last executing test programs: 6.711454747s ago: executing program 1 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 5.514737391s ago: executing program 4 (id=1129): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) socket(0x1d, 0x2, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000001940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe80000000000000000000"], 0x0) 5.319054451s ago: executing program 2 (id=1130): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.132231s ago: executing program 2 (id=1132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="d9", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x2, 0x4080040) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$nl_route(r3, 0x0, 0x20000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x294, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x280, 0x1, [@m_vlan={0xfc, 0x15, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x870}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xad, 0x6, "d6292fcedfe3627194234ef3a08e780c5e98a9359d927ecce57d90421c096dcfac3698fa72512e738b0241ff4b99151647f1a8d026845f4b19bde59b92c5f1193b80c53ac0c24f8a9d881e331fe1337c94961f68555368aad18b95ffc87939b1e698aa7d2dd80fadd3e2b40e56e5a29699a821679ebd34395247a3e4e713ce744c82aab6d8ca7dc07fb5f94c817cd200edc8b1db662afcf13874574d18f95d7b4dc543de3767e806a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x180, 0x1, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x10f, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000001700)=""/4102, &(0x7f0000001040)=0x1006) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm, @sack_perm, @timestamp], 0x4) 5.131790604s ago: executing program 4 (id=1133): unshare(0x6a040000) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x3, 0x6ef, "123bb7", 0xa, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 4.810146708s ago: executing program 1 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x52f, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x40}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r4, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r5, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0xdf4d6000) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r6 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x11d, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x30, 0x5f, 0x0, 0x2e]}}, 0x0, 0x1e, 0x0, 0x9, 0x84, 0x0, @void, @value}, 0x28) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2e8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xb}]}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r7 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x6, 0x6, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000001940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.050695954s ago: executing program 2 (id=1136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be040000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 3.870470815s ago: executing program 1 (id=1138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="d9", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x2, 0x4080040) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$nl_route(r3, 0x0, 0x20000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x294, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x280, 0x1, [@m_vlan={0xfc, 0x15, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x870}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xad, 0x6, "d6292fcedfe3627194234ef3a08e780c5e98a9359d927ecce57d90421c096dcfac3698fa72512e738b0241ff4b99151647f1a8d026845f4b19bde59b92c5f1193b80c53ac0c24f8a9d881e331fe1337c94961f68555368aad18b95ffc87939b1e698aa7d2dd80fadd3e2b40e56e5a29699a821679ebd34395247a3e4e713ce744c82aab6d8ca7dc07fb5f94c817cd200edc8b1db662afcf13874574d18f95d7b4dc543de3767e806a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x180, 0x1, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x10f, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000001700)=""/4102, &(0x7f0000001040)=0x1006) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm, @sack_perm, @timestamp], 0x4) 3.700219294s ago: executing program 0 (id=1139): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) socket(0x1d, 0x2, 0x6) syz_emit_ethernet(0x4a, 0x0, 0x0) 3.470357819s ago: executing program 0 (id=1140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="d9", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x2, 0x4080040) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$nl_route(r3, 0x0, 0x20000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x294, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x280, 0x1, [@m_vlan={0xfc, 0x15, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x870}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xad, 0x6, "d6292fcedfe3627194234ef3a08e780c5e98a9359d927ecce57d90421c096dcfac3698fa72512e738b0241ff4b99151647f1a8d026845f4b19bde59b92c5f1193b80c53ac0c24f8a9d881e331fe1337c94961f68555368aad18b95ffc87939b1e698aa7d2dd80fadd3e2b40e56e5a29699a821679ebd34395247a3e4e713ce744c82aab6d8ca7dc07fb5f94c817cd200edc8b1db662afcf13874574d18f95d7b4dc543de3767e806a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x180, 0x1, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x10f, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000001700)=""/4102, &(0x7f0000001040)=0x1006) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm, @sack_perm, @timestamp], 0x4) 2.859923708s ago: executing program 4 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2.833839415s ago: executing program 1 (id=1143): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.675875157s ago: executing program 1 (id=1144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 2.532118221s ago: executing program 4 (id=1145): socket$kcm(0x2, 0xa, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x8000ffa4, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r8, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x81) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x1c, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r11, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x34000811) 2.424984341s ago: executing program 0 (id=1146): syz_emit_ethernet(0xda, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c944a6b21f22109ee302a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 2.26910263s ago: executing program 3 (id=1147): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x10000, 0x0, @void, @value}, 0x28) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0xffffffffffffffff, 0x11) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x59, "d4f46b4e71eff602ea3d11bc137f24784e964d3bdf3d522aeb0a00bd737f8e6e87bc569d84f610c6373b1ddbe0db712f061c777a4d8d393ef4d4ace9ecc0b89ed26f12cdf01e7a418cae20cb5818075e227928b7998350ae63"}, &(0x7f0000000080)=0x61) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x69, @private2, 0x5}}, 0x22, 0x6, 0x3e2d, 0x3, 0x8}, &(0x7f0000000240)=0x98) 2.154034642s ago: executing program 3 (id=1148): syz_emit_ethernet(0xda, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c944a6b21f22109ee302a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) (fail_nth: 1) 2.153287874s ago: executing program 0 (id=1149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 1.928209596s ago: executing program 3 (id=1150): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000100000f02000000040013000000000055f300000000030000000000000f020000007d7000305f002e"], 0x0, 0x46, 0x0, 0x0, 0x84, 0x0, @void, @value}, 0x28) (fail_nth: 1) 1.539561252s ago: executing program 2 (id=1151): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000100000f02000000040013000000000055f300000000030000000000000f020000007d7000305f002e"], 0x0, 0x46, 0x0, 0x0, 0x84, 0x0, @void, @value}, 0x28) 1.492310642s ago: executing program 3 (id=1152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf254c0000000c00580047000000000000000c0058002f000000000000000c0058005e000000000000000c00580072000018000000000c00580000000000000000000c0058000c00000000000000"], 0x5c}}, 0x4000010) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x6, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34020000020a01040000000000000000070000030c00044000000000000000030900010073797a31000000007b000600780d21012533a1eda4296e3c23051a814da00feb3ae7aded4e1344b9ecc486e6fe671d3fc6e28d764100b910ed8d52f5f93085a3e0f8d4ba5cab0bed1812509c4a08034ab6fad3b8cdbbcfc0c658d58407d2582760182b86293d2e669c8aa84d62024cdb64b45e2f8435c6bdbcc5528c9c3040184aec6c9a5e13c60008000240000000022f000600e0898441c4705ae32c1893c19f840950f4c312e15d9882f95267e998ac0e6a339bb3edcc895672732965c10086000600802b1cf2ecca4b1acdc46be139580413a8c3ed654151458eb0547887427b7e329742a821b500671cd26ee4f4883121773345ff96ded58e91c507002d7cc9efe3113cd7e231a2f3dd1c12c244cd28b208dd15c92eb81895503117aa4259ac1962b6fc5c20220107dea1a161ad95d6a5db64cb5c9f4851e68bae0e176bb821e7d1b8a100000c00044000000000000000030c0004400000000000000004b300060082bd4d1b040d27725358ca754945f5f640282e408fa0c57cbc218f2a28a968e3aa249c87b268be2295ef79300d4dd3d63ca198a6bb9ef1432ccf036b86be2fbf3f8a7b611082886df1a03d0075c8ba649b8b2a755942f73416b5a0b03587aba284334a3b4f5cb5ded707ecb474a92f24bc2d259626937a337b4681345bdede2fc190d10b1ae3eefcf1daaae81f5f57dfe292b726bdd42ac6fa552287bbedd09d8db676b1068423e134515cbd630df80034000000030a01080000000000000000050000030900010073797a31000000000900030073797a320000000008000a400000000414000000110001000000000000000000"], 0x290}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 1.332140703s ago: executing program 2 (id=1153): socket$kcm(0x2, 0xa, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x8000ffa4, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r8, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x81) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x1c, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r11, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x34000811) 1.152747862s ago: executing program 3 (id=1154): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.15152143s ago: executing program 4 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.044946335s ago: executing program 3 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 1.016060386s ago: executing program 1 (id=1157): unshare(0x6a040000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x3, 0x6ef, "123bb7", 0xa, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 915.23395ms ago: executing program 4 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 700.43877ms ago: executing program 0 (id=1159): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000aac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 75.065237ms ago: executing program 0 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x0) 0s ago: executing program 2 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="24000000100021042a296957aecde967b6000000", @ANYRES32=0x0, @ANYBLOB="5a8d0200000f000004001400"], 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) socket(0x2b, 0x3, 0xa760) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x28, &(0x7f00000000c0)=""/198, &(0x7f0000000240)=0xc6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x7, 0xdb, 0x3, 0x400, 0x815, 0x0, r2}) kernel console output (not intermixed with test programs): 4461][ T7069] hsr0: entered allmulticast mode [ 147.309802][ T7069] hsr_slave_0: entered allmulticast mode [ 147.316043][ T7069] hsr_slave_1: entered allmulticast mode [ 147.500695][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 147.681055][ T7077] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 147.709039][ T7080] netlink: 'syz.2.273': attribute type 2 has an invalid length. [ 147.736063][ T7077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.272'. [ 147.738379][ T7080] net_ratelimit: 141 callbacks suppressed [ 147.738398][ T7080] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 147.820298][ T7077] macvtap1: entered promiscuous mode [ 147.839060][ T7077] vlan0: entered promiscuous mode [ 147.846933][ T7077] macvtap1: entered allmulticast mode [ 147.854571][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 147.872786][ T7077] vlan0: entered allmulticast mode [ 147.912315][ T7077] veth0_vlan: entered allmulticast mode [ 147.921657][ T7077] vlan0: left allmulticast mode [ 147.935862][ T7077] veth0_vlan: left allmulticast mode [ 147.941558][ T7077] vlan0: left promiscuous mode [ 147.976617][ T7081] tc_dump_action: action bad kind [ 148.002237][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 148.189985][ T7094] netlink: 'syz.2.276': attribute type 2 has an invalid length. [ 148.225786][ T7094] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 148.241230][ T7096] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 148.253061][ T7098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.253636][ T7096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.277'. [ 148.298328][ T7099] macvtap1: entered promiscuous mode [ 148.315918][ T7099] vlan0: entered promiscuous mode [ 148.329878][ T7099] macvtap1: entered allmulticast mode [ 148.340548][ T7099] vlan0: entered allmulticast mode [ 148.351973][ T7099] veth0_vlan: entered allmulticast mode [ 148.407375][ T7099] vlan0: left allmulticast mode [ 148.412518][ T7099] veth0_vlan: left allmulticast mode [ 148.418663][ T7099] vlan0: left promiscuous mode [ 148.716581][ T7107] netlink: 'syz.2.280': attribute type 27 has an invalid length. [ 148.776516][ T7113] netlink: 'syz.3.281': attribute type 2 has an invalid length. [ 148.836788][ T7116] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 148.938412][ T7107] batman_adv: batadv0: Interface deactivated: dummy0 [ 148.952679][ T7122] netlink: 'syz.1.282': attribute type 27 has an invalid length. [ 148.975352][ T7123] smc: net device bond0 applied user defined pnetid SYZ0 [ 149.084040][ T7124] smc: net device bond0 erased user defined pnetid SYZ0 [ 149.179672][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.202409][ T7114] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.213647][ T7114] batman_adv: batadv0: Interface activated: dummy0 [ 149.228505][ T7114] batadv0: mtu less than device minimum [ 149.243902][ T7114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.256123][ T7114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.268158][ T7114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.280261][ T7114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.292293][ T7114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.787800][ T7122] batman_adv: batadv0: Interface deactivated: dummy0 [ 149.828149][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 149.904927][ T7128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.965528][ T7128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.020302][ T7128] hsr0: entered promiscuous mode [ 150.030643][ T7128] hsr0: entered allmulticast mode [ 150.037152][ T7128] hsr_slave_0: entered allmulticast mode [ 150.042934][ T7128] hsr_slave_1: entered allmulticast mode [ 150.065011][ T7137] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 150.312072][ T7142] bridge0: port 3(batadv0) entered blocking state [ 150.318762][ T7142] bridge0: port 3(batadv0) entered forwarding state [ 150.607822][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 150.775712][ T7144] tc_dump_action: action bad kind [ 150.853502][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 150.995756][ T7149] tc_dump_action: action bad kind [ 151.050964][ T7162] netlink: 'syz.2.291': attribute type 27 has an invalid length. [ 151.214339][ T7162] batman_adv: batadv0: Interface deactivated: dummy0 [ 151.240104][ T7162] hsr0: left promiscuous mode [ 151.262211][ T7162] hsr0: left allmulticast mode [ 151.289400][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 151.306480][ T7162] hsr_slave_0: left allmulticast mode [ 151.318296][ T7162] hsr_slave_1: left allmulticast mode [ 151.335444][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 151.414034][ T7163] tc_dump_action: action bad kind [ 151.634984][ T7178] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 151.970701][ T7192] netlink: 'syz.2.297': attribute type 2 has an invalid length. [ 152.162272][ T7184] tc_dump_action: action bad kind [ 152.272075][ T7198] netlink: 'syz.0.298': attribute type 27 has an invalid length. [ 152.411704][ T7198] batman_adv: batadv0: Interface deactivated: dummy0 [ 152.459397][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.467404][ T7199] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.476210][ T7199] batman_adv: batadv0: Interface activated: dummy0 [ 152.762002][ T7214] smc: net device bond0 applied user defined pnetid SYZ0 [ 152.772188][ T7213] net_ratelimit: 40 callbacks suppressed [ 152.772208][ T7213] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 152.813610][ T7215] smc: net device bond0 erased user defined pnetid SYZ0 [ 152.896061][ T7219] __nla_validate_parse: 4 callbacks suppressed [ 152.896082][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.4.303'. [ 152.936819][ T7219] macvtap1: entered promiscuous mode [ 152.942553][ T7219] vlan0: entered promiscuous mode [ 152.948541][ T7219] macvtap1: entered allmulticast mode [ 152.954309][ T7219] vlan0: entered allmulticast mode [ 152.960386][ T7219] veth0_vlan: entered allmulticast mode [ 152.984913][ T7219] vlan0: left allmulticast mode [ 153.013655][ T7219] veth0_vlan: left allmulticast mode [ 153.023904][ T7219] vlan0: left promiscuous mode [ 153.093279][ T7224] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.131339][ T7224] smc: net device bond0 erased user defined pnetid SYZ0 [ 153.319689][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 153.456103][ T7229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.857895][ T7234] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.915579][ T7240] smc: net device bond0 erased user defined pnetid SYZ0 [ 154.916329][ T7258] validate_nla: 2 callbacks suppressed [ 154.916351][ T7258] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 155.008685][ T7258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.312'. [ 155.066726][ T7259] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 155.130704][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.157521][ T7259] bridge0: port 3(batadv0) entered blocking state [ 155.164134][ T7259] bridge0: port 3(batadv0) entered forwarding state [ 155.212194][ T7259] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.425118][ T7267] netlink: 'syz.4.314': attribute type 2 has an invalid length. [ 155.472818][ T7269] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 155.530160][ T7259] netlink: 900 bytes leftover after parsing attributes in process `syz.2.312'. [ 155.539688][ T7266] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.585003][ T7268] smc: net device bond0 erased user defined pnetid SYZ0 [ 156.642719][ T7284] netlink: 'syz.4.316': attribute type 27 has an invalid length. [ 156.947722][ T7284] bridge0: port 3(batadv0) entered disabled state [ 157.030376][ T7284] hsr0: left promiscuous mode [ 157.049971][ T7284] hsr0: left allmulticast mode [ 157.062023][ T7292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.063913][ T7284] hsr_slave_0: left allmulticast mode [ 157.116170][ T7284] hsr_slave_1: left allmulticast mode [ 157.272592][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.293012][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.323124][ T7286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.364547][ T7289] erspan1: entered promiscuous mode [ 157.370152][ T7289] erspan1: entered allmulticast mode [ 157.427231][ T7298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.782813][ T7314] netlink: 'syz.0.322': attribute type 27 has an invalid length. [ 157.950660][ T7314] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.199071][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.223815][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.246119][ T7319] netlink: 'syz.1.323': attribute type 2 has an invalid length. [ 158.256173][ T7316] batman_adv: batadv0: Interface activated: dummy0 [ 158.273322][ T7316] batadv0: mtu less than device minimum [ 158.300204][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.301265][ T7320] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 158.312272][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.330755][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.342723][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.354740][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.366653][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.378641][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.390611][ T7316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.508657][ T7326] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 158.517002][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.325'. [ 158.570074][ T7328] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 158.661177][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 158.891280][ T7326] bridge0: port 3(batadv0) entered blocking state [ 158.897946][ T7326] bridge0: port 3(batadv0) entered forwarding state [ 158.905565][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.978774][ T7328] bridge0: port 3(batadv0) entered disabled state [ 158.993895][ T7337] netlink: 900 bytes leftover after parsing attributes in process `syz.4.325'. [ 159.068133][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 159.150777][ T7346] netlink: 'syz.0.327': attribute type 27 has an invalid length. [ 159.308128][ T7346] batman_adv: batadv0: Interface deactivated: dummy0 [ 159.366071][ T7353] netlink: 'syz.4.329': attribute type 2 has an invalid length. [ 159.410479][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.422203][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.430922][ T7350] batman_adv: batadv0: Interface activated: dummy0 [ 159.787807][ T7357] hsr0: left promiscuous mode [ 159.792821][ T7357] hsr0: left allmulticast mode [ 159.805043][ T7357] hsr_slave_0: left allmulticast mode [ 159.810615][ T7357] hsr_slave_1: left allmulticast mode [ 159.885736][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.898158][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.209937][ T7371] validate_nla: 2 callbacks suppressed [ 160.209957][ T7371] netlink: 'syz.1.334': attribute type 27 has an invalid length. [ 160.277054][ T7371] erspan1: left promiscuous mode [ 160.285767][ T7371] erspan1: left allmulticast mode [ 160.432225][ T7373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.451483][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.476409][ T7373] batman_adv: batadv0: Interface activated: dummy0 [ 160.959176][ T7385] netlink: 'syz.3.337': attribute type 27 has an invalid length. [ 161.346458][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.355215][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.437613][ T7389] macvtap1: entered promiscuous mode [ 161.443106][ T7389] vlan0: entered promiscuous mode [ 161.462208][ T7389] macvtap1: entered allmulticast mode [ 161.473348][ T7389] vlan0: entered allmulticast mode [ 161.494844][ T7389] veth0_vlan: entered allmulticast mode [ 161.508997][ T7389] vlan0: left allmulticast mode [ 161.513926][ T7389] veth0_vlan: left allmulticast mode [ 161.534809][ T7389] vlan0: left promiscuous mode [ 162.147655][ T7408] netlink: 'syz.2.341': attribute type 2 has an invalid length. [ 162.692515][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 162.723496][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 163.219973][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 163.534529][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 163.906508][ T7445] netlink: 'syz.1.350': attribute type 2 has an invalid length. [ 163.989131][ T7445] net_ratelimit: 59 callbacks suppressed [ 163.989151][ T7445] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 163.998773][ T7451] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 164.033512][ T7451] bridge0: port 3(batadv0) entered disabled state [ 164.080096][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 164.166811][ T7449] netlink: 900 bytes leftover after parsing attributes in process `syz.2.351'. [ 164.194609][ T7450] tc_dump_action: action bad kind [ 164.254811][ T7456] netlink: 'syz.1.352': attribute type 27 has an invalid length. [ 164.433287][ T7456] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.536030][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.546148][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.554237][ T7457] batman_adv: batadv0: Interface activated: dummy0 [ 164.567471][ T7457] batadv0: mtu less than device minimum [ 164.575066][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.587148][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.599178][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.611188][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.623117][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.635219][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.647220][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.659538][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.191485][ T7474] netlink: 'syz.0.356': attribute type 2 has an invalid length. [ 165.472794][ T7480] macvtap1: entered promiscuous mode [ 165.499191][ T7480] vlan0: entered promiscuous mode [ 165.512468][ T7480] macvtap1: entered allmulticast mode [ 165.521221][ T7480] vlan0: entered allmulticast mode [ 165.527323][ T7480] veth0_vlan: entered allmulticast mode [ 165.553786][ T7480] vlan0: left allmulticast mode [ 165.562180][ T7480] veth0_vlan: left allmulticast mode [ 165.579115][ T7480] vlan0: left promiscuous mode [ 165.635992][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 166.023905][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 166.047928][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 166.075696][ T7509] netlink: 'syz.1.365': attribute type 2 has an invalid length. [ 166.084009][ T7488] tc_dump_action: action bad kind [ 166.371635][ T7513] netlink: 'syz.1.366': attribute type 27 has an invalid length. [ 166.510151][ T7513] batman_adv: batadv0: Interface deactivated: dummy0 [ 166.650054][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.663791][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.672275][ T7514] batman_adv: batadv0: Interface activated: dummy0 [ 166.724508][ T7524] netlink: 'syz.4.367': attribute type 27 has an invalid length. [ 166.878103][ T7527] netlink: 'syz.2.368': attribute type 27 has an invalid length. [ 166.955953][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.964057][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.144267][ T7530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.179881][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.206149][ T7530] batman_adv: batadv0: Interface activated: dummy0 [ 167.285992][ T7537] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 167.305129][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.373'. [ 167.386850][ T7537] macvtap1: entered promiscuous mode [ 167.399782][ T7537] vlan0: entered promiscuous mode [ 167.411114][ T7537] macvtap1: entered allmulticast mode [ 167.420316][ T7537] vlan0: entered allmulticast mode [ 167.426753][ T7537] veth0_vlan: entered allmulticast mode [ 167.435921][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 167.478134][ T7537] vlan0: left allmulticast mode [ 167.483088][ T7537] veth0_vlan: left allmulticast mode [ 167.509444][ T7537] vlan0: left promiscuous mode [ 167.814986][ T7551] netlink: 'syz.4.374': attribute type 27 has an invalid length. [ 167.890133][ T7557] netlink: 'syz.2.375': attribute type 27 has an invalid length. [ 168.072224][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.082554][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.170426][ T7557] batman_adv: batadv0: Interface deactivated: dummy0 [ 168.187838][ T7534] tc_dump_action: action bad kind [ 168.393801][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.404529][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.421205][ T7555] batman_adv: batadv0: Interface activated: dummy0 [ 168.728922][ T7565] tc_dump_action: action bad kind [ 168.948343][ T7581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.984748][ T7581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.023189][ T7581] hsr0: entered promiscuous mode [ 169.030621][ T7583] netlink: 'syz.0.380': attribute type 27 has an invalid length. [ 169.041655][ T7581] hsr0: entered allmulticast mode [ 169.070527][ T7581] hsr_slave_0: entered allmulticast mode [ 169.095363][ T7581] hsr_slave_1: entered allmulticast mode [ 169.153959][ T7590] netlink: 'syz.1.381': attribute type 10 has an invalid length. [ 169.166875][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'. [ 169.172532][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 169.200538][ T7583] batman_adv: batadv0: Interface deactivated: dummy0 [ 169.210231][ T7591] netlink: 'syz.1.381': attribute type 10 has an invalid length. [ 169.278936][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.287826][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.296769][ T7586] batman_adv: batadv0: Interface activated: dummy0 [ 169.303707][ T7586] net_ratelimit: 79 callbacks suppressed [ 169.303722][ T7586] batadv0: mtu less than device minimum [ 169.317289][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.329306][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.340853][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.352626][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.364735][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.376507][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.388478][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.399978][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.411607][ T7586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.478029][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.683543][ T7597] netlink: 900 bytes leftover after parsing attributes in process `syz.1.384'. [ 169.752220][ T7599] macvtap1: entered promiscuous mode [ 169.788909][ T7599] vlan0: entered promiscuous mode [ 169.794387][ T7599] macvtap1: entered allmulticast mode [ 169.833242][ T7599] vlan0: entered allmulticast mode [ 169.851711][ T7599] veth0_vlan: entered allmulticast mode [ 169.876491][ T7599] vlan0: left allmulticast mode [ 169.881626][ T7599] veth0_vlan: left allmulticast mode [ 169.915739][ T7599] vlan0: left promiscuous mode [ 170.037317][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 170.099465][ T7603] tc_dump_action: action bad kind [ 170.128832][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 170.249019][ T7612] tc_dump_action: action bad kind [ 170.451235][ T7626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.391'. [ 170.538000][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.551495][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.576671][ T7626] macvtap1: entered promiscuous mode [ 170.582115][ T7626] vlan0: entered promiscuous mode [ 170.591491][ T7626] macvtap1: entered allmulticast mode [ 170.597505][ T7626] vlan0: entered allmulticast mode [ 170.602932][ T7626] veth0_vlan: entered allmulticast mode [ 170.620401][ T7626] vlan0: left allmulticast mode [ 170.625765][ T7626] veth0_vlan: left allmulticast mode [ 170.631097][ T7626] vlan0: left promiscuous mode [ 170.671017][ T7628] netlink: 900 bytes leftover after parsing attributes in process `syz.0.392'. [ 170.886353][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'. [ 170.912996][ T7639] bridge0: port 3(batadv0) entered blocking state [ 170.919712][ T7639] bridge0: port 3(batadv0) entered forwarding state [ 170.964801][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.993603][ T7639] bridge0: port 3(batadv0) entered disabled state [ 171.136829][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 171.295961][ T7649] tc_dump_action: action bad kind [ 171.313995][ T7657] validate_nla: 10 callbacks