.034094][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.197289][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.205102][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.233715][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.534766][ T9561] hsr_slave_0: entered promiscuous mode [ 195.548417][ T9561] hsr_slave_1: entered promiscuous mode [ 195.655695][ T9685] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 196.224159][ T5150] Bluetooth: hci1: command tx timeout [ 196.322332][ T9720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.329860][ T9720] IPv6: NLM_F_CREATE should be set when creating new route [ 196.738556][ T9561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.792380][ T9561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.831359][ T9561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.835230][ T9742] __nla_validate_parse: 4 callbacks suppressed [ 196.835249][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'. [ 196.856746][ T9744] netlink: 80 bytes leftover after parsing attributes in process `syz.3.935'. [ 196.880003][ T9561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.880462][ T9744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.935'. [ 196.980476][ T9746] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 196.988763][ T9746] netlink: 'syz.2.934': attribute type 11 has an invalid length. [ 197.017323][ T9746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.181253][ T9762] Bluetooth: MGMT ver 1.23 [ 197.261267][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.293571][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.306737][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.314040][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.338876][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.346088][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.461075][ T9776] netlink: zone id is out of range [ 197.467103][ T9776] netlink: zone id is out of range [ 197.472244][ T9776] netlink: zone id is out of range [ 197.480210][ T9776] netlink: zone id is out of range [ 197.488600][ T9776] netlink: zone id is out of range [ 197.496624][ T9776] netlink: zone id is out of range [ 197.501777][ T9776] netlink: zone id is out of range [ 197.534053][ T9776] netlink: zone id is out of range [ 197.540897][ T9780] ipvlan1: left promiscuous mode [ 197.572138][ T9780] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 197.591980][ T9776] netlink: zone id is out of range [ 197.602860][ T9776] netlink: zone id is out of range [ 197.713292][ T9785] netlink: 'syz.3.946': attribute type 4 has an invalid length. [ 197.770422][ T9785] netlink: 'syz.3.946': attribute type 4 has an invalid length. [ 197.803042][ T9788] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 197.937877][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.072390][ T9561] veth0_vlan: entered promiscuous mode [ 198.105705][ T9561] veth1_vlan: entered promiscuous mode [ 198.177153][ T9561] veth0_macvtap: entered promiscuous mode [ 198.206127][ T9561] veth1_macvtap: entered promiscuous mode [ 198.279047][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.304314][ T5839] Bluetooth: hci1: command tx timeout [ 198.311227][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.360452][ T9561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.405492][ T9561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.422828][ T9561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.445419][ T9561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.473531][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.959'. [ 198.541008][ T9831] netlink: 'syz.0.961': attribute type 4 has an invalid length. [ 198.557642][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 198.590906][ T9832] netlink: 72 bytes leftover after parsing attributes in process `syz.4.960'. [ 198.755586][ T6534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.763442][ T6534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.832012][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.847912][ T9845] netlink: 176 bytes leftover after parsing attributes in process `syz.4.965'. [ 198.857979][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.188501][ T9867] netlink: 348 bytes leftover after parsing attributes in process `syz.2.973'. [ 199.238969][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 200.007463][ T9913] netlink: 'syz.0.988': attribute type 2 has an invalid length. [ 200.015531][ T9913] netlink: 'syz.0.988': attribute type 2 has an invalid length. [ 200.023454][ T9913] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 200.385152][ T5847] Bluetooth: hci1: command 0x0419 tx timeout [ 200.549150][ T9928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.064771][ T9959] gretap0: entered promiscuous mode [ 201.095843][ T9962] xt_TCPMSS: Only works on TCP SYN packets [ 201.269852][ T6519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.486924][ T6519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.564065][ T6519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.627574][ T6519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.730061][ T6519] bridge_slave_1: left allmulticast mode [ 201.736696][ T6519] bridge_slave_1: left promiscuous mode [ 201.742615][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.763823][ T6519] bridge_slave_0: left allmulticast mode [ 201.769495][ T6519] bridge_slave_0: left promiscuous mode [ 201.776939][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.006589][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.018447][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.028428][ T6519] bond0 (unregistering): Released all slaves [ 202.235783][ T6519] hsr_slave_0: left promiscuous mode [ 202.241647][ T6519] hsr_slave_1: left promiscuous mode [ 202.247700][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.256345][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.264252][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.271657][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.290208][ T6519] veth1_macvtap: left promiscuous mode [ 202.296030][ T6519] veth0_macvtap: left promiscuous mode [ 202.301630][ T6519] veth1_vlan: left promiscuous mode [ 202.307250][ T6519] veth0_vlan: left promiscuous mode [ 202.490067][ T9979] __nla_validate_parse: 20 callbacks suppressed [ 202.490086][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1012'. [ 202.821259][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.829451][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.845415][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.863626][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.879473][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.879998][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 202.934454][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 203.250262][ T9984] validate_nla: 5 callbacks suppressed [ 203.250279][ T9984] netlink: 'syz.4.1014': attribute type 29 has an invalid length. [ 203.679709][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 203.953427][ T9992] chnl_net:caif_netlink_parms(): no params data found [ 204.041312][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 204.079589][T10034] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 204.088629][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 204.100681][T10034] netlink: 'syz.3.1030': attribute type 2 has an invalid length. [ 204.110815][T10034] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 204.147063][T10030] vxcan1: Master is either lo or non-ether device [ 204.336430][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.343641][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.362850][ T9992] bridge_slave_0: entered allmulticast mode [ 204.377938][ T9992] bridge_slave_0: entered promiscuous mode [ 204.406571][ T9992] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.414430][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.438686][ T9992] bridge_slave_1: entered allmulticast mode [ 204.469467][ T9992] bridge_slave_1: entered promiscuous mode [ 204.676243][ T9992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.689012][ T9992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.698543][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 204.865701][T10073] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1038'. [ 204.888455][T10073] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1038'. [ 204.919178][ T9992] team0: Port device team_slave_0 added [ 204.942427][ T9992] team0: Port device team_slave_1 added [ 204.948693][ T5839] Bluetooth: hci1: command tx timeout [ 205.086553][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.110711][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.163347][ T9992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.189438][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.196749][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.226983][ T9992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.359556][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 205.388536][ T9992] hsr_slave_0: entered promiscuous mode [ 205.397707][T10101] net_ratelimit: 395 callbacks suppressed [ 205.397724][T10101] netlink: zone id is out of range [ 205.409311][T10101] netlink: zone id is out of range [ 205.411864][ T9992] hsr_slave_1: entered promiscuous mode [ 205.414855][T10101] netlink: zone id is out of range [ 205.414866][T10101] netlink: zone id is out of range [ 205.414875][T10101] netlink: zone id is out of range [ 205.414884][T10101] netlink: zone id is out of range [ 205.414893][T10101] netlink: zone id is out of range [ 205.414902][T10101] netlink: zone id is out of range [ 205.414910][T10101] netlink: zone id is out of range [ 205.414922][T10101] netlink: zone id is out of range [ 205.475549][T10098] netlink: 'syz.2.1047': attribute type 1 has an invalid length. [ 205.496429][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 205.711601][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 205.779877][T10112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.790979][T10112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.801575][T10112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.812823][T10112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.825320][T10112] geneve2: entered promiscuous mode [ 205.833537][T10118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.845275][T10112] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.884207][T10112] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.893387][T10112] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.920803][T10112] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.994212][T10111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.003244][T10111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.020570][T10111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.033880][T10111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.049686][T10111] geneve2: entered promiscuous mode [ 206.060484][T10111] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.073165][T10111] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.082798][T10111] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.095436][T10111] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.261370][T10138] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 206.374440][T10146] sctp: [Deprecated]: syz.0.1059 (pid 10146) Use of int in max_burst socket option. [ 206.374440][T10146] Use struct sctp_assoc_value instead [ 206.539726][T10152] sctp: [Deprecated]: syz.0.1059 (pid 10152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.539726][T10152] Use struct sctp_sack_info instead [ 206.850149][T10176] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 