last executing test programs: 1m28.170118974s ago: executing program 2 (id=217): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0xf, 0x7, 0x3, 0x20, @local, @local, 0x40, 0x10, 0x5e, 0x10}}) 1m17.78625277s ago: executing program 1 (id=1490): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000195c0)=ANY=[@ANYBLOB="f35d9feb01001800000000000006eddc00300000003000000002000000000000001833d74e7bb51c8b2bb4aa000404000000000000000000000b00000100e10b28c340ffff010000000200"/90], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x5, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x17be}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000019300)='GPL\x00', 0xe0, 0xae, &(0x7f0000019340)=""/174, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000019440)={0x0, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019480)=[{0x0, 0x4, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019580)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r10, 0x0, 0x9}, 0x18) r11 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m14.014487635s ago: executing program 2 (id=217): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0xf, 0x7, 0x3, 0x20, @local, @local, 0x40, 0x10, 0x5e, 0x10}}) 1m2.367749513s ago: executing program 1 (id=1490): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000195c0)=ANY=[@ANYBLOB="f35d9feb01001800000000000006eddc00300000003000000002000000000000001833d74e7bb51c8b2bb4aa000404000000000000000000000b00000100e10b28c340ffff010000000200"/90], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x5, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x17be}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000019300)='GPL\x00', 0xe0, 0xae, &(0x7f0000019340)=""/174, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000019440)={0x0, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019480)=[{0x0, 0x4, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019580)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r10, 0x0, 0x9}, 0x18) r11 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 58.929813184s ago: executing program 2 (id=217): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0xf, 0x7, 0x3, 0x20, @local, @local, 0x40, 0x10, 0x5e, 0x10}}) 47.888366182s ago: executing program 1 (id=1490): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000195c0)=ANY=[@ANYBLOB="f35d9feb01001800000000000006eddc00300000003000000002000000000000001833d74e7bb51c8b2bb4aa000404000000000000000000000b00000100e10b28c340ffff010000000200"/90], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x5, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x17be}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000019300)='GPL\x00', 0xe0, 0xae, &(0x7f0000019340)=""/174, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000019440)={0x0, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019480)=[{0x0, 0x4, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019580)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r10, 0x0, 0x9}, 0x18) r11 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 42.289876661s ago: executing program 2 (id=217): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0xf, 0x7, 0x3, 0x20, @local, @local, 0x40, 0x10, 0x5e, 0x10}}) 36.608486336s ago: executing program 1 (id=1490): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000195c0)=ANY=[@ANYBLOB="f35d9feb01001800000000000006eddc00300000003000000002000000000000001833d74e7bb51c8b2bb4aa000404000000000000000000000b00000100e10b28c340ffff010000000200"/90], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x5, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x17be}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000019300)='GPL\x00', 0xe0, 0xae, &(0x7f0000019340)=""/174, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000019440)={0x0, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019480)=[{0x0, 0x4, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019580)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r10, 0x0, 0x9}, 0x18) r11 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 28.967428734s ago: executing program 2 (id=217): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0xf, 0x7, 0x3, 0x20, @local, @local, 0x40, 0x10, 0x5e, 0x10}}) 26.854840654s ago: executing program 1 (id=1490): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000195c0)=ANY=[@ANYBLOB="f35d9feb01001800000000000006eddc00300000003000000002000000000000001833d74e7bb51c8b2bb4aa000404000000000000000000000b00000100e10b28c340ffff010000000200"/90], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x5, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x17be}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000019300)='GPL\x00', 0xe0, 0xae, &(0x7f0000019340)=""/174, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000019440)={0x0, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019480)=[{0x0, 0x4, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019580)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r10, 0x0, 0x9}, 0x18) r11 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 18.086301275s ago: executing program 4 (id=1917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x38}}, 0x48d0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000440)='0', 0x1, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x76, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xfffffe7d, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 17.862634056s ago: executing program 4 (id=1921): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 17.72100773s ago: executing program 4 (id=1923): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140b, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4811}, 0xc000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="f9ff00001600010000000000000000001a0000006bdf24b0e196b2338cc45db8d9be6f1dff5ec53e1b8f939bbf4af483c86b12585df00897d760120aee01f7da677d9eaf09cd5f576fc651ecb51648f2453f27e63b5ccf19a0b7"], 0x14}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="991c9e6a5307dff110b99d478c07c51880f1d6feaa63b5aca18c81224d407c30c998922401d387eae12deec0039c7817dc84f6556350d229f57c7d0a3f8cf5b8a0da0691bace55dfb33143d537859641c7460cbecfbb639e1d89ec91fecdd158b75a5dd9071f1d6fb73b2ce1fb9c2c89903e4158abebc788588f719f4961b4a442817254d9c25194d6e935bd8d57b427acec7376219f0fd74a7a8129ecfaea4fbb091f6275f6ed6daa60c3e3a664f0c4486043f4a4a134a739e6"], 0x10) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) (async) recvmmsg(r10, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3}, 0x6}], 0x1, 0x10140, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000f1401000000000000990e00072380c59dfc8f73ef84d1f29a004505000000005f02811dbdb387720af66ae2dde3744acf84d7fef76959d247b7afbff6705a88b8c10ee546061bf0880b1ab8ff99eb77d99870f5d985bd9583719cc8bef293406dbef146aa22f76fdf862b1d3eb53cbe7b22cfd361a5260d3554f7476c441d03b06f85191ec52b1a866db205e169298234287e0cb09e91dd8df83af6883cf0cd4716dab32c2b018489e049190ff8b03ea6284131818cf69834ceaa439edf195932d78aa12cb3c8fa47"], 0x18}}, 0x0) 17.546754342s ago: executing program 4 (id=1927): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000100)="8d554737a9101b7d51ad156d780cc83c24f239ec921ee45e8bf1eace6213f99b0f527189", 0x24, 0x804, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xfffffff9}, 0xfffffe5e) 17.204486s ago: executing program 4 (id=1931): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010005", 0x7) socket$nl_generic(0x10, 0x3, 0x10) 14.028948746s ago: executing program 2 (id=217): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0xf, 0x7, 0x3, 0x20, @local, @local, 0x40, 0x10, 0x5e, 0x10}}) 11.961387424s ago: executing program 1 (id=1490): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000195c0)=ANY=[@ANYBLOB="f35d9feb01001800000000000006eddc00300000003000000002000000000000001833d74e7bb51c8b2bb4aa000404000000000000000000000b00000100e10b28c340ffff010000000200"/90], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000194c0)={0x18, 0x5, &(0x7f00000192c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x17be}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000019300)='GPL\x00', 0xe0, 0xae, &(0x7f0000019340)=""/174, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000019440)={0x0, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019480)=[{0x0, 0x4, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019580)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r10, 0x0, 0x9}, 0x18) r11 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.670510175s ago: executing program 3 (id=2004): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x8, 0x9, 0x3c05, 0x1, "0c3df8", 0x5}}) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r9, 0x8, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 1.84994777s ago: executing program 0 (id=2011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x3b, 0x3, 0x7, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x7, 0x8, 0x7fff}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 1.746429419s ago: executing program 0 (id=2012): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100), 0x1c) (async) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x92, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x2032, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb810020000800450000380000000000019078ac1e0001ac1414aa030190781200183f250000000028d700000100007f0000017f00000100186371ae9b1c03bc64328d20d097c2acf2678dcc4b25769a4a94bbf349a04d4a6f675f0aa5fca46d2f6b1dcd0d5508a79308961bb0bc478c4e8701040000e664335f4d4aee60368b62338cade0e8cbc5ac1b10919c20be26e3517aa27f89589af4df75a5e7dd023668c05fce08dc7b"], 0x0) (async) listen(r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x28, 0x85, 0x1000004f}, 0x2c) (async) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r9, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) (async) socket$inet6(0xa, 0x2, 0x3a) 1.731993932s ago: executing program 3 (id=2013): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 1.714376905s ago: executing program 4 (id=1931): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010005", 0x7) socket$nl_generic(0x10, 0x3, 0x10) 1.331104782s ago: executing program 0 (id=2014): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'ipvlan1\x00', {0x81}, 0x4}) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = socket(0x18, 0x5, 0x1) getsockname$packet(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)=ANY=[@ANYBLOB="14000000ec00010000000000000000000000000a20000000000a03000000000000000000070000000900010a73797a30000000000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a300078fb93fba4b6bd32f4000000080005400000000d080003400000001008000840000000010c000980080001400000000914000000100001000000000000"], 0xa0}}, 0x0) 1.330513043s ago: executing program 3 (id=2015): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3}, 0x20) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async, rerun: 64) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r2 = socket(0xa, 0x3, 0xffffffff) (async) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04", @ANYRES32=r5], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) (async, rerun: 64) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r5) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="50f404ca75ed1c000000", @ANYRES16=r7, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000000000000000bb0800010000000000"], 0x30}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYRESDEC=r6, @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r12, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x2, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x9, 0x2}}}}]}, 0x44}}, 0x800) (async) setsockopt$inet6_buf(r2, 0x29, 0xd2, &(0x7f00000003c0)="471c59544543cc7e0f5789a25ae3", 0xe) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x4}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004810}, 0x200008c0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x7, {{0x2, 0x4e22, @remote}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000dc0)={'wg0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000040)="dd28ab3c693ba97eb3681c736ce4fd3a47a5e0bbbd3c12d9b1", 