suppressed [ 171.314016][ T7657] netlink: 'syz.4.399': attribute type 27 has an invalid length. [ 171.337294][ T7654] netlink: 'syz.3.400': attribute type 2 has an invalid length. [ 171.369763][ T7660] bridge0: port 3(batadv0) entered blocking state [ 171.376481][ T7660] bridge0: port 3(batadv0) entered forwarding state [ 171.546854][ T7657] bridge0: port 3(batadv0) entered disabled state [ 171.760519][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 171.830587][ T7662] tc_dump_action: action bad kind [ 171.882090][ T7671] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.917946][ T7671] smc: net device bond0 erased user defined pnetid SYZ0 [ 172.227833][ T7674] netlink: 'syz.4.404': attribute type 2 has an invalid length. [ 172.269340][ T7676] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 172.313242][ T7676] macvtap1: entered promiscuous mode [ 172.324766][ T7676] vlan0: entered promiscuous mode [ 172.338961][ T7676] macvtap1: entered allmulticast mode [ 172.354564][ T7676] vlan0: entered allmulticast mode [ 172.365615][ T7676] veth0_vlan: entered allmulticast mode [ 172.398540][ T7676] vlan0: left allmulticast mode [ 172.414008][ T7676] veth0_vlan: left allmulticast mode [ 172.424264][ T7676] vlan0: left promiscuous mode [ 172.842038][ T7685] netlink: 'syz.0.407': attribute type 2 has an invalid length. [ 172.861707][ T7687] netlink: 'syz.4.406': attribute type 27 has an invalid length. [ 173.007761][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.017658][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.026801][ T7696] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 173.073645][ T7696] bridge0: port 3(batadv0) entered blocking state [ 173.079876][ T7691] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 173.080354][ T7696] bridge0: port 3(batadv0) entered forwarding state [ 173.152403][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.232535][ T7691] bridge0: port 3(batadv0) entered disabled state [ 173.800298][ T7715] netlink: 'syz.3.412': attribute type 27 has an invalid length. [ 174.007337][ T7720] netlink: 'syz.4.413': attribute type 27 has an invalid length. [ 174.436257][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.482401][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.602772][ T7718] net_ratelimit: 21 callbacks suppressed [ 174.602784][ T7718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.763120][ T7721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.942132][ T7718] syz.3.412 (7718) used greatest stack depth: 18912 bytes left [ 175.125031][ T7728] smc: net device bond0 applied user defined pnetid SYZ0 [ 175.133403][ T7728] smc: net device bond0 erased user defined pnetid SYZ0 [ 175.273239][ T7731] batman_adv: batadv0: Interface deactivated: dummy0 [ 175.285919][ T7731] hsr0: left promiscuous mode [ 175.290736][ T7731] hsr0: left allmulticast mode [ 175.301043][ T7731] hsr_slave_0: left allmulticast mode [ 175.306686][ T7731] hsr_slave_1: left allmulticast mode [ 175.383063][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.391918][ T7734] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.404041][ T7734] batman_adv: batadv0: Interface activated: dummy0 [ 175.413373][ T7734] batadv0: mtu less than device minimum [ 175.424839][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.436855][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.448829][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.460802][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.472764][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.484745][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.496722][ T7734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.316754][ T7743] macvtap1: entered promiscuous mode [ 176.324802][ T7743] vlan0: entered promiscuous mode [ 176.355832][ T7743] macvtap1: entered allmulticast mode [ 176.371623][ T7743] vlan0: entered allmulticast mode [ 176.383332][ T7743] veth0_vlan: entered allmulticast mode [ 176.414211][ T7743] vlan0: left allmulticast mode [ 176.424831][ T7756] validate_nla: 1 callbacks suppressed [ 176.424852][ T7756] netlink: 'syz.0.419': attribute type 27 has an invalid length. [ 176.439832][ T7743] veth0_vlan: left allmulticast mode [ 176.445861][ T7743] vlan0: left promiscuous mode [ 176.468944][ T7758] netlink: 'syz.3.421': attribute type 2 has an invalid length. [ 176.510283][ T7756] batman_adv: batadv0: Interface deactivated: dummy0 [ 176.529230][ T7757] netlink: 'syz.1.420': attribute type 27 has an invalid length. [ 176.634040][ T7757] batman_adv: batadv0: Interface deactivated: dummy0 [ 176.684546][ T7764] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 176.692800][ T7764] __nla_validate_parse: 2 callbacks suppressed [ 176.692816][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.422'. [ 176.706438][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.719330][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.727442][ T7748] batman_adv: batadv0: Interface activated: dummy0 [ 176.736562][ T7765] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 176.819265][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.832880][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.879139][ T7760] batman_adv: batadv0: Interface activated: dummy0 [ 176.997128][ T7764] bridge0: port 3(batadv0) entered blocking state [ 177.003811][ T7764] bridge0: port 3(batadv0) entered forwarding state [ 177.027429][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.042907][ T7765] bridge0: port 3(batadv0) entered disabled state [ 177.415399][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 177.447917][ T7783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.545495][ T7783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.626023][ T7783] hsr0: entered promiscuous mode [ 177.656340][ T7783] hsr0: entered allmulticast mode [ 177.735433][ T7801] netlink: 'syz.3.428': attribute type 27 has an invalid length. [ 177.777263][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 177.788586][ T7783] hsr_slave_0: entered allmulticast mode [ 177.794286][ T7783] hsr_slave_1: entered allmulticast mode [ 178.351284][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.376519][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.400571][ T7793] tc_dump_action: action bad kind [ 178.509279][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 178.653547][ T7818] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 178.662933][ T7812] netlink: 'syz.0.430': attribute type 27 has an invalid length. [ 178.684557][ T7810] tc_dump_action: action bad kind [ 178.777014][ T7812] batman_adv: batadv0: Interface deactivated: dummy0 [ 178.802934][ T7820] macvtap1: entered promiscuous mode [ 178.809111][ T7820] vlan0: entered promiscuous mode [ 178.815689][ T7820] macvtap1: entered allmulticast mode [ 178.821316][ T7820] vlan0: entered allmulticast mode [ 178.828080][ T7820] veth0_vlan: entered allmulticast mode [ 178.837533][ T7820] vlan0: left allmulticast mode [ 178.842428][ T7820] veth0_vlan: left allmulticast mode [ 178.850981][ T7820] vlan0: left promiscuous mode [ 178.906342][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.914609][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.923761][ T7815] batman_adv: batadv0: Interface activated: dummy0 [ 179.025599][ T7826] smc: net device bond0 applied user defined pnetid SYZ0 [ 179.054318][ T7827] smc: net device bond0 erased user defined pnetid SYZ0 [ 179.127912][ T7831] netlink: 'syz.1.434': attribute type 27 has an invalid length. [ 179.244046][ T7831] batman_adv: batadv0: Interface deactivated: dummy0 [ 179.381050][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.395401][ T7837] netlink: 'syz.0.435': attribute type 27 has an invalid length. [ 179.400648][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.443231][ T7832] batman_adv: batadv0: Interface activated: dummy0 [ 179.628844][ T7837] batman_adv: batadv0: Interface deactivated: dummy0 [ 179.753495][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.766581][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.774398][ T7838] batman_adv: batadv0: Interface activated: dummy0 [ 179.787737][ T7838] net_ratelimit: 99 callbacks suppressed [ 179.787756][ T7838] batadv0: mtu less than device minimum [ 179.802667][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.814736][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.826248][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.837707][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.849081][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.860458][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.871813][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.883187][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.894551][ T7838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.981064][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 180.088919][ T7844] tc_dump_action: action bad kind [ 180.146788][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 180.207038][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 180.451097][ T7859] smc: net device bond0 applied user defined pnetid SYZ0 [ 180.519301][ T7862] smc: net device bond0 erased user defined pnetid SYZ0 [ 180.887297][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 180.999622][ T7865] tc_dump_action: action bad kind [ 181.252239][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 181.453260][ T7890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.494131][ T7890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.523180][ T7890] hsr0: entered promiscuous mode [ 181.539350][ T7890] hsr0: entered allmulticast mode [ 181.550498][ T7890] hsr_slave_0: entered allmulticast mode [ 181.550828][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 181.565450][ T7890] hsr_slave_1: entered allmulticast mode [ 181.612763][ T7897] smc: net device bond0 applied user defined pnetid SYZ0 [ 181.639705][ T7899] smc: net device bond0 erased user defined pnetid SYZ0 [ 182.432241][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 182.673251][ T7904] tc_dump_action: action bad kind [ 182.742296][ T7919] netlink: 'syz.0.451': attribute type 27 has an invalid length. [ 182.970503][ T7919] batman_adv: batadv0: Interface deactivated: dummy0 [ 183.117311][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.156031][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.172993][ T7920] batman_adv: batadv0: Interface activated: dummy0 [ 183.817927][ T7937] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.873726][ T7940] smc: net device bond0 erased user defined pnetid SYZ0 [ 183.873925][ T7936] macvtap1: entered promiscuous mode [ 183.930575][ T7936] vlan0: entered promiscuous mode [ 183.963038][ T7936] macvtap1: entered allmulticast mode [ 183.990827][ T7936] vlan0: entered allmulticast mode [ 184.004973][ T7936] veth0_vlan: entered allmulticast mode [ 184.023266][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 184.058405][ T7936] vlan0: left allmulticast mode [ 184.063376][ T7936] veth0_vlan: left allmulticast mode [ 184.110157][ T7936] vlan0: left promiscuous mode [ 184.272431][ T7958] netlink: 'syz.3.458': attribute type 27 has an invalid length. [ 184.482218][ T7954] tc_dump_action: action bad kind [ 184.508970][ T7963] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 184.616491][ T7961] netlink: 900 bytes leftover after parsing attributes in process `syz.2.459'. [ 185.173353][ T7977] netlink: 'syz.0.463': attribute type 27 has an invalid length. [ 185.353196][ T7977] batman_adv: batadv0: Interface deactivated: dummy0 [ 185.543373][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.559309][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.570846][ T7978] batman_adv: batadv0: Interface activated: dummy0 [ 185.601318][ T7978] net_ratelimit: 33 callbacks suppressed [ 185.601339][ T7978] batadv0: mtu less than device minimum [ 185.614469][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.626467][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.638457][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.650414][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.662389][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.674081][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.685743][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.697787][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.709680][ T7978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.973066][ T7989] smc: net device bond0 applied user defined pnetid SYZ0 [ 185.989743][ T7989] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.197376][ T7997] netlink: 'syz.4.468': attribute type 27 has an invalid length. [ 186.279436][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.316340][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.412387][ T7999] macvtap1: entered promiscuous mode [ 186.418327][ T7999] vlan0: entered promiscuous mode [ 186.429201][ T7999] macvtap1: entered allmulticast mode [ 186.444857][ T7999] vlan0: entered allmulticast mode [ 186.456202][ T7999] veth0_vlan: entered allmulticast mode [ 186.475835][ T7999] vlan0: left allmulticast mode [ 186.480774][ T7999] veth0_vlan: left allmulticast mode [ 186.488076][ T7999] vlan0: left promiscuous mode [ 186.934841][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 187.007247][ T8002] tc_dump_action: action bad kind [ 187.228291][ T8026] netlink: 'syz.4.474': attribute type 2 has an invalid length. [ 188.195644][ T8051] netlink: 'syz.0.481': attribute type 27 has an invalid length. [ 188.212196][ T8052] netlink: 'syz.4.482': attribute type 27 has an invalid length. [ 188.407164][ T8051] batman_adv: batadv0: Interface deactivated: dummy0 [ 188.590558][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.613957][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.642833][ T8053] batman_adv: batadv0: Interface activated: dummy0 [ 188.804011][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.841874][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.515964][ T8074] netlink: 'syz.4.485': attribute type 27 has an invalid length. [ 190.231796][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.251909][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.606856][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 190.673920][ T8086] tc_dump_action: action bad kind [ 191.501082][ T8116] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 191.533974][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 191.572746][ T8113] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 191.629123][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 191.690840][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.749828][ T8113] netlink: 900 bytes leftover after parsing attributes in process `syz.3.495'. [ 191.830790][ T8105] tc_dump_action: action bad kind [ 192.581714][ T8130] netlink: 'syz.2.499': attribute type 27 has an invalid length. [ 192.692943][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 192.741457][ T8130] batman_adv: batadv0: Interface deactivated: dummy0 [ 192.811167][ T8130] hsr0: left promiscuous mode [ 192.821800][ T8130] hsr0: left allmulticast mode [ 192.831950][ T8130] hsr_slave_0: left allmulticast mode [ 192.842371][ T8130] hsr_slave_1: left allmulticast mode [ 192.929164][ T8151] netlink: 'syz.1.502': attribute type 2 has an invalid length. [ 192.991229][ T8153] net_ratelimit: 36 callbacks suppressed [ 192.991252][ T8153] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 193.020479][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.029291][ T8134] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.037209][ T8134] batman_adv: batadv0: Interface activated: dummy0 [ 193.044251][ T8134] batadv0: mtu less than device minimum [ 