206.949444][T10174] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 206.998796][T10176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.024404][ T5839] Bluetooth: hci1: command tx timeout [ 207.062748][ T9992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.109896][ T9992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.162421][ T9992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.192612][ T9992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.364225][T10200] No such timeout policy "syz0" [ 207.443007][ T9992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.505834][ T9992] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.558573][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.565803][ T6519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.585899][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.593174][ T6519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.601418][T10208] netlink: 'syz.2.1079': attribute type 2 has an invalid length. [ 207.628003][T10206] macsec0: entered promiscuous mode [ 207.643185][T10209] macsec0: left promiscuous mode [ 207.671444][T10213] __nla_validate_parse: 4 callbacks suppressed [ 207.671460][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 207.696317][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 207.706615][T10213] netlink: 'syz.4.1081': attribute type 3 has an invalid length. [ 207.780902][ T9992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.128385][T10235] netlink: 'syz.4.1087': attribute type 13 has an invalid length. [ 208.251357][T10242] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1088'. [ 208.340497][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.348313][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.661465][T10235] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.674478][T10235] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.683534][T10235] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.695840][T10235] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.773386][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1091'. [ 208.811145][ T9992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.076899][T10258] netlink: 'syz.2.1095': attribute type 39 has an invalid length. [ 209.102554][ T9992] veth0_vlan: entered promiscuous mode [ 209.119275][ T5839] Bluetooth: hci1: command tx timeout [ 209.261080][ T9992] veth1_vlan: entered promiscuous mode [ 209.362919][ T9992] veth0_macvtap: entered promiscuous mode [ 209.403485][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'. [ 209.427960][ T9992] veth1_macvtap: entered promiscuous mode [ 209.490509][ T9992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.531029][ T9992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.573715][ T9992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.612594][ T9992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.659178][ T9992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.692898][ T9992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.959973][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.986739][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.073876][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.108197][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.316511][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 210.486279][T10325] netlink: 'syz.0.1114': attribute type 18 has an invalid length. [ 210.762568][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.905879][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.048694][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.168909][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.324422][ T36] bridge_slave_1: left allmulticast mode [ 211.330112][ T36] bridge_slave_1: left promiscuous mode [ 211.337016][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.347387][ T36] bridge_slave_0: left allmulticast mode [ 211.353042][ T36] bridge_slave_0: left promiscuous mode [ 211.359332][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.613483][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.624948][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.635417][ T36] bond0 (unregistering): Released all slaves [ 211.896324][ T36] hsr_slave_0: left promiscuous mode [ 211.902270][ T36] hsr_slave_1: left promiscuous mode [ 211.908575][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.917373][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.926500][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.934017][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.953337][ T36] veth1_macvtap: left promiscuous mode [ 211.959043][ T36] veth0_macvtap: left promiscuous mode [ 211.964847][ T36] veth1_vlan: left promiscuous mode [ 211.970962][ T36] veth0_vlan: left promiscuous mode [ 212.170593][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 212.179810][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'. [ 212.201207][T10350] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 212.214512][T10349] ip6t_srh: unknown srh match flags 4001 [ 212.233265][T10352] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1123'. [ 212.482738][ T5882] hid-generic 0005:0000:1010.0001: item fetching failed at offset 0/1 [ 212.498841][ T5882] hid-generic 0005:0000:1010.0001: probe with driver hid-generic failed with error -22 [ 212.588604][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.597644][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.606775][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.615203][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.629122][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.710573][ T36] team0 (unregistering): Port device team_slave_1 removed [ 212.746284][ T36] team0 (unregistering): Port device team_slave_0 removed [ 213.062583][T10348] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1123'. [ 213.073165][T10348] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1123'. [ 213.103646][T10351] gretap2: entered allmulticast mode [ 213.320407][T10376] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 213.333674][T10376] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1129'. [ 213.417301][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1128'. [ 213.720589][T10393] net_ratelimit: 397 callbacks suppressed [ 213.720610][T10393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.777573][T10364] chnl_net:caif_netlink_parms(): no params data found [ 214.099255][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.107782][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.144052][T10364] bridge_slave_0: entered allmulticast mode [ 214.151969][T10364] bridge_slave_0: entered promiscuous mode [ 214.219530][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1136'. [ 214.271127][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.271754][T10423] netlink: 'syz.0.1139': attribute type 8 has an invalid length. [ 214.283927][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.293505][T10364] bridge_slave_1: entered allmulticast mode [ 214.308522][T10364] bridge_slave_1: entered promiscuous mode [ 214.600819][T10425] bridge_slave_0: left allmulticast mode [ 214.618828][T10425] bridge_slave_0: left promiscuous mode [ 214.620175][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 214.648579][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.662126][T10425] bridge_slave_1: left allmulticast mode [ 214.668136][T10425] bridge_slave_1: left promiscuous mode [ 214.678215][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.704449][T10425] bond0: (slave bond_slave_0): Releasing backup interface [ 214.704509][ T5836] Bluetooth: hci1: command tx timeout [ 214.722044][T10425] bond0: (slave bond_slave_1): Releasing backup interface [ 214.733417][T10425] bond0: (slave bond1): Releasing backup interface [ 214.742552][T10425] bond2: (slave ip6gretap1): Removing an active aggregator [ 214.751984][T10425] bond2: (slave ip6gretap1): Releasing backup interface [ 214.767948][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.801790][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.952571][T10451] No such timeout policy "syz0" [ 214.963166][T10364] team0: Port device team_slave_0 added [ 214.973652][T10364] team0: Port device team_slave_1 added [ 214.986528][T10451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1148'. [ 215.074663][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.092925][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.177155][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.222179][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.238997][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.281962][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.299599][T10467] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 215.308468][T10470] netlink: 'syz.0.1155': attribute type 2 has an invalid length. [ 215.339165][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 215.380827][T10477] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 215.568890][T10364] hsr_slave_0: entered promiscuous mode [ 215.595005][T10364] hsr_slave_1: entered promiscuous mode [ 215.661812][T10490] xt_bpf: check failed: parse error [ 215.818605][T10521] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 215.866062][T10522] bridge_slave_1: left allmulticast mode [ 215.871871][T10522] bridge_slave_1: left promiscuous mode [ 215.886387][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.915557][T10526] netlink: 'syz.0.1164': attribute type 11 has an invalid length. [ 215.923438][T10526] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1164'. [ 215.942112][T10522] bridge_slave_0: left allmulticast mode [ 215.993439][T10522] bridge_slave_0: left promiscuous mode [ 216.004392][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.516975][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 216.706658][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 216.713471][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 216.722498][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 216.784256][ T5150] Bluetooth: hci1: command tx timeout [ 216.988299][T10364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.063235][T10364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.092195][T10364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.147467][T10364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.252547][T10580] pimreg: entered allmulticast mode [ 217.536086][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.596442][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.624955][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.632168][T10510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.682829][T10511] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.690011][T10511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.076929][T10621] xt_CT: No such helper "netbios-ns" [ 218.083925][T10622] xt_CT: No such helper "netbios-ns" [ 218.201731][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.300644][T10633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.336594][T10364] veth0_vlan: entered promiscuous mode [ 218.465178][T10364] veth1_vlan: entered promiscuous mode [ 218.573100][T10364] veth0_macvtap: entered promiscuous mode [ 218.600923][T10364] veth1_macvtap: entered promiscuous mode [ 218.624680][T10646] __nla_validate_parse: 4 callbacks suppressed [ 218.624699][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 218.661628][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.669056][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 218.689163][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.719943][T10364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.740932][T10364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.762240][T10364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.772220][T10364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.809683][T10649] bond3: entered promiscuous mode [ 218.818727][T10649] bond3: entered allmulticast mode [ 218.826446][T10649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.864459][ T5150] Bluetooth: hci1: command 0x040f tx timeout [ 219.015387][T10649] bond3 (unregistering): Released all slaves [ 219.325169][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 219.391408][ T6535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.459194][ T6535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.690007][T10510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.723899][T10510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.760310][T10696] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1207'. [ 219.826859][T10700] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 219.863940][T10700] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1207'. [ 220.195901][T10715] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 220.708354][T10751] tipc: Enabling of bearer rejected, failed to enable media [ 220.738144][T10751] syzkaller0: entered allmulticast mode [ 220.927996][T10509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.510674][T10509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.591153][T10509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.647909][T10509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.772645][T10509] bridge_slave_1: left allmulticast mode [ 221.778684][T10509] bridge_slave_1: left promiscuous mode [ 221.785262][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.795482][T10509] bridge_slave_0: left allmulticast mode [ 221.801171][T10509] bridge_slave_0: left promiscuous mode [ 221.807103][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.070314][T10509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.081114][T10509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.091047][T10509] bond0 (unregistering): Released all slaves [ 222.526721][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 222.705379][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.718072][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.726480][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.738428][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.747041][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.652291][T10778] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1229'. [ 223.683362][T10509] hsr_slave_0: left promiscuous mode [ 223.689524][T10509] hsr_slave_1: left promiscuous mode [ 223.698290][T10509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.725781][T10509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.734635][T10509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.742043][T10509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.769381][T10509] veth1_macvtap: left promiscuous mode [ 223.775607][T10509] veth0_macvtap: left promiscuous mode [ 223.781353][T10509] veth1_vlan: left promiscuous mode [ 223.786971][T10509] veth0_vlan: left promiscuous mode [ 224.184817][T10509] team0 (unregistering): Port device team_slave_1 removed [ 224.217834][T10509] team0 (unregistering): Port device team_slave_0 removed [ 224.589233][T10801] vlan1: entered promiscuous mode [ 224.620128][T10801] vlan1: entered allmulticast mode [ 224.639482][T10801] hsr_slave_1: entered allmulticast mode [ 224.864042][ T5150] Bluetooth: hci1: command tx timeout [ 224.938928][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 225.115487][T10827] netlink: 'syz.4.1243': attribute type 3 has an invalid length. [ 225.117759][T10818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1240'. [ 225.245184][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 225.263525][T10813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1240'. [ 225.345372][T10787] chnl_net:caif_netlink_parms(): no params data found [ 225.528285][T10844] netlink: 'syz.2.1249': attribute type 21 has an invalid length. [ 225.534759][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1251'. [ 225.536461][T10844] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.556030][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'. [ 225.561919][T10844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.572348][T10844] IPv6: NLM_F_CREATE should be set when creating new route [ 225.579685][T10844] IPv6: NLM_F_CREATE should be set when creating new route [ 225.586970][T10844] IPv6: NLM_F_CREATE should be set when creating new route [ 225.654227][T10853] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1251'. [ 225.698815][T10787] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.724216][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.737936][T10787] bridge_slave_0: entered allmulticast mode [ 225.757300][T10787] bridge_slave_0: entered promiscuous mode [ 225.789013][T10860] pimreg3: entered allmulticast mode [ 225.811147][T10787] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.844011][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.851345][T10787] bridge_slave_1: entered allmulticast mode [ 225.886822][T10787] bridge_slave_1: entered promiscuous mode [ 225.957707][T10868] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1256'. [ 225.967401][T10868] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1256'. [ 225.991478][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.023954][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.119666][T10787] team0: Port device team_slave_0 added [ 226.140705][T10787] team0: Port device team_slave_1 added [ 226.277630][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.290055][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.320371][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.333329][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.343344][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.374770][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.567733][T10787] hsr_slave_0: entered promiscuous mode [ 226.588037][T10787] hsr_slave_1: entered promiscuous mode [ 226.953124][ T5150] Bluetooth: hci1: command tx timeout [ 227.749067][T10787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.795134][T10787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.822731][T10787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.845808][T10787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.101513][T10787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.234352][T10787] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.337537][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.344863][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.366634][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.373846][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.552318][T10787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.648583][T10971] infiniband syz0: set down [ 228.660347][T10971] infiniband syz0: added ipvlan1 [ 228.764549][T10999] __nla_validate_parse: 3 callbacks suppressed [ 228.764567][T10999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1293'. [ 228.780631][T10999] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1293'. [ 228.938896][T10971] RDS/IB: syz0: added [ 228.954704][T10971] smc: adding ib device syz0 with port count 1 [ 228.961047][T10971] smc: ib device syz0 port 1 has pnetid [ 229.015900][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'. [ 229.025387][ T5150] Bluetooth: hci1: command tx timeout [ 229.151890][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 229.189070][T11012] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 229.469933][T11023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 229.509418][T11023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 229.519756][T11023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 229.548828][T11023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 229.578596][T11023] geneve2: entered promiscuous mode [ 229.593970][T11023] geneve2: entered allmulticast mode [ 229.660848][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.807524][T10787] veth0_vlan: entered promiscuous mode [ 229.842422][T10787] veth1_vlan: entered promiscuous mode [ 229.917622][T10787] veth0_macvtap: entered promiscuous mode [ 229.938714][T10787] veth1_macvtap: entered promiscuous mode [ 229.969642][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.992086][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.009778][T10787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.022129][T10787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.032857][T10787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.047527][T10787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.190670][T10494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.210036][T10494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.284468][T10494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.307499][T10494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.137843][T11073] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 231.240982][T11077] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1319'. [ 231.321385][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 231.549132][T10494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.723287][T10494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.828932][T10494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.197220][T10494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.341591][T10494] bridge_slave_1: left allmulticast mode [ 232.347418][T10494] bridge_slave_1: left promiscuous mode [ 232.353110][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.363003][T10494] bridge_slave_0: left allmulticast mode [ 232.370208][T10494] bridge_slave_0: left promiscuous mode [ 232.376085][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.622630][T10494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.633658][T10494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.643941][T10494] bond0 (unregistering): Released all slaves [ 233.372494][T10494] hsr_slave_0: left promiscuous mode [ 233.383160][T10494] hsr_slave_1: left promiscuous mode [ 233.406680][T11113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1330'. [ 233.418146][T10494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.436656][T10494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.457739][T10494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.472857][T10494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.529833][T10494] veth1_macvtap: left promiscuous mode [ 233.535968][T10494] veth0_macvtap: left promiscuous mode [ 233.541698][T10494] veth1_vlan: left promiscuous mode [ 233.550482][T10494] veth0_vlan: left promiscuous mode [ 233.635736][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.645143][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.652804][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.667111][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.679336][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.748264][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 234.023525][T10494] team0 (unregistering): Port device team_slave_1 removed [ 234.059836][T10494] team0 (unregistering): Port device team_slave_0 removed [ 234.434250][T11127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1332'. [ 234.548700][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 234.787442][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1337'. [ 234.973005][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 234.989155][T11153] xt_TCPMSS: Only works on TCP SYN packets [ 235.013623][T11153] netlink: 'syz.0.1340': attribute type 58 has an invalid length. [ 235.051900][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1340'. [ 