0x19}, {&(0x7f00000001c0)="8acf08236c9d", 0x6}], 0x2, &(0x7f0000000f00)=ANY=[@ANYRES16=r10], 0x2e0}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0xfffffffe, @empty, 0x1}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000740)="eef5a75275c68f9cac02e7b301123ed48f2956bba2e3c6bb0e530b59e2f351b3301dc2d3446690bd2b13c63cddf1ef638e0aabb78b7b28903f92c9581cebd7052863c6152d8460572b9aded6faac1d67977f53e7ffbac24217089da3a7d55648b4b6a4b401b440a076a6334a4e95598fa9d7b3e4838f183d12abcd9d593df4c2920ecb2c02f34bab42e001008928584ed87364244badc4363d5987248c33bb0f905df3ef530674eda51b1352698015c013fcf3647774b5c207a87a3e3c3f1099ed5b66d2f6a6406f6e948d76d074e046293db2b7bdf42c15468fb71be92930c1c7746dee7781", 0xe6}, {&(0x7f0000000900)="f23d310ac8af142a0ee12dd7e87ce96374a37c3e06ef5a65360ea3b6a9b973e7dccce949632c4414872448d9e347ae8f7414bbd94aae2ce07d34263da2fbbfbbdcda570661460ee994cbb17ebcaa8d3edc60efd2a4520b6f99fc8cfd0e7cbd060c08f5473cf78bd11dac4dac4055e0b395dfb787a9b1dd33ad189c80f7901a62e72a3fc2596f28d3a3f581b9f55bb5aef0a85872f9375bd89e9ed5e0a71cb744040f018fe14c", 0xa6}, {&(0x7f00000009c0)="00e651b1a13221fb674239f38591fde0b761aa7beb1b1f1b40b1acccc4051676b5d3a71968b740c752d88fa912f7e10eebd0df0c955c0ac5c745306ca7db9d4d57fab9b34040ef320b960b336973911401fc6a9ba9f73775b077401ad996bafe7d996bb2eaa36a197614d65b71eb6c2b1c6d269e51d257cb2ad99f0bdf3234b7d47f4af59afa5ce64848ecf6ff6a0c5311ec533eee24305a330d57d470ac70c48a19e218937cef9cca4eab998fb81578bc41251d1a3f42ec1b78fed80e2d31a7a1948daee8bb28023951ee2223e581787021133cdc01e29a48e0c9c67d40078a60ba7f46b39e6d6e410c32140ca046957639e849b286c9752c8549", 0xfb}, {&(0x7f0000000ac0)="658455295108375b4a0d5c2bed66e674dd26112e6ab209cccd00d261ef565b1c1050c7b61c7ebe0324bdbee887021578bcbb2ab788e7b9df5e7311a16de839bcce95f26e5ff74aa708d76320825db529a3845e252e39ea68795aee055f8221f13294be648241e6f6394da92fd2e7969e9a3cabfc436af4aeeed19fe09f8fbe9d6ce095ec1b85e75f9094e1db61597ad10a6719b0a4cd8d9a89ca268a64098fea5c18bccd3d28a7be0bcfe0805335b3e8751d3787953721ddb3029ba5eb3a6e2ccdd5175bae692d9788c51f43891b1ca43e853394", 0xd4}, {&(0x7f0000001200)="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", 0x1ba}, {&(0x7f0000000bc0)="06cc849aa544115a6c6ad2167baf8eab18d9f202cf9f8f35ea4fcb0b8f37807e89346c8843f57f219e57e4c8944af102d75047096f0241e0a98295ea0898df571175fc89a7e3fd93d3306fa077386c1f42163bd3c18b421ae595437e66cb543b9a80684b2540cf3da9ba766b89778aab645fb637111e50369e771fb585485654e541a33088461ae5e364cb327b745d49dfbe07655e1f662b38bf954dd8417eb6df3dd979b484738b7f911488f37f1bc6a904adf79b256223495494b6f0f8f40a459671e0fd31376ef0526c1211d219dd", 0xd0}, {&(0x7f0000000cc0)="d738caa07301f79f022088ef40a1a4f1c68cc9743002ac87fa4bc27557aa8d811f89e23b192ae36c8e614af48e2c5b2e954e96727d92eb252d606a67ddfd8c16e7f76baa96b096bcdb4dd6f99c0844c659e9447db64718ba7d155c048150ea24c2e4", 0x62}], 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=r13, @ANYBLOB="00000000200000001a000000290000003600000006000000000000000104000000000000140000000000000029000000080000000100000000000000580000000000000029000000390000001d0802060000000000120000000000000000000000000000fe80000000000000000000000000002bfe8000000000000000000000000000aa00000000000000000000ffff7f0000011400000000000000290000000800000006000000000000005319bb7ff80bf4d253874e2e7646e9dca04d17876a45dd2553"], 0xd0}}, {{&(0x7f0000001f40)={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x98c}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000400)="82a7bf346c8a02861ef9923a9f1b6fc9e5b4044349e291de6b9e82a55fe30829d42f0c52fcf2efe405792771dfb88c82f5f6cad79b3828dc8b38c3bea27540fb30a5abd779a660c221597527bde1235f11c84f9564fd2eab273e8c96ca4cc4aef0df2ee9ffbeb054a8a4841f1538712a9a8a6e", 0x73}, {&(0x7f0000002000)="44d62f32c5985226743756a468b5fde55353f90fbf7bbf969770c3a49862a8e6f4c7434617ca82252dba8c0bff5a5f1ad3d31051cbb9faf3f047157938e4a133db2e8a11abb519ab507663c3cccde35ba3f10b19ac2e21c5e7b1c870a8e00d0f6a9bad58120931891f76a4c54fd54b215689eae6f0510c1ed5a457a29c66072bfc0d294de247f215dc82f07e7d8a17a4855a20335061ce80821279c7303b4d4345a58b6c80a00a5f64da5cf8b854508909bf96b06744895dcc3ec794486fa82c4f5fda2e321471ccbcdf5c7be02f08272b406e6240ce4b54d2f5b8c653dd6205a0c3e49f253b566c78f9f832bea6f6b1439e179c624d3e", 0xf7}, {&(0x7f0000002100)="23e6dd681918028f2ae7816cb762f1971f6b58740d551ce4555879bd7035a7f178b911bc5bd4fe13c144a7724837530f3ed5d440026a5a545caf5df7345a1204fbde0211ee254da0bbeb0f2f81eb5b6a731cd4f95a3af83bcba5f85a92c081f3165ac52f36e6d6eef18e65b016d5024b7cada8e00b340871", 0x78}, {&(0x7f0000002180)="47d07fb19f81dd85a520716ad2c3a4240cbb51b3a076c70be1bcc8678760b8065a7c681ece0f75691763d1cd1e06da5af0bca5ef0e2383d029afc62f0d661d4641dc6f703be4da90cc8899719024cbe3254696a436f316d5", 0x58}], 0x4}}, {{&(0x7f0000002240)={0xa, 0x4e22, 0x6, @private1}, 0x1c, &(0x7f00000024c0)=[{&(0x7f00000013c0)="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", 0x1db}, {&(0x7f0000002380)="fbf97bd5eb6eb64f20f53716c5bd481acf69600e", 0x14}, {&(0x7f00000023c0)="fedc28177fcfc50fad05ef70eab47e4f8659f51c03ac5354ccededc0a2c75fce915441187bc4e79fc053382cd0b875effb3f07b74279a50814be8c9dfe57093a7eb8b5ebf6b4c6a3a1c7b6294c596f5e0aaf441723a4b6c387572cdbcde4991f574e9960a5a19010ac00c90d826680e74eae8028f97091a83b6b97129dfb14a423535c9abc849cc45511bb215457fb15cf61357f02361dad91270a0d94006733bedf0a5b160ce5eea706e60dd3c297916600df87c0f5dc570b793449f5b4679d631f51b8efd36526ab6f12418b2140bec0f6f87c9b67f287d9cf", 0xda}], 0x3, &(0x7f0000002500)=ANY=[@ANYBLOB="140000000000000017000000340000000400000000000000"], 0x18}}], 0x4, 0x40080) 1.158548643s ago: executing program 3 (id=2016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40800) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x8, 0xfff9, 0x7]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1b8}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2bf}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x419}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x44070) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000900)=0x1, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneigh={0x14, 0x1e, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040884) (async) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneigh={0x14, 0x1e, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040884) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x4, 0xb926, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8000, 0x7800, 0x0, 0xe}}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5e}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x4081) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002801c0005800a000400aaaaaaaaaaaa00000a0004003d4f1250b43a0000"], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) 1.057514313s ago: executing program 0 (id=2017): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) 960.465001ms ago: executing program 3 (id=2018): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x400c0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}], 0x30}}], 0x1, 0x4044800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r3, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x400c0) (async) socket(0x10, 0x3, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmmsg$inet6(r2, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}], 0x30}}], 0x1, 0x4044800) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r3, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) (async) 784.074013ms ago: executing program 0 (id=2019): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x3, 0x401, {{0x36, 0x4, 0x0, 0x31, 0xd8, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @multicast1, {[@rr={0x7, 0xb, 0x3f, [@dev={0xac, 0x14, 0x14, 0x3f}, @broadcast]}, @cipso={0x86, 0x14, 0x0, [{0x6, 0xa, "faa9c94e59da633c"}, {0x5, 0x4, 'J;'}]}, @ssrr={0x89, 0x13, 0x11, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @end, @timestamp_prespec={0x44, 0x4c, 0x8c, 0x3, 0x9, [{@broadcast, 0x8}, {@remote, 0xf}, {@empty, 0xfffffffb}, {@private=0xa010102, 0xffff}, {@empty, 0x14}, {@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}]}, @end, @timestamp={0x44, 0x8, 0x22, 0x0, 0x4, [0x3]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0x1, [0x4, 0x80000000]}, @timestamp={0x44, 0x2c, 0x81, 0x0, 0x4, [0x8, 0x1, 0x1db98b28, 0x2c, 0x800, 0x0, 0x1ff, 0xfffffffb, 0x9, 0x35]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0xec00, 0x814}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x50}}, 0x8091) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) socket$packet(0x11, 0x3, 0x300) 2.607896ms ago: executing program 3 (id=2020): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r2, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x230, 0x2c, 0x400, 0x70bd29, 0x25dfdbfd, {0xa}, [@generic="7430bad3fbfbba576e721d2d3850048bc34873065090c6e9745feb51480f54843d07a914138130554ad1863341ccb1a7cc4e95e4cb08556f03db87215732ad2702bcd16e39b8cb54d0c9e1a9742c38a3000055004417f54dbd41b851e38f872835aae083ebc1bab9e15f844acaec911b", @generic="14fc7d14ba94a1020ba2f54a1d37a9f8c8450d5d1c32f4c2f9189573d73d89d409356bc9ee4c57bb1d270ff6d3308dc76c77fe78bfb6718b544f68cc866e9294a7b6e489c9c1b81c71878c185ec8ca644e9010f8c229d3cccbc3474db7f4d5e5f0ab2bea05fcdcbc78d4446e4c5afe1a0980a1b478c715baad6b93cbe64f4448bad62c7912d1f0566969107dc98b4d521fbfe24a0dbe50c183676584a168cbf5e36f0489eaa6d69510afd84f85a27ede157022845f399a33c4f8375626a6f595c63cd6", @generic="c831af515ffa5804d0497832b1c557812108b2ef846eb370c3dc03a74d2a1c5ea79b25760678756ada7838f73adc49e81dd6d53ba7a55a24e61d9a9247f4eb4cf55f7d7b179ce393e045fcdb48a7f872e8e467a7c9c05877c34c15466daad19dfcc650034032c18173569d7f7e9f8263054757a0fd6b5b956356bc8620f8bf068d3d271238bdf0e080753e1347edefcd97ba225823844a650fb84c95d04f813efe2ca98df9e34084f483c72f5a80fcbcc9f0ee01a4378a5172932bd780a2901d5d9826b4ec7299dbf09b332a3f8cf19a2754b14c9dbdbbc7dd7702d9ce34", @typed={0x8, 0xfc, 0x0, 0x0, @pid=r3}]}, 0x230}, 0x1, 0x0, 0x0, 0x2005c0c4}, 0xd790dfa94cdb35d0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000500)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @remote}}) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r6, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000006c0)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000740), 0x0, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xde, 0x8, 0x11, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000500000000000000080000008500000064000000040840000c000000181b0000", @ANYRES32=r6, @ANYBLOB="000000000000000085000000d3000000054b30000000000018370000030000000000000000000000184a00000600000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa10000000045e640000007010000f8ffffffb702000008000000b703000003000000850000000600000018120000202136a41c42f6b14e0d390f6ad591bfb47a9bf192d18c814a87220f7989712c27cf7e08531fb087e79d3ca070ba6320736a75364a26d8fbb77f40731e6b04c38a7e3c50fc8571c2529420f77d37d27bacd29bcf881569530d", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xafce5522, 0x2, &(0x7f0000000480)=""/2, 0x40f00, 0x14, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x3, 0x1000}, 0x10, r7, 0x0, 0x0, &(0x7f0000000980)=[r6, 0x1, 0x1], 0x0, 0x10, 0xd18, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 0s ago: executing program 0 (id=2021): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109"], 0x20}, 0x1, 0x0, 0x0, 0x20004050}, 0x4c830) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000340)={0x0, @aes128, 0x0, @desc2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000280), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@const={0xf}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x1, 0x4}, {0x0, 0x4, 0x27d59da9}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30]}}, &(0x7f00000001c0)=""/68, 0x4e, 0x44, 0x0, 0x8, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0000000000f30000000000"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): 53.469851][T11203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.502469][T11203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.536166][T11203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.536767][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 