193.052793][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.064825][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.076804][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.088780][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.100760][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.112735][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.124789][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.136763][ T8134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.170174][ T8147] tc_dump_action: action bad kind [ 193.337991][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 193.463176][ T8155] tc_dump_action: action bad kind [ 193.540209][ T8164] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 193.550459][ T8164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.505'. [ 193.588899][ T8164] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 193.960833][ T8178] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.976271][ T8178] smc: net device bond0 erased user defined pnetid SYZ0 [ 194.302679][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.532038][ T8185] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 195.552034][ T8214] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 195.589500][ T8214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 195.610336][ T8213] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 195.761508][ T8214] bridge0: port 3(batadv0) entered blocking state [ 195.768218][ T8214] bridge0: port 3(batadv0) entered forwarding state [ 195.833889][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.863664][ T8213] bridge0: port 3(batadv0) entered disabled state [ 196.205909][ T5138] Bluetooth: hci3: command 0x0401 tx timeout [ 196.276430][ T8230] macvtap1: entered promiscuous mode [ 196.309525][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 196.319294][ T8230] vlan0: entered promiscuous mode [ 196.336421][ T8230] macvtap1: entered allmulticast mode [ 196.382955][ T8230] vlan0: entered allmulticast mode [ 196.403671][ T8230] veth0_vlan: entered allmulticast mode [ 196.425137][ T8241] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 196.437486][ T8230] vlan0: left allmulticast mode [ 196.449373][ T8230] veth0_vlan: left allmulticast mode [ 196.477493][ T8242] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 196.494852][ T8230] vlan0: left promiscuous mode [ 196.545148][ T8241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.524'. [ 196.786323][ T8233] tc_dump_action: action bad kind [ 197.501642][ T8266] netlink: 'syz.3.528': attribute type 2 has an invalid length. [ 198.034204][ T8274] netlink: 'syz.0.530': attribute type 27 has an invalid length. [ 198.164770][ T8274] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.282723][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.318729][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.346886][ T8275] batman_adv: batadv0: Interface activated: dummy0 [ 198.353575][ T8275] net_ratelimit: 14 callbacks suppressed [ 198.353592][ T8275] batadv0: mtu less than device minimum [ 198.368815][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.380793][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.392788][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.404716][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.416701][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.428639][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.428664][ T8281] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 198.440677][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.458854][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.470830][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.483662][ T8282] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 198.508559][ T8281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.532'. [ 198.568200][ T8280] smc: net device bond0 applied user defined pnetid SYZ0 [ 198.846325][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 199.006090][ T8295] netlink: 'syz.0.535': attribute type 27 has an invalid length. [ 199.241254][ T8295] batman_adv: batadv0: Interface deactivated: dummy0 [ 199.367043][ T8307] netlink: 'syz.3.538': attribute type 2 has an invalid length. [ 199.458049][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.479896][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.494233][ T8296] batman_adv: batadv0: Interface activated: dummy0 [ 200.046372][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 200.555680][ T8336] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 200.597749][ T8336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.543'. [ 200.635149][ T8336] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 200.917086][ T8343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.949751][ T8343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.994864][ T8343] hsr0: entered promiscuous mode [ 201.001248][ T8343] hsr0: entered allmulticast mode [ 201.009953][ T8343] hsr_slave_0: entered allmulticast mode [ 201.018099][ T8343] hsr_slave_1: entered allmulticast mode [ 201.455098][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 201.550457][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 202.160336][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.551'. [ 204.085506][ T8398] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 204.120218][ T8398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.554'. [ 204.145230][ T8400] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 204.218699][ T8398] bridge0: port 3(batadv0) entered blocking state [ 204.225419][ T8398] bridge0: port 3(batadv0) entered forwarding state [ 204.252771][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.326217][ T8400] bridge0: port 3(batadv0) entered disabled state [ 205.232361][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 205.257501][ T8425] net_ratelimit: 33 callbacks suppressed [ 205.257539][ T8425] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 205.555222][ T8429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.563'. [ 205.735392][ T8435] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 205.766692][ T8436] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 205.837488][ T8440] bridge0: port 3(batadv0) entered blocking state [ 205.844223][ T8440] bridge0: port 3(batadv0) entered forwarding state [ 205.868491][ T8440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.895111][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 205.913686][ T5881] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 206.064955][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 206.073505][ T8442] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 206.099298][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.567'. [ 206.118515][ T8442] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 206.690261][ T8448] netlink: 'syz.2.569': attribute type 10 has an invalid length. [ 206.731948][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.569'. [ 206.763271][ T8450] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 206.776540][ T8448] bridge0: port 3(batadv0) entered blocking state [ 206.783196][ T8448] bridge0: port 3(batadv0) entered forwarding state [ 206.793646][ T8450] netlink: 224 bytes leftover after parsing attributes in process `syz.3.571'. [ 206.813911][ T8456] netlink: 'syz.2.569': attribute type 10 has an invalid length. [ 206.821958][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.882286][ T8450] macvtap1: entered promiscuous mode [ 206.904931][ T8450] vlan0: entered promiscuous mode [ 206.913955][ T8450] macvtap1: entered allmulticast mode [ 206.923723][ T8450] vlan0: entered allmulticast mode [ 206.933835][ T8450] veth0_vlan: entered allmulticast mode [ 206.940399][ T5881] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 206.943451][ T8461] netlink: 'syz.1.572': attribute type 27 has an invalid length. [ 206.976016][ T8450] vlan0: left allmulticast mode [ 206.980951][ T8450] veth0_vlan: left allmulticast mode [ 206.989485][ T8450] vlan0: left promiscuous mode [ 207.050685][ T8456] bridge0: port 3(batadv0) entered disabled state [ 207.120551][ T8461] bridge0: port 3(batadv0) entered disabled state [ 207.141602][ T8461] batman_adv: batadv0: Interface deactivated: dummy0 [ 207.186473][ T8461] hsr0: left promiscuous mode [ 207.191311][ T8461] hsr0: left allmulticast mode [ 207.201429][ T8461] hsr_slave_0: left allmulticast mode [ 207.214720][ T8461] hsr_slave_1: left allmulticast mode [ 207.436165][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.453337][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.466192][ T8463] batman_adv: batadv0: Interface activated: dummy0 [ 207.473901][ T8463] batadv0: mtu less than device minimum [ 207.485456][ T8463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.535531][ T8464] netlink: 900 bytes leftover after parsing attributes in process `syz.2.569'. [ 208.069300][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.4.576'. [ 209.360174][ T8499] smc: net device bond0 erased user defined pnetid SYZ0 [ 210.657476][ T8512] smc: net device bond0 applied user defined pnetid SYZ0 [ 210.682627][ T8515] smc: net device bond0 erased user defined pnetid SYZ0 [ 211.634231][ T8537] net_ratelimit: 20 callbacks suppressed [ 211.634252][ T8537] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 211.727025][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.728040][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 211.734094][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 211.740497][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 211.746981][ T5838] Bluetooth: hci3: command 0x0401 tx timeout [ 213.172853][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 213.718408][ T8563] macvtap1: entered promiscuous mode [ 213.724234][ T8563] vlan0: entered promiscuous mode [ 213.733038][ T8563] macvtap1: entered allmulticast mode [ 213.746553][ T8563] vlan0: entered allmulticast mode [ 213.751737][ T8563] veth0_vlan: entered allmulticast mode [ 213.816026][ T8566] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 213.845369][ T8563] vlan0: left allmulticast mode [ 213.850526][ T8563] veth0_vlan: left allmulticast mode [ 213.860704][ T8563] vlan0: left promiscuous mode [ 214.172976][ T8571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.193299][ T8571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.205408][ T8576] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 214.213188][ T8576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.595'. [ 214.236624][ T8571] hsr0: entered promiscuous mode [ 214.242041][ T8571] hsr0: entered allmulticast mode [ 214.251358][ T8571] hsr_slave_0: entered allmulticast mode [ 214.258496][ T8571] hsr_slave_1: entered allmulticast mode [ 214.269117][ T8573] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 214.298050][ T8576] bridge0: port 3(batadv0) entered blocking state [ 214.304826][ T8576] bridge0: port 3(batadv0) entered forwarding state [ 214.312517][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.413020][ T8573] bridge0: port 3(batadv0) entered disabled state [ 215.097409][ T8576] netlink: 900 bytes leftover after parsing attributes in process `syz.1.595'. [ 215.657579][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 215.783059][ T8599] tc_dump_action: action bad kind [ 215.842562][ T8603] bridge0: port 3(batadv0) entered blocking state [ 215.849294][ T8603] bridge0: port 3(batadv0) entered forwarding state [ 215.860911][ T8603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.885051][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 215.900502][ T5844] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 216.206507][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 216.486077][ T5882] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 216.501319][ T8618] tc_dump_action: action bad kind [ 216.764915][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 216.913781][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 217.076854][ T8627] tc_dump_action: action bad kind [ 217.422055][ T8641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.449979][ T8641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.482016][ T8641] hsr0: entered promiscuous mode [ 217.502265][ T8641] hsr0: entered allmulticast mode [ 217.527593][ T8641] hsr_slave_0: entered allmulticast mode [ 217.555503][ T8641] hsr_slave_1: entered allmulticast mode [ 218.087894][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 218.187730][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 218.433926][ T8653] tc_dump_action: action bad kind [ 218.701350][ T8664] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 218.928723][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 219.573445][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 219.606682][ T8676] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 219.614438][ T8676] netlink: 224 bytes leftover after parsing attributes in process `syz.0.614'. [ 219.683908][ T8674] tc_dump_action: action bad kind [ 219.731389][ T8676] macvtap1: entered promiscuous mode [ 219.738565][ T8676] vlan0: entered promiscuous mode [ 219.744123][ T8676] macvtap1: entered allmulticast mode [ 219.751074][ T8676] vlan0: entered allmulticast mode [ 219.758778][ T8676] veth0_vlan: entered allmulticast mode [ 219.771159][ T8676] vlan0: left allmulticast mode [ 219.781651][ T8676] veth0_vlan: left allmulticast mode [ 219.789175][ T8676] vlan0: left promiscuous mode [ 219.789796][ T8684] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 219.897903][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 220.089429][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 220.176957][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 220.229400][ T8699] tc_dump_action: action bad kind [ 220.575318][ T8708] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 220.604144][ T8708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.622'. [ 220.992656][ T8718] macsec1: entered promiscuous mode [ 220.998214][ T8718] team0: entered promiscuous mode [ 221.003264][ T8718] team_slave_0: entered promiscuous mode [ 221.010250][ T8718] team_slave_1: entered promiscuous mode [ 221.019753][ T8718] team0: left promiscuous mode [ 221.025414][ T8718] team_slave_0: left promiscuous mode [ 221.031428][ T8718] team_slave_1: left promiscuous mode [ 221.076667][ T8719] bridge0: port 3(batadv0) entered blocking state [ 221.083351][ T8719] bridge0: port 3(batadv0) entered forwarding state [ 221.119465][ T8719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.135501][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 221.150868][ T5882] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 221.189006][ T8724] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 221.222740][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'. [ 221.295468][ T8726] netlink: 900 bytes leftover after parsing attributes in process `syz.0.626'. [ 221.361243][ T5882] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 221.958631][ T8742] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 222.091677][ T8745] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 222.105382][ T8747] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 222.113899][ T8745] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 222.124959][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 222.455450][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 222.470339][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 223.236978][ T8737] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 223.616645][ T8758] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 223.885385][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 223.899062][ T8782] __nla_validate_parse: 3 callbacks suppressed [ 223.899083][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 224.425975][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 224.652368][ T8801] macsec1: entered promiscuous mode [ 224.675942][ T8799] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 224.682020][ T8801] team0: entered promiscuous mode [ 224.703839][ T8801] team_slave_0: entered promiscuous mode [ 224.704804][ T8799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.643'. [ 224.710632][ T8801] team_slave_1: entered promiscuous mode [ 224.748958][ T8801] team0: left promiscuous mode [ 224.760059][ T8805] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 224.768509][ T8805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 224.769374][ T8801] team_slave_0: left promiscuous mode [ 224.801041][ T8801] team_slave_1: left promiscuous mode [ 224.815744][ T8806] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 224.878094][ T8788] tc_dump_action: action bad kind [ 224.977062][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 225.282909][ T8824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.953572][ T8835] bridge0: port 3(batadv0) entered blocking state [ 225.960293][ T8835] bridge0: port 3(batadv0) entered forwarding state [ 225.968012][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 225.990578][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.999387][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.010138][ T8835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.039136][ T8831] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 226.371951][ T8843] netlink: 892 bytes leftover after parsing attributes in process `syz.4.653'. [ 226.833732][ T8854] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 226.842961][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 227.163391][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 227.318878][ T8869] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 227.338950][ T8869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 227.376935][ T8870] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 227.457570][ T8874] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 227.465613][ T8874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.659'. [ 227.487899][ T8870] bridge0: port 3(batadv0) entered disabled state [ 227.552960][ T8874] macvtap1: entered promiscuous mode [ 227.561515][ T8874] vlan0: entered promiscuous mode [ 227.593308][ T8874] macvtap1: entered allmulticast mode [ 227.624966][ T8874] vlan0: entered allmulticast mode [ 227.645229][ T8874] veth0_vlan: entered allmulticast mode [ 227.806841][ T8882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.817183][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.830174][ T5844] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 228.044927][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 228.051102][ T8896] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 228.643924][ T8908] netlink: 'syz.1.667': attribute type 2 has an invalid length. [ 228.846532][ T1214] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 229.165349][ T8917] __nla_validate_parse: 1 callbacks suppressed [ 229.165372][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 229.691006][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 229.946832][ T8935] bridge0: port 3(batadv0) entered blocking state [ 229.953497][ T8935] bridge0: port 3(batadv0) entered forwarding state [ 229.973985][ T8935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.035628][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 230.125444][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 230.132099][ T8911] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 231.071440][ T8962] netlink: 'syz.2.678': attribute type 10 has an invalid length. [ 231.112618][ T8962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.678'. [ 231.172611][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 231.291618][ T5883] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 231.327365][ T8966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.360558][ T8962] netlink: 900 bytes leftover after parsing attributes in process `syz.2.678'. [ 232.000982][ T8986] bridge0: port 3(batadv0) entered blocking state [ 232.007835][ T8986] bridge0: port 3(batadv0) entered forwarding state [ 232.109477][ T8986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.125557][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 232.135398][ T5881] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 232.141048][ T5882] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 232.190267][ T8988] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 232.202034][ T8988] netlink: 224 bytes leftover after parsing attributes in process `syz.4.686'. [ 232.212345][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 232.272345][ T8991] netlink: 'syz.1.685': attribute type 2 has an invalid length. [ 232.336793][ T8988] macvtap1: entered promiscuous mode [ 232.353128][ T8988] vlan0: entered promiscuous mode [ 232.373926][ T8988] macvtap1: entered allmulticast mode [ 232.396292][ T8988] vlan0: entered allmulticast mode [ 232.413901][ T8988] veth0_vlan: entered allmulticast mode [ 232.448295][ T8988] vlan0: left allmulticast mode [ 232.453974][ T8988] veth0_vlan: left allmulticast mode [ 232.471453][ T8988] vlan0: left promiscuous mode [ 232.892442][ T9000] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 232.912526][ T9000] netlink: 224 bytes leftover after parsing attributes in process `syz.0.689'. [ 233.166409][ T9000] macvtap2: entered promiscuous mode [ 233.197406][ T9000] macvtap2: entered allmulticast mode [ 233.253792][ T9008] netlink: 'syz.1.690': attribute type 2 has an invalid length. [ 233.922388][ T9003] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 234.187971][ T9027] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 234.197934][ T9027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.694'. [ 234.226090][ T9027] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 234.246594][ T9027] bridge0: port 3(batadv0) entered disabled state [ 234.382191][ T9030] netlink: 'syz.1.693': attribute type 2 has an invalid length. [ 234.631314][ T9036] netlink: 'syz.3.696': attribute type 2 has an invalid length. [ 234.682847][ T9035] smc: net device bond0 applied user defined pnetid SYZ0 [ 234.691598][ T9035] smc: net device bond0 erased user defined pnetid SYZ0 [ 235.004838][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 235.195380][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 235.317276][ T9045] tc_dump_action: action bad kind [ 235.561593][ T9059] bridge0: port 3(batadv0) entered blocking state [ 235.568324][ T9059] bridge0: port 3(batadv0) entered forwarding state [ 235.600969][ T9059] net_ratelimit: 2 callbacks suppressed [ 235.600981][ T9059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.226048][ T9075] smc: net device bond0 applied user defined pnetid SYZ0 [ 236.247642][ T9077] smc: net device bond0 erased user defined pnetid SYZ0 [ 236.553032][ T9082] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 236.561525][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'. [ 236.632117][ T9083] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 236.828755][ T9083] bridge0: port 3(batadv0) entered disabled state [ 237.191241][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 237.206475][ T9096] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 237.229517][ T9096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.709'. [ 237.377656][ T9096] macvtap1: entered promiscuous mode [ 237.393302][ T9096] vlan0: entered promiscuous mode [ 237.399104][ T9096] macvtap1: entered allmulticast mode [ 237.404534][ T9096] vlan0: entered allmulticast mode [ 237.424841][ T9096] veth0_vlan: entered allmulticast mode [ 237.457471][ T9096] vlan0: left allmulticast mode [ 237.500302][ T9096] veth0_vlan: left allmulticast mode [ 237.530232][ T9096] vlan0: left promiscuous mode [ 237.898333][ T9110] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 237.964534][ T9110] netlink: 224 bytes leftover after parsing attributes in process `syz.3.712'. [ 238.034880][ T9089] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 238.172442][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 238.329923][ T9116] macvtap1: entered promiscuous mode [ 238.369781][ T9116] vlan0: entered promiscuous mode [ 238.410350][ T9116] macvtap1: entered allmulticast mode [ 238.451859][ T9116] vlan0: entered allmulticast mode [ 238.490518][ T9116] veth0_vlan: entered allmulticast mode [ 238.588352][ T9116] vlan0: left allmulticast mode [ 238.598069][ T9116] veth0_vlan: left allmulticast mode [ 238.614295][ T9116] vlan0: left promiscuous mode [ 238.661542][ T9124] tc_dump_action: action bad kind [ 238.762209][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 238.848123][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 238.895580][ T9129] tc_dump_action: action bad kind [ 238.994532][ T9136] netlink: 'syz.3.715': attribute type 2 has an invalid length. [ 239.352386][ T9144] smc: net device bond0 applied user defined pnetid SYZ0 [ 239.374191][ T9144] smc: net device bond0 erased user defined pnetid SYZ0 [ 239.725894][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 240.049882][ T9158] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 240.087631][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'. [ 240.179241][ T9162] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 240.617859][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 240.674177][ T9166] bridge0: port 3(batadv0) entered blocking state [ 240.680900][ T9166] bridge0: port 3(batadv0) entered forwarding state [ 240.730083][ T9166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.868621][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 241.094769][ T9169] tc_dump_action: action bad kind [ 241.598343][ T9194] netlink: 'syz.3.726': attribute type 2 has an invalid length. [ 241.688585][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 241.707162][ T9195] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 242.047364][ T9201] smc: net device bond0 applied user defined pnetid SYZ0 [ 242.108978][ T9204] smc: net device bond0 erased user defined pnetid SYZ0 [ 242.199577][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 242.277923][ T9202] tc_dump_action: action bad kind [ 242.635121][ T9210] netlink: 'syz.3.729': attribute type 2 has an invalid length. [ 242.950407][ T9217] netlink: 'syz.2.731': attribute type 10 has an invalid length. [ 242.974370][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'. [ 243.020103][ T9217] netlink: 'syz.2.731': attribute type 10 has an invalid length. [ 243.050663][ T9217] bridge0: port 3(batadv0) entered disabled state [ 243.331703][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 243.407816][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 243.561142][ T9227] tc_dump_action: action bad kind [ 243.880722][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 244.159792][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 244.243817][ T9246] tc_dump_action: action bad kind [ 244.363760][ T9258] netlink: 'syz.1.738': attribute type 2 has an invalid length. [ 244.383558][ T9257] smc: net device bond0 applied user defined pnetid SYZ0 [ 244.401054][ T9258] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.439529][ T9261] smc: net device bond0 erased user defined pnetid SYZ0 [ 244.655540][ T9260] tc_dump_action: action bad kind [ 245.183227][ T9274] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 245.202077][ T9274] __nla_validate_parse: 1 callbacks suppressed [ 245.202097][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.743'. [ 245.278243][ T9274] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 245.281809][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 245.322882][ T9282] smc: net device bond0 applied user defined pnetid SYZ0 [ 245.391748][ T9283] tc_dump_action: action bad kind [ 245.396144][ T9287] smc: net device bond0 erased user defined pnetid SYZ0 [ 245.797789][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 245.848483][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 245.854120][ T9293] bridge0: port 3(batadv0) entered blocking state [ 245.864017][ T9293] bridge0: port 3(batadv0) entered forwarding state [ 245.903934][ T9293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.924984][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 245.939874][ T1214] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 245.983908][ T9302] tc_dump_action: action bad kind [ 246.026261][ T1214] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 246.057640][ T9305] netlink: 'syz.4.749': attribute type 2 has an invalid length. [ 246.085915][ T9305] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.231251][ T9310] netlink: 'syz.0.750': attribute type 2 has an invalid length. [ 246.261151][ T9310] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.538955][ T9317] netlink: 'syz.2.752': attribute type 2 has an invalid length. [ 246.549449][ T9317] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.764944][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 246.803412][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 246.847070][ T9325] tc_dump_action: action bad kind [ 247.212733][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 247.322391][ T9335] tc_dump_action: action bad kind [ 247.389240][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 248.005617][ T9356] netlink: 'syz.1.760': attribute type 2 has an invalid length. [ 248.078197][ T9357] smc: net device bond0 applied user defined pnetid SYZ0 [ 248.127679][ T9357] smc: net device bond0 erased user defined pnetid SYZ0 [ 248.388860][ T9365] netlink: 'syz.0.761': attribute type 2 has an invalid length. [ 248.429447][ T9365] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 248.973397][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 249.428187][ T9387] netlink: 'syz.1.765': attribute type 2 has an invalid length. [ 249.512439][ T9389] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 249.607745][ T9394] netlink: 'syz.3.767': attribute type 2 has an invalid length. [ 250.255628][ T9402] netlink: 'syz.4.769': attribute type 27 has an invalid length. [ 250.426543][ T9402] hsr0: left promiscuous mode [ 250.442411][ T9402] hsr0: left allmulticast mode [ 250.471010][ T9402] hsr_slave_0: left allmulticast mode [ 250.488914][ T9402] hsr_slave_1: left allmulticast mode [ 250.529558][ T9404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.770'. [ 250.593659][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 251.030931][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 251.181999][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 251.213727][ T5881] net_ratelimit: 1 callbacks suppressed [ 251.213748][ T5881] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 251.249184][ T9428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.475035][ T5881] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 251.885335][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 252.050241][ T9452] macsec1: entered promiscuous mode [ 252.062588][ T9452] team0: entered promiscuous mode [ 252.069426][ T9452] team_slave_0: entered promiscuous mode [ 252.080822][ T9452] team_slave_1: entered promiscuous mode [ 252.123242][ T9452] team0: left promiscuous mode [ 252.130164][ T9452] team_slave_0: left promiscuous mode [ 252.137435][ T9452] team_slave_1: left promiscuous mode [ 252.149251][ T9459] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 252.217384][ T9459] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 252.619760][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.782'. [ 252.673266][ T9469] netlink: 'syz.2.783': attribute type 2 has an invalid length. [ 252.734147][ T9471] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 252.815068][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.784'. [ 253.030563][ T9478] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 253.039805][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.786'. [ 253.069193][ T9478] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 253.099513][ T9478] bridge0: port 3(batadv0) entered disabled state [ 253.191592][ T9478] netlink: 900 bytes leftover after parsing attributes in process `syz.0.786'. [ 253.254211][ T9489] netlink: 'syz.3.789': attribute type 2 has an invalid length. [ 253.339476][ T9493] openvswitch: netlink: EtherType 0 is less than min 600 [ 253.633233][ T9501] smc: net device bond0 applied user defined pnetid SYZ0 [ 253.679689][ T9501] smc: net device bond0 erased user defined pnetid SYZ0 [ 254.398599][ T9506] smc: net device bond0 applied user defined pnetid SYZ0 [ 254.461253][ T9512] smc: net device bond0 erased user defined pnetid SYZ0 [ 255.206251][ T9528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.796'. [ 255.429463][ T9531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.465266][ T9534] netlink: 'syz.4.798': attribute type 10 has an invalid length. [ 255.498306][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.798'. [ 255.520759][ T9536] netlink: 'syz.4.798': attribute type 10 has an invalid length. [ 255.557841][ T9536] netlink: 900 bytes leftover after parsing attributes in process `syz.4.798'. [ 255.603199][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.729563][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.820348][ T9542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.984186][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.013663][ T9547] netlink: 'syz.4.801': attribute type 27 has an invalid length. [ 256.172802][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 256.530309][ T9564] smc: net device bond0 applied user defined pnetid SYZ0 [ 256.551408][ T9567] smc: net device bond0 erased user defined pnetid SYZ0 [ 256.636139][ T9569] netlink: 'syz.0.807': attribute type 2 has an invalid length. [ 256.685529][ T9569] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 256.840769][ T9576] netlink: 'syz.4.809': attribute type 2 has an invalid length. [ 256.853898][ T9576] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 256.872258][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 257.512471][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 257.549724][ T9586] tc_dump_action: action bad kind [ 257.604203][ T9589] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 257.632739][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.812'. [ 257.668993][ T9589] macvtap3: entered promiscuous mode [ 257.690515][ T9589] macvtap3: entered allmulticast mode [ 257.840904][ T9601] netlink: 'syz.4.815': attribute type 2 has an invalid length. [ 257.946283][ T9603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.022436][ T9607] smc: net device bond0 applied user defined pnetid SYZ0 [ 258.033924][ T9607] smc: net device bond0 erased user defined pnetid SYZ0 [ 258.668979][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 258.762225][ T9624] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 258.770551][ T9624] netlink: 224 bytes leftover after parsing attributes in process `syz.4.820'. [ 258.809451][ T9624] macvtap1: entered promiscuous mode [ 258.835671][ T9624] vlan0: entered promiscuous mode [ 258.841154][ T9624] macvtap1: entered allmulticast mode [ 258.856196][ T9624] vlan0: entered allmulticast mode [ 258.861395][ T9624] veth0_vlan: entered allmulticast mode [ 258.951317][ T9624] vlan0: left allmulticast mode [ 258.959246][ T9624] veth0_vlan: left allmulticast mode [ 258.986552][ T9624] vlan0: left promiscuous mode [ 259.349721][ T9635] netlink: 'syz.0.822': attribute type 27 has an invalid length. [ 259.443199][ T9637] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 259.505620][ T9637] netlink: 224 bytes leftover after parsing attributes in process `syz.4.823'. [ 259.521754][ T9635] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.536300][ T9635] hsr0: left promiscuous mode [ 259.541396][ T9635] hsr0: left allmulticast mode [ 259.547455][ T9635] hsr_slave_0: left allmulticast mode [ 259.554083][ T9635] hsr_slave_1: left allmulticast mode [ 259.566646][ T9635] macvtap1: left promiscuous mode [ 259.572088][ T9635] macvtap1: left allmulticast mode [ 259.581986][ T9635] vlan0: left allmulticast mode [ 259.588029][ T9635] veth0_vlan: left allmulticast mode [ 259.593947][ T9635] vlan0: left promiscuous mode [ 259.602388][ T9635] macvtap2: left promiscuous mode [ 259.615503][ T9635] macvtap2: left allmulticast mode [ 259.703710][ T9637] macvtap1: entered promiscuous mode [ 259.723153][ T9637] vlan0: entered promiscuous mode [ 259.733813][ T9637] macvtap1: entered allmulticast mode [ 259.762935][ T9637] vlan0: entered allmulticast mode [ 259.772341][ T9637] veth0_vlan: entered allmulticast mode [ 259.798069][ T9637] vlan0: left allmulticast mode [ 259.803558][ T9637] veth0_vlan: left allmulticast mode [ 259.814801][ T9637] vlan0: left promiscuous mode [ 260.405391][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 260.433642][ T9655] macsec1: entered promiscuous mode [ 260.447244][ T9655] team0: entered promiscuous mode [ 260.452638][ T9655] team_slave_0: entered promiscuous mode [ 260.463031][ T9655] team_slave_1: entered promiscuous mode [ 260.475346][ T9655] team0: left promiscuous mode [ 260.480325][ T9655] team_slave_0: left promiscuous mode [ 260.486333][ T9655] team_slave_1: left promiscuous mode [ 260.494240][ T9661] netlink: 'syz.4.827': attribute type 27 has an invalid length. [ 260.554214][ T9656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.827'. [ 260.575099][ T9660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.592851][ T9644] tc_dump_action: action bad kind [ 261.058161][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 261.119171][ T9668] tc_dump_action: action bad kind [ 261.167566][ T9658] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 261.177021][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.511526][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 261.924476][ T9704] netlink: 'syz.0.836': attribute type 27 has an invalid length. [ 262.445027][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 263.013088][ T9727] smc: net device bond0 applied user defined pnetid SYZ0 [ 263.049763][ T9729] smc: net device bond0 erased user defined pnetid SYZ0 [ 263.313950][ T9709] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 263.459970][ T9734] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 263.490924][ T9734] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 264.525135][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 264.531807][ T9737] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 264.549156][ T9747] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 264.580870][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.847'. [ 264.638787][ T9753] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 264.666632][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.749768][ T9747] netlink: 900 bytes leftover after parsing attributes in process `syz.4.847'. [ 264.839986][ T9757] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 265.037036][ T9766] netlink: 'syz.4.851': attribute type 27 has an invalid length. [ 266.225349][ T9783] netlink: 'syz.4.854': attribute type 2 has an invalid length. [ 266.283384][ T9783] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 266.336363][ T9785] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 266.364900][ T9785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.855'. [ 266.488453][ T9785] macvtap1: entered promiscuous mode [ 266.515657][ T9785] vlan0: entered promiscuous mode [ 266.559651][ T9785] macvtap1: entered allmulticast mode [ 266.594866][ T9785] vlan0: entered allmulticast mode [ 266.600068][ T9785] veth0_vlan: entered allmulticast mode [ 266.605275][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 266.663693][ T9785] vlan0: left allmulticast mode [ 266.712061][ T9785] veth0_vlan: left allmulticast mode [ 266.748155][ T9785] vlan0: left promiscuous mode [ 267.047868][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 267.127104][ T9806] netlink: 'syz.3.858': attribute type 27 has an invalid length. [ 267.215946][ T9803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.339417][ T9806] bridge0: port 3(batadv0) entered disabled state [ 267.379628][ T9806] hsr0: left promiscuous mode [ 267.384376][ T9806] hsr0: left allmulticast mode [ 267.400845][ T9806] hsr_slave_0: left allmulticast mode [ 267.409701][ T9806] hsr_slave_1: left allmulticast mode [ 267.419744][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 267.433114][ T9820] netlink: 'syz.1.862': attribute type 27 has an invalid length. [ 267.447535][ T9794] tc_dump_action: action bad kind [ 267.522024][ T9820] bridge0: port 3(batadv0) entered disabled state [ 267.536544][ T9820] batman_adv: batadv0: Interface deactivated: dummy0 [ 267.549465][ T9810] tc_dump_action: action bad kind [ 267.821203][ T9823] netlink: 'syz.2.863': attribute type 27 has an invalid length. [ 267.892435][ T9823] bridge0: port 3(batadv0) entered disabled state [ 267.929251][ T9823] batman_adv: batadv0: Interface deactivated: dummy0 [ 268.070760][ T9831] smc: net device bond0 applied user defined pnetid SYZ0 [ 268.255022][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 268.296066][ T9832] tc_dump_action: action bad kind [ 268.508318][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 268.567102][ T9838] tc_dump_action: action bad kind [ 269.596353][ T9867] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 269.610366][ T9867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.873'. [ 269.639738][ T9867] macvtap1: entered promiscuous mode [ 269.658165][ T9867] vlan0: entered promiscuous mode [ 269.671785][ T9867] macvtap1: entered allmulticast mode [ 269.687065][ T9867] vlan0: entered allmulticast mode [ 269.702609][ T9867] veth0_vlan: entered allmulticast mode [ 269.715233][ T9867] vlan0: left allmulticast mode [ 269.732819][ T9867] veth0_vlan: left allmulticast mode [ 269.752928][ T9867] vlan0: left promiscuous mode [ 269.862047][ T9869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.885114][ T9869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.920501][ T9869] hsr0: entered promiscuous mode [ 269.926754][ T9869] hsr0: entered allmulticast mode [ 269.932059][ T9869] hsr_slave_0: entered allmulticast mode [ 269.941799][ T9869] hsr_slave_1: entered allmulticast mode [ 270.072224][ T9878] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 270.223626][ T9878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.876'. [ 270.252367][ T9884] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 270.312875][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.372517][ T9877] netlink: 900 bytes leftover after parsing attributes in process `syz.1.876'. [ 270.471745][ T9887] macsec1: entered promiscuous mode [ 270.488186][ T9887] team0: entered promiscuous mode [ 270.493461][ T9887] team_slave_0: entered promiscuous mode [ 270.499508][ T9887] team_slave_1: entered promiscuous mode [ 270.509648][ T9887] team0: left promiscuous mode [ 270.514479][ T9887] team_slave_0: left promiscuous mode [ 270.524261][ T9887] team_slave_1: left promiscuous mode [ 270.552934][ T9889] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 270.560944][ T9889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.879'. [ 270.575173][ T9889] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 270.587858][ T9889] netlink: 900 bytes leftover after parsing attributes in process `syz.1.879'. [ 270.862302][ T9896] netlink: 'syz.3.881': attribute type 27 has an invalid length. [ 270.896428][ T9896] hsr0: left promiscuous mode [ 270.901903][ T9896] hsr0: left allmulticast mode [ 270.909953][ T9896] hsr_slave_0: left allmulticast mode [ 270.916658][ T9896] hsr_slave_1: left allmulticast mode [ 270.949938][ T9901] macsec1: entered promiscuous mode [ 270.958800][ T9901] team0: entered promiscuous mode [ 270.964421][ T9901] team_slave_0: entered promiscuous mode [ 270.980793][ T9901] team_slave_1: entered promiscuous mode [ 270.993877][ T9901] team0: left promiscuous mode [ 271.002619][ T9901] team_slave_0: left promiscuous mode [ 271.010950][ T9901] team_slave_1: left promiscuous mode [ 271.051846][ T9894] tc_dump_action: action bad kind [ 272.808984][ T9918] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 272.843600][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.087621][ T9942] smc: net device bond0 erased user defined pnetid SYZ0 [ 273.727438][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 273.773245][ T9947] smc: net device bond0 applied user defined pnetid SYZ0 [ 273.880681][ T9950] smc: net device bond0 erased user defined pnetid SYZ0 [ 274.168194][ T9965] __nla_validate_parse: 2 callbacks suppressed [ 274.168217][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 274.470957][ T9972] tc_dump_action: action bad kind [ 274.818823][ T9980] netlink: 'syz.2.897': attribute type 2 has an invalid length. [ 274.845713][ T9980] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 274.875487][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 274.891384][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 276.340564][T10011] smc: net device bond0 applied user defined pnetid SYZ0 [ 276.503764][ T9987] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 277.244833][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 277.251053][T10019] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 277.853653][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 277.945346][T10034] tc_dump_action: action bad kind [ 278.241117][T10046] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 278.298355][T10046] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 279.324907][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 279.336042][T10027] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 280.177899][T10077] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 280.210834][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.4.913'. [ 280.412694][T10077] macvtap1: entered promiscuous mode [ 280.429089][T10077] vlan0: entered promiscuous mode [ 280.445681][T10077] macvtap1: entered allmulticast mode [ 280.458113][T10077] vlan0: entered allmulticast mode [ 280.477959][T10077] veth0_vlan: entered allmulticast mode [ 280.494474][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 280.551382][T10077] vlan0: left allmulticast mode [ 280.561042][T10077] veth0_vlan: left allmulticast mode [ 280.585512][T10077] vlan0: left promiscuous mode [ 280.696186][T10088] smc: net device bond0 erased user defined pnetid SYZ0 [ 280.828803][T10075] tc_dump_action: action bad kind [ 280.889392][T10096] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 280.907492][T10096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.915'. [ 280.977154][T10096] macvtap3: entered promiscuous mode [ 280.991184][T10096] vlan0: entered promiscuous mode [ 281.005076][T10096] macvtap3: entered allmulticast mode [ 281.022463][T10096] vlan0: entered allmulticast mode [ 281.031677][T10096] veth0_vlan: entered allmulticast mode [ 281.066674][T10096] vlan0: left allmulticast mode [ 281.074907][T10096] veth0_vlan: left allmulticast mode [ 281.090311][T10096] vlan0: left promiscuous mode [ 281.395865][T10105] macsec1: entered promiscuous mode [ 281.404857][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 281.411289][T10084] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 281.414678][T10105] bond0: entered promiscuous mode [ 281.435783][T10109] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 281.443696][T10105] bond_slave_0: entered promiscuous mode [ 281.454406][T10105] bond_slave_1: entered promiscuous mode [ 281.460429][T10105] bridge0: entered promiscuous mode [ 281.469143][T10105] bond0: left promiscuous mode [ 281.473967][T10105] bond_slave_0: left promiscuous mode [ 281.479823][T10105] bond_slave_1: left promiscuous mode [ 281.485823][T10105] bridge0: left promiscuous mode [ 281.501093][T10110] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 282.107073][T10116] tc_dump_action: action bad kind [ 282.278461][T10126] smc: net device bond0 applied