last executing test programs: 1m41.38135229s ago: executing program 2 (id=1921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e0, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x4, 0x2, 0x0, {0xa, 0x4e21, [0x0, 0x7fff, 0x400, 0x2], [0x7, 0xe, 0x7, 0x9], r2, [0x8a38, 0x7]}, 0x9, 0x1c}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "fb24df7e99550729408b351cb57574ab177529ce130cf506f1a5c9445e464c13799427803df264430456a33ee0718fcc15317a2504d60f4a01e6e3305aeb5e4a3652fbbca11464aedd1bba205ad787b0b22d0784a9472916e7747c957656d72a48a4d1584ba7340998a26b4c66731d8a3493501453e2f72550c2a68987d25d86bd956e4e83b6101f75ab012eb4104d2183e59854b4c527fa9d1eeabf6239e0d42db7693a6c6c1ee10597"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8e8ea041101151032b933ed7a52cd4738e79a5d8580b07b3d916439c82d4658a996648c13b6c3ed2c6394bd261b279e4d386b9092cdbe6595feafd82e2f817b877a57d0fa9e62ae40edb7a1cbd0df54611c62f77fc9c8776e690a5181674c8c0ad53149357d6f6dc1b006b4a526f52e1773cea93efd53ad1b87beba6e35dff7229b351aaa8c9d0c1a570293c7fe3d6ace5f9aa2647f9393bfff2ff33495af30b052cf9aaeab69c7b44bba74212befcb74363b075604e742c7a8ddf83021562282e98aadfb08ab66876ddf6aa46b2a6bcb5e1c2d183b73c2395194fb96f"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x76}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000061214010029bd7000fedbdf25080001036c44533ffa4b329e2bac2f80"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r14, 0x8983, &(0x7f0000000080)={0x6, 'sit0\x00', {0x4}, 0xfff9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34040, 0x0) 1m38.34035383s ago: executing program 3 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x5c) 1m24.231716292s ago: executing program 2 (id=1921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e0, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x4, 0x2, 0x0, {0xa, 0x4e21, [0x0, 0x7fff, 0x400, 0x2], [0x7, 0xe, 0x7, 0x9], r2, [0x8a38, 0x7]}, 0x9, 0x1c}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "fb24df7e99550729408b351cb57574ab177529ce130cf506f1a5c9445e464c13799427803df264430456a33ee0718fcc15317a2504d60f4a01e6e3305aeb5e4a3652fbbca11464aedd1bba205ad787b0b22d0784a9472916e7747c957656d72a48a4d1584ba7340998a26b4c66731d8a3493501453e2f72550c2a68987d25d86bd956e4e83b6101f75ab012eb4104d2183e59854b4c527fa9d1eeabf6239e0d42db7693a6c6c1ee10597"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8e8ea041101151032b933ed7a52cd4738e79a5d8580b07b3d916439c82d4658a996648c13b6c3ed2c6394bd261b279e4d386b9092cdbe6595feafd82e2f817b877a57d0fa9e62ae40edb7a1cbd0df54611c62f77fc9c8776e690a5181674c8c0ad53149357d6f6dc1b006b4a526f52e1773cea93efd53ad1b87beba6e35dff7229b351aaa8c9d0c1a570293c7fe3d6ace5f9aa2647f9393bfff2ff33495af30b052cf9aaeab69c7b44bba74212befcb74363b075604e742c7a8ddf83021562282e98aadfb08ab66876ddf6aa46b2a6bcb5e1c2d183b73c2395194fb96f"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x76}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000061214010029bd7000fedbdf25080001036c44533ffa4b329e2bac2f80"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r14, 0x8983, &(0x7f0000000080)={0x6, 'sit0\x00', {0x4}, 0xfff9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34040, 0x0) 1m23.196274901s ago: executing program 3 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x5c) 1m6.796439959s ago: executing program 2 (id=1921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e0, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x4, 0x2, 0x0, {0xa, 0x4e21, [0x0, 0x7fff, 0x400, 0x2], [0x7, 0xe, 0x7, 0x9], r2, [0x8a38, 0x7]}, 0x9, 0x1c}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "fb24df7e99550729408b351cb57574ab177529ce130cf506f1a5c9445e464c13799427803df264430456a33ee0718fcc15317a2504d60f4a01e6e3305aeb5e4a3652fbbca11464aedd1bba205ad787b0b22d0784a9472916e7747c957656d72a48a4d1584ba7340998a26b4c66731d8a3493501453e2f72550c2a68987d25d86bd956e4e83b6101f75ab012eb4104d2183e59854b4c527fa9d1eeabf6239e0d42db7693a6c6c1ee10597"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8e8ea041101151032b933ed7a52cd4738e79a5d8580b07b3d916439c82d4658a996648c13b6c3ed2c6394bd261b279e4d386b9092cdbe6595feafd82e2f817b877a57d0fa9e62ae40edb7a1cbd0df54611c62f77fc9c8776e690a5181674c8c0ad53149357d6f6dc1b006b4a526f52e1773cea93efd53ad1b87beba6e35dff7229b351aaa8c9d0c1a570293c7fe3d6ace5f9aa2647f9393bfff2ff33495af30b052cf9aaeab69c7b44bba74212befcb74363b075604e742c7a8ddf83021562282e98aadfb08ab66876ddf6aa46b2a6bcb5e1c2d183b73c2395194fb96f"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x76}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000061214010029bd7000fedbdf25080001036c44533ffa4b329e2bac2f80"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r14, 0x8983, &(0x7f0000000080)={0x6, 'sit0\x00', {0x4}, 0xfff9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34040, 0x0) 1m5.633190087s ago: executing program 3 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x5c) 59.709304209s ago: executing program 1 (id=2505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x292902, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4700000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r5, @ANYRES8=r0, @ANYBLOB="02"], 0x10) 59.473823828s ago: executing program 1 (id=2507): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000040)={'veth1_to_bond\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'caif0\x00', 0x0}) socket(0x1e, 0x6, 0x7f) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5e}}, 0x44) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="28d970ca1398476d6d6bbb27efea37aa92fc435f0189e6e1f25ee6cebe4d951ecdcdf19150c353304cbf21b9c9cca340d1be78bdecb8ad43f70ac17ec5b71e57cb1f0b54b4feca62d92288c3bfa465dc8d4054c24b3161db3a6e0fadb7b45cec4cfb630d61e0bb91d85faf62995d9699f7421f0a8d4ff062c52afb05093482e85b58a64c6896548b98e81c9f4cf2bd91760b98c361c7", 0x96}, {&(0x7f0000000100)="b1cc70c541cc95bd09ad1ef48f89c19332d551897ea449e3d30bd00d772ad71da4b57a40664929445f811301495b0861fbb16d51a0002dc1d354d8b36353bc68859c6d95ac6a7dda34da22f2b8d288ee87a943989763f6f34d67c2377400b78c0cd8fd1f9ff88fa03ddffae1b4216095fc0aa550c748e54155ff0be5", 0x7c}], 0x2, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0xf0}}, {{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000440)="ad7a1e602c96cad143b2dd32282e5e435557fa8f146612b4a46cd43c8a24c9860f31e89e5b9a02b1433b4a8329b5e361c92654d5e985d20a70b5d84cf8c0be9812fe098055d7b97913f7af51bdef0ad1ff07608bcd8ea6eb250d4d120a965a18b8ffcfa60c54115c9320bbdcfa7ef4772658f0b8de7e888cf75590bd53a83f48c6e2a0cfe354a8372d459248e3c55fc9cf5da211f638e8e182baa438c5d8", 0x9e}, {&(0x7f0000000280)="fe74257231abf4418bfbb3944763c51fb87b7ac5da109170a972da545a032539bb932325fb5deba28cbca19497ac5c2ffc0c511e83a3c915df73421adaa831fef87b95b88ffed5a10448b317fc7422", 0x4f}, {&(0x7f0000000500)="f525617d00cc64584540444d3a458e7c88dbf97b91182b94b821695b9a1c73313db7f7b6d625f7b0a7940150e60614fb606ba2a66776f09e3517c493d833c7e5458ba79665bea51b0614021592c46384ea6fe0c8f215fd04c9aebdeab99d1b328c69b03060c67b8d04dd56d827704bfa1d1c43993eaf87d5b2de874827887e409c3cca5dbf7a88b0449d8eb0", 0x8c}, {&(0x7f00000005c0)="d79501c151945d05ccba94704cf4c30648e9f828b32a4a2f8fee5045c1113621fda23fb70b3cb9351ef8f42e5e44e7e4aadfa24d6586173343ce3b82cf0c08b84fde71b9287854a81e7292e066dc22585a8cb3c6393de68341dd012994b70180c3543660d9a2d4fb0e403c16f18f2ab7e73d20eb63705280986299be46f1ce5d6f562c19bea8903341edf962ef2a9879541a6997865dc75d437be09f56d32601fb8d060f4382b020a51de40ad95978", 0xaf}, {&(0x7f0000000800)="62fee4a9264326a84b53beb71893cd7af59ae1aafab0b413942d8eda42a9feaca7883c07ce20db7619875b9734bc7c5e2233817412a3adb5333b992d7e6bdb0f842ff83eab83c45fd7a70d5859711c9c373e7ba1fac50bd9fa81ef7af11d85c01ad4cbc2493651c47a52085ff2cc879ec1b2a2c721fa804cdd5b16c01897accb30e5a3314a0748288f4e461743b68bb733b4a9f8a7d2103e4c30faf565f8702d5cfa4620cde466711bd1292dbfc3273ee05cfd678378cc24a361f36314a491ba8d1e415c5d7933d418e48f408e9fdc596eccdfa5fc4e332daafd8366aa49d835313dab2f52020d9548fd8828e62c9d7a16c78228ea83fed8", 0xf8}], 0x5}}, {{&(0x7f0000000740)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000980)="bff88d3bd751f3fadc8861d486ae6ff63ea5bf75879aa589f2dc739aad0e52f6f558e267d469be31daa62219553263d8fde07522770b66f93355d90aa76cc24a42b78322a0427acb47b12a976e2e49b8db246a7f411f3fb6a843cda43a4616cb20dc0f", 0x63}, {&(0x7f0000000a00)="7508f5a1e3c6e1c04eff0082650ca67a2458f04ef1126843afff5da2b582870c13b5c90fca2452b91fb926afd876cf958453c782917324815717adccfcfbc3a53c8d71efae8ea3269a9ffae168c5ec3408ad20679486479612671c6a647229851246d172985bfa927b72270277297725397e7fa6d352f7d9401c6faf790a8c1ff92749ef5ab5ffd770759f76afdaab8040b850404f0568ac2b610002a744fd069387897aea4cae537064a0d6e91c658f38311bc7ecd2260647d290fcecb143e40afcb50c9a1b2ae15040f058470d004dbed99b712c80e0b376deb99d36", 0xdd}], 0x2, &(0x7f0000000b40)=[@ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x4b, [@private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp={0x44, 0x20, 0xa6, 0x0, 0x1, [0x0, 0x1, 0x1, 0xc, 0x9, 0x6, 0x8b1]}, @end, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}, {{&(0x7f0000000bc0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c00)="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", 0xfd}], 0x1, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x18}}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) socket$inet6(0xa, 0x80000, 0x2) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 58.99134574s ago: executing program 1 (id=2508): r0 = socket(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900480000007a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0xa0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaea1586dd6003136c00008700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r11, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r12) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r13, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 48.969030058s ago: executing program 2 (id=1921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e0, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x4, 0x2, 0x0, {0xa, 0x4e21, [0x0, 0x7fff, 0x400, 0x2], [0x7, 0xe, 0x7, 0x9], r2, [0x8a38, 0x7]}, 0x9, 0x1c}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "fb24df7e99550729408b351cb57574ab177529ce130cf506f1a5c9445e464c13799427803df264430456a33ee0718fcc15317a2504d60f4a01e6e3305aeb5e4a3652fbbca11464aedd1bba205ad787b0b22d0784a9472916e7747c957656d72a48a4d1584ba7340998a26b4c66731d8a3493501453e2f72550c2a68987d25d86bd956e4e83b6101f75ab012eb4104d2183e59854b4c527fa9d1eeabf6239e0d42db7693a6c6c1ee10597"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8e8ea041101151032b933ed7a52cd4738e79a5d8580b07b3d916439c82d4658a996648c13b6c3ed2c6394bd261b279e4d386b9092cdbe6595feafd82e2f817b877a57d0fa9e62ae40edb7a1cbd0df54611c62f77fc9c8776e690a5181674c8c0ad53149357d6f6dc1b006b4a526f52e1773cea93efd53ad1b87beba6e35dff7229b351aaa8c9d0c1a570293c7fe3d6ace5f9aa2647f9393bfff2ff33495af30b052cf9aaeab69c7b44bba74212befcb74363b075604e742c7a8ddf83021562282e98aadfb08ab66876ddf6aa46b2a6bcb5e1c2d183b73c2395194fb96f"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x76}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000061214010029bd7000fedbdf25080001036c44533ffa4b329e2bac2f80"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r14, 0x8983, &(0x7f0000000080)={0x6, 'sit0\x00', {0x4}, 0xfff9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34040, 0x0) 46.719503458s ago: executing program 3 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x5c) 43.194237343s ago: executing program 1 (id=2508): r0 = socket(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900480000007a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0xa0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaea1586dd6003136c00008700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r11, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r12) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r13, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 30.492092547s ago: executing program 2 (id=1921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e0, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x4, 0x2, 0x0, {0xa, 0x4e21, [0x0, 0x7fff, 0x400, 0x2], [0x7, 0xe, 0x7, 0x9], r2, [0x8a38, 0x7]}, 0x9, 0x1c}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "fb24df7e99550729408b351cb57574ab177529ce130cf506f1a5c9445e464c13799427803df264430456a33ee0718fcc15317a2504d60f4a01e6e3305aeb5e4a3652fbbca11464aedd1bba205ad787b0b22d0784a9472916e7747c957656d72a48a4d1584ba7340998a26b4c66731d8a3493501453e2f72550c2a68987d25d86bd956e4e83b6101f75ab012eb4104d2183e59854b4c527fa9d1eeabf6239e0d42db7693a6c6c1ee10597"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8e8ea041101151032b933ed7a52cd4738e79a5d8580b07b3d916439c82d4658a996648c13b6c3ed2c6394bd261b279e4d386b9092cdbe6595feafd82e2f817b877a57d0fa9e62ae40edb7a1cbd0df54611c62f77fc9c8776e690a5181674c8c0ad53149357d6f6dc1b006b4a526f52e1773cea93efd53ad1b87beba6e35dff7229b351aaa8c9d0c1a570293c7fe3d6ace5f9aa2647f9393bfff2ff33495af30b052cf9aaeab69c7b44bba74212befcb74363b075604e742c7a8ddf83021562282e98aadfb08ab66876ddf6aa46b2a6bcb5e1c2d183b73c2395194fb96f"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x76}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000061214010029bd7000fedbdf25080001036c44533ffa4b329e2bac2f80"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r14, 0x8983, &(0x7f0000000080)={0x6, 'sit0\x00', {0x4}, 0xfff9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34040, 0x0) 29.086608175s ago: executing program 3 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x5c) 27.503019967s ago: executing program 1 (id=2508): r0 = socket(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900480000007a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0xa0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaea1586dd6003136c00008700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r11, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r12) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r13, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 11.232511567s ago: executing program 2 (id=1921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900010000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1e0, 0x12, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x4, 0x2, 0x0, {0xa, 0x4e21, [0x0, 0x7fff, 0x400, 0x2], [0x7, 0xe, 0x7, 0x9], r2, [0x8a38, 0x7]}, 0x9, 0x1c}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "fb24df7e99550729408b351cb57574ab177529ce130cf506f1a5c9445e464c13799427803df264430456a33ee0718fcc15317a2504d60f4a01e6e3305aeb5e4a3652fbbca11464aedd1bba205ad787b0b22d0784a9472916e7747c957656d72a48a4d1584ba7340998a26b4c66731d8a3493501453e2f72550c2a68987d25d86bd956e4e83b6101f75ab012eb4104d2183e59854b4c527fa9d1eeabf6239e0d42db7693a6c6c1ee10597"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "8e8ea041101151032b933ed7a52cd4738e79a5d8580b07b3d916439c82d4658a996648c13b6c3ed2c6394bd261b279e4d386b9092cdbe6595feafd82e2f817b877a57d0fa9e62ae40edb7a1cbd0df54611c62f77fc9c8776e690a5181674c8c0ad53149357d6f6dc1b006b4a526f52e1773cea93efd53ad1b87beba6e35dff7229b351aaa8c9d0c1a570293c7fe3d6ace5f9aa2647f9393bfff2ff33495af30b052cf9aaeab69c7b44bba74212befcb74363b075604e742c7a8ddf83021562282e98aadfb08ab66876ddf6aa46b2a6bcb5e1c2d183b73c2395194fb96f"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x7, 0x5, 0x76}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000061214010029bd7000fedbdf25080001036c44533ffa4b329e2bac2f80"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r14, 0x8983, &(0x7f0000000080)={0x6, 'sit0\x00', {0x4}, 0xfff9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34040, 0x0) 9.076392962s ago: executing program 1 (id=2508): r0 = socket(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900480000007a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000004000480140000001100010000000000000000000000000a"], 0xa0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaea1586dd6003136c00008700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r11, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r12) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r13, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 8.178148227s ago: executing program 3 (id=2237): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x5c) 4.569423073s ago: executing program 4 (id=2653): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f000400000000000800000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000b70900001f00000055090100000000009500000000000000bf91000000000000b7020000000000008500000019000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40}, 0x94) 4.460527292s ago: executing program 4 (id=2654): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4.343967299s ago: executing program 4 (id=2655): syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}]}}]}, 0x8c}}, 0x0) getsockopt(r3, 0x1, 0x8000, &(0x7f0000000100)=""/96, &(0x7f0000000180)=0x60) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 4.160782416s ago: executing program 4 (id=2657): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) r4 = socket(0x2, 0x3, 0xff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, &(0x7f0000000340)) connect$inet(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020601080000080000000000000000001c00078008000a40000000090800174000010001060004404e220000"], 0x30}}, 0x8c00) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r6, &(0x7f0000000080), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.5392927s ago: executing program 4 (id=2660): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b04000000e2fbb0f5f30002", @ANYRES32, @ANYRES16=r2, @ANYRES64=0x0], 0x20) r4 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$l2tp(r4, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000480)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) recvfrom$l2tp(r4, 0x0, 0x0, 0x2020, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x90c, r5, 0x0, '\x00', 0x0, r7}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) 2.290753544s ago: executing program 0 (id=2663): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001460028006000e0002000000080007007f00000108000a00", @ANYRES32=r3], 0x4c}}, 0x4000) 1.496037441s ago: executing program 0 (id=2664): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x18, 0x41, 0x9, 0x0, 0x0, {0x3}, [@generic="ff"]}, 0x18}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x9, 0x6, 0x4000, 0x1, 0x1c0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x6}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x8, 0x0}, 0x8) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000007c0)={0x0, 0xbe, "3fbeecded5c40b7abbf46ecbe296c72e6a69e804783d74ba47addf231a135aa3f279265cb41ba4da0b5a40027f58ec2f49e1b015a59dd653ba917a5743ee4c07865fe8b84a3d5ca31ceafee2971e69e2793f2e646716106e3ce794e7a66c3fa663afddd6936e1e05c69a1c8c2e5f7e78d3aace73b3ad45400576736ada342fbe12d53cb2289d21546021de7233457a1f4b791acc2571c70ce359f88b22d95642b5d3553bd5a1af0d317f7ff42f3a5b2213822ac77d8d93ccf03bb60da994"}, &(0x7f00000008c0)=0xc6) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000900)={r9, 0x7, 0x4, 0xff}, &(0x7f0000000940)=0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), 0x0, 0xffffd6c0, r11}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x22, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0x30, 0x4}, @alu={0x4, 0x0, 0xd, 0xb, 0x5, 0x100, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8b5, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x7, 0x894}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r7, r8, r11], &(0x7f00000006c0)=[{0x5, 0x1, 0x0, 0x5}, {0x4, 0x3, 0x4, 0xb}], 0x10, 0xb}, 0x94) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000806010800000000000000000000000405000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) listen(r2, 0x4) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x4008041) 1.409463703s ago: executing program 0 (id=2665): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) r3 = socket(0x2a, 0x2, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x810) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x48, 0x2c, 0xd2f, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x40) (async, rerun: 64) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000001c0)={0x61, 0x0, 0xb, 0xa, 0x100, 0x81}) (rerun: 64) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f0000000040)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x2}}}, 0x6) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x4000) 1.172112421s ago: executing program 0 (id=2666): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYBLOB="6d24cf8070401432c409358c7f4dc27dee74641e41776c052f09405aeca66c927c1bd6b93b547eec19d99273cf957a2491bec58e1179671cb26052222ccfffed666ad4f3b3072cf3ac4eeb", @ANYRES8=0x0, @ANYRES64=r4], 0x0, 0x35}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) 426.833547ms ago: executing program 4 (id=2667): unshare(0x2c020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x20000000000000fe, &(0x7f0000000040)=[{0xe, 0x1}]}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x40010107) unshare(0x8000400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0xddaa2e45595aa099}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ipvlan1\x00', &(0x7f0000000100)=@ethtool_ringparam={0x1, 0x5, 0x1c4b8fec, 0x0, 0x5, 0x7, 0x7ff, 0x7f, 0x3}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 157.342865ms ago: executing program 0 (id=2668): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="374b1d3807a0d4ea9158dd45dcb7dd15e8432109450b92ea22370538bfa7e1b46489186d67b9d7116e46a236fcd2ef4d2014a7b30ad42f7c00d412a243219bcdd918fc3fed", 0x45}, {&(0x7f0000000300)="0ac210ca2b551b36b02d85cbec7e6a3773bfd55ea5c70212ce26d0d3bb73d78ad6e114c384cd29409eeffd697cf08baf7461a7bf8295b3c2c782c2703070726d4c791d33f93df3bc17f1cb0e6c970fbf2d438c76a65ff9e200319abb46e08d3a2ddcf46ffd1ed5161459e9928c60708a746a88124ba0e0d207eb22", 0x7b}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev, @initdev, 0x0}, &(0x7f0000000100)=0xc) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x1, 0x5, {{0xe, 0x4, 0x0, 0x18, 0x38, 0x64, 0x0, 0x8b, 0x2f, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xf3, 0x3, 0xb, [{@loopback, 0x7ff}, {@private=0xa010100, 0x80000001}, {@local, 0x4}]}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@mpls_newroute={0x1e4, 0x18, 0x10, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x7f, 0xfd, 0x4, 0xff, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x800, 0x0, 0x0, r3}}, @RTA_DST={0x8, 0x1, {0x101, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x10000, 0x0, 0x1}, {0x7f}, {0xff, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x71, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xcec00}, {0xffff7}, {0x8, 0x0, 0x1}, {0x7}, {0x8001, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xe27}, {0x7, 0x0, 0x1}, {0xc30}, {0xffffc, 0x0, 0x1}, {0x7f}, {0x843}, {0x9, 0x0, 0x1}, {0xffff9}]}, @RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7fff}, {0x4, 0x0, 0x1}, {0x7f}, {0x2, 0x0, 0x1}, {0x8}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7ff}, {0x10, 0x0, 0x1}, {0x1ff}, {0xab}, {0x5}, {0x18}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xad, 0x0, 0x1}, {0x3}, {0x1}, {0x9}, {0x237}, {0x6}, {0x3}, {0x8}, {0x7}, {0x39}, {0x8d3}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6}, {0xf}, {0x6, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x7}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7ff}, {0xfffe3, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {}, {0x7, 0x0, 0x1}, {0x8}, {0x3}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x5}, {0x3}, {0x8460, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7fff}, {0x33, 0x0, 0x1}, {0xf3b4, 0x0, 0x1}, {0x100}, {0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x12ce}, {0xff}]}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DST={0x8, 0x1, {0x4, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0xe, 0x0, 0x5, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0xccc, 0x8, 0x8, r7}}]}, 0x1e4}}, 0x0) 0s ago: executing program 0 (id=2669): r0 = socket(0x2, 0x803, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) kernel console output (not intermixed with test programs): 69][T14173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.429054][T14180] bridge_slave_1: left allmulticast mode [ 330.445588][T14180] bridge_slave_1: left promiscuous mode [ 330.453015][T14173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.472373][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.485579][T14180] bridge_slave_0: left allmulticast mode [ 330.496280][T14180] bridge_slave_0: left promiscuous mode [ 330.512451][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.647227][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.659711][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.669919][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.687336][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.697520][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.735656][T14364] atomic_op ffff888022a86998 conn xmit_atomic 0000000000000000 [ 330.764687][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 331.068998][T14180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.085439][T14180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.099420][T14180] bond0 (unregistering): Released all slaves [ 331.116505][T14354] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 331.127994][T14354] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 331.391101][T14373] sctp: [Deprecated]: syz.4.2299 (pid 14373) Use of int in max_burst socket option deprecated. [ 331.391101][T14373] Use struct sctp_assoc_value instead [ 331.738714][T14382] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2301'. [ 331.837810][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 331.903856][T14384] syz_tun: entered promiscuous mode [ 331.910368][T14384] batadv_slave_0: entered promiscuous mode [ 331.918673][T14382] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2301'. [ 331.958003][T14384] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 332.018108][T14384] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.035014][T14384] hsr1: entered allmulticast mode [ 332.040112][T14384] syz_tun: entered allmulticast mode [ 332.045599][T14384] batadv_slave_0: entered allmulticast mode [ 332.078019][T14382] gretap0: entered promiscuous mode [ 332.097806][T14180] hsr_slave_0: left promiscuous mode [ 332.109837][T14180] hsr_slave_1: left promiscuous mode [ 332.147062][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.174210][T14180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.183752][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.202138][T14180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.270185][T14180] veth1_macvtap: left promiscuous mode [ 332.276101][T14180] veth0_macvtap: left promiscuous mode [ 332.288848][T14180] veth1_vlan: left promiscuous mode [ 332.299105][T14180] veth0_vlan: left promiscuous mode [ 332.373385][T14391] netlink: 'syz.1.2304': attribute type 3 has an invalid length. [ 332.405280][T14391] netlink: 'syz.1.2304': attribute type 3 has an invalid length. [ 332.457522][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'. [ 332.585463][T14403] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 332.771411][ T51] Bluetooth: hci3: command tx timeout [ 333.019719][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.034210][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.055766][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.066300][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.074234][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.366250][T14180] team0 (unregistering): Port device team_slave_1 removed [ 333.407639][T14180] team0 (unregistering): Port device team_slave_0 removed [ 333.861102][T14403] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 334.441673][T14360] chnl_net:caif_netlink_parms(): no params data found [ 334.575610][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2312'. [ 334.861688][ T51] Bluetooth: hci3: command tx timeout [ 334.963038][T14180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.987451][T14360] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.995249][T14360] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.003224][T14360] bridge_slave_0: entered allmulticast mode [ 335.011348][T14360] bridge_slave_0: entered promiscuous mode [ 335.020004][T14360] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.033906][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.043928][T14360] bridge_slave_1: entered allmulticast mode [ 335.051631][T14360] bridge_slave_1: entered promiscuous mode [ 335.078014][T14180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.135076][T14360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.175575][ T51] Bluetooth: hci0: command tx timeout [ 335.197119][T14180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.229263][T14360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.324344][T14180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.349611][T14456] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2314'. [ 335.421678][T14360] team0: Port device team_slave_0 added [ 335.438522][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 335.514762][T14456] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2314'. [ 335.554463][T14360] team0: Port device team_slave_1 added [ 335.584725][T14456] gretap0: entered promiscuous mode [ 335.644870][T14465] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 335.754649][T14360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.777085][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.804555][T14360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.817679][T14360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.826310][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.857664][T14360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.914418][T14474] veth0_to_bond: entered allmulticast mode [ 335.941218][T14407] chnl_net:caif_netlink_parms(): no params data found [ 335.942274][T14469] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2320'. [ 336.037067][T14481] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2323'. [ 336.225096][T14360] hsr_slave_0: entered promiscuous mode [ 336.232125][T14360] hsr_slave_1: entered promiscuous mode [ 336.242051][T14360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.252654][T14360] Cannot create hsr debugfs directory [ 336.354558][T14180] bridge_slave_1: left allmulticast mode [ 336.360340][T14180] bridge_slave_1: left promiscuous mode [ 336.371643][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.386653][ T5829] cgroup: fork rejected by pids controller in /syz1 [ 336.388762][T14180] bridge_slave_0: left allmulticast mode [ 336.405448][T14180] bridge_slave_0: left promiscuous mode [ 336.415053][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.803668][T14180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.817044][T14180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.829525][T14180] bond0 (unregistering): Released all slaves [ 336.878878][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.886258][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.907805][T14407] bridge_slave_0: entered allmulticast mode [ 336.927414][T14407] bridge_slave_0: entered promiscuous mode [ 336.933679][ T51] Bluetooth: hci3: command tx timeout [ 337.013593][ T5829] syz_tun (unregistering): left promiscuous mode [ 337.047498][T14500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2329'. [ 337.101701][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.108865][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.141521][T14407] bridge_slave_1: entered allmulticast mode [ 337.151165][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2331'. [ 337.160378][T14407] bridge_slave_1: entered promiscuous mode [ 337.262158][ T51] Bluetooth: hci0: command tx timeout [ 337.407104][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.516953][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.542972][T14515] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2334'. [ 337.674953][T14407] team0: Port device team_slave_0 added [ 337.761761][T14407] team0: Port device team_slave_1 added [ 337.765412][T14518] netlink: 'syz.4.2335': attribute type 10 has an invalid length. [ 