253.546349][T11203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.589459][T11203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.604674][T11203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.808438][T11482] netlink: 'syz.0.1376': attribute type 4 has an invalid length. [ 253.820886][T11484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.822307][ T9484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.832146][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fa22000: abort rx timeout. Force session deactivation [ 253.878737][ T9484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.981944][ T9492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.001789][ T9492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.204881][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 254.322948][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 254.560210][T11521] bond0: entered allmulticast mode [ 254.571444][T11521] bond_slave_0: entered allmulticast mode [ 254.579801][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 254.589263][T11521] bond_slave_1: entered allmulticast mode [ 254.595804][T11521] dummy0: entered allmulticast mode [ 254.699601][T11533] netlink: 'syz.1.1391': attribute type 3 has an invalid length. [ 254.713497][T11533] netlink: 'syz.1.1391': attribute type 3 has an invalid length. [ 254.740588][T11533] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 254.933507][T11533] bond3: entered promiscuous mode [ 254.940016][T11533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.962322][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1395'. [ 254.971787][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1395'. [ 255.350398][T11545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.370468][T11545] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 255.484659][T11545] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 255.557929][T11545] bond3: (slave wireguard0): making interface the new active one [ 255.595343][T11545] wireguard0: entered promiscuous mode [ 255.602204][T11545] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 255.740330][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.800656][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811464][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.182979][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.351098][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.420820][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.512659][ T1103] bridge_slave_1: left allmulticast mode [ 256.519358][ T1103] bridge_slave_1: left promiscuous mode [ 256.525352][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.535430][ T1103] bridge_slave_0: left allmulticast mode [ 256.541107][ T1103] bridge_slave_0: left promiscuous mode [ 256.547395][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.860485][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.872201][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.883894][ T1103] bond0 (unregistering): Released all slaves [ 256.914919][ T9492] net_ratelimit: 16 callbacks suppressed [ 256.914942][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.000351][T11563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1398'. [ 257.264408][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.652420][T11584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.720890][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.733863][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 257.753704][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 257.773773][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.789896][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.791021][T11584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.808741][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.821027][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.829834][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.874780][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.028369][T11584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.071247][T11612] tipc: Enabled bearer , priority 0 [ 258.131484][T11584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.165072][T11612] syzkaller0: entered promiscuous mode [ 258.171649][T11612] syzkaller0: entered allmulticast mode [ 258.207597][T11612] tipc: Resetting bearer [ 258.217475][T11611] tipc: Resetting bearer [ 258.293549][T11611] tipc: Disabling bearer [ 258.345730][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.404946][T11620] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1416'. [ 258.414224][T11620] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1416'. [ 258.514895][T11584] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.597265][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.675192][T11584] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.733778][T11584] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.853586][T11634] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1418'. [ 258.867246][T11584] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.925248][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 259.055954][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 259.166224][T11644] pim6reg: entered allmulticast mode [ 259.205585][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 259.279422][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 259.315622][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 259.358428][T11648] netlink: 'syz.0.1421': attribute type 7 has an invalid length. [ 259.404557][T11648] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1421'. [ 259.610375][T11660] netlink: 'syz.3.1423': attribute type 29 has an invalid length. [ 259.659152][T11661] netlink: 'syz.3.1423': attribute type 29 has an invalid length. [ 259.956274][ T5838] Bluetooth: hci2: command tx timeout [ 260.079204][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 260.188465][ T1103] hsr_slave_0: left promiscuous mode [ 260.211159][ T1103] hsr_slave_1: left promiscuous mode [ 260.223728][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.234629][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.243597][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.256745][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.289714][ T1103] veth1_macvtap: left promiscuous mode [ 260.300158][ T1103] veth0_macvtap: left promiscuous mode [ 260.307837][ T1103] veth1_vlan: left promiscuous mode [ 260.313225][ T1103] veth0_vlan: left promiscuous mode [ 260.808209][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 260.851630][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 261.843095][ T1539] IPVS: starting estimator thread 0... [ 261.974678][T11701] IPVS: using max 27 ests per chain, 64800 per kthread [ 262.045058][ T5838] Bluetooth: hci2: command tx timeout [ 262.064666][ T9492] net_ratelimit: 5 callbacks suppressed [ 262.064686][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 262.120421][T11604] chnl_net:caif_netlink_parms(): no params data found [ 262.163573][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 262.345850][T11604] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.368170][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.388272][T11604] bridge_slave_0: entered allmulticast mode [ 262.400982][T11604] bridge_slave_0: entered promiscuous mode [ 262.414531][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 262.422358][T11604] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.430105][T11604] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.440278][T11604] bridge_slave_1: entered allmulticast mode [ 262.448579][T11604] bridge_slave_1: entered promiscuous mode [ 262.592368][T11604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.616794][T11604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.789091][T11741] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 262.803791][T11741] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1445'. [ 262.822710][T11604] team0: Port device team_slave_0 added [ 262.860532][T11604] team0: Port device team_slave_1 added [ 262.990215][T11604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.997485][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.066379][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.074881][T11604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.093841][T11604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.103127][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.168394][T11604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.227777][T11768] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1455'. [ 263.251102][T11763] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 263.401432][T11604] hsr_slave_0: entered promiscuous mode [ 263.424542][T11604] hsr_slave_1: entered promiscuous mode [ 263.533453][T11778] vlan4: entered allmulticast mode [ 263.538948][T11778] bond0: entered allmulticast mode [ 263.561972][T11774] netlink: 'syz.1.1457': attribute type 12 has an invalid length. [ 263.577297][T11774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1457'. [ 263.621705][T11785] pim6reg: entered allmulticast mode [ 263.666456][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 263.701873][T11785] pim6reg: left allmulticast mode [ 263.748451][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1461'. [ 264.061595][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 264.114754][ T5838] Bluetooth: hci2: command tx timeout [ 264.176266][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 264.232552][T11820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1467'. [ 264.273976][T11820] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1467'. [ 264.336843][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 264.421310][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 264.437962][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 264.454495][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 264.626199][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 264.636027][T11604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.657320][T11604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.682548][T11604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.711004][T11604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.777808][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 264.978319][T11604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.071882][T11604] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.116242][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.123509][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.198794][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.206051][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.765035][T11604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.931383][ T9499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.968054][T11888] batadv_slave_1: entered promiscuous mode [ 266.006722][T11885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.009038][T11884] batadv_slave_1: left promiscuous mode [ 266.091295][ T9499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.121793][T11604] veth0_vlan: entered promiscuous mode [ 266.139418][T11604] veth1_vlan: entered promiscuous mode [ 266.194485][ T5838] Bluetooth: hci2: command tx timeout [ 266.195977][ T9499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.233870][T11604] veth0_macvtap: entered promiscuous mode [ 266.255996][T11604] veth1_macvtap: entered promiscuous mode [ 266.316851][T11894] xt_hashlimit: max too large, truncated to 1048576 [ 266.336318][ T9499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.393825][T11894] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 