235.065540][T11157] netlink: 'syz.3.1342': attribute type 8 has an invalid length. [ 235.084352][T11160] xt_TCPMSS: Only works on TCP SYN packets [ 235.376719][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 235.412541][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 235.500052][T11191] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 235.525561][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 235.653384][T11201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.723211][T11121] chnl_net:caif_netlink_parms(): no params data found [ 235.743923][ T5150] Bluetooth: hci1: command tx timeout [ 235.915917][T11212] netlink: 'syz.2.1354': attribute type 2 has an invalid length. [ 235.926407][T11213] netlink: 'syz.4.1356': attribute type 8 has an invalid length. [ 235.964866][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.973309][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.981294][T11121] bridge_slave_0: entered allmulticast mode [ 235.990083][T11121] bridge_slave_0: entered promiscuous mode [ 236.002172][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.018368][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.033995][T11121] bridge_slave_1: entered allmulticast mode [ 236.051784][T11121] bridge_slave_1: entered promiscuous mode [ 236.172094][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.201501][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.371918][T11121] team0: Port device team_slave_0 added [ 236.394862][T11237] nbd: must specify an index to disconnect [ 236.406000][T11121] team0: Port device team_slave_1 added [ 236.413570][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 236.532093][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.545513][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.594601][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.611857][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.619145][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.684200][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.720752][T11253] Cannot find del_set index 4 as target [ 236.820247][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 236.911691][T11121] hsr_slave_0: entered promiscuous mode [ 236.927726][T11121] hsr_slave_1: entered promiscuous mode [ 237.047313][T11267] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 237.134679][T11272] netlink: 'syz.3.1373': attribute type 5 has an invalid length. [ 237.148153][T11272] netlink: 'syz.3.1373': attribute type 5 has an invalid length. [ 237.363838][T11287] netlink: 'syz.0.1379': attribute type 5 has an invalid length. [ 237.404139][T11280] ªªªªªª†³?ÂHº: renamed from lo [ 237.824878][ T5150] Bluetooth: hci1: command tx timeout [ 238.056676][T11121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.081646][T11121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.118091][T11121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.176945][T11121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.429301][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.487469][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.508953][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.516157][T10494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.546831][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.554053][T10494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.641806][T11352] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 238.680329][T11356] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 238.829670][T11363] xt_time: unknown flags 0x4 [ 238.869542][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.932803][T11121] veth0_vlan: entered promiscuous mode [ 238.948652][T11121] veth1_vlan: entered promiscuous mode [ 238.987748][T11121] veth0_macvtap: entered promiscuous mode [ 238.999954][T11121] veth1_macvtap: entered promiscuous mode [ 239.029791][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.047259][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.067939][T11121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.078706][T11121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.090697][T11121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.100018][T11121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.221909][T10511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.245649][T10511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.298839][T10511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.323699][T10511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.504186][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 239.505824][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.621148][T11386] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 239.629921][T11386] __nla_validate_parse: 13 callbacks suppressed [ 239.629939][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 239.676079][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 239.801866][T11393] ksmbd: Unknown IPC event: 3, ignore. [ 240.072111][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'. [ 240.184131][T11425] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1427'. [ 240.406588][T11438] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1429'. [ 240.446496][T11438] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1429'. [ 240.483965][T11438] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1429'. [ 240.798162][T10508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.894869][T11463] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1430'. [ 241.012568][T11460] syzkaller1: entered promiscuous mode [ 241.025698][T11460] syzkaller1: entered allmulticast mode [ 242.160061][T10508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.241386][T10508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.295822][T10508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.626787][T10508] bridge_slave_1: left allmulticast mode [ 242.641783][T10508] bridge_slave_1: left promiscuous mode [ 242.647673][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.679095][T10508] bridge_slave_0: left allmulticast mode [ 242.695723][T10508] bridge_slave_0: left promiscuous mode [ 242.701502][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.784530][T11480] xt_socket: unknown flags 0x50 [ 242.978120][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.988275][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.998891][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.007762][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.016076][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.174015][T10508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.184920][T10508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.195474][T10508] bond0 (unregistering): Released all slaves [ 243.282893][T11476] vlan0: entered allmulticast mode [ 243.290650][T11476] macvtap0: entered allmulticast mode [ 243.343692][T11483] tipc: Started in network mode [ 243.353250][T11483] tipc: Node identity 8a8c60402b1e, cluster identity 4711 [ 243.363523][T11483] tipc: Enabled bearer , priority 0 [ 243.424771][T11484] syzkaller0: entered promiscuous mode [ 243.430363][T11484] syzkaller0: entered allmulticast mode [ 243.436597][T11484] tipc: Resetting bearer [ 243.449876][T11475] tipc: Resetting bearer [ 244.026804][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 244.064907][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.076470][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.088729][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.101060][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.116558][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.434368][ T6101] tipc: Node number set to 2710724672 [ 244.852342][T11475] tipc: Disabling bearer [ 244.996618][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 244.997174][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 245.119377][ T5150] Bluetooth: hci1: command tx timeout [ 245.381695][T11516] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 245.604051][T11528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1451'. [ 245.643189][T11531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.720726][T11486] chnl_net:caif_netlink_parms(): no params data found [ 245.842526][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 245.853684][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 246.144615][ T5150] Bluetooth: hci4: command tx timeout [ 246.155610][T11486] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.164123][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.171323][T11486] bridge_slave_0: entered allmulticast mode [ 246.179277][T11486] bridge_slave_0: entered promiscuous mode [ 246.187236][T11545] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1455'. [ 246.226439][T11545] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1455'. [ 246.238678][T11545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1455'. [ 246.268853][T10508] hsr_slave_0: left promiscuous mode [ 246.277667][T10508] hsr_slave_1: left promiscuous mode [ 246.283682][T10508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.291411][T10508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.299591][T10508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.307865][T10508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.338917][T10508] veth1_macvtap: left promiscuous mode [ 246.344588][T10508] veth0_macvtap: left promiscuous mode [ 246.350432][T10508] veth1_vlan: left promiscuous mode [ 246.359381][T10508] veth0_vlan: left promiscuous mode [ 246.870240][T10508] team0 (unregistering): Port device team_slave_1 removed [ 246.903674][T10508] team0 (unregistering): Port device team_slave_0 removed [ 247.195115][ T5150] Bluetooth: hci1: command tx timeout [ 247.226208][T11486] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.233486][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.248005][T11486] bridge_slave_1: entered allmulticast mode [ 247.257972][T11486] bridge_slave_1: entered promiscuous mode [ 247.432391][T11486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.452279][T11486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.631306][T11573] netlink: 'syz.2.1464': attribute type 12 has an invalid length. [ 247.639896][T11573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1464'. [ 247.650907][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'. [ 247.657787][T11486] team0: Port device team_slave_0 added [ 247.670250][T11486] team0: Port device team_slave_1 added [ 247.699339][T11576] netlink: 'syz.2.1464': attribute type 12 has an invalid length. [ 247.853279][T11486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.883882][T11486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.929672][T11486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.993115][T11486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.000546][T11486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.029176][T11486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.049619][T11586] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 248.058309][T11586] team0: Device macvtap1 is already an upper device of the team interface [ 248.219157][T11486] hsr_slave_0: entered promiscuous mode [ 248.226667][T11486] hsr_slave_1: entered promiscuous mode [ 248.235501][T11498] chnl_net:caif_netlink_parms(): no params data found [ 248.236826][ T5150] Bluetooth: hci4: command tx timeout [ 248.583429][T11615] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 248.600442][T11618] netlink: 'syz.3.1475': attribute type 5 has an invalid length. [ 249.263987][ T5836] Bluetooth: hci1: command tx timeout [ 249.484467][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.514123][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.537819][T11498] bridge_slave_0: entered allmulticast mode [ 249.556936][T11498] bridge_slave_0: entered promiscuous mode [ 249.568701][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.584316][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.602159][T11498] bridge_slave_1: entered allmulticast mode [ 249.612173][T11498] bridge_slave_1: entered promiscuous mode [ 249.701201][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.731193][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.878142][T11498] team0: Port device team_slave_0 added [ 249.897197][T11498] team0: Port device team_slave_1 added [ 250.058706][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.067742][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.102734][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.127743][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.135037][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.161879][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.303915][ T5836] Bluetooth: hci4: command tx timeout [ 250.396625][T11498] hsr_slave_0: entered promiscuous mode [ 250.414215][T11498] hsr_slave_1: entered promiscuous mode [ 250.434682][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.442275][T11498] Cannot create hsr debugfs directory [ 250.540527][T11671] __nla_validate_parse: 5 callbacks suppressed [ 250.540546][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 250.557959][T11671] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1489'. [ 250.600755][T11671] 8021q: VLANs not supported on tunl0 [ 250.705486][T11676] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1490'. [ 250.821352][T11486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.849356][T11486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.883816][T11486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.921914][T11486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.084513][T11686] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 251.092294][T11686] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1494'. [ 251.113816][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1494'. [ 251.346747][ T5836] Bluetooth: hci1: command tx timeout [ 251.621751][T11486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.717119][T11486] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.751085][T11713] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1501'. [ 251.758694][T10511] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.767327][T10511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.809878][T10511] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.817098][T10511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.878792][T11498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.929716][T11498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.948955][T11498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.969915][T11498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.007645][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.041421][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.072648][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.121525][T11718] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 252.170943][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.233269][T11718] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 252.256848][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.301018][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.308252][T10495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.326399][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1505'. [ 252.380625][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.387842][T10500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.397327][ T5836] Bluetooth: hci4: command tx timeout [ 252.434303][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.519798][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.561809][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.633009][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.663250][T11486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.694926][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.733550][T11718] xfrm0 speed is unknown, defaulting to 1000 [ 252.842926][T11486] veth0_vlan: entered promiscuous mode [ 252.905395][T11486] veth1_vlan: entered promiscuous mode [ 252.929815][T11760] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 252.961571][T11763] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 253.004967][T11486] veth0_macvtap: entered promiscuous mode [ 253.047681][T11486] veth1_macvtap: entered promiscuous mode [ 253.120905][T11486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.168297][T11486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.193651][T11486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.213932][T11486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.222673][T11486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.250004][T11486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.287021][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.489997][T11790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1517'. [ 253.539763][T10510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.586651][T10510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.698968][T10511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.723550][T10511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.764205][T11800] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 253.825928][T11803] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 254.106014][T11812] netlink: 'syz.0.1524': attribute type 9 has an invalid length. [ 254.113842][T11812] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.1524'. [ 254.146418][T11498] veth0_vlan: entered promiscuous mode [ 254.178602][T11498] veth1_vlan: entered promiscuous mode [ 254.262679][T11498] veth0_macvtap: entered promiscuous mode [ 254.289674][T11498] veth1_macvtap: entered promiscuous mode [ 254.328913][T11498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.352011][T11498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.399627][T11498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.412931][T11498] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.423263][T11498] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.436548][T11498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.569021][T11833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 254.621205][ T6535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.795696][ T6535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.933113][ T6535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.992225][T10509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.011408][T10509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.041624][ T6535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.080638][T10495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.089333][T10495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.269234][ T6535] bridge_slave_1: left allmulticast mode [ 255.277850][ T6535] bridge_slave_1: left promiscuous mode [ 255.283662][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.294365][ T6535] bridge_slave_0: left allmulticast mode [ 255.300020][ T6535] bridge_slave_0: left promiscuous mode [ 255.306183][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.591052][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664530][ T6535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.727429][ T6535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.765526][ T6535] bond0 (unregistering): Released all slaves [ 255.995091][T11851] x_tables: duplicate underflow at hook 2 [ 256.072198][T11858] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 256.614980][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.634935][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.642726][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.662097][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.670233][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.727219][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 256.776306][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 256.837119][T11883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1542'. [ 256.855426][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.872065][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.881677][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.890895][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.900262][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.939297][T11873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.181318][ T6535] hsr_slave_0: left promiscuous mode [ 257.201975][ T6535] hsr_slave_1: left promiscuous mode [ 257.208701][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.232418][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.254116][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.268143][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.289185][T11894] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 257.311279][T11895] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 257.349269][ T6535] veth1_macvtap: left promiscuous mode [ 257.361631][ T6535] veth0_macvtap: left promiscuous mode [ 257.374102][ T6535] veth1_vlan: left promiscuous mode [ 257.387726][ T6535] veth0_vlan: left promiscuous mode [ 257.873444][ T6535] team0 (unregistering): Port device team_slave_1 removed [ 257.916821][ T6535] team0 (unregistering): Port device team_slave_0 removed [ 258.254013][T11905] netlink: 'syz.2.1548': attribute type 11 has an invalid length. [ 258.266717][T11868] xfrm0 speed is unknown, defaulting to 1000 [ 258.288532][T11905] netlink: 'syz.2.1548': attribute type 11 has an invalid length. [ 258.302462][T11905] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1548'. [ 258.450086][T11911] x_tables: unsorted entry at hook 1 [ 258.706512][ T5836] Bluetooth: hci1: command tx timeout [ 258.773922][T11880] xfrm0 speed is unknown, defaulting to 1000 [ 258.844608][T11924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1554'. [ 258.913080][T11926] netlink: 'syz.0.1555': attribute type 2 has an invalid length. [ 258.948177][ T5836] Bluetooth: hci4: command tx timeout [ 258.991512][T11868] chnl_net:caif_netlink_parms(): no params data found [ 259.092262][T11929] syz_tun: left promiscuous mode [ 259.100271][T11929] bridge0: port 3(dummy0) entered blocking state [ 259.106823][T11929] bridge0: port 3(dummy0) entered forwarding state [ 259.118279][T10500] bond0: (slave bond_slave_0): interface is now down [ 259.120058][T11929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.132218][T10500] bond0: (slave bond_slave_1): interface is now down [ 259.135743][T11929] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.149652][T11929] bridge0: port 3(dummy0) entered disabled state [ 259.159345][T10500] bond0: (slave syz_tun): interface is now down [ 259.166911][T11929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.342662][ T6535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.413446][T11899] xfrm0 speed is unknown, defaulting to 1000 [ 259.477549][ T6535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.671531][ T6535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.774447][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1561'. [ 259.932039][T11868] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.946074][T11868] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.958833][T11868] bridge_slave_0: entered allmulticast mode [ 259.970892][T11868] bridge_slave_0: entered promiscuous mode [ 260.001604][T11900] xfrm0 speed is unknown, defaulting to 1000 [ 