user defined pnetid SYZ0 [ 282.310875][T10126] smc: net device bond0 erased user defined pnetid SYZ0 [ 282.338191][T10129] smc: net device bond0 applied user defined pnetid SYZ0 [ 282.347342][T10128] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 282.355751][T10128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.924'. [ 282.372077][T10129] smc: net device bond0 erased user defined pnetid SYZ0 [ 282.406479][T10128] macvtap1: entered promiscuous mode [ 282.411835][T10128] vlan0: entered promiscuous mode [ 282.421512][T10128] macvtap1: entered allmulticast mode [ 282.435117][T10128] vlan0: entered allmulticast mode [ 282.440898][T10128] veth0_vlan: entered allmulticast mode [ 282.449383][T10128] vlan0: left allmulticast mode [ 282.454533][T10128] veth0_vlan: left allmulticast mode [ 282.460695][T10128] vlan0: left promiscuous mode [ 283.497282][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 283.547464][T10142] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 283.617740][T10150] smc: net device bond0 applied user defined pnetid SYZ0 [ 283.636885][T10152] smc: net device bond0 erased user defined pnetid SYZ0 [ 283.883075][T10162] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 283.906238][T10162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.929'. [ 283.975659][T10163] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 284.031697][T10162] netlink: 900 bytes leftover after parsing attributes in process `syz.1.929'. [ 284.278174][T10166] netlink: 'syz.1.930': attribute type 10 has an invalid length. [ 284.304879][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.930'. [ 284.350718][T10166] netlink: 'syz.1.930': attribute type 10 has an invalid length. [ 284.531554][T10170] netlink: 900 bytes leftover after parsing attributes in process `syz.1.930'. [ 284.691032][T10172] netlink: 'syz.1.931': attribute type 10 has an invalid length. [ 284.713727][T10172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.931'. [ 284.759088][T10172] netlink: 'syz.1.931': attribute type 10 has an invalid length. [ 285.044497][T10176] netlink: 900 bytes leftover after parsing attributes in process `syz.1.931'. [ 285.155648][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.206563][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.241862][T10178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.329719][T10192] netlink: 'syz.3.936': attribute type 2 has an invalid length. [ 285.349876][T10193] netlink: 'syz.2.935': attribute type 2 has an invalid length. [ 285.369059][T10192] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.390160][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 285.406527][T10196] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.416014][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 285.555771][T10200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.565864][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 285.625794][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 285.670186][T10194] tc_dump_action: action bad kind [ 285.842859][T10206] netlink: 'syz.4.940': attribute type 2 has an invalid length. [ 285.867780][T10206] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.877662][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 285.887820][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 286.262563][T10208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.299076][T10208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.325075][T10208] hsr0: entered promiscuous mode [ 286.335664][T10208] hsr0: entered allmulticast mode [ 286.346175][T10208] hsr_slave_0: entered allmulticast mode [ 286.360185][T10211] netlink: 892 bytes leftover after parsing attributes in process `syz.2.941'. [ 286.375734][T10208] hsr_slave_1: entered allmulticast mode [ 286.490079][T10215] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 286.526615][T10215] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 286.555712][T10215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.943'. [ 286.592554][T10215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.943'. [ 286.715176][T10224] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 286.752140][T10224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'. [ 286.846051][T10224] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 286.917798][T10224] netlink: 900 bytes leftover after parsing attributes in process `syz.1.945'. [ 287.115620][T10219] tc_dump_action: action bad kind [ 287.403772][T10237] smc: net device bond0 applied user defined pnetid SYZ0 [ 287.535029][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.551600][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.561863][T10243] batman_adv: batadv0: Interface activated: dummy0 [ 287.569024][T10243] batadv0: mtu less than device minimum [ 287.576794][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.588943][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.600919][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.612887][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.624896][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.636868][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.648833][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.660819][T10243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.076805][T10255] smc: net device bond0 erased user defined pnetid SYZ0 [ 288.509394][T10256] tc_dump_action: action bad kind [ 289.713114][T10288] netlink: 'syz.4.957': attribute type 2 has an invalid length. [ 289.823524][T10292] netlink: 'syz.2.958': attribute type 2 has an invalid length. [ 289.867531][T10282] smc: net device bond0 applied user defined pnetid SYZ0 [ 289.933718][T10283] smc: net device bond0 erased user defined pnetid SYZ0 [ 290.017792][T10298] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 290.101568][T10296] macvtap1: entered promiscuous mode [ 290.107309][T10296] vlan0: entered promiscuous mode [ 290.112890][T10296] macvtap1: entered allmulticast mode [ 290.122931][T10296] vlan0: entered allmulticast mode [ 290.130917][T10296] veth0_vlan: entered allmulticast mode [ 290.144305][T10296] vlan0: left allmulticast mode [ 290.150277][T10296] veth0_vlan: left allmulticast mode [ 290.159899][T10296] vlan0: left promiscuous mode [ 290.715080][T10315] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 290.751566][T10315] __nla_validate_parse: 2 callbacks suppressed [ 290.751587][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.962'. [ 290.875259][T10315] bridge0: port 3(batadv0) entered blocking state [ 290.881895][T10315] bridge0: port 3(batadv0) entered forwarding state [ 290.908776][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 290.923721][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.946096][T10321] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 291.035225][T10310] tc_dump_action: action bad kind [ 291.040827][T10321] bridge0: port 3(batadv0) entered disabled state [ 291.163469][T10315] netlink: 900 bytes leftover after parsing attributes in process `syz.0.962'. [ 292.107902][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 292.253449][T10336] tc_dump_action: action bad kind [ 292.629793][T10352] smc: net device bond0 applied user defined pnetid SYZ0 [ 292.690981][T10354] smc: net device bond0 erased user defined pnetid SYZ0 [ 294.023088][T10383] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 294.067508][T10383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.973'. [ 294.219183][T10383] macvtap1: entered promiscuous mode [ 294.224914][T10383] vlan0: entered promiscuous mode [ 294.230385][T10383] macvtap1: entered allmulticast mode [ 294.237656][T10383] vlan0: entered allmulticast mode [ 294.242898][T10383] veth0_vlan: entered allmulticast mode [ 294.258486][T10383] vlan0: left allmulticast mode [ 294.263514][T10383] veth0_vlan: left allmulticast mode [ 294.274865][T10383] vlan0: left promiscuous mode [ 294.286308][T10359] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 294.405554][T10394] macsec1: entered promiscuous mode [ 294.434032][T10394] bond0: entered promiscuous mode [ 294.440209][T10394] bond_slave_0: entered promiscuous mode [ 294.457034][T10394] bond_slave_1: entered promiscuous mode [ 294.485033][T10394] bridge0: entered promiscuous mode [ 294.503353][T10394] bond0: left promiscuous mode [ 294.508664][T10394] bond_slave_0: left promiscuous mode [ 294.524740][T10394] bond_slave_1: left promiscuous mode [ 294.544960][T10394] bridge0: left promiscuous mode [ 294.914424][T10403] smc: net device bond0 applied user defined pnetid SYZ0 [ 294.938555][T10405] smc: net device bond0 erased user defined pnetid SYZ0 [ 295.005280][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 295.174722][T10385] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 295.982356][T10408] tc_dump_action: action bad kind [ 296.149318][T10418] netlink: 'syz.1.979': attribute type 2 has an invalid length. [ 296.208901][T10418] net_ratelimit: 14 callbacks suppressed [ 296.208921][T10418] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 296.697102][T10427] smc: net device bond0 applied user defined pnetid SYZ0 [ 296.790019][T10429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.048258][T10438] netlink: 'syz.2.984': attribute type 2 has an invalid length. [ 297.084782][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 297.121550][T10438] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 297.201723][T10441] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 297.220629][T10441] netlink: 224 bytes leftover after parsing attributes in process `syz.4.986'. [ 297.248071][T10441] macvtap1: entered promiscuous mode [ 297.254254][T10441] vlan0: entered promiscuous mode [ 297.263339][T10441] macvtap1: entered allmulticast mode [ 297.268976][T10441] vlan0: entered allmulticast mode [ 297.274129][T10441] veth0_vlan: entered allmulticast mode [ 297.283839][T10441] vlan0: left allmulticast mode [ 297.288930][T10441] veth0_vlan: left allmulticast mode [ 297.298761][T10441] vlan0: left promiscuous mode [ 297.510392][T10450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.572868][T10453] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 297.595348][T10453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.988'. [ 297.685612][T10453] macvtap1: entered promiscuous mode [ 297.710023][T10453] vlan0: entered promiscuous mode [ 297.730832][T10453] macvtap1: entered allmulticast mode [ 297.741217][T10453] vlan0: entered allmulticast mode [ 297.748576][T10453] veth0_vlan: entered allmulticast mode [ 297.759557][T10453] vlan0: left allmulticast mode [ 297.776941][T10453] veth0_vlan: left allmulticast mode [ 297.782323][T10453] vlan0: left promiscuous mode [ 298.187038][T10470] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 298.214102][T10470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.992'. [ 298.293312][T10471] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 298.353687][T10470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.371110][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.408236][T10470] netlink: 900 bytes leftover after parsing attributes in process `syz.3.992'. [ 298.786109][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 298.802166][T10479] tc_dump_action: action bad kind [ 299.045436][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.674061][T10486] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 300.934682][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 300.940892][T10513] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 301.501443][T10533] netlink: 'syz.2.1003': attribute type 2 has an invalid length. [ 301.588747][T10538] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.799824][T10548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.134128][T10553] netlink: 'syz.3.1007': attribute type 10 has an invalid length. [ 302.244020][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1007'. [ 302.275640][T10555] netlink: 'syz.3.1007': attribute type 10 has an invalid length. [ 302.311281][T10553] netlink: 900 bytes leftover after parsing attributes in process `syz.3.1007'. [ 302.648845][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 302.707189][T10558] tc_dump_action: action bad kind [ 302.884438][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 303.004735][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 303.011080][T10540] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 303.079872][T10565] tc_dump_action: action bad kind [ 303.599739][T10583] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 303.647700][T10583] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1012'. [ 303.762045][T10587] macvtap1: entered promiscuous mode [ 303.797801][T10587] vlan0: entered promiscuous mode [ 303.820897][T10587] macvtap1: entered allmulticast mode [ 303.851022][T10587] vlan0: entered allmulticast mode [ 303.868839][T10587] veth0_vlan: entered allmulticast mode [ 303.921422][T10587] vlan0: left allmulticast mode [ 303.928727][T10587] veth0_vlan: left allmulticast mode [ 303.953962][T10587] vlan0: left promiscuous mode [ 305.084812][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 305.094704][T10596] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 305.143845][T10612] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 305.174763][T10612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 305.209753][T10614] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 305.642858][T10630] smc: net device bond0 erased user defined pnetid SYZ0 [ 305.716800][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 305.777714][T10617] tc_dump_action: action bad kind [ 305.920196][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 306.731820][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 306.935665][T10647] tc_dump_action: action bad kind [ 307.049440][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 307.164839][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 307.450670][T10674] smc: net device bond0 applied user defined pnetid SYZ0 [ 307.502571][T10677] smc: net device bond0 erased user defined pnetid SYZ0 [ 308.539468][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 308.873988][T10704] tc_dump_action: action bad kind [ 309.261279][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 309.282209][T10717] smc: net device bond0 applied user defined pnetid SYZ0 [ 309.290825][T10717] smc: net device bond0 erased user defined pnetid SYZ0 [ 309.463243][T10718] smc: net device bond0 applied user defined pnetid SYZ0 [ 309.525091][T10721] smc: net device bond0 erased user defined pnetid SYZ0 [ 309.571097][T10709] tc_dump_action: action bad kind [ 310.685358][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 310.692047][T10702] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 310.831014][T10741] smc: net device bond0 applied user defined pnetid SYZ0 [ 310.869151][T10742] smc: net device bond0 erased user defined pnetid SYZ0 [ 311.444405][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 311.826795][T10756] tc_dump_action: action bad kind [ 312.338505][T10773] netlink: 'syz.0.1041': attribute type 2 has an invalid length. [ 312.394942][T10773] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 312.412783][T10763] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 313.093388][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 313.195178][T10793] netlink: 'syz.3.1044': attribute type 2 has an invalid length. [ 313.248514][T10794] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 313.498742][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 313.958299][T10815] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 313.977766][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1048'. [ 314.004169][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.058330][T10815] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 314.151412][T10815] netlink: 900 bytes leftover after parsing attributes in