266.420310][T11604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.452719][T11604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.492844][T11604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.520756][T11604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.545849][T11604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.568087][T11604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.632766][T11904] ï‰Oܼ: renamed from hsr0 (while UP) [ 266.655225][T11904] ï‰Oܼ: entered promiscuous mode [ 266.969795][ T9492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.985292][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.993573][ T9492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.015950][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.035291][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.060263][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.085656][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.120023][ T9499] bridge_slave_1: left allmulticast mode [ 267.131851][ T9499] bridge_slave_1: left promiscuous mode [ 267.138855][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.174043][ T9499] bridge_slave_0: left allmulticast mode [ 267.182946][ T9499] bridge_slave_0: left promiscuous mode [ 267.193702][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.256539][ T9499] tipc: Resetting bearer [ 267.380284][T11924] __nla_validate_parse: 8 callbacks suppressed [ 267.380304][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 267.561480][ T9499] tipc: Disabling bearer [ 268.109194][ T9499] bond0 (unregistering): (slave 00ªÃøÂFNð¡): Releasing backup interface [ 268.120530][ T9499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.131497][ T9499] bond_slave_1: left allmulticast mode [ 268.139921][ T9499] bond0 (unregistering): Released all slaves [ 268.244825][ T9499] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 268.256298][ T9499] bond1 (unregistering): (slave vlan0): Releasing active interface [ 268.267270][ T9499] bond1 (unregistering): Released all slaves [ 268.364957][ T9499] bond2 (unregistering): Released all slaves [ 268.470760][ T9499] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 268.479221][ T9499] wireguard0: left promiscuous mode [ 268.488159][ T9499] bond3 (unregistering): Released all slaves [ 268.503235][ T9499] bond4 (unregistering): Released all slaves [ 268.519818][T11916] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1501'. [ 268.536580][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.558890][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.570417][ T9487] net_ratelimit: 13 callbacks suppressed [ 268.570439][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 268.720300][ T9499] tipc: Disabling bearer [ 268.746908][ T9499] tipc: Left network mode [ 268.765419][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 268.985062][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 269.002380][T11939] tipc: Enabled bearer , priority 0 [ 269.105434][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 269.156513][ T5838] Bluetooth: hci0: command tx timeout [ 269.225937][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 269.374523][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 269.449243][T11954] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1512'. [ 269.510579][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 269.643110][T11956] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 269.656203][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 269.788203][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 270.060622][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 270.134687][ T24] tipc: Node number set to 3241934688 [ 270.365123][T11913] chnl_net:caif_netlink_parms(): no params data found [ 270.423189][ T9499] hsr_slave_0: left promiscuous mode [ 270.433532][ T9499] hsr_slave_1: left promiscuous mode [ 270.440129][ T9499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.448423][ T9499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.456504][ T9499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.476186][ T9499] veth1_macvtap: left promiscuous mode [ 270.481895][ T9499] veth0_macvtap: left promiscuous mode [ 270.517742][ T9484] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 270.876175][ T9499] team0 (unregistering): Port device team_slave_1 removed [ 271.154595][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.234604][ T5838] Bluetooth: hci0: command tx timeout [ 271.396288][T11913] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.420423][T11972] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1516'. [ 271.445682][T11913] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.452961][T11913] bridge_slave_0: entered allmulticast mode [ 271.462882][T11979] x_tables: duplicate underflow at hook 1 [ 271.462893][T11975] x_tables: duplicate underflow at hook 1 [ 271.496844][T11913] bridge_slave_0: entered promiscuous mode [ 271.510229][T11975] x_tables: duplicate underflow at hook 3 [ 271.511908][T11913] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.538008][T11974] x_tables: duplicate underflow at hook 3 [ 271.545665][T11913] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.552931][T11913] bridge_slave_1: entered allmulticast mode [ 271.600127][T11913] bridge_slave_1: entered promiscuous mode [ 271.777171][T11913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.834135][T11913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.030469][T11913] team0: Port device team_slave_0 added [ 272.031807][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 272.046280][T11913] team0: Port device team_slave_1 added [ 272.065894][T11992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 272.075321][T11992] team0: Device ipvlan2 is already an upper device of the team interface [ 272.089142][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.106383][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.115292][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.125462][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.133808][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.253226][ T9499] IPVS: stop unused estimator thread 0... [ 272.270211][T11913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.314585][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.381493][T11913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.382633][T11991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.438499][T11913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.448060][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.482487][T11913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.648131][T11913] hsr_slave_0: entered promiscuous mode [ 272.665248][T11913] hsr_slave_1: entered promiscuous mode [ 272.671652][T11913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.684736][T11913] Cannot create hsr debugfs directory [ 272.715929][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.740396][T12016] tunl0: left promiscuous mode [ 272.856024][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.967845][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.097405][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.314347][ T5838] Bluetooth: hci0: command tx timeout [ 273.357080][T12033] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 273.367328][T12033] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 273.590916][T12042] net_ratelimit: 6 callbacks suppressed [ 273.590935][T12042] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 273.721657][ T36] bridge_slave_1: left allmulticast mode [ 273.727596][ T36] bridge_slave_1: left promiscuous mode [ 273.740304][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.772349][ T36] bridge_slave_0: left allmulticast mode [ 273.783312][ T36] bridge_slave_0: left promiscuous mode [ 273.800566][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.197472][ T5838] Bluetooth: hci2: command tx timeout [ 274.332180][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.343467][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.353702][ T36] bond0 (unregistering): Released all slaves [ 274.382350][T12057] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 274.410197][T12060] bond8: entered promiscuous mode [ 274.425238][T12060] bond8: entered allmulticast mode [ 274.443673][T12060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 274.459089][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 274.629459][T12074] sctp: [Deprecated]: syz.0.1541 (pid 12074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.629459][T12074] Use struct sctp_sack_info instead [ 274.674916][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 274.709965][T12076] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 274.734412][T12076] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1543'. [ 274.891813][T12086] netlink: 'syz.0.1546': attribute type 21 has an invalid length. [ 274.903785][T12086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1546'. [ 274.914645][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 274.984504][T12080] raw_sendmsg: syz.4.1544 forgot to set AF_INET. Fix it! [ 275.006718][T11913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.058474][T11913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.114565][T11913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.162747][T12095] openvswitch: netlink: Duplicate or invalid key (type 0). [ 275.176093][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 275.193954][T11913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.230604][T12095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.307836][T11993] chnl_net:caif_netlink_parms(): no params data found [ 275.401295][ T5838] Bluetooth: hci0: command tx timeout [ 275.443840][T12109] vlan4: entered allmulticast mode [ 275.460666][T12109] gretap0: entered allmulticast mode [ 275.671168][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 275.840924][T12124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1557'. [ 275.854987][ T36] hsr_slave_0: left promiscuous mode [ 275.875566][ T36] hsr_slave_1: left promiscuous mode [ 275.881788][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.889568][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.904215][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.915472][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.948272][ T36] veth1_macvtap: left promiscuous mode [ 275.954000][ T36] veth0_macvtap: left promiscuous mode [ 275.960350][ T36] veth1_vlan: left promiscuous mode [ 275.965939][ T36] veth0_vlan: left promiscuous mode [ 276.011838][T12132] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1557'. [ 276.275560][ T5838] Bluetooth: hci2: command tx timeout [ 276.629319][ T36] team0 (unregistering): Port device team_slave_1 removed [ 276.669023][ T36] team0 (unregistering): Port device team_slave_0 removed [ 277.032788][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.043052][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.053139][T11993] bridge_slave_0: entered allmulticast mode [ 277.071031][T11993] bridge_slave_0: entered promiscuous mode [ 277.115956][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 277.167861][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.192534][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.202298][T11993] bridge_slave_1: entered allmulticast mode [ 277.211635][T11993] bridge_slave_1: entered promiscuous mode [ 277.269888][T12157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1564'. [ 277.282104][T12154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1563'. [ 277.368217][T11993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.415156][T11993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.579292][T11993] team0: Port device team_slave_0 added [ 277.589394][T11993] team0: Port device team_slave_1 added [ 277.620744][T12174] xt_cgroup: invalid path, errno=-2 [ 277.647021][T11993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.664750][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.726788][T11993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.756455][T11913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.767453][T11993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.779359][T12176] set