337.905763][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.917316][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.926409][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.935339][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.943009][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.036849][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.048363][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.087794][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.166895][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.192675][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.232390][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.276812][T14528] tipc: Enabling of bearer rejected, failed to enable media [ 338.351493][T14180] hsr_slave_0: left promiscuous mode [ 338.368990][T14180] hsr_slave_1: left promiscuous mode [ 338.375589][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.383482][T14180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.393567][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.401240][T14180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.452690][T14180] veth1_macvtap: left promiscuous mode [ 338.458328][T14180] veth0_macvtap: left promiscuous mode [ 338.467886][T14180] veth1_vlan: left promiscuous mode [ 338.473504][T14180] veth0_vlan: left promiscuous mode [ 338.957731][T14180] team0 (unregistering): Port device team_slave_1 removed [ 339.006608][T14180] team0 (unregistering): Port device team_slave_0 removed [ 339.015112][ T51] Bluetooth: hci3: command tx timeout [ 339.335284][ T51] Bluetooth: hci0: command tx timeout [ 339.558312][T14538] dvmrp4: entered allmulticast mode [ 339.648005][T14407] hsr_slave_0: entered promiscuous mode [ 339.674105][T14407] hsr_slave_1: entered promiscuous mode [ 339.680627][T14407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.710746][T14407] Cannot create hsr debugfs directory [ 339.978436][T14554] netlink: 'syz.0.2341': attribute type 10 has an invalid length. [ 340.021533][T14554] openvswitch: netlink: Flow key attr not present in new flow. [ 340.053377][T14548] sctp: [Deprecated]: syz.0.2341 (pid 14548) Use of int in max_burst socket option deprecated. [ 340.053377][T14548] Use struct sctp_assoc_value instead [ 340.080769][ T51] Bluetooth: hci2: command tx timeout [ 340.219287][T14558] netlink: 'syz.4.2343': attribute type 1 has an invalid length. [ 340.227720][T14558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2343'. [ 340.236949][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 340.360275][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 340.876293][T14360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.917330][T14360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.935054][T14522] chnl_net:caif_netlink_parms(): no params data found [ 340.946160][T14360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.008608][T14360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.099494][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.106949][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.115000][T14522] bridge_slave_0: entered allmulticast mode [ 341.123090][T14522] bridge_slave_0: entered promiscuous mode [ 341.133698][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.140949][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.148197][T14522] bridge_slave_1: entered allmulticast mode [ 341.156316][T14522] bridge_slave_1: entered promiscuous mode [ 341.207404][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.229693][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.277344][T14522] team0: Port device team_slave_0 added [ 341.294671][T14522] team0: Port device team_slave_1 added [ 341.340648][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.348085][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.375415][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.394141][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.401390][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.427525][ T51] Bluetooth: hci0: command tx timeout [ 341.433425][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.696970][T14522] hsr_slave_0: entered promiscuous mode [ 341.718208][T14522] hsr_slave_1: entered promiscuous mode [ 341.727712][T14522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.753697][T14522] Cannot create hsr debugfs directory [ 341.995147][T14407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.019799][T14407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.088568][T14407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.130949][ T51] Bluetooth: hci2: command tx timeout [ 342.207403][T14407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.320331][T14360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.367782][T14611] netlink: 'syz.0.2352': attribute type 3 has an invalid length. [ 342.915037][T14360] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.991555][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.998784][T14176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.046235][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.053485][T14180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.398244][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.582871][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.666106][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.673348][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.704327][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.711662][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.739749][T14522] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.762258][T14624] netlink: 'syz.0.2354': attribute type 12 has an invalid length. [ 343.782408][T14522] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.836377][T14522] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.868818][T14360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.903976][T14522] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.214040][T14360] veth0_vlan: entered promiscuous mode [ 344.221734][ T51] Bluetooth: hci2: command tx timeout [ 344.257240][T14360] veth1_vlan: entered promiscuous mode [ 344.402975][T14360] veth0_macvtap: entered promiscuous mode [ 344.417259][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.454340][T14360] veth1_macvtap: entered promiscuous mode [ 344.526363][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.549249][T14360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.589299][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.596529][T14180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.615509][T14360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.656124][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.663388][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.733469][ T3029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.751097][ T3029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.776247][ T3029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.822883][ T3029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.864727][T14650] bond16: (slave gretap3): Releasing active interface [ 344.872245][T14650] gretap3: left allmulticast mode [ 344.896599][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.185447][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.200238][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.318809][T14407] veth0_vlan: entered promiscuous mode [ 345.328251][T14173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.342993][T14173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.423566][T14407] veth1_vlan: entered promiscuous mode [ 345.540643][T14407] veth0_macvtap: entered promiscuous mode [ 345.609474][T14407] veth1_macvtap: entered promiscuous mode [ 345.676021][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.714285][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.869027][T14173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.899083][T14173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.922550][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.931487][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.022820][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.083084][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.291703][ T51] Bluetooth: hci2: command tx timeout [ 346.296788][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.352450][T14173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.368157][T14173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.400094][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.443172][T14180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.458956][T14180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.476276][T14522] veth0_vlan: entered promiscuous mode [ 346.513321][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.540036][T14522] veth1_vlan: entered promiscuous mode [ 346.636124][T14522] veth0_macvtap: entered promiscuous mode [ 346.647862][T14522] veth1_macvtap: entered promiscuous mode [ 346.671689][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.688095][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.714451][T14180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.723614][T14180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.749304][T14180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.758832][T14180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.889819][ T49] bridge_slave_1: left allmulticast mode [ 346.908066][ T49] bridge_slave_1: left promiscuous mode [ 346.917418][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.939276][ T49] bridge_slave_0: left allmulticast mode [ 346.950263][ T49] bridge_slave_0: left promiscuous mode [ 346.982426][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.077353][T14682] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 347.712707][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.723312][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.731819][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.740236][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.748020][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.759536][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.768873][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.777242][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.785883][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.793964][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.930943][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.948004][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.966235][ T49] bond0 (unregistering): Released all slaves [ 348.003386][T14682] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 348.111875][T14688] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 348.226408][T14174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.235100][T14174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.395141][T14174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.409056][T14174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.538927][T14708] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2332'. [ 348.551603][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 348.618136][T14708] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2332'. [ 348.655085][T14708] gretap0: entered promiscuous mode [ 349.113845][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2375'. [ 349.523136][T14735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2380'. [ 349.747772][T14695] chnl_net:caif_netlink_parms(): no params data found [ 349.785788][T14748] netlink: 'syz.4.2384': attribute type 1 has an invalid length. [ 349.811828][ T5849] Bluetooth: hci0: command tx timeout [ 349.894011][ T5849] Bluetooth: hci3: command tx timeout [ 349.964288][T14750] syzkaller1: entered promiscuous mode [ 349.973763][T14750] syzkaller1: entered allmulticast mode [ 350.161737][ T49] hsr_slave_0: left promiscuous mode [ 350.167751][ T49] hsr_slave_1: left promiscuous mode [ 350.174541][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.200842][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.209721][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.221181][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.233288][T14765] netlink: 'syz.4.2386': attribute type 11 has an invalid length. [ 350.258944][ T49] veth1_macvtap: left promiscuous mode [ 350.264959][ T49] veth0_macvtap: left promiscuous mode [ 350.277511][ T49] veth1_vlan: left promiscuous mode [ 350.283019][ T49] veth0_vlan: left promiscuous mode [ 350.285851][T14766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2387'. [ 350.297704][T14766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'. [ 350.307033][T14766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2387'. [ 350.317222][T14766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2387'. [ 350.819835][ T49] team0 (unregistering): Port device team_slave_1 removed [ 350.860771][ T49] team0 (unregistering): Port device team_slave_0 removed [ 351.434634][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.451190][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.468706][T14695] bridge_slave_0: entered allmulticast mode [ 351.477233][T14695] bridge_slave_0: entered promiscuous mode [ 351.518580][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.534291][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.550401][T14695] bridge_slave_1: entered allmulticast mode [ 351.562929][T14695] bridge_slave_1: entered promiscuous mode [ 351.610962][T14776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2390'. [ 351.809638][T14695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.837123][T14695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.891612][ T5849] Bluetooth: hci0: command tx timeout [ 351.971143][ T5849] Bluetooth: hci3: command tx timeout [ 352.063327][T14695] team0: Port device team_slave_0 added [ 352.080409][T14695] team0: Port device team_slave_1 added [ 352.138039][T14798] netlink: 'syz.4.2396': attribute type 1 has an invalid length. [ 352.342297][T14695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.349654][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.400860][T14695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.439862][T14695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.564449][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.590934][T14695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.715514][T14697] chnl_net:caif_netlink_parms(): no params data found [ 352.895915][T14695] hsr_slave_0: entered promiscuous mode [ 352.907466][T14695] hsr_slave_1: entered promiscuous mode [ 352.917804][T14695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.925542][T14695] Cannot create hsr debugfs directory [ 353.046494][T14180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.243192][T14180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.415576][T14180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.443916][T14697] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.479609][T14697] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.497724][T14697] bridge_slave_0: entered allmulticast mode [ 353.507772][T14697] bridge_slave_0: entered promiscuous mode [ 353.539370][T14697] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.550875][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.568347][T14697] bridge_slave_1: entered allmulticast mode [ 353.590156][T14697] bridge_slave_1: entered promiscuous mode [ 353.656116][T14853] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 353.672996][T14855] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 353.682843][T14180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.694729][T14851] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 353.702852][T14851] __nla_validate_parse: 5 callbacks suppressed [ 353.702869][T14851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2409'. [ 353.719397][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'. [ 353.747578][T14857] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 353.763814][T14857] netlink: 'syz.0.2410': attribute type 2 has an invalid length. [ 353.845094][T14855] 8021q: adding VLAN 0 to HW filter on device bond15 [ 353.893577][T14697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.907813][T14697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.970857][ T5849] Bluetooth: hci0: command tx timeout [ 354.051757][ T5849] Bluetooth: hci3: command tx timeout [ 354.162538][T14697] team0: Port device team_slave_0 added [ 354.176594][T14697] team0: Port device team_slave_1 added [ 354.337071][T14876] openvswitch: netlink: Message has 235 unknown bytes. [ 354.355672][T14868] syzkaller0: entered promiscuous mode [ 354.362947][T14868] syzkaller0: entered allmulticast mode [ 354.391761][T14697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.419068][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.464134][T14697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.595774][T14886] smc: net device bond0 erased user defined pnetid SYZ2 [ 356.030357][T14697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.037392][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.064730][ T5849] Bluetooth: hci0: command tx timeout [ 356.070327][T14697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.134076][ T5849] Bluetooth: hci3: command tx timeout [ 356.168834][T14180] bridge_slave_1: left allmulticast mode [ 356.174891][T14180] bridge_slave_1: left promiscuous mode [ 356.180695][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.202604][T14180] bridge_slave_0: left allmulticast mode [ 356.208295][T14180] bridge_slave_0: left promiscuous mode [ 356.224423][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.266232][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 356.334874][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 356.437961][T14900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2420'. [ 356.765773][T14180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.780936][T14180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.792676][T14180] bond0 (unregistering): Released all slaves [ 356.999519][T14906] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 357.064911][T14697] hsr_slave_0: entered promiscuous mode [ 357.072289][T14697] hsr_slave_1: entered promiscuous mode [ 357.080118][T14697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.106938][T14697] Cannot create hsr debugfs directory [ 357.340504][T14917] geneve3: entered promiscuous mode [ 357.353154][T14921] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 357.361082][T14917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2425'. [ 357.410287][T14924] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 357.422284][T14924] netlink: 'syz.4.2427': attribute type 2 has an invalid length. [ 357.465236][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2426'. [ 357.479830][T14922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2426'. [ 357.516910][T14921] 8021q: adding VLAN 0 to HW filter on device bond23 [ 357.782761][T14695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.844189][T14695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.974826][T14695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.038451][T14695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.069127][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 358.618771][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2437'. [ 358.657705][T14960] netlink: 'syz.0.2437': attribute type 39 has an invalid length. [ 358.768870][T14180] hsr_slave_0: left promiscuous mode [ 358.789350][T14180] hsr_slave_1: left promiscuous mode [ 358.808718][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.821261][T14180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.837413][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.845229][T14180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.865115][T14963] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 358.882680][T14965] __nla_validate_parse: 4 callbacks suppressed [ 358.882697][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 358.896237][T14180] veth1_macvtap: left promiscuous mode [ 358.898246][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2439'. [ 358.913516][T14180] veth0_macvtap: left promiscuous mode [ 358.919297][T14180] veth1_vlan: left promiscuous mode [ 358.926348][T14180] veth0_vlan: left promiscuous mode [ 358.987690][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 359.119295][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 359.606353][T14974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2441'. [ 359.621183][T14974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2441'. [ 359.681350][T14180] team0 (unregistering): Port device team_slave_1 removed [ 359.740378][T14180] team0 (unregistering): Port device team_slave_0 removed [ 360.147462][T14695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.247577][T14695] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.320139][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.327355][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.363718][T14978] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 360.366663][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.378650][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.430571][T14981] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 360.454522][T14981] netlink: 'syz.1.2442': attribute type 2 has an invalid length. [ 360.503862][T14978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.672391][T14697] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.701088][T14697] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.756715][T14697] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.781905][T14988] bpq0: entered promiscuous mode [ 360.786898][T14988] bpq0: entered allmulticast mode [ 360.843062][T14988] bridge0: left promiscuous mode [ 360.849770][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.859796][T14988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.876036][T14697] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.939460][T14994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2446'. [ 361.240585][T14697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.357227][T14697] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.437917][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.445108][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.493483][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.500768][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.705218][T14695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.835193][T15038] netlink: 'syz.1.2453': attribute type 8 has an invalid length. [ 361.849570][T15037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2454'. [ 361.881786][T15037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2454'. [ 361.929806][T14695] veth0_vlan: entered promiscuous mode [ 361.956636][T14695] veth1_vlan: entered promiscuous mode [ 362.037150][T14695] veth0_macvtap: entered promiscuous mode [ 362.059274][T14695] veth1_macvtap: entered promiscuous mode [ 362.099008][T14695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.100884][T15046] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.126509][T14695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.167463][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.188176][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.209013][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.268317][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.333350][T14697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.459496][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.470925][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.498391][T15055] netlink: 'syz.0.2460': attribute type 5 has an invalid length. [ 362.537427][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 362.565767][T14697] veth0_vlan: entered promiscuous mode [ 362.588701][T15055] bridge5: entered promiscuous mode [ 362.596437][T15055] bridge5: entered allmulticast mode [ 362.621797][T14697] veth1_vlan: entered promiscuous mode [ 362.629815][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.651854][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.812702][T15066] IPVS: Error connecting to the multicast addr [ 362.820577][T14697] veth0_macvtap: entered promiscuous mode [ 362.877959][T14697] veth1_macvtap: entered promiscuous mode [ 363.157857][T14697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.216648][T14697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.274053][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.287641][T15088] C: renamed from team_slave_0 [ 363.322640][T15088] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 363.341680][T15088] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 363.391830][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.401389][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.410225][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.574575][ T3029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.759020][ T3029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.890581][ T3029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.916064][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.950230][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.006466][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.021287][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.043964][ T3029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.276088][ T3029] bridge_slave_1: left allmulticast mode [ 364.288133][ T3029] bridge_slave_1: left promiscuous mode [ 364.295708][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.313102][ T3029] bridge_slave_0: left allmulticast mode [ 364.318850][ T3029] bridge_slave_0: left promiscuous mode [ 364.332008][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.664256][T15104] __nla_validate_parse: 2 callbacks suppressed [ 364.664294][T15104] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2471'. [ 364.965729][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.979298][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.999733][ T3029] bond0 (unregistering): Released all slaves [ 365.032860][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.042631][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.050533][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.063942][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.071922][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.231259][T15112] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 365.394371][T15113] bond24: (slave bridge5): making interface the new active one [ 365.420639][T15113] bond24: (slave bridge5): Enslaving as an active interface with an up link [ 365.676706][T15123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'. [ 365.718083][T15123] vlan0: entered promiscuous mode [ 365.741593][T15118] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2473'. [ 365.880258][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.891822][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.900372][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.921175][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.932923][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.118405][T15131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.392798][ T3029] hsr_slave_0: left promiscuous mode [ 366.399028][ T3029] hsr_slave_1: left promiscuous mode [ 366.408211][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.416078][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.424038][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.432930][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.465692][ T3029] veth1_macvtap: left promiscuous mode [ 366.471605][ T3029] veth0_macvtap: left promiscuous mode [ 366.477275][ T3029] veth1_vlan: left promiscuous mode [ 366.482751][ T3029] veth0_vlan: left promiscuous mode [ 366.907568][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 367.095869][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 367.135148][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 367.171910][ T5849] Bluetooth: hci0: command tx timeout [ 368.061254][ T5849] Bluetooth: hci3: command tx timeout [ 368.083780][T15107] chnl_net:caif_netlink_parms(): no params data found [ 368.193302][T15156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.364220][T15169] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2484'. [ 368.365990][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.374781][T15169] x_tables: duplicate underflow at hook 3 [ 368.383285][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.544353][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.559219][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.568480][T15107] bridge_slave_0: entered allmulticast mode [ 368.577845][T15107] bridge_slave_0: entered promiscuous mode [ 368.590577][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.600899][T15107] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.608138][T15107] bridge_slave_1: entered allmulticast mode [ 368.618460][T15107] bridge_slave_1: entered promiscuous mode [ 368.634277][T15164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.700203][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.774152][ T3029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.805161][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.876617][ T3029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.070136][ T3029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.093001][T15107] team0: Port device team_slave_0 added [ 369.114273][T15107] team0: Port device team_slave_1 added [ 369.203140][ T3029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.250996][ T5849] Bluetooth: hci0: command tx timeout [ 369.308064][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.331049][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.358358][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.400191][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.408789][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.435489][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.447597][T15126] chnl_net:caif_netlink_parms(): no params data found [ 369.489529][T15203] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2492'. [ 369.500271][ T5849] block nbd0: Receive control failed (result -32) [ 369.608451][T15107] hsr_slave_0: entered promiscuous mode [ 369.617878][T15107] hsr_slave_1: entered promiscuous mode [ 369.626258][T15107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.633981][T15107] Cannot create hsr debugfs directory [ 369.696371][T15204] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 369.889335][T15217] nbd: nbd0 already in use [ 369.951090][T15217] 8021q: VLANs not supported on tunl0 [ 369.998756][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2495'. [ 370.024918][T15126] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.032649][T15126] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.040024][T15126] bridge_slave_0: entered allmulticast mode [ 370.058050][T15126] bridge_slave_0: entered promiscuous mode [ 370.075378][T15126] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.083369][T15126] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.091303][T15126] bridge_slave_1: entered allmulticast mode [ 370.099224][T15126] bridge_slave_1: entered promiscuous mode [ 370.121089][ T3029] bridge_slave_1: left allmulticast mode [ 370.127270][ T3029] bridge_slave_1: left promiscuous mode [ 370.140864][ T5849] Bluetooth: hci3: command tx timeout [ 370.143501][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.177681][ T3029] bridge_slave_0: left allmulticast mode [ 370.191127][ T3029] bridge_slave_0: left promiscuous mode [ 370.196952][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.290307][T15229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.692874][T15257] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 370.917173][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.931492][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.944278][ T3029] bond0 (unregistering): Released all slaves [ 371.105033][T15126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.205091][T15126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.456764][T15126] team0: Port device team_slave_0 added [ 371.466016][T15126] team0: Port device team_slave_1 added [ 371.590448][T15126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.628425][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.676024][T15126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.764395][T15126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.783756][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.784098][T15276] netlink: 'syz.4.2511': attribute