260.029377][T11868] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.039961][T11868] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.049730][T11868] bridge_slave_1: entered allmulticast mode [ 260.059285][T11868] bridge_slave_1: entered promiscuous mode [ 260.152050][ T6535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.325553][T11868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.481458][T11868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.609758][T11943] xfrm0 speed is unknown, defaulting to 1000 [ 260.616860][T10510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.633146][T10510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.784908][ T5836] Bluetooth: hci1: command tx timeout [ 260.870213][T11868] team0: Port device team_slave_0 added [ 260.885129][T11868] team0: Port device team_slave_1 added [ 261.000461][T11880] chnl_net:caif_netlink_parms(): no params data found [ 261.012923][T11868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.021649][T11868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.024044][ T5836] Bluetooth: hci4: command tx timeout [ 261.053367][T11868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.056310][T11868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.072994][T11868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.099150][T11868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.113853][T10511] bond0: (slave bond_slave_0): interface is now down [ 261.120566][T10511] bond0: (slave bond_slave_1): interface is now down [ 261.128253][T10511] bond0: (slave syz_tun): interface is now down [ 261.511707][ T6535] bridge_slave_1: left allmulticast mode [ 261.534422][ T6535] bridge_slave_1: left promiscuous mode [ 261.548179][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.581545][ T6535] bridge_slave_0: left allmulticast mode [ 261.589177][ T6535] bridge_slave_0: left promiscuous mode [ 261.598229][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.893690][ T6535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.905073][ T6535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.918313][ T6535] bond0 (unregistering): Released all slaves [ 262.021133][T11868] hsr_slave_0: entered promiscuous mode [ 262.045352][T11868] hsr_slave_1: entered promiscuous mode [ 262.059372][T11976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1567'. [ 262.127790][T11880] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.135255][T11880] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.142455][T11880] bridge_slave_0: entered allmulticast mode [ 262.165217][T11880] bridge_slave_0: entered promiscuous mode [ 262.227203][T11880] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.235199][T11880] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.243449][T11880] bridge_slave_1: entered allmulticast mode [ 262.252743][T11880] bridge_slave_1: entered promiscuous mode [ 262.407156][T11880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.462562][T11880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.765181][T11880] team0: Port device team_slave_0 added [ 262.863128][T11880] team0: Port device team_slave_1 added [ 262.869180][ T5836] Bluetooth: hci1: command tx timeout [ 262.981741][T11880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.991675][T11880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.022590][T11880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.034726][T10500] bond0: (slave bond_slave_0): interface is now down [ 263.041449][T10500] bond0: (slave bond_slave_1): interface is now down [ 263.050689][T10500] bond0: (slave syz_tun): interface is now down [ 263.103415][ T6535] hsr_slave_0: left promiscuous mode [ 263.110703][ T5836] Bluetooth: hci4: command tx timeout [ 263.128687][ T6535] hsr_slave_1: left promiscuous mode [ 263.134951][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.142984][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.151623][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.152314][T12020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1578'. [ 263.169391][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.212453][ T6535] veth1_macvtap: left promiscuous mode [ 263.218839][ T6535] veth0_macvtap: left promiscuous mode [ 263.225191][ T6535] veth1_vlan: left promiscuous mode [ 263.230646][ T6535] veth0_vlan: left promiscuous mode [ 263.291872][T12029] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 263.301518][T12029] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 263.738396][ T6535] team0 (unregistering): Port device team_slave_1 removed [ 263.772643][ T6535] team0 (unregistering): Port device team_slave_0 removed [ 264.108922][T11880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.116348][T11880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.142676][T11880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.396648][T11880] hsr_slave_0: entered promiscuous mode [ 264.403281][T11880] hsr_slave_1: entered promiscuous mode [ 264.424724][T11880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.432509][T11880] Cannot create hsr debugfs directory [ 264.543134][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 264.630605][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 264.861359][T12070] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1595'. [ 264.944413][ T5836] Bluetooth: hci1: command tx timeout [ 264.949939][T10495] bond0: (slave bond_slave_0): interface is now down [ 264.963045][T10495] bond0: (slave bond_slave_1): interface is now down [ 264.972514][T10495] bond0: (slave syz_tun): interface is now down [ 264.981235][T10495] bond0: now running without any active interface! [ 265.082067][T12079] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 265.101810][T12079] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 265.136454][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 265.184028][ T5836] Bluetooth: hci4: command tx timeout [ 265.487863][T11880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.512415][T11880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.529645][T11880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.585066][T11880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.685899][T11868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.694179][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1603'. [ 265.716517][T11868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.737264][T11868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.764400][T11868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.879207][T12107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.901732][T11880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.951394][T11880] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.996292][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.003461][T10495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.019987][T11868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.048838][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.056177][T10510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.106040][T11868] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.152632][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.159805][T10510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.211392][T11880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.230148][T12115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1609'. [ 266.241611][T11880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.270823][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.278021][T10510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.283316][T12117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1610'. [ 266.299743][T12118] netlink: 'syz.3.1609': attribute type 2 has an invalid length. [ 266.311206][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 266.669778][T12125] syzkaller0: create flow: hash 3367501802 index 1 [ 266.850905][T12124] syzkaller0: delete flow: hash 3367501802 index 1 [ 267.004525][ T30] audit: type=1800 audit(1748587879.319:2): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1621" name="memory.events" dev="tmpfs" ino=2106 res=0 errno=0 [ 267.027292][ T30] audit: type=1804 audit(1748587879.329:3): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1621" name="/newroot/410/memory.events" dev="tmpfs" ino=2106 res=1 errno=0 [ 268.093273][T12154] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 268.143291][T11880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.163102][T11868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.381263][T11868] veth0_vlan: entered promiscuous mode [ 268.442812][T11868] veth1_vlan: entered promiscuous mode [ 268.565369][T11868] veth0_macvtap: entered promiscuous mode [ 268.591110][T11868] veth1_macvtap: entered promiscuous mode [ 268.667855][T11868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.691836][T11868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.730843][T11868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.764030][T11868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.772795][T11868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.786945][T11868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.798129][T12180] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 268.832212][T12180] team0: Device vti0 is of different type [ 268.869675][T12178] tap0: tun_chr_ioctl cmd 1074025672 [ 268.875636][T12178] tap0: ignored: set checksum disabled [ 269.061758][T11880] veth0_vlan: entered promiscuous mode [ 269.120370][T10510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.140321][T10510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.171951][T11880] veth1_vlan: entered promiscuous mode [ 269.288964][T10510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.308238][T10510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.359951][T12197] sit0: entered promiscuous mode [ 269.371974][T12197] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 269.408061][T12197] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1634'. [ 269.437873][T11880] veth0_macvtap: entered promiscuous mode [ 269.486622][T11880] veth1_macvtap: entered promiscuous mode [ 269.609776][T11880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.673645][T11880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.745686][T11880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.783908][T11880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.823393][T11880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.844207][T11880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.054643][T12229] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 270.073351][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'. [ 270.242502][T10500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.301107][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 270.387088][T10500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.414524][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 270.531925][T10500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.569462][T10511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.592144][T10511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.641124][T10500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.671785][T10511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.683170][T10511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.101628][T10500] bridge_slave_1: left allmulticast mode [ 271.114661][T10500] bridge_slave_1: left promiscuous mode [ 271.120495][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.135336][T10500] bridge_slave_0: left allmulticast mode [ 271.141026][T10500] bridge_slave_0: left promiscuous mode [ 