match dimension is over the limit! [ 277.785896][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.798023][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 277.814922][T11993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.961235][T11913] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.109767][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 278.147645][T11993] hsr_slave_0: entered promiscuous mode [ 278.155664][T11993] hsr_slave_1: entered promiscuous mode [ 278.166368][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.173549][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.258744][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.265982][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.354426][ T5838] Bluetooth: hci2: command tx timeout [ 278.381634][T12203] bridge4: entered allmulticast mode [ 278.395542][T12204] SET target dimension over the limit! [ 278.417158][T12204] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1577'. [ 278.478400][T12204] gretap0: entered promiscuous mode [ 278.639207][T12210] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 278.678273][ T5906] net_ratelimit: 2 callbacks suppressed [ 278.678293][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 278.707584][T12210] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 278.795997][T12210] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 278.921784][T12219] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 278.967125][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1581'. [ 278.997104][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.019908][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1581'. [ 279.097251][T12225] gre0: entered promiscuous mode [ 279.102383][T12225] gre0: entered allmulticast mode [ 279.221374][T11913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.246191][T12235] bridge5: entered promiscuous mode [ 279.251574][T12235] bridge5: entered allmulticast mode [ 279.294877][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.478912][T11913] veth0_vlan: entered promiscuous mode [ 279.516926][T11913] veth1_vlan: entered promiscuous mode [ 279.525428][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.680807][T11993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.722257][T11993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.749849][T11913] veth0_macvtap: entered promiscuous mode [ 279.768764][T11913] veth1_macvtap: entered promiscuous mode [ 279.781937][T11993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.815317][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.833501][T11993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.850168][T12258] __nla_validate_parse: 9 callbacks suppressed [ 279.850187][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 279.888487][T11913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.931907][T11913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.957959][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.985913][T11913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.995155][T11913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.004077][T11913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.013205][T11913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.026682][T12264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1595'. [ 280.061857][T12264] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1595'. [ 280.154562][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.341124][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.350332][T12244] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 280.359802][T12267] syzkaller1: entered promiscuous mode [ 280.371177][T12267] syzkaller1: entered allmulticast mode [ 280.399985][ T9492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.414385][ T9492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.434649][ T5838] Bluetooth: hci2: command tx timeout [ 280.480264][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.511417][T11993] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.604872][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.612080][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.642290][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.649552][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.686075][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.705786][ T9487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.715781][ T9487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.835839][ T9487] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 281.223471][T12304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 281.244979][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 281.277032][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 281.294786][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 281.399195][ T1103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.525233][ T1103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.558975][T11993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.652522][T11993] veth0_vlan: entered promiscuous mode [ 281.701965][T12321] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 281.717490][T12320] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1610'. [ 281.739401][T11993] veth1_vlan: entered promiscuous mode [ 281.819082][ T1103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.850076][T12323] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 281.870789][T12320] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 282.039499][ T1103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.175264][T12340] netlink: 'syz.4.1614': attribute type 33 has an invalid length. [ 282.183166][T12340] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1614'. [ 282.298673][T11993] veth0_macvtap: entered promiscuous mode [ 282.340240][T11993] veth1_macvtap: entered promiscuous mode [ 282.433044][T11993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.446199][T11993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.451446][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.457619][T11993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.484460][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.499202][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.507765][T12352] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1619'. [ 282.516895][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 282.530002][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.534327][T11993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.557938][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.589142][T11993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.601776][T11993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.716975][T12359] netlink: 'syz.3.1621': attribute type 21 has an invalid length. [ 282.767794][T12361] netlink: 'syz.0.1622': attribute type 39 has an invalid length. [ 282.777782][ T1103] bridge_slave_1: left allmulticast mode [ 282.795965][ T1103] bridge_slave_1: left promiscuous mode [ 282.803100][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.844201][ T1103] bridge_slave_0: left allmulticast mode [ 282.857066][ T1103] bridge_slave_0: left promiscuous mode [ 282.873176][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.400305][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.411876][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.422641][ T1103] bond0 (unregistering): Released all slaves [ 283.537055][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.550934][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.835076][ T53] net_ratelimit: 8 callbacks suppressed [ 283.835098][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 283.904589][ T9487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.927458][ T9487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.105531][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.594742][ T5838] Bluetooth: hci0: command tx timeout [ 284.697648][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.933865][ T1103] hsr_slave_0: left promiscuous mode [ 284.945196][ T1103] hsr_slave_1: left promiscuous mode [ 284.959694][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.967488][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.978475][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.994932][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.049311][ T1103] veth1_macvtap: left promiscuous mode [ 285.057280][ T1103] veth0_macvtap: left promiscuous mode [ 285.062986][ T1103] veth1_vlan: left promiscuous mode [ 285.072810][ T1103] veth0_vlan: left promiscuous mode [ 285.506013][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 285.548108][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 285.986910][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 286.022855][T12349] chnl_net:caif_netlink_parms(): no params data found [ 286.113198][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.120715][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.128060][T12349] bridge_slave_0: entered allmulticast mode [ 286.138094][T12349] bridge_slave_0: entered promiscuous mode [ 286.154123][T12349] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.165235][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.172420][T12349] bridge_slave_1: entered allmulticast mode [ 286.180640][T12349] bridge_slave_1: entered promiscuous mode [ 286.219442][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.231949][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.274064][T12349] team0: Port device team_slave_0 added [ 286.285043][T12349] team0: Port device team_slave_1 added [ 286.312880][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.357548][T12349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.364957][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.396797][T12349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.410847][T12349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.451054][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.489771][T12349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.516774][T12421] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 286.606128][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.684468][ T5838] Bluetooth: hci0: command tx timeout [ 286.790085][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.828429][T12349] hsr_slave_0: entered promiscuous mode [ 286.836390][T12349] hsr_slave_1: entered promiscuous mode [ 286.850708][T12349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.859168][T12349] Cannot create hsr debugfs directory [ 286.919765][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.009083][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.019253][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.027862][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.041789][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.062288][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.275848][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 287.444776][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 287.577261][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 287.607595][ T1103] bridge_slave_1: left allmulticast mode [ 287.624855][ T1103] bridge_slave_1: left promiscuous mode [ 287.640786][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.675447][ T1103] bridge_slave_0: left allmulticast mode [ 287.694592][ T1103] bridge_slave_0: left promiscuous mode [ 287.706498][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.173460][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.184972][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.195451][ T1103] bond0 (unregistering): Released all slaves [ 288.396590][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 288.411160][T12482] __nla_validate_parse: 