type 1 has an invalid length. [ 371.818046][T15126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.123040][ T3029] hsr_slave_0: left promiscuous mode [ 372.143788][ T3029] hsr_slave_1: left promiscuous mode [ 372.164168][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.182171][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.183154][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.196812][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.205223][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.208146][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.212653][ T5839] Bluetooth: hci3: command tx timeout [ 372.226878][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.280207][ T3029] veth1_macvtap: left promiscuous mode [ 372.286483][ T3029] veth0_macvtap: left promiscuous mode [ 372.293577][ T3029] veth1_vlan: left promiscuous mode [ 372.299054][ T3029] veth0_vlan: left promiscuous mode [ 372.306266][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.314175][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.378071][T15286] No such timeout policy "syz1" [ 372.798278][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 372.840905][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 373.371388][T15126] hsr_slave_0: entered promiscuous mode [ 373.378110][T15126] hsr_slave_1: entered promiscuous mode [ 373.394875][T15126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.407438][T15126] Cannot create hsr debugfs directory [ 373.486485][T15290] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2514'. [ 373.497490][T15290] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2514'. [ 374.034182][T15303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2518'. [ 374.054068][T15107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.158420][T15107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.216229][T15107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.291389][ T5839] Bluetooth: hci3: command tx timeout [ 374.370980][ T5839] Bluetooth: hci2: command tx timeout [ 374.399609][ T3029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.420215][T15107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.563361][ T3029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.654000][T15329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2521'. [ 374.666330][T15329] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2521'. [ 374.754517][ T3029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.973812][ T3029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.085923][T15338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2522'. [ 375.138498][T15281] chnl_net:caif_netlink_parms(): no params data found [ 375.291616][T15332] block nbd1: server does not support multiple connections per device. [ 375.302968][T15332] block nbd1: shutting down sockets [ 375.387746][T15126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.443596][T15281] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.451255][T15281] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.460238][T15281] bridge_slave_0: entered allmulticast mode [ 375.468157][T15281] bridge_slave_0: entered promiscuous mode [ 375.477575][T15281] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.490887][T15281] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.498134][T15281] bridge_slave_1: entered allmulticast mode [ 375.514933][T15281] bridge_slave_1: entered promiscuous mode [ 375.530994][T15126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.585112][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.751379][T15126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.801773][T15126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.833277][T15281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.848294][T15356] delete_channel: no stack [ 375.868153][ T3029] bridge_slave_1: left allmulticast mode [ 375.881163][ T3029] bridge_slave_1: left promiscuous mode [ 375.886936][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.911749][ T3029] bridge_slave_0: left allmulticast mode [ 375.917420][ T3029] bridge_slave_0: left promiscuous mode [ 375.930980][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.955814][T15363] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 375.975344][T15363] netlink: 'syz.4.2527': attribute type 4 has an invalid length. [ 375.990374][T15363] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.2527'. [ 376.367703][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.379614][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.390181][ T3029] bond0 (unregistering): Released all slaves [ 376.454217][ T5839] Bluetooth: hci2: command tx timeout [ 376.528220][ T3029] bond1 (unregistering): Released all slaves [ 376.556465][T15281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.710008][T15107] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.789494][T15380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2531'. [ 376.820094][T15281] team0: Port device team_slave_0 added [ 376.840439][T15281] team0: Port device team_slave_1 added [ 376.863415][T14173] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.870629][T14173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.960044][T15381] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2530'. [ 376.973178][T15378] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2530'. [ 376.986601][T14173] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.993841][T14173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.028003][T15382] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.094320][T15281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.104729][T15281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.133636][T15281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.151528][T15382] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.188095][T15281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.201707][T15281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.228497][T15281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.274065][T15382] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.500569][T15382] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.583200][ T3029] hsr_slave_0: left promiscuous mode [ 377.600839][ T3029] hsr_slave_1: left promiscuous mode [ 377.613112][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.630493][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.638812][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.646566][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.687014][ T3029] veth1_macvtap: left promiscuous mode [ 377.692889][ T3029] veth0_macvtap: left promiscuous mode [ 377.698517][ T3029] veth1_vlan: left promiscuous mode [ 378.218340][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 378.259100][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 378.537778][ T5839] Bluetooth: hci2: command tx timeout [ 378.704394][T15281] hsr_slave_0: entered promiscuous mode [ 378.712332][T15281] hsr_slave_1: entered promiscuous mode [ 378.718757][T15281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.727199][T15281] Cannot create hsr debugfs directory [ 379.007291][T15126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.038859][T14180] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.068330][ T1163] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.149192][T14173] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.234603][T15126] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.273216][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.280394][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.343355][T14173] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.401779][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.408984][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.450250][T15416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2541'. [ 379.517680][T15418] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 379.568756][T15420] sock: sock_set_timeout: `syz.0.2542' (pid 15420) tries to set negative timeout [ 379.597910][T15418] 8021q: adding VLAN 0 to HW filter on device bond26 [ 379.616738][T15107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.897689][T15107] veth0_vlan: entered promiscuous mode [ 379.936244][T15107] veth1_vlan: entered promiscuous mode [ 380.030480][T15107] veth0_macvtap: entered promiscuous mode [ 380.061932][T15107] veth1_macvtap: entered promiscuous mode [ 380.146267][T15281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.150432][T15434] netlink: 'syz.0.2546': attribute type 1 has an invalid length. [ 380.167838][T15281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.213575][T15416] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 380.241032][T15281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.272640][T15281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.315489][T15107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.374954][T15107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.431882][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.475246][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.481626][T15450] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 380.496881][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.501774][T15450] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2548'. [ 380.524711][T15126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.534143][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'. [ 380.554316][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.563686][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2548'. [ 380.590006][T15450] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2548'. [ 380.611873][ T5839] Bluetooth: hci2: command tx timeout [ 380.762884][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.791156][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.839757][T15126] veth0_vlan: entered promiscuous mode [ 380.879616][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.892951][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.907298][T15126] veth1_vlan: entered promiscuous mode [ 380.918950][T15281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.015645][T15281] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.064373][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.071676][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.123496][T14173] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.130724][T14173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.148837][T15126] veth0_macvtap: entered promiscuous mode [ 381.166897][T15126] veth1_macvtap: entered promiscuous mode [ 381.230214][T15126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.376220][ T3029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.409674][T15126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.598760][ T3029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.686250][T14175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.707001][T14175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.778655][ T3029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.824921][T14175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.843968][T14175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.920063][ T3029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.008729][T15281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.101462][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.114546][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.180842][T14180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.188715][T14180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.215054][ T3029] bridge_slave_1: left allmulticast mode [ 382.221814][ T3029] bridge_slave_1: left promiscuous mode [ 382.227618][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.237382][ T3029] bridge_slave_0: left allmulticast mode [ 382.244372][ T3029] bridge_slave_0: left promiscuous mode [ 382.250257][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.709495][T15468] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 382.767604][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.791589][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.802990][ T3029] bond0 (unregistering): Released all slaves [ 382.905042][T15469] gretap0: left promiscuous mode [ 383.006234][T15469] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.054920][T15469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.091752][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.104855][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.113732][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.123042][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.133333][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.407495][T15476] ip6gre2: entered promiscuous mode [ 383.575014][T15281] veth0_vlan: entered promiscuous mode [ 383.662207][T15281] veth1_vlan: entered promiscuous mode [ 383.823196][T15281] veth0_macvtap: entered promiscuous mode [ 383.853991][T15281] veth1_macvtap: entered promiscuous mode [ 383.923275][T15281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.978317][T15281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.139900][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.154830][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.176550][ T3029] hsr_slave_0: left promiscuous mode [ 384.183016][ T3029] hsr_slave_1: left promiscuous mode [ 384.188971][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.196584][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.205994][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.214469][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.239779][ T3029] veth1_macvtap: left promiscuous mode [ 384.245743][ T3029] veth0_macvtap: left promiscuous mode [ 384.251616][ T3029] veth1_vlan: left promiscuous mode [ 384.256920][ T3029] veth0_vlan: left promiscuous mode [ 384.687173][T15487] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 384.984829][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.996396][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.006291][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.027682][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.057515][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.066485][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 385.125162][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 385.170817][ T5839] Bluetooth: hci0: command tx timeout [ 385.576704][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.642702][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.818758][T15499] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 385.884796][T15502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2558'. [ 386.133732][T15473] chnl_net:caif_netlink_parms(): no params data found [ 386.188342][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.205368][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.340273][T15514] netlink: 'syz.0.2560': attribute type 1 has an invalid length. [ 386.354916][T15514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2560'. [ 386.470213][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.486727][T15473] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.500316][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.510089][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.526017][T15473] bridge_slave_0: entered allmulticast mode [ 386.538242][T15473] bridge_slave_0: entered promiscuous mode [ 386.595903][T15473] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.609615][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.623058][T15473] bridge_slave_1: entered allmulticast mode [ 386.631200][T15473] bridge_slave_1: entered promiscuous mode [ 386.803198][T15473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.816164][T15473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.876839][ T3029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.978296][T15473] team0: Port device team_slave_0 added [ 387.071386][ T3029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.091437][ T5849] Bluetooth: hci3: command tx timeout [ 387.187400][T15473] team0: Port device team_slave_1 added [ 387.252977][ T5849] Bluetooth: hci0: command tx timeout [ 