271.164337][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.910555][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.926187][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.935045][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.943239][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.952446][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.960955][T10500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.983957][T10500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.994977][T10500] bond0 (unregistering): Released all slaves [ 272.131157][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.139879][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.148000][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.168209][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.176750][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.237831][T12256] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 272.325898][T12256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.374220][T12261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.383082][T12261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.393481][T12261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.402519][T12261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.416174][T12261] bond3: (slave geneve2): making interface the new active one [ 272.429706][T12261] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 272.817744][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 272.915570][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 273.127679][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 273.162240][T12296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.609113][T12251] xfrm0 speed is unknown, defaulting to 1000 [ 273.617586][T12253] xfrm0 speed is unknown, defaulting to 1000 [ 273.739772][T12323] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1671'. [ 273.752468][T12323] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1671'. [ 273.764931][T12323] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1671'. [ 273.985310][ T5836] Bluetooth: hci1: command tx timeout [ 274.189301][T10500] hsr_slave_0: left promiscuous mode [ 274.227416][ T5836] Bluetooth: hci4: command tx timeout [ 274.255073][T10500] hsr_slave_1: left promiscuous mode [ 274.261395][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.289365][T10500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.305571][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.313506][T10500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.380987][T10500] veth1_macvtap: left promiscuous mode [ 274.388420][T10500] veth0_macvtap: left promiscuous mode [ 274.397219][T10500] veth1_vlan: left promiscuous mode [ 274.403008][T10500] veth0_vlan: left promiscuous mode [ 274.872931][T10500] team0 (unregistering): Port device team_slave_1 removed [ 274.907811][T10500] team0 (unregistering): Port device team_slave_0 removed [ 275.459167][T12251] chnl_net:caif_netlink_parms(): no params data found [ 275.483700][T12365] netlink: 'syz.3.1679': attribute type 12 has an invalid length. [ 275.634539][T12378] netlink: 'syz.0.1681': attribute type 27 has an invalid length. [ 275.759150][T12253] chnl_net:caif_netlink_parms(): no params data found [ 275.903513][T12251] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.912579][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.919948][T12251] bridge_slave_0: entered allmulticast mode [ 275.927694][T12251] bridge_slave_0: entered promiscuous mode [ 275.936345][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.943505][T12251] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.951664][T12251] bridge_slave_1: entered allmulticast mode [ 275.960102][T12251] bridge_slave_1: entered promiscuous mode [ 276.065971][ T5836] Bluetooth: hci1: command tx timeout [ 276.117142][T12251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.136304][T12251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.178871][T10500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.202784][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.217264][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.227630][T12253] bridge_slave_0: entered allmulticast mode [ 276.239531][T12253] bridge_slave_0: entered promiscuous mode [ 276.255733][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.262988][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.270453][T12253] bridge_slave_1: entered allmulticast mode [ 276.278434][T12253] bridge_slave_1: entered promiscuous mode [ 276.314372][ T5836] Bluetooth: hci4: command tx timeout [ 276.342599][T10500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.572124][T12251] team0: Port device team_slave_0 added [ 276.637368][T10500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.673022][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.692277][T12251] team0: Port device team_slave_1 added [ 276.726478][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.958961][T10500] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.983322][T12431] __nla_validate_parse: 6 callbacks suppressed [ 276.983340][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 277.040368][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 277.049580][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 277.059269][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 277.138142][T12253] team0: Port device team_slave_0 added [ 277.157983][T12251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.171455][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.208921][T12251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.223567][T12251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.231964][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.267850][T12251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.290727][T12253] team0: Port device team_slave_1 added [ 277.601700][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.609216][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.636721][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.661947][T12433] xfrm0 speed is unknown, defaulting to 1000 [ 277.710517][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.719174][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.746866][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.777411][T12251] hsr_slave_0: entered promiscuous mode [ 277.784355][T12251] hsr_slave_1: entered promiscuous mode [ 277.952155][T10500] bridge_slave_1: left allmulticast mode [ 277.962792][T10500] bridge_slave_1: left promiscuous mode [ 277.968729][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.978915][T10500] bridge_slave_0: left allmulticast mode [ 277.985172][T10500] bridge_slave_0: left promiscuous mode [ 277.990880][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.144654][ T5836] Bluetooth: hci1: command tx timeout [ 278.285180][T10500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.298967][T10500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.310188][T10500] bond0 (unregistering): Released all slaves [ 278.384448][ T5836] Bluetooth: hci4: command tx timeout [ 278.422685][T12460] netlink: 'syz.2.1698': attribute type 2 has an invalid length. [ 278.478197][T12253] hsr_slave_0: entered promiscuous mode [ 278.510606][T12253] hsr_slave_1: entered promiscuous mode [ 278.519498][T12253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.527412][T12253] Cannot create hsr debugfs directory [ 279.014680][T12471] vlan4: entered allmulticast mode [ 279.023543][T12471] bond0: entered allmulticast mode [ 279.029219][T12471] gretap1: entered allmulticast mode [ 279.314279][T12487] Bluetooth: MGMT ver 1.23 [ 279.334621][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1705'. [ 279.364208][T10500] hsr_slave_0: left promiscuous mode [ 279.370132][T10500] hsr_slave_1: left promiscuous mode [ 279.376235][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.384969][T10500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.394791][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.402291][T10500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.424886][T10500] veth1_macvtap: left promiscuous mode [ 279.430429][T10500] veth0_macvtap: left promiscuous mode [ 279.436179][T10500] veth1_vlan: left promiscuous mode [ 279.441536][T10500] veth0_vlan: left promiscuous mode [ 279.822017][T10500] team0 (unregistering): Port device team_slave_1 removed [ 279.861435][T10500] team0 (unregistering): Port device team_slave_0 removed [ 280.224240][ T5836] Bluetooth: hci1: command tx timeout [ 280.246415][T12490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.464352][ T5836] Bluetooth: hci4: command tx timeout [ 281.161743][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 281.250380][T12535] netlink: 'syz.0.1715': attribute type 3 has an invalid length. [ 281.427386][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 281.562131][T12253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.607613][T12253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.665220][T12253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.779257][T12253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.880091][T12559] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 281.889371][T12561] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 281.948218][T12251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.982914][T12251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.141994][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.165602][T12251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.233605][T12251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.250347][T12564] xt_l2tp: invalid flags combination: 4 [ 282.259305][T12564] netlink: 'syz.3.1724': attribute type 5 has an invalid length. [ 282.359853][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.402037][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.409283][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.432489][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.439719][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.646723][T12251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.728796][T12251] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.751294][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.758537][T10500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.777024][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.784246][T10500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.087307][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.126075][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1729'. [ 283.186756][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 283.470724][T12251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.597451][T12251] veth0_vlan: entered promiscuous mode [ 283.646259][T12251] veth1_vlan: entered promiscuous mode [ 283.739845][T12614] pimreg: entered allmulticast mode [ 283.762208][T12251] veth0_macvtap: entered promiscuous mode [ 283.779044][T12614] pimreg: left allmulticast mode [ 283.851172][T12251] veth1_macvtap: entered promiscuous mode [ 283.921177][T12251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.959294][T12251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.004816][T12251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.021288][T12251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.031003][T12251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.039825][T12251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.066610][T12628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1741'. [ 284.146304][T12253] veth0_vlan: entered promiscuous mode [ 284.208346][T12253] veth1_vlan: entered promiscuous mode [ 284.220173][T12632] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1743'. [ 284.249146][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 