1 callbacks suppressed [ 288.411180][T12482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1656'. [ 288.520481][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 288.588046][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 288.764389][ T5838] Bluetooth: hci0: command tx timeout [ 288.952707][T12497] bridge0: port 6(gretap0) entered blocking state [ 288.974466][T12497] bridge0: port 6(gretap0) entered disabled state [ 288.981160][T12497] gretap0: entered allmulticast mode [ 289.009589][T12497] gretap0: entered promiscuous mode [ 289.055337][ T9492] net_ratelimit: 3 callbacks suppressed [ 289.055361][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.156267][ T5838] Bluetooth: hci2: command tx timeout [ 289.260729][T12517] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.401304][T12525] netlink: 'syz.4.1668': attribute type 4 has an invalid length. [ 289.412002][T12525] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1668'. [ 289.655603][T12534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.714060][ T1103] hsr_slave_0: left promiscuous mode [ 289.724009][ T1103] hsr_slave_1: left promiscuous mode [ 289.754543][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.774397][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.792875][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.816618][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.855403][ T1103] veth1_macvtap: left promiscuous mode [ 289.861018][ T1103] veth0_macvtap: left promiscuous mode [ 289.867664][ T1103] veth1_vlan: left promiscuous mode [ 289.873036][ T1103] veth0_vlan: left promiscuous mode [ 289.974004][T12549] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1676'. [ 290.478225][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 290.517877][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 290.837683][ T5838] Bluetooth: hci0: command tx timeout [ 290.949911][T12349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.979028][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.048440][T12349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.078570][T12349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.111491][T12349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.208428][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.234902][ T5838] Bluetooth: hci2: command tx timeout [ 291.383422][T12582] Bluetooth: MGMT ver 1.23 [ 291.458493][T12440] chnl_net:caif_netlink_parms(): no params data found [ 291.485110][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.669139][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.692644][T12594] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 291.810803][T12606] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1687'. [ 291.847158][T12349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.865842][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.873270][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.882511][T12440] bridge_slave_0: entered allmulticast mode [ 291.891164][T12440] bridge_slave_0: entered promiscuous mode [ 291.902623][T12440] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.910619][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.918067][T12440] bridge_slave_1: entered allmulticast mode [ 291.926529][T12440] bridge_slave_1: entered promiscuous mode [ 291.985504][T12349] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.993354][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 292.046418][T12440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.070891][T12440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.138999][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.146392][ T6612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.207126][T12440] team0: Port device team_slave_0 added [ 292.227076][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.234371][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.253792][T12440] team0: Port device team_slave_1 added [ 292.259494][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 292.307757][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 292.317609][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 292.332867][T12440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.340184][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.367574][T12440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.426027][T12440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.442464][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.469384][T12440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.590743][T12633] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 292.727491][T12440] hsr_slave_0: entered promiscuous mode [ 292.734200][T12440] hsr_slave_1: entered promiscuous mode [ 293.024371][T12647] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 293.045883][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 293.225644][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 293.322123][ T5838] Bluetooth: hci2: command tx timeout [ 293.512413][T12349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.535146][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 293.548108][T12660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.555539][T12660] IPv6: NLM_F_CREATE should be set when creating new route [ 293.567310][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 293.577398][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 293.828567][T12440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.858425][T12349] veth0_vlan: entered promiscuous mode [ 293.872694][T12440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.907484][T12440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.945558][T12440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.003789][T12671] macvlan1: entered promiscuous mode [ 294.036355][T12671] macvlan1: left promiscuous mode [ 294.087848][T12349] veth1_vlan: entered promiscuous mode [ 294.144974][ T9492] net_ratelimit: 2 callbacks suppressed [ 294.144994][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 294.274051][T12349] veth0_macvtap: entered promiscuous mode [ 294.301200][T12349] veth1_macvtap: entered promiscuous mode [ 294.382660][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 294.411516][T12349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.458505][T12349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.504071][T12349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.532392][T12349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.555611][T12349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.576637][T12349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.678051][T12440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.714169][T12689] tipc: Started in network mode [ 294.735865][T12689] tipc: Node identity 080211, cluster identity 4711 [ 294.742619][T12689] tipc: Enabled bearer , priority 0 [ 294.809195][T12440] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.862337][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.869615][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.909956][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.917228][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.103092][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.126174][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.263130][ T9484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.276746][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.277107][T12700] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 295.294978][ T9484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.316681][T12700] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 295.401047][ T5838] Bluetooth: hci2: command tx timeout [ 295.407517][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.625504][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.734504][ T5886] tipc: Node number set to 134353152 [ 295.929141][ T6612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.043506][ T6612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.098704][T12440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.206733][ T6612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.425954][T12721] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1722'. [ 296.441537][ T6612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.453897][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 296.505048][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 296.637250][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 296.663208][T12440] veth0_vlan: entered promiscuous mode [ 296.714760][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.723740][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.736342][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.751680][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.761255][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.775805][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 296.869565][T12440] veth1_vlan: entered promiscuous mode [ 296.909387][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 296.956059][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 297.091449][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 297.398455][T12440] veth0_macvtap: entered promiscuous mode [ 297.455586][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 297.496556][ T6612] bridge_slave_1: left allmulticast mode [ 297.502249][ T6612] bridge_slave_1: left promiscuous mode [ 297.542360][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.656522][ T6612] bridge_slave_0: left allmulticast mode [ 297.662236][ T6612] bridge_slave_0: left promiscuous mode [ 297.682590][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.802759][T12773] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1735'. [ 298.120243][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.133709][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.146600][ T6612] bond0 (unregistering): Released all slaves [ 298.169483][T12440] veth1_macvtap: entered promiscuous mode [ 298.205213][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 298.390074][T12440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.651970][T12440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.652576][T12792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1742'. [ 298.697160][T12440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.711621][T12440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.721301][T12440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.730623][T12440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.834706][ T5838] Bluetooth: hci0: command tx timeout [ 298.933066][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 299.100262][ T9499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.120315][ T9499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.240499][T12808] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1748'. [ 299.280005][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 299.318656][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 299.436647][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.445284][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.519672][ T6612] hsr_slave_0: left promiscuous mode [ 299.542760][ T6612] hsr_slave_1: left promiscuous mode [ 299.557142][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1752'. [ 299.560420][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.575205][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.587463][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.595422][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.631131][ T6612] veth1_macvtap: left promiscuous mode [ 299.639035][ T6612] veth0_macvtap: left promiscuous mode [ 299.658539][ T6612] veth1_vlan: left promiscuous mode [ 299.676187][T12832] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1751'. [ 299.680134][ T6612] veth0_vlan: left promiscuous mode [ 299.704022][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 