process `syz.2.1048'. [ 314.205594][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 314.241016][T10820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.676787][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 314.732172][T10829] tc_dump_action: action bad kind [ 315.133339][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 315.196098][T10842] macsec1: entered promiscuous mode [ 315.201556][T10842] gretap0: entered promiscuous mode [ 315.868358][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 316.035325][T10846] tc_dump_action: action bad kind [ 316.402870][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 316.807816][T10882] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1059'. [ 317.122825][T10895] netlink: 'syz.2.1062': attribute type 2 has an invalid length. [ 317.172625][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.228392][T10895] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 317.405436][T10905] netlink: 'syz.0.1065': attribute type 2 has an invalid length. [ 317.467685][T10907] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 317.542921][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 317.580953][T10898] tc_dump_action: action bad kind [ 318.016450][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 318.058065][T10912] gretap0: entered promiscuous mode [ 318.063567][T10912] macsec1: entered promiscuous mode [ 318.554353][T10928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.042901][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 321.142278][T10961] tc_dump_action: action bad kind [ 321.898246][T10989] netlink: 'syz.2.1079': attribute type 2 has an invalid length. [ 322.006763][T10990] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 322.695988][T10999] netlink: 'syz.4.1081': attribute type 10 has an invalid length. [ 322.724413][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1081'. [ 322.738404][T10999] bridge0: port 3(batadv0) entered blocking state [ 322.745035][T10999] bridge0: port 3(batadv0) entered forwarding state [ 322.752273][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.760848][T10994] netlink: 'syz.4.1081': attribute type 10 has an invalid length. [ 322.810550][T10994] bridge0: port 3(batadv0) entered disabled state [ 323.582698][T11006] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 324.440273][T11036] netlink: 'syz.0.1087': attribute type 2 has an invalid length. [ 324.475719][T11036] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 324.894371][T11051] netlink: 'syz.1.1090': attribute type 2 has an invalid length. [ 324.919977][T11050] netlink: 'syz.2.1091': attribute type 2 has an invalid length. [ 324.928163][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 324.950348][T11051] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 324.961769][T11050] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 324.970492][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 324.992559][T11038] tc_dump_action: action bad kind [ 325.853707][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1096'. [ 326.441517][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 326.526245][T11075] tc_dump_action: action bad kind [ 326.863421][T11080] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 327.701410][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 327.775163][T11114] smc: net device bond0 applied user defined pnetid SYZ0 [ 327.923714][T11112] tc_dump_action: action bad kind [ 328.127698][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 328.509137][T11128] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 328.566561][T11128] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 328.785493][T11141] netlink: 'syz.4.1108': attribute type 2 has an invalid length. [ 328.809006][T11141] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 328.850820][T11145] netlink: 'syz.1.1111': attribute type 10 has an invalid length. [ 328.891002][T11145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1111'. [ 328.938039][T11145] netlink: 'syz.1.1111': attribute type 10 has an invalid length. [ 329.035970][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 329.101893][T11132] tc_dump_action: action bad kind [ 329.174034][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 329.289881][T11153] tc_dump_action: action bad kind [ 329.450964][T11162] netlink: 'syz.1.1115': attribute type 2 has an invalid length. [ 329.484158][T11162] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 330.042868][T11186] netlink: 'syz.3.1119': attribute type 2 has an invalid length. [ 330.141035][T11186] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 330.535620][T11196] netlink: 'syz.1.1121': attribute type 2 has an invalid length. [ 330.603239][T11197] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 330.905457][T11200] netlink: 'syz.0.1122': attribute type 2 has an invalid length. [ 330.931712][T11200] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 331.379688][T11211] smc: net device bond0 erased user defined pnetid SYZ0 [ 331.653020][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 331.825019][T11214] tc_dump_action: action bad kind [ 331.989467][T11229] netlink: 'syz.0.1127': attribute type 2 has an invalid length. [ 332.077211][T11232] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 332.384840][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 332.578532][T11230] tc_dump_action: action bad kind [ 333.074302][T11253] netlink: 'syz.2.1132': attribute type 2 has an invalid length. [ 333.129997][T11253] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 333.340631][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.555436][T11264] macsec2: entered promiscuous mode [ 333.573465][T11264] bond0: entered promiscuous mode [ 333.589589][T11264] bond_slave_0: entered promiscuous mode [ 333.609257][T11264] bond_slave_1: entered promiscuous mode [ 333.624999][T11264] bridge0: entered promiscuous mode [ 333.675597][T11264] bond0: left promiscuous mode [ 333.686433][T11264] bond_slave_0: left promiscuous mode [ 333.704932][T11264] bond_slave_1: left promiscuous mode [ 333.716760][T11264] bridge0: left promiscuous mode [ 334.352796][T11281] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 334.429869][T11283] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 334.639143][T11256] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 334.752714][T11292] netlink: 'syz.0.1140': attribute type 2 has an invalid length. [ 334.822676][T11295] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 334.902384][T11296] netlink: 'syz.3.1141': attribute type 2 has an invalid length. [ 334.916554][T11296] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 335.238569][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1142'. [ 335.255757][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 335.860528][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 335.910081][T11310] tc_dump_action: action bad kind [ 336.111242][T11327] FAULT_INJECTION: forcing a failure. [ 336.111242][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 336.130911][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.3.1150 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 336.130946][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 336.130967][T11327] Call Trace: [ 336.130979][T11327] [ 336.130989][T11327] dump_stack_lvl+0x189/0x250 [ 336.131034][T11327] ? __lock_acquire+0xaac/0xd20 [ 336.131067][T11327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.131095][T11327] ? __pfx__printk+0x10/0x10 [ 336.131117][T11327] ? __might_fault+0xb0/0x130 [ 336.131155][T11327] should_fail_ex+0x414/0x560 [ 336.131191][T11327] _copy_from_user+0x2d/0xb0 [ 336.131219][T11327] __sys_bpf+0x1ed/0x860 [ 336.131247][T11327] ? __pfx___sys_bpf+0x10/0x10 [ 336.131285][T11327] ? ksys_write+0x1f0/0x250 [ 336.131320][T11327] __x64_sys_bpf+0x7c/0x90 [ 336.131344][T11327] do_syscall_64+0xf6/0x210 [ 336.131375][T11327] ? clear_bhb_loop+0x45/0xa0 [ 336.131400][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.131420][T11327] RIP: 0033:0x7fd37d98e969 [ 336.131443][T11327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.131461][T11327] RSP: 002b:00007fd37e7a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.131487][T11327] RAX: ffffffffffffffda RBX: 00007fd37dbb5fa0 RCX: 00007fd37d98e969 [ 336.131502][T11327] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 336.131515][T11327] RBP: 00007fd37e7a1090 R08: 0000000000000000 R09: 0000000000000000 [ 336.131527][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.131540][T11327] R13: 0000000000000001 R14: 00007fd37dbb5fa0 R15: 00007ffdf0542fa8 [ 336.131571][T11327] [ 336.654241][T11335] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1152'. [ 336.983216][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1155'. [ 337.292913][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 337.425864][T11365] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1159'. [ 337.464675][T11339] tc_dump_action: action bad kind [ 338.209977][T11377] ------------[ cut here ]------------ [ 338.216296][T11377] memcpy: detected field-spanning write (size 27) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 338.302611][T11377] WARNING: CPU: 1 PID: 11377 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 338.312658][T11377] Modules linked in: [ 338.316918][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.2.1161 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 338.329570][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.339931][T11377] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 338.345894][T11377] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 338.365768][T11377] RSP: 0018:ffffc90004727920 EFLAGS: 00010246 [ 338.371882][T11377] RAX: 79dee2605b937e00 RBX: ffff888077ff5450 RCX: 0000000000080000 [ 338.380403][T11377] RDX: ffffc9000d82a000 RSI: 0000000000005297 RDI: 0000000000005298 [ 338.388605][T11377] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 338.396829][T11377] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 000000000000001b [ 338.405108][T11377] R13: 1ffff920008e4f4e R14: ffffc90004727a84 R15: 000000000000001b [ 338.413137][T11377] FS: 00007fe4a28636c0(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 338.422367][T11377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.429628][T11377] CR2: 0000200000d58000 CR3: 00000000563b6000 CR4: 00000000003526f0 [ 338.437921][T11377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.446357][T11377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.454375][T11377] Call Trace: [ 338.457949][T11377] [ 338.460923][T11377] ip6_route_info_create+0x5cc/0xa70 [ 338.466461][T11377] ip6_route_add+0x29/0x2f0 [ 338.471014][T11377] ? ipv6_route_ioctl+0x313/0x480 [ 338.476300][T11377] ipv6_route_ioctl+0x35c/0x480 [ 338.481216][T11377] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 338.486894][T11377] inet6_ioctl+0x219/0x280 [ 338.491456][T11377] ? __pfx_inet6_ioctl+0x10/0x10 [ 338.496770][T11377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 338.502827][T11377] sock_do_ioctl+0xd9/0x300 [ 338.507669][T11377] ? __pfx_sock_do_ioctl+0x10/0x10 [ 338.512861][T11377] ? __lock_acquire+0xaac/0xd20 [ 338.518112][T11377] sock_ioctl+0x576/0x790 [ 338.522502][T11377] ? __pfx_sock_ioctl+0x10/0x10 [ 338.527725][T11377] ? __fget_files+0x3a0/0x420 [ 338.532472][T11377] ? __fget_files+0x2a/0x420 [ 338.537368][T11377] ? bpf_lsm_file_ioctl+0x9/0x20 [ 338.542372][T11377] ? __pfx_sock_ioctl+0x10/0x10 [ 338.547521][T11377] __se_sys_ioctl+0xf9/0x170 [ 338.552164][T11377] do_syscall_64+0xf6/0x210 [ 338.556988][T11377] ? clear_bhb_loop+0x45/0xa0 [ 338.561991][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.568005][T11377] RIP: 0033:0x7fe4a198e969 [ 338.572463][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.592318][T11377] RSP: 002b:00007fe4a2863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.600899][T11377] RAX: ffffffffffffffda RBX: 00007fe4a1bb6080 RCX: 00007fe4a198e969 [ 338.609013][T11377] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000004 [ 338.617158][T11377] RBP: 00007fe4a1a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.625265][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.633285][T11377] R13: 0000000000000000 R14: 00007fe4a1bb6080 R15: 00007ffc7511a198 [ 338.641437][T11377] [ 338.644506][T11377] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.651826][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.2.1161 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 338.663917][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 338.673984][T11377] Call Trace: [ 338.677273][T11377] [ 338.680211][T11377] dump_stack_lvl+0x99/0x250 [ 338.684827][T11377] ? __asan_memcpy+0x40/0x70 [ 338.689434][T11377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.694659][T11377] ? __pfx__printk+0x10/0x10 [ 338.699278][T11377] panic+0x2db/0x790 [ 338.703192][T11377] ? __pfx_panic+0x10/0x10 [ 338.707640][T11377] ? show_trace_log_lvl+0x4fb/0x550 [ 338.712867][T11377] __warn+0x31b/0x4b0 [ 338.716867][T11377] ? ipv6_addr_prefix+0x124/0x1d0 [ 338.721911][T11377] ? ipv6_addr_prefix+0x124/0x1d0 [ 338.726953][T11377] report_bug+0x2be/0x4f0 [ 338.731301][T11377] ? ipv6_addr_prefix+0x124/0x1d0 [ 338.736368][T11377] ? ipv6_addr_prefix+0x124/0x1d0 [ 338.741413][T11377] ? ipv6_addr_prefix+0x126/0x1d0 [ 338.746453][T11377] handle_bug+0x84/0x160 [ 338.750707][T11377] exc_invalid_op+0x1a/0x50 [ 338.755256][T11377] asm_exc_invalid_op+0x1a/0x20 [ 338.760113][T11377] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 338.765767][T11377] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 338.785385][T11377] RSP: 0018:ffffc90004727920 EFLAGS: 00010246 [ 338.791465][T11377] RAX: 79dee2605b937e00 RBX: ffff888077ff5450 RCX: 0000000000080000 [ 338.799457][T11377] RDX: ffffc9000d82a000 RSI: 0000000000005297 RDI: 0000000000005298 [ 338.807436][T11377] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 338.815429][T11377] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 000000000000001b [ 338.823406][T11377] R13: 1ffff920008e4f4e R14: ffffc90004727a84 R15: 000000000000001b [ 338.831417][T11377] ip6_route_info_create+0x5cc/0xa70 [ 338.836722][T11377] ip6_route_add+0x29/0x2f0 [ 338.841237][T11377] ? ipv6_route_ioctl+0x313/0x480 [ 338.846275][T11377] ipv6_route_ioctl+0x35c/0x480 [ 338.851139][T11377] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 338.856550][T11377] inet6_ioctl+0x219/0x280 [ 338.860982][T11377] ? __pfx_inet6_ioctl+0x10/0x10 [ 338.865942][T11377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 338.871946][T11377] sock_do_ioctl+0xd9/0x300 [ 338.876467][T11377] ? __pfx_sock_do_ioctl+0x10/0x10 [ 338.881599][T11377] ? __lock_acquire+0xaac/0xd20 [ 338.886564][T11377] sock_ioctl+0x576/0x790 [ 338.890912][T11377] ? __pfx_sock_ioctl+0x10/0x10 [ 338.895778][T11377] ? __fget_files+0x3a0/0x420 [ 338.900468][T11377] ? __fget_files+0x2a/0x420 [ 338.905077][T11377] ? bpf_lsm_file_ioctl+0x9/0x20 [ 338.910027][T11377] ? __pfx_sock_ioctl+0x10/0x10 [ 338.914896][T11377] __se_sys_ioctl+0xf9/0x170 [ 338.919501][T11377] do_syscall_64+0xf6/0x210 [ 338.924020][T11377] ? clear_bhb_loop+0x45/0xa0 [ 338.928726][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.934633][T11377] RIP: 0033:0x7fe4a198e969 [ 338.939070][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.958860][T11377] RSP: 002b:00007fe4a2863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.967300][T11377] RAX: ffffffffffffffda RBX: 00007fe4a1bb6080 RCX: 00007fe4a198e969 [ 338.975282][T11377] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000004 [ 338.983258][T11377] RBP: 00007fe4a1a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.991253][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.999230][T11377] R13: 0000000000000000 R14: 00007fe4a1bb6080 R15: 00007ffc7511a198 [ 339.007226][T11377] [ 339.010578][T11377] Kernel Offset: disabled [ 339.014918][T11377] Rebooting in 86400 seconds..