284.264679][T10509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.272608][T10509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.364698][T12253] veth0_macvtap: entered promiscuous mode [ 284.377042][T12253] veth1_macvtap: entered promiscuous mode [ 284.388398][T10495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.410258][T10495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.429679][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.456298][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.485354][T12253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.507465][T12253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.516816][T12253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.526026][T12253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.699542][T10509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.727476][T12643] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 284.729282][T10509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.739291][T12643] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1747'. [ 284.785784][T10511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.805165][T10511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.627165][T10500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.851792][T10500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.058811][T10500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.199010][T10500] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.359518][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 286.375486][T12687] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 286.558032][T10500] bridge_slave_1: left allmulticast mode [ 286.565252][T10500] bridge_slave_1: left promiscuous mode [ 286.571140][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.586763][T10500] bridge_slave_0: left allmulticast mode [ 286.592460][T10500] bridge_slave_0: left promiscuous mode [ 286.602708][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.717318][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.736802][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.745588][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.764169][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.776629][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.006066][T10500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.017491][T10500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.028418][T10500] bond0 (unregistering): Released all slaves [ 287.301480][T12688] xfrm0 speed is unknown, defaulting to 1000 [ 287.529383][T10500] hsr_slave_0: left promiscuous mode [ 287.537165][T10500] hsr_slave_1: left promiscuous mode [ 287.543031][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.557495][T10500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.568222][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.576358][T10500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.598559][T10500] veth1_macvtap: left promiscuous mode [ 287.604218][T10500] veth0_macvtap: left promiscuous mode [ 287.609811][T10500] veth1_vlan: left promiscuous mode [ 287.617586][T10500] veth0_vlan: left promiscuous mode [ 288.118407][T10500] team0 (unregistering): Port device team_slave_1 removed [ 288.149846][T12702] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 288.198493][T10500] team0 (unregistering): Port device team_slave_0 removed [ 288.478341][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.491522][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.500586][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.509387][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.519883][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.831924][T12701] pim6reg: entered allmulticast mode [ 288.863998][ T5836] Bluetooth: hci1: command tx timeout [ 288.916606][T12688] chnl_net:caif_netlink_parms(): no params data found [ 289.424505][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.452122][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.474100][T12688] bridge_slave_0: entered allmulticast mode [ 289.482097][T12688] bridge_slave_0: entered promiscuous mode [ 289.523547][T12688] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.546825][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.579029][T12688] bridge_slave_1: entered allmulticast mode [ 289.617641][T12688] bridge_slave_1: entered promiscuous mode [ 289.696956][T12688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.725191][T12708] xfrm0 speed is unknown, defaulting to 1000 [ 289.734902][T12688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.922948][T12688] team0: Port device team_slave_0 added [ 289.950967][T12688] team0: Port device team_slave_1 added [ 290.010233][T10500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.012359][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1774'. [ 290.090487][T10495] ------------[ cut here ]------------ [ 290.096427][T10495] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 290.113430][T10495] WARNING: CPU: 0 PID: 10495 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 290.124812][T10495] Modules linked in: [ 290.128999][T10495] CPU: 0 UID: 0 PID: 10495 Comm: kworker/u8:24 Not tainted 6.15.0-syzkaller-07787-g27eab4c64423 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.143236][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.155167][T10495] Workqueue: bond0 bond_mii_monitor [ 290.160512][T10495] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 290.167099][T10495] Code: 7c fe ff ff e8 1e e4 6b f8 c6 05 a7 9b 36 06 01 90 48 c7 c7 00 95 91 8c 48 c7 c6 a7 37 9b 8d ba 48 00 00 00 e8 5e d0 2f f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 290.187500][T10495] RSP: 0018:ffffc9000bc57670 EFLAGS: 00010246 [ 290.195934][T10495] RAX: d062b75304790300 RBX: ffff88807d274000 RCX: ffff8880294d5a00 [ 290.204047][T10495] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 290.212072][T10495] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 290.220202][T10495] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: 1ffff1100fa4e85d [ 290.228398][T10495] R13: dffffc0000000000 R14: ffffffff8c1b2aa8 R15: 0000000000000000 [ 290.236821][T10495] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 290.246178][T10495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.252814][T10495] CR2: 0000200000002140 CR3: 000000006b902000 CR4: 00000000003526f0 [ 290.261050][T10495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.269353][T10495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.277457][T10495] Call Trace: [ 290.280782][T10495] [ 290.283787][T10495] ? ethtool_op_get_link+0xd/0x70 [ 290.288854][T10495] ethtool_op_get_link+0x15/0x70 [ 290.293884][T10495] bond_check_dev_link+0x444/0x6c0 [ 290.299043][T10495] ? __pfx_bond_check_dev_link+0x10/0x10 [ 290.304810][T10495] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 290.311268][T10495] bond_mii_monitor+0x428/0x2e00 [ 290.316348][T10495] ? bond_mii_monitor+0x153/0x2e00 [ 290.321507][T10495] ? __pfx_bond_mii_monitor+0x10/0x10 [ 290.326988][T10495] ? __lock_acquire+0xab9/0xd20 [ 290.331885][T10495] ? process_scheduled_works+0x9ef/0x17b0 [ 290.338017][T10495] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.343252][T10495] ? process_scheduled_works+0x9ef/0x17b0 [ 290.349295][T10495] ? process_scheduled_works+0x9ef/0x17b0 [ 290.355129][T10495] process_scheduled_works+0xae1/0x17b0 [ 290.360751][T10495] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.366872][T10495] worker_thread+0x8a0/0xda0 [ 290.371542][T10495] kthread+0x70e/0x8a0 [ 290.375763][T10495] ? __pfx_worker_thread+0x10/0x10 [ 290.380919][T10495] ? __pfx_kthread+0x10/0x10 [ 290.385772][T10495] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.391012][T10495] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.396336][T10495] ? __pfx_kthread+0x10/0x10 [ 290.400971][T10495] ret_from_fork+0x3fc/0x770 [ 290.405752][T10495] ? __pfx_ret_from_fork+0x10/0x10 [ 290.410924][T10495] ? __switch_to_asm+0x39/0x70 [ 290.415811][T10495] ? __switch_to_asm+0x33/0x70 [ 290.420622][T10495] ? __pfx_kthread+0x10/0x10 [ 290.425369][T10495] ret_from_fork_asm+0x1a/0x30 [ 290.430192][T10495] [ 290.433248][T10495] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 290.440555][T10495] CPU: 0 UID: 0 PID: 10495 Comm: kworker/u8:24 Not tainted 6.15.0-syzkaller-07787-g27eab4c64423 #0 PREEMPT(full) [ 290.452566][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.462748][T10495] Workqueue: bond0 bond_mii_monitor [ 290.467998][T10495] Call Trace: [ 290.471290][T10495] [ 290.474244][T10495] dump_stack_lvl+0x99/0x250 [ 290.478869][T10495] ? __asan_memcpy+0x40/0x70 [ 290.483464][T10495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.488673][T10495] ? __pfx__printk+0x10/0x10 [ 290.493282][T10495] panic+0x2db/0x790 [ 290.497189][T10495] ? __pfx_panic+0x10/0x10 [ 290.501628][T10495] ? ret_from_fork_asm+0x1a/0x30 [ 290.506570][T10495] __warn+0x31b/0x4b0 [ 290.510563][T10495] ? __linkwatch_sync_dev+0x303/0x350 [ 290.515945][T10495] ? __linkwatch_sync_dev+0x303/0x350 [ 290.521316][T10495] report_bug+0x2be/0x4f0 [ 290.525647][T10495] ? __linkwatch_sync_dev+0x303/0x350 [ 290.531019][T10495] ? __linkwatch_sync_dev+0x303/0x350 [ 290.536398][T10495] ? __linkwatch_sync_dev+0x305/0x350 [ 290.541781][T10495] handle_bug+0x84/0x160 [ 290.546045][T10495] exc_invalid_op+0x1a/0x50 [ 290.550565][T10495] asm_exc_invalid_op+0x1a/0x20 [ 290.555426][T10495] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 290.561413][T10495] Code: 7c fe ff ff e8 1e e4 6b f8 c6 05 a7 9b 36 06 01 90 48 c7 c7 00 95 91 8c 48 c7 c6 a7 37 9b 8d ba 48 00 00 00 e8 5e d0 2f f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 290.581026][T10495] RSP: 0018:ffffc9000bc57670 EFLAGS: 00010246 [ 290.587110][T10495] RAX: d062b75304790300 RBX: ffff88807d274000 RCX: ffff8880294d5a00 [ 290.595099][T10495] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 290.603076][T10495] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 290.611059][T10495] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: 1ffff1100fa4e85d [ 290.619040][T10495] R13: dffffc0000000000 R14: ffffffff8c1b2aa8 R15: 0000000000000000 [ 290.627034][T10495] ? ethtool_op_get_link+0xd/0x70 [ 290.632070][T10495] ethtool_op_get_link+0x15/0x70 [ 290.637016][T10495] bond_check_dev_link+0x444/0x6c0 [ 290.642148][T10495] ? __pfx_bond_check_dev_link+0x10/0x10 [ 290.647817][T10495] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 290.654251][T10495] bond_mii_monitor+0x428/0x2e00 [ 290.659211][T10495] ? bond_mii_monitor+0x153/0x2e00 [ 290.664350][T10495] ? __pfx_bond_mii_monitor+0x10/0x10 [ 290.669742][T10495] ? __lock_acquire+0xab9/0xd20 [ 290.674616][T10495] ? process_scheduled_works+0x9ef/0x17b0 [ 290.680351][T10495] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.685562][T10495] ? process_scheduled_works+0x9ef/0x17b0 [ 290.691305][T10495] ? process_scheduled_works+0x9ef/0x17b0 [ 290.697040][T10495] process_scheduled_works+0xae1/0x17b0 [ 290.702627][T10495] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.708635][T10495] worker_thread+0x8a0/0xda0 [ 290.713269][T10495] kthread+0x70e/0x8a0 [ 290.717355][T10495] ? __pfx_worker_thread+0x10/0x10 [ 290.722481][T10495] ? __pfx_kthread+0x10/0x10 [ 290.727083][T10495] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.732290][T10495] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.737502][T10495] ? __pfx_kthread+0x10/0x10 [ 290.742105][T10495] ret_from_fork+0x3fc/0x770 [ 290.746733][T10495] ? __pfx_ret_from_fork+0x10/0x10 [ 290.751873][T10495] ? __switch_to_asm+0x39/0x70 [ 290.756650][T10495] ? __switch_to_asm+0x33/0x70 [ 290.761438][T10495] ? __pfx_kthread+0x10/0x10 [ 290.766039][T10495] ret_from_fork_asm+0x1a/0x30 [ 290.770830][T10495] [ 290.774252][T10495] Kernel Offset: disabled [ 290.778611][T10495] Rebooting in 86400 seconds..