299.748604][T12832] netlink: 'syz.4.1751': attribute type 4 has an invalid length. [ 299.834818][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1753'. [ 300.232526][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 300.269256][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 300.647946][T12827] net_ratelimit: 6 callbacks suppressed [ 300.647966][T12827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.704932][T12749] chnl_net:caif_netlink_parms(): no params data found [ 300.868323][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.915621][ T5838] Bluetooth: hci0: command tx timeout [ 300.953919][T12849] netlink: 'syz.3.1756': attribute type 32 has an invalid length. [ 300.973425][T12749] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.981518][T12749] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.989110][T12749] bridge_slave_0: entered allmulticast mode [ 301.011293][T12749] bridge_slave_0: entered promiscuous mode [ 301.080099][T12848] batadv_slave_1: entered allmulticast mode [ 301.095133][T12749] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.108158][T12749] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.117085][T12749] bridge_slave_1: entered allmulticast mode [ 301.124966][T12749] bridge_slave_1: entered promiscuous mode [ 301.132588][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 301.155632][T12856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.162891][T12856] IPv6: NLM_F_CREATE should be set when creating new route [ 301.327948][T12749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.341188][T12841] batadv_slave_1: left allmulticast mode [ 301.361987][T12749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.532150][T12749] team0: Port device team_slave_0 added [ 301.563821][T12749] team0: Port device team_slave_1 added [ 301.635612][ T6612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.669084][T12749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.676369][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.702616][T12749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.721549][T12749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.728891][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.756609][T12749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.803961][ T6612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.838945][T12749] hsr_slave_0: entered promiscuous mode [ 301.846649][T12749] hsr_slave_1: entered promiscuous mode [ 301.852896][T12749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.861018][T12749] Cannot create hsr debugfs directory [ 301.881880][ T6612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.935519][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.960598][ T6612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.065490][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.129341][ T6612] bridge_slave_1: left allmulticast mode [ 302.135479][ T6612] bridge_slave_1: left promiscuous mode [ 302.141279][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.150707][ T6612] bridge_slave_0: left allmulticast mode [ 302.157124][ T6612] bridge_slave_0: left promiscuous mode [ 302.162871][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.513997][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.522662][ T9484] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.539015][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.549691][ T6612] bond0 (unregistering): Released all slaves [ 302.585207][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.744034][T12749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.755570][T12749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.765557][T12749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.775255][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.782684][T12749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.898319][T12749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.927973][T12749] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.948968][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.956161][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.992818][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.000049][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.125399][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.256095][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.275515][T12876] x_tables: duplicate underflow at hook 3 [ 303.385595][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.561897][ T6612] hsr_slave_0: left promiscuous mode [ 303.581862][ T6612] hsr_slave_1: left promiscuous mode [ 303.602881][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.624997][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.645326][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.652800][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.749375][ T6612] veth1_macvtap: left promiscuous mode [ 303.769982][ T6612] veth0_macvtap: left promiscuous mode [ 303.790027][ T6612] veth1_vlan: left promiscuous mode [ 303.804805][ T6612] veth0_vlan: left promiscuous mode [ 303.917734][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.929116][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.943406][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.960766][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.970288][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.168620][T12910] __nla_validate_parse: 5 callbacks suppressed [ 304.168640][T12910] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1770'. [ 304.221063][T12911] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 304.431704][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 304.478389][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 304.846701][T12890] veth1_to_team: entered promiscuous mode [ 304.852937][T12890] veth1_to_team: left promiscuous mode [ 304.972816][T12893] team0: Port device team_slave_1 removed [ 304.993390][T12911] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 304.997937][T12912] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 305.018272][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.131219][T12749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.253629][T12749] veth0_vlan: entered promiscuous mode [ 305.289469][T12749] veth1_vlan: entered promiscuous mode [ 305.427389][T12749] veth0_macvtap: entered promiscuous mode [ 305.450742][T12749] veth1_macvtap: entered promiscuous mode [ 305.547297][T12749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.569300][T12749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.621511][T12749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.644683][T12749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.653443][T12749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.662287][ T5838] block nbd2: Receive control failed (result -32) [ 305.681753][T12749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.687635][T12934] x_tables: duplicate underflow at hook 2 [ 305.745206][ T6612] net_ratelimit: 2 callbacks suppressed [ 305.745226][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.779807][T12936] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 305.821766][T12938] Bluetooth: MGMT ver 1.23 [ 305.825028][T12936] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1776'. [ 305.841231][T12936] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 305.851597][T12936] netlink: 'syz.0.1776': attribute type 2 has an invalid length. [ 305.865694][T12936] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1776'. [ 305.876734][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.983173][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.024599][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.034913][ T5838] Bluetooth: hci2: command tx timeout [ 306.105305][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.166497][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.183018][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.202816][T12946] x_tables: duplicate underflow at hook 4 [ 306.295344][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.476205][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.532358][T12966] netlink: 'syz.3.1786': attribute type 12 has an invalid length. [ 306.705377][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.780258][T12904] chnl_net:caif_netlink_parms(): no params data found [ 306.883988][T12988] Cannot find set identified by id 0 to match [ 306.956718][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.191202][T13008] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 307.222690][ T9492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.300694][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.331051][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.354528][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.361842][T12904] bridge_slave_0: entered allmulticast mode [ 307.392668][T12904] bridge_slave_0: entered promiscuous mode [ 307.491139][ T9492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.510528][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.518115][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.525485][T12904] bridge_slave_1: entered allmulticast mode [ 307.532760][T12904] bridge_slave_1: entered promiscuous mode [ 307.619129][T12904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.631148][T12904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.673982][T12904] team0: Port device team_slave_0 added [ 307.683806][T12904] team0: Port device team_slave_1 added [ 307.729653][T12904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.737275][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.763732][T12904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.778223][T12904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.786233][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.812700][T12904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.840961][ T9492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.895980][T12904] hsr_slave_0: entered promiscuous mode [ 307.902478][T12904] hsr_slave_1: entered promiscuous mode [ 307.996433][ T9492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.114609][ T5838] Bluetooth: hci2: command tx timeout [ 308.125076][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.325585][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.528326][T13046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1805'. [ 308.617980][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.633907][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.642584][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.672300][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.684711][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.747107][T13054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 308.758138][T13054] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 308.767702][ T9492] bridge_slave_1: left allmulticast mode [ 308.773381][ T9492] bridge_slave_1: left promiscuous mode [ 308.782809][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.799622][ T9492] bridge_slave_0: left allmulticast mode [ 308.805537][ T9492] bridge_slave_0: left promiscuous mode [ 308.811259][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.133465][ T9492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.148383][ T9492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.158726][ T9492] bond0 (unregistering): Released all slaves [ 309.789591][T13071] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1815'. [ 309.894589][T13074] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1816'. [ 309.926865][T12904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.944797][T12904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.965393][T12904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.990634][T12904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.084673][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1818'. [ 