387.348770][ T3029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.453418][T15473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.460420][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.488013][T15473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.553671][T15473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.570512][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.601102][T15473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.652193][ T3029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.688786][T15490] chnl_net:caif_netlink_parms(): no params data found [ 388.048153][T15548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.141298][T15473] hsr_slave_0: entered promiscuous mode [ 388.148144][T15473] hsr_slave_1: entered promiscuous mode [ 388.154962][T15473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.163718][T15473] Cannot create hsr debugfs directory [ 388.238237][T15550] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 388.245588][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.263512][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.271688][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.279873][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.287731][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.346564][ T3029] bridge_slave_1: left allmulticast mode [ 388.352372][ T3029] bridge_slave_1: left promiscuous mode [ 388.359488][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.371793][ T3029] bridge_slave_0: left allmulticast mode [ 388.377495][ T3029] bridge_slave_0: left promiscuous mode [ 388.384326][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.794626][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.807998][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.820872][ T3029] bond0 (unregistering): Released all slaves [ 388.874796][T15556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2568'. [ 388.892374][T15556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2568'. [ 388.937215][T15490] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.960915][T15490] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.992428][T15490] bridge_slave_0: entered allmulticast mode [ 389.000414][T15490] bridge_slave_0: entered promiscuous mode [ 389.042755][T15490] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.049942][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.068969][T15490] bridge_slave_1: entered allmulticast mode [ 389.086744][T15490] bridge_slave_1: entered promiscuous mode [ 389.172177][ T5849] Bluetooth: hci3: command 0x041b tx timeout [ 389.205701][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 389.331028][ T5839] Bluetooth: hci0: command tx timeout [ 389.372234][T15574] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 389.419541][T15490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.444846][T15490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.467082][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'. [ 389.765882][T15490] team0: Port device team_slave_0 added [ 389.807127][T15490] team0: Port device team_slave_1 added [ 390.108076][T15490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.115248][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.142427][T15490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.163133][T15490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.170122][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.196684][T15490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.229941][ T3029] hsr_slave_0: left promiscuous mode [ 390.237123][ T3029] hsr_slave_1: left promiscuous mode [ 390.244227][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.252371][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.260440][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.268086][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.294061][ T3029] veth1_macvtap: left promiscuous mode [ 390.299613][ T3029] veth0_macvtap: left promiscuous mode [ 390.305513][ T3029] veth1_vlan: left promiscuous mode [ 390.311071][ T3029] veth0_vlan: left promiscuous mode [ 390.371231][ T5839] Bluetooth: hci2: command tx timeout [ 390.796298][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 390.836542][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 391.255307][ T5839] Bluetooth: hci3: command 0x041b tx timeout [ 391.421074][ T5839] Bluetooth: hci0: command tx timeout [ 391.485852][T15490] hsr_slave_0: entered promiscuous mode [ 391.506710][T15490] hsr_slave_1: entered promiscuous mode [ 391.514743][T15490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.523107][T15490] Cannot create hsr debugfs directory [ 391.783170][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2579'. [ 391.792304][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 392.080862][T15553] chnl_net:caif_netlink_parms(): no params data found [ 392.290493][T15612] macsec2: entered promiscuous mode [ 392.299006][T15612] macsec2: entered allmulticast mode [ 392.369440][ T3029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.410556][T15473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.426148][T15473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.463298][ T5839] Bluetooth: hci2: command tx timeout [ 392.509660][T15620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2582'. [ 392.539631][ T3029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.562608][T15473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.640384][T15473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.684760][T15553] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.698114][T15553] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.707949][T15553] bridge_slave_0: entered allmulticast mode [ 392.724085][T15553] bridge_slave_0: entered promiscuous mode [ 392.770261][ T3029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.790549][T15553] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.800812][T15553] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.822027][T15553] bridge_slave_1: entered allmulticast mode [ 392.829559][T15553] bridge_slave_1: entered promiscuous mode [ 392.954018][ T3029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.029779][T15553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.094920][T15553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.240038][T15630] bond0: option min_links: invalid value (18446744073709551604) [ 393.259169][T15630] bond0: option min_links: allowed values 0 - 2147483647 [ 393.331224][ T5839] Bluetooth: hci3: command 0x041b tx timeout [ 393.389635][T15553] team0: Port device team_slave_0 added [ 393.398450][T15553] team0: Port device team_slave_1 added [ 393.545740][T15553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.557114][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.587363][T15553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.667258][T15553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.675157][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.701693][T15553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.723207][ T3029] bridge_slave_1: left allmulticast mode [ 393.728913][ T3029] bridge_slave_1: left promiscuous mode [ 393.735730][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.747624][ T3029] bridge_slave_0: left allmulticast mode [ 393.753614][ T3029] bridge_slave_0: left promiscuous mode [ 393.759329][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.297146][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.309992][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.321166][ T3029] bond0 (unregistering): Released all slaves [ 394.351376][T15490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.427861][T15490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.538052][ T5839] Bluetooth: hci2: command tx timeout [ 394.566566][T15490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.586649][T15490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.637059][T15553] hsr_slave_0: entered promiscuous mode [ 394.648773][T15553] hsr_slave_1: entered promiscuous mode [ 394.659317][T15553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.676898][T15553] Cannot create hsr debugfs directory [ 394.685327][T15648] netlink: 'syz.0.2588': attribute type 2 has an invalid length. [ 394.694232][T15648] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 394.702143][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 394.887877][T15473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.268741][ T3029] hsr_slave_0: left promiscuous mode [ 395.275210][ T3029] hsr_slave_1: left promiscuous mode [ 395.281647][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.289307][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.297901][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.305876][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.368114][ T3029] veth1_macvtap: left promiscuous mode [ 395.378280][ T3029] veth0_macvtap: left promiscuous mode [ 395.384354][ T3029] veth1_vlan: left promiscuous mode [ 395.389738][ T3029] veth0_vlan: left promiscuous mode [ 395.411170][ T5839] Bluetooth: hci3: command 0x041b tx timeout [ 396.148440][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 396.189384][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 396.610419][T15473] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.617570][ T5839] Bluetooth: hci2: command tx timeout [ 396.744138][T14175] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.751380][T14175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.839388][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.846701][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.165521][T15490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.381899][T15490] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.433862][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.441076][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.473508][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.480740][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.555226][T15473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.819669][T15553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.866301][T15553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.890237][T15553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.917903][T15553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.036899][T15473] veth0_vlan: entered promiscuous mode [ 398.078729][T15473] veth1_vlan: entered promiscuous mode [ 398.212113][T15473] veth0_macvtap: entered promiscuous mode [ 398.254236][T15473] veth1_macvtap: entered promiscuous mode [ 398.350065][T15473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.395954][T15473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.492880][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.513056][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.544961][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.560163][T14175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.598236][T15553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.622922][T15490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.708581][T15553] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.750938][T14173] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.758137][T14173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.829720][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.837029][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.893733][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.903275][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.010222][T15490] veth0_vlan: entered promiscuous mode [ 399.025728][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.074722][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.108389][T15490] veth1_vlan: entered promiscuous mode [ 399.303080][T15490] veth0_macvtap: entered promiscuous mode [ 399.345212][T15490] veth1_macvtap: entered promiscuous mode [ 399.399176][T15490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.464547][T15490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.665975][T14175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.713199][ T3029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.845984][T15713] netlink: 'syz.4.2599': attribute type 10 has an invalid length. [ 399.899695][T14173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.919372][T14173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.993161][ T3029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.064002][T15553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.219877][ T3029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.276648][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.300156][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.340149][ T3029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.376692][T15697] xt_CT: No such helper "snmp" [ 400.458607][ T3029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.490526][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.526712][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.606555][T15553] veth0_vlan: entered promiscuous mode [ 400.642057][T15553] veth1_vlan: entered promiscuous mode [ 400.750615][T15553] veth0_macvtap: entered promiscuous mode [ 400.779656][T15553] veth1_macvtap: entered promiscuous mode [ 400.831773][ T3029] bridge_slave_1: left allmulticast mode [ 400.837465][ T3029] bridge_slave_1: left promiscuous mode [ 400.843978][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.855431][ T3029] bridge_slave_0: left allmulticast mode [ 400.861851][ T3029] bridge_slave_0: left promiscuous mode [ 400.867608][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.308480][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 401.619532][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.637490][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.649208][ T3029] bond0 (unregistering): Released all slaves [ 401.683947][T15553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.717673][T15553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.748548][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.759336][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.769374][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.781770][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.801317][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.878741][T14175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.888013][T14175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.909577][T14175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.924623][T14175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.102385][T14174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.122086][T14174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.181863][T14173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.192567][T14173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.319213][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 402.361273][T15737] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2602'. [ 403.084282][ T3029] hsr_slave_0: left promiscuous mode [ 403.112043][ T3029] hsr_slave_1: left promiscuous mode [ 403.118362][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.159214][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.191831][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.202092][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.211336][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.217312][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.219557][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.236478][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 403.246254][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.306145][ T3029] veth1_macvtap: left promiscuous mode [ 403.321315][ T3029] veth0_macvtap: left promiscuous mode [ 403.327072][ T3029] veth1_vlan: left promiscuous mode [ 403.342594][ T3029] veth0_vlan: left promiscuous mode [ 403.722465][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.733691][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.742389][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.750621][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.782800][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.894750][ T5849] Bluetooth: hci0: command tx timeout [ 404.152818][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 404.231586][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 405.168287][T15732] chnl_net:caif_netlink_parms(): no params data found [ 405.331138][ T5849] Bluetooth: hci2: command tx timeout [ 405.587144][T15732] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.605120][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.626219][T15732] bridge_slave_0: entered allmulticast mode [ 405.640940][T15732] bridge_slave_0: entered promiscuous mode [ 405.649856][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.657668][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.665205][T15732] bridge_slave_1: entered allmulticast mode [ 405.678705][T15732] bridge_slave_1: entered promiscuous mode [ 405.815681][ T5849] Bluetooth: hci3: command tx timeout [ 405.851122][T15732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.876812][T15732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.970831][ T5849] Bluetooth: hci0: command tx timeout [ 406.036349][T15732] team0: Port device team_slave_0 added [ 406.097921][T15732] team0: Port device team_slave_1 added [ 406.378888][T15732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.393084][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.430458][T15732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.458241][T15732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.474471][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.511881][T15732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.735868][ T3029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.933879][ T3029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.012163][T15732] hsr_slave_0: entered promiscuous mode [ 407.018629][T15732] hsr_slave_1: entered promiscuous mode [ 407.026117][T15732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.033747][T15732] Cannot create hsr debugfs directory [ 407.124508][ T3029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.208064][T15762] chnl_net:caif_netlink_parms(): no params data found [ 407.283506][ T3029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.411264][ T5849] Bluetooth: hci2: command tx timeout [ 407.891985][ T5849] Bluetooth: hci3: command tx timeout [ 407.979003][T15752] chnl_net:caif_netlink_parms(): no params data found [ 408.051171][ T5849] Bluetooth: hci0: command tx timeout [ 408.069595][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.078315][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.085816][T15762] bridge_slave_0: entered allmulticast mode [ 408.094132][T15762] bridge_slave_0: entered promiscuous mode [ 408.103433][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.110608][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.118218][T15762] bridge_slave_1: entered allmulticast mode [ 408.126372][T15762] bridge_slave_1: entered promiscuous mode [ 408.463051][ T3029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.494445][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.508212][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.658842][ T3029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.677340][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.687113][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.696098][T15752] bridge_slave_0: entered allmulticast mode [ 408.704362][T15752] bridge_slave_0: entered promiscuous mode [ 408.738431][T15762] team0: Port device team_slave_0 added [ 408.748101][T15762] team0: Port device team_slave_1 added [ 408.773858][ T3029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.831644][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.848348][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.858888][T15752] bridge_slave_1: entered allmulticast mode [ 408.874252][T15752] bridge_slave_1: entered promiscuous mode [ 408.972329][ T3029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.000419][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.012475][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.016719][T15828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.059455][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.072802][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.079784][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.107787][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.185685][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.299866][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.314940][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.350488][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.475758][T15762] hsr_slave_0: entered promiscuous mode [ 409.487681][T15762] hsr_slave_1: entered promiscuous mode [ 409.494004][ T5849] Bluetooth: hci2: command tx timeout [ 409.507571][T15762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.516175][T15762] Cannot create hsr debugfs directory [ 409.527947][T15752] team0: Port device team_slave_0 added [ 409.537335][T15752] team0: Port device team_slave_1 added [ 409.643644][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.653138][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.679561][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.694777][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.702066][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.752021][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.971519][ T5849] Bluetooth: hci3: command tx timeout [ 410.014435][ T3029] bridge_slave_1: left allmulticast mode [ 410.020150][ T3029] bridge_slave_1: left promiscuous mode [ 410.030369][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.046083][ T3029] bridge_slave_0: left allmulticast mode [ 410.053186][ T3029] bridge_slave_0: left promiscuous mode [ 410.059025][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.070200][ T3029] bridge_slave_1: left allmulticast mode [ 410.076774][ T3029] bridge_slave_1: left promiscuous mode [ 410.083027][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.094223][ T3029] bridge_slave_0: left allmulticast mode [ 410.099889][ T3029] bridge_slave_0: left promiscuous mode [ 410.107526][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.131018][ T5849] Bluetooth: hci0: command tx timeout [ 410.208717][T15840] tipc: Trying to set illegal importance in message [ 410.555503][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.568055][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.579255][ T3029] bond0 (unregistering): Released all slaves [ 410.908122][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.922086][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.934035][ T3029] bond0 (unregistering): Released all slaves [ 410.987429][T15752] hsr_slave_0: entered promiscuous mode [ 410.994460][T15752] hsr_slave_1: entered promiscuous mode [ 411.005974][T15752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.013674][T15752] Cannot create hsr debugfs directory [ 411.071803][T15840] syzkaller0: entered promiscuous mode [ 411.077327][T15840] syzkaller0: entered allmulticast mode [ 411.277091][T15843] gtp1: entered promiscuous mode [ 411.282217][T15843] gtp1: entered allmulticast mode [ 411.387119][T15732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.452920][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2623'. [ 411.472393][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.485409][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.495610][T15732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.510213][T15732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.572019][ T5849] Bluetooth: hci2: command tx timeout [ 411.637494][T15732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.777493][T15865] x_tables: duplicate underflow at hook 2 [ 411.805113][T15857] syzkaller1: entered promiscuous mode [ 411.810618][T15857] syzkaller1: entered allmulticast mode [ 412.051546][ T5849] Bluetooth: hci3: command tx timeout [ 412.343787][T15732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.466765][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.618353][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.625591][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.789335][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.796564][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.860199][T15762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.079324][T15762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.102316][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2631'. [ 413.128852][T15762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.136148][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 413.154123][T15892] netlink: 'syz.4.2631': attribute type 10 has an invalid length. [ 413.176780][ T3029] hsr_slave_0: left promiscuous mode [ 413.201071][ T3029] hsr_slave_1: left promiscuous mode [ 413.207355][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.236546][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.255513][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.263616][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.287999][ T3029] hsr_slave_0: left promiscuous mode [ 413.314457][ T3029] hsr_slave_1: left promiscuous mode [ 413.322913][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.335421][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.361167][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.375380][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.481404][ T3029] veth1_macvtap: left promiscuous mode [ 413.490811][ T3029] veth0_macvtap: left promiscuous mode [ 413.497816][ T3029] veth1_vlan: left promiscuous mode [ 413.505748][ T3029] veth0_vlan: left promiscuous mode [ 413.529365][ T3029] veth1_macvtap: left promiscuous mode [ 413.536150][ T3029] veth0_macvtap: left promiscuous mode [ 413.544144][ T3029] veth1_vlan: left promiscuous mode [ 413.552933][ T3029] veth0_vlan: left promiscuous mode [ 414.423674][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 414.464359][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 415.280443][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 415.326902][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 415.764090][T15762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 415.789929][T15892] bridge7: port 1(team0) entered blocking state [ 415.799182][T15892] bridge7: port 1(team0) entered disabled state [ 415.805746][T15892] team0: entered allmulticast mode [ 416.022098][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 416.591564][T15915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2635'. [ 416.648575][T15752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.685430][T15752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.729239][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.746910][T15752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.772495][T15918] sctp: [Deprecated]: syz.4.2636 (pid 15918) Use of int in max_burst socket option. [ 416.772495][T15918] Use struct sctp_assoc_value instead [ 416.791773][T15752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.853554][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.895182][T15732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.948872][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.956073][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.074533][T15732] veth0_vlan: entered promiscuous mode [ 417.133546][T15732] veth1_vlan: entered promiscuous mode [ 417.218617][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.225893][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.249854][T15927] FAULT_INJECTION: forcing a failure. [ 417.249854][T15927] name failslab, interval 1, probability 0, space 0, times 0 [ 417.264435][T15927] CPU: 1 UID: 0 PID: 15927 Comm: syz.0.2637 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 417.264483][T15927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.264525][T15927] Call Trace: [ 417.264534][T15927] [ 417.264544][T15927] dump_stack_lvl+0x189/0x250 [ 417.264584][T15927] ? __pfx____ratelimit+0x10/0x10 [ 417.264609][T15927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.264653][T15927] ? __pfx__printk+0x10/0x10 [ 417.264683][T15927] ? __pfx___might_resched+0x10/0x10 [ 417.264714][T15927] ? fs_reclaim_acquire+0x7d/0x100 [ 417.264745][T15927] should_fail_ex+0x414/0x560 [ 417.264776][T15927] should_failslab+0xa8/0x100 [ 417.264800][T15927] kmem_cache_alloc_noprof+0x73/0x3c0 [ 417.264832][T15927] ? can_rx_register+0x16d/0x790 [ 417.264865][T15927] can_rx_register+0x16d/0x790 [ 417.264892][T15927] ? __pfx_raw_rcv+0x10/0x10 [ 417.264925][T15927] raw_enable_allfilters+0xe4/0x420 [ 417.264967][T15927] raw_bind+0x2a7/0x740 [ 417.265011][T15927] __sys_bind+0x2c6/0x3e0 [ 417.265039][T15927] ? __pfx___sys_bind+0x10/0x10 [ 417.265080][T15927] ? rcu_is_watching+0x15/0xb0 [ 417.265122][T15927] __x64_sys_bind+0x7a/0x90 [ 417.265147][T15927] do_syscall_64+0xfa/0x3b0 [ 417.265170][T15927] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.265192][T15927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.265211][T15927] ? clear_bhb_loop+0x60/0xb0 [ 417.265238][T15927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.265261][T15927] RIP: 0033:0x7fcdb278e929 [ 417.265283][T15927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.265302][T15927] RSP: 002b:00007fcdb3522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 417.265325][T15927] RAX: ffffffffffffffda RBX: 00007fcdb29b5fa0 RCX: 00007fcdb278e929 [ 417.265341][T15927] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 417.265354][T15927] RBP: 00007fcdb3522090 R08: 0000000000000000 R09: 0000000000000000 [ 417.265368][T15927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.265380][T15927] R13: 0000000000000000 R14: 00007fcdb29b5fa0 R15: 00007fff6a228cb8 [ 417.265414][T15927] [ 417.652589][T15732] veth0_macvtap: entered promiscuous mode [ 417.679689][T15732] veth1_macvtap: entered promiscuous mode [ 417.841213][T15732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.881583][T15762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.922093][T15732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.978984][T14180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.013025][T14180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.056421][T14180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.077755][T14180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.097450][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.183828][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.229126][T14175] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.236382][T14175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.297834][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.305047][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.369358][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.388416][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.470232][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.536556][T14180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.565158][T14180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.628485][T15762] veth0_vlan: entered promiscuous mode [ 418.648387][T15762] veth1_vlan: entered promiscuous mode [ 418.738371][T15762] veth0_macvtap: entered promiscuous mode [ 418.769340][T15762] veth1_macvtap: entered promiscuous mode [ 419.137960][T14174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.315049][T14174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.343212][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.388175][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.399113][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.458935][T14174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.513378][T14180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.525585][T14180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.557865][T14180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.584386][T14180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.662266][T14174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.807472][T14173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.821177][T14173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.881117][T14180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.888970][T14180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.892667][T15752] veth0_vlan: entered promiscuous mode [ 419.949874][T15752] veth1_vlan: entered promiscuous mode [ 420.009205][T14174] bridge_slave_1: left allmulticast mode [ 420.020860][T14174] bridge_slave_1: left promiscuous mode [ 420.036843][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.066379][T14174] bridge_slave_0: left allmulticast mode [ 420.080884][T14174] bridge_slave_0: left promiscuous mode [ 420.091001][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.735097][T14174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.766499][T14174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.795205][T14174] bond0 (unregistering): Released all slaves [ 420.858666][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.869297][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.879516][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.894711][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.903214][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.964196][T15752] veth0_macvtap: entered promiscuous mode [ 420.976740][T15752] veth1_macvtap: entered promiscuous mode [ 420.998156][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.010549][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.137922][T15960] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 421.215349][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.230714][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.340810][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.414330][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.482238][T14176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.512414][T14176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.561476][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.569335][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.124436][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 422.227130][T14174] hsr_slave_0: left promiscuous mode [ 422.272461][T14174] hsr_slave_1: left promiscuous mode [ 422.284305][T14174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.321068][T14174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.351826][T14174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.359303][T14174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.417507][T14174] veth1_macvtap: left promiscuous mode [ 422.430259][T14174] veth0_macvtap: left promiscuous mode [ 422.451058][T14174] veth1_vlan: left promiscuous mode [ 422.456490][T14174] veth0_vlan: left promiscuous mode [ 422.639399][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.650079][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.659153][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.668712][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.678569][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.939184][ T5849] Bluetooth: hci0: command tx timeout [ 423.065128][T14174] team0 (unregistering): Port device team_slave_1 removed [ 423.108487][T14174] team0 (unregistering): Port device team_slave_0 removed [ 423.539239][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.548368][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.556175][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.564342][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.576833][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.788954][T15977] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2647'. [ 424.166551][T15956] chnl_net:caif_netlink_parms(): no params data found [ 424.431924][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.439071][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.446525][T15956] bridge_slave_0: entered allmulticast mode [ 424.456574][T15956] bridge_slave_0: entered promiscuous mode [ 424.496443][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.506781][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.523708][T15956] bridge_slave_1: entered allmulticast mode [ 424.533777][T15956] bridge_slave_1: entered promiscuous mode [ 424.638327][T14174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.691335][ T5849] Bluetooth: hci2: command tx timeout [ 424.725940][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.758515][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.797274][T14174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.876474][T15956] team0: Port device team_slave_0 added [ 424.916691][T15956] team0: Port device team_slave_1 added [ 424.939456][T14174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.011143][ T5849] Bluetooth: hci0: command tx timeout [ 425.018797][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.026596][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.053012][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.067529][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.074707][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.102076][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.128755][T15998] netlink: 'syz.0.2650': attribute type 9 has an invalid length. [ 425.140989][T15998] netlink: 'syz.0.2650': attribute type 6 has an invalid length. [ 425.152327][T14174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.405737][T16004] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 425.523427][T15956] hsr_slave_0: entered promiscuous mode [ 425.530309][T15956] hsr_slave_1: entered promiscuous mode [ 425.539794][T15956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.549825][T15956] Cannot create hsr debugfs directory [ 425.608182][T15979] chnl_net:caif_netlink_parms(): no params data found [ 425.650910][ T5849] Bluetooth: hci3: command tx timeout [ 425.653367][T15971] chnl_net:caif_netlink_parms(): no params data found [ 425.789775][T16013] netlink: 'syz.4.2654': attribute type 1 has an invalid length. [ 425.974864][T14174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.238849][T14174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.333098][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.346668][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.356711][T15971] bridge_slave_0: entered allmulticast mode [ 426.365169][T15971] bridge_slave_0: entered promiscuous mode [ 426.406350][T16029] ip6gretap1: left allmulticast mode [ 426.411947][T16029] ip6gretap1: left promiscuous mode [ 426.418491][T16029] bridge3: port 1(ip6gretap1) entered disabled state [ 426.467538][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.481575][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.489016][T15971] bridge_slave_1: entered allmulticast mode [ 426.498884][T15971] bridge_slave_1: entered promiscuous mode [ 426.577111][T14174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.589513][T16035] netlink: 'syz.0.2659': attribute type 13 has an invalid length. [ 426.612741][T16035] netlink: 'syz.0.2659': attribute type 17 has an invalid length. [ 426.699213][T16035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.761980][T15979] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.771153][ T5849] Bluetooth: hci2: command tx timeout [ 426.774101][T15979] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.801505][T15979] bridge_slave_0: entered allmulticast mode [ 426.819985][T15979] bridge_slave_0: entered promiscuous mode [ 426.821510][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 426.829432][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 426.875406][T14174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.930210][T15979] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.937862][T15979] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.946022][T15979] bridge_slave_1: entered allmulticast mode [ 426.954741][T15979] bridge_slave_1: entered promiscuous mode [ 427.022955][T15971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.052875][T15979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.068089][T15979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.090857][ T5849] Bluetooth: hci0: command tx timeout [ 427.094860][T15971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.219226][T15971] team0: Port device team_slave_0 added [ 427.233514][T15979] team0: Port device team_slave_0 added [ 427.244655][T15979] team0: Port device team_slave_1 added [ 427.264013][T15971] team0: Port device team_slave_1 added [ 427.357884][T15979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.365510][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.392059][T15979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.405561][T15979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.418999][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.451706][T15979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.507542][T14174] bridge_slave_1: left allmulticast mode [ 427.520789][T14174] bridge_slave_1: left promiscuous mode [ 427.526750][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.537380][T14174] bridge_slave_0: left allmulticast mode [ 427.543645][T14174] bridge_slave_0: left promiscuous mode [ 427.549435][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.562222][T14174] bridge_slave_1: left allmulticast mode [ 427.567936][T14174] bridge_slave_1: left promiscuous mode [ 427.575324][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.585791][T14174] bridge_slave_0: left allmulticast mode [ 427.593055][T14174] bridge_slave_0: left promiscuous mode [ 427.598923][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.732532][ T5849] Bluetooth: hci3: command 0x041b tx timeout [ 427.947843][T16051] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 428.005303][T16052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2663'. [ 428.085468][T14174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.097132][T14174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.108317][T14174] bond0 (unregistering): Released all slaves [ 428.446706][T14174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.467378][T14174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.478568][T14174] bond0 (unregistering): Released all slaves [ 428.495302][T15971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.506508][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.533282][T15971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.636159][T15971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.648006][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.675101][T15971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.859250][ T5849] Bluetooth: hci2: command tx timeout [ 428.863020][T16059] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 428.886908][T15979] hsr_slave_0: entered promiscuous mode [ 428.893973][T15979] hsr_slave_1: entered promiscuous mode [ 428.900134][T15979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.907842][T15979] Cannot create hsr debugfs directory [ 429.014407][T15971] hsr_slave_0: entered promiscuous mode [ 429.025703][T15971] hsr_slave_1: entered promiscuous mode [ 429.032206][T15971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.040161][T15971] Cannot create hsr debugfs directory [ 429.126041][T15956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.166796][T15956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.181500][ T5849] Bluetooth: hci0: command tx timeout [ 429.189955][T15956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.250053][T15956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.812995][ T5849] Bluetooth: hci3: command 0x041b tx timeout [ 429.933707][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.010172][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.141382][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.148598][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.183951][T16072] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 430.195992][T16072] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 430.205568][T16072] CPU: 0 UID: 0 PID: 16072 Comm: syz.4.2667 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 430.217665][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.227724][T16072] RIP: 0010:percpu_ref_get_many+0x8d/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 430.233536][T16072] Code: 01 48 c7 c7 80 48 98 8b be 4b 03 00 00 48 c7 c2 c0 48 98 8b e8 b4 d9 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 5c f7 ff 49 8b 07 a8 03 75 62 [ 430.253146][T16072] RSP: 0018:ffffc90003c3fa40 EFLAGS: 00010006 [ 430.259229][T16072] RAX: 000000001fffe000 RBX: ffffffff822c7299 RCX: 27df266dcda2d200 [ 430.267203][T16072] RDX: 0000000000000000 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0 [ 430.275179][T16072] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822c7299 [ 430.283249][T16072] R10: dffffc0000000000 R11: fffffbfff1f4267f R12: dffffc0000000000 [ 430.291225][T16072] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 430.299200][T16072] FS: 00007f9f3cdf66c0(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 430.308215][T16072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.314794][T16072] CR2: 000020000001b030 CR3: 000000002ffb2000 CR4: 00000000003526f0 [ 430.322770][T16072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.330748][T16072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.338720][T16072] Call Trace: [ 430.342009][T16072] [ 430.344946][T16072] refill_obj_stock+0x254/0x850 [ 430.349843][T16072] ? refill_obj_stock+0x116/0x850 [ 430.354967][T16072] __memcg_slab_free_hook+0x127/0x3d0 [ 430.360359][T16072] ? __dequeue_signal+0x487/0x5b0 [ 430.365396][T16072] kmem_cache_free+0x223/0x400 [ 430.370172][T16072] __dequeue_signal+0x487/0x5b0 [ 430.375122][T16072] dequeue_signal+0x140/0x370 [ 430.379816][T16072] get_signal+0x55f/0x1340 [ 430.384265][T16072] arch_do_signal_or_restart+0x9a/0x750 [ 430.389826][T16072] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 430.395993][T16072] ? exit_to_user_mode_loop+0x40/0x110 [ 430.401462][T16072] exit_to_user_mode_loop+0x75/0x110 [ 430.406763][T16072] do_syscall_64+0x2bd/0x3b0 [ 430.411358][T16072] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.416559][T16072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.422646][T16072] ? clear_bhb_loop+0x60/0xb0 [ 430.427329][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.433222][T16072] RIP: 0033:0x7f9f3ef8e929 [ 430.437644][T16072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.457252][T16072] RSP: 002b:00007f9f3cdf6038 EFLAGS: 00000246 [ 430.463321][T16072] RAX: 0000000000000600 RBX: 00007f9f3f1b5fa0 RCX: 00007f9f3ef8e929 [ 430.471299][T16072] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 000000000000000e [ 430.479278][T16072] RBP: 00007f9f3f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 430.487250][T16072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.495231][T16072] R13: 0000000000000000 R14: 00007f9f3f1b5fa0 R15: 00007ffd102b9f78 [ 430.503311][T16072] [ 430.506342][T16072] Modules linked in: [ 430.510332][T16072] ---[ end trace 0000000000000000 ]--- [ 430.515788][T16072] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 430.521646][T16072] Code: 01 48 c7 c7 80 48 98 8b be 4b 03 00 00 48 c7 c2 c0 48 98 8b e8 b4 d9 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 5c f7 ff 49 8b 07 a8 03 75 62 [ 430.541262][T16072] RSP: 0018:ffffc90003c3fa40 EFLAGS: 00010006 [ 430.547363][T16072] RAX: 000000001fffe000 RBX: ffffffff822c7299 RCX: 27df266dcda2d200 [ 430.555346][T16072] RDX: 0000000000000000 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0 [ 430.563324][T16072] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822c7299 [ 430.571302][T16072] R10: dffffc0000000000 R11: fffffbfff1f4267f R12: dffffc0000000000 [ 430.579296][T16072] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 430.587292][T16072] FS: 00007f9f3cdf66c0(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 430.596235][T16072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.602824][T16072] CR2: 000020000001b030 CR3: 000000002ffb2000 CR4: 00000000003526f0 [ 430.610805][T16072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.618890][T16072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.626877][T16072] Kernel panic - not syncing: Fatal exception [ 430.633274][T16072] Kernel Offset: disabled [ 430.637594][T16072] Rebooting in 86400 seconds..