310.195621][ T5838] Bluetooth: hci2: command tx timeout [ 310.238853][T12904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.268823][T13081] xfrm1: entered allmulticast mode [ 310.342043][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 310.371648][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 310.388014][T13092] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1820'. [ 310.493703][T12904] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.576832][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.584159][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.603272][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 310.673490][T13100] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 310.715432][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.722613][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.756464][ T5838] Bluetooth: hci0: command tx timeout [ 310.794719][ T5906] net_ratelimit: 10 callbacks suppressed [ 310.794739][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.908156][ T9492] hsr_slave_0: left promiscuous mode [ 310.925290][ T9492] hsr_slave_1: left promiscuous mode [ 310.931223][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.940275][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.949109][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.966057][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.052328][ T9492] veth1_macvtap: left promiscuous mode [ 311.060859][ T9492] veth0_macvtap: left promiscuous mode [ 311.060882][T13114] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 311.066668][ T9492] veth1_vlan: left promiscuous mode [ 311.066795][ T9492] veth0_vlan: left promiscuous mode [ 311.097876][T13114] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1825'. [ 311.558301][ T9492] team0 (unregistering): Port device team_slave_1 removed [ 311.598071][ T9492] team0 (unregistering): Port device team_slave_0 removed [ 312.039171][T13109] wg2: entered promiscuous mode [ 312.046090][T13109] wg2: entered allmulticast mode [ 312.071202][T13114] xfrm2: entered allmulticast mode [ 312.087332][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 312.225387][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 312.231043][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 312.274746][ T5838] Bluetooth: hci2: command tx timeout [ 312.302684][T13049] chnl_net:caif_netlink_parms(): no params data found [ 312.320396][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 312.438153][T13130] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 312.621526][T13049] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.637933][T13049] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.646117][T13049] bridge_slave_0: entered allmulticast mode [ 312.653677][T13049] bridge_slave_0: entered promiscuous mode [ 312.664968][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 312.689673][T13049] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.698429][T13049] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.710124][T13049] bridge_slave_1: entered allmulticast mode [ 312.719435][T13049] bridge_slave_1: entered promiscuous mode [ 312.836852][ T5838] Bluetooth: hci0: command tx timeout [ 312.843203][T13049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.863208][T12904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.885934][T13049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.980246][T13049] team0: Port device team_slave_0 added [ 313.005829][T13049] team0: Port device team_slave_1 added [ 313.081106][T13157] x_tables: duplicate underflow at hook 3 [ 313.090392][T13049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.097670][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.133047][T13049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.151228][T12904] veth0_vlan: entered promiscuous mode [ 313.167373][T13049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.175030][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.203468][T13049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.231680][T12904] veth1_vlan: entered promiscuous mode [ 313.294911][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.318512][T13049] hsr_slave_0: entered promiscuous mode [ 313.329177][T13049] hsr_slave_1: entered promiscuous mode [ 313.339088][T13049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.351965][T13049] Cannot create hsr debugfs directory [ 313.358705][T13164] x_tables: unsorted underflow at hook 3 [ 313.539541][T13168] netlink: 'syz.0.1840': attribute type 11 has an invalid length. [ 313.577384][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.601901][T12904] veth0_macvtap: entered promiscuous mode [ 313.663870][T12904] veth1_macvtap: entered promiscuous mode [ 313.714132][T12904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.776583][T12904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.802640][T12904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.816297][T12904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.825186][T12904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.834145][T12904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.902609][T13176] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 313.992582][T13178] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 314.004652][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.060742][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.087299][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.156128][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.185243][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.193122][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.206002][T13049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.227797][T13049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.258173][T13049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.269021][T13049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.300197][T13186] netlink: 'syz.4.1844': attribute type 7 has an invalid length. [ 314.316699][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.344351][T13186] netlink: 'syz.4.1844': attribute type 8 has an invalid length. [ 314.542525][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.567013][T13049] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.605392][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.612619][ T9492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.720488][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.758968][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.766205][ T9492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.827535][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.915626][ T5838] Bluetooth: hci0: command tx timeout [ 314.924898][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.997247][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.136472][T13049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.198946][ T36] bridge_slave_1: left allmulticast mode [ 315.204805][ T36] bridge_slave_1: left promiscuous mode [ 315.210536][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.221464][ T36] bridge_slave_0: left allmulticast mode [ 315.227589][ T36] bridge_slave_0: left promiscuous mode [ 315.233767][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.551142][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.568814][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.579163][ T36] bond0 (unregistering): Released all slaves [ 315.636045][T13049] veth0_vlan: entered promiscuous mode [ 315.666682][T13049] veth1_vlan: entered promiscuous mode [ 315.747040][T13049] veth0_macvtap: entered promiscuous mode [ 315.759753][T13049] veth1_macvtap: entered promiscuous mode [ 315.792220][T13049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.837936][T13049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.851103][T13049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.860337][T13049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.870946][T13049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.880367][T13049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.947013][ T1103] net_ratelimit: 3 callbacks suppressed [ 315.947034][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 316.070845][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.078868][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 316.093666][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.169639][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.178697][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.206530][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 316.367165][ T36] hsr_slave_0: left promiscuous mode [ 316.373133][ T36] hsr_slave_1: left promiscuous mode [ 316.385787][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.393244][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.401656][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.409733][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.443104][ T36] veth1_macvtap: left promiscuous mode [ 316.472360][ T36] veth0_macvtap: left promiscuous mode [ 316.482313][ T36] veth1_vlan: left promiscuous mode [ 316.490327][ T36] veth0_vlan: left promiscuous mode [ 316.497038][T13204] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 316.519674][T13204] __nla_validate_parse: 11 callbacks suppressed [ 316.519692][T13204] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1849'. [ 316.852451][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.867498][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.875763][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.884027][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.893996][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.239250][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.248017][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.267518][ T36] team0 (unregistering): Port device team_slave_1 removed [ 317.308257][ T36] team0 (unregistering): Port device team_slave_0 removed [ 317.715195][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.746783][T13204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.825636][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.942084][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.957149][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 317.984955][T13215] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 318.100647][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 318.235248][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 318.284652][T13223] netlink: 'syz.0.1854': attribute type 39 has an invalid length. [ 318.328399][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.342949][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.353194][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.363734][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.396792][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.460100][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.544774][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 318.674508][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 318.683940][T13234] netlink: 'syz.4.1857': attribute type 4 has an invalid length. [ 318.813780][T13240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 318.827814][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 318.914901][ T5838] Bluetooth: hci0: command tx timeout [ 319.028583][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.143701][T13251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1863'. [ 319.283564][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 319.399166][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.549317][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.610345][T13264] tipc: Enabling of bearer rejected, already enabled [ 319.655984][T13259] veth1_virt_wifi: entered allmulticast mode [ 319.704923][T13209] chnl_net:caif_netlink_parms(): no params data found [ 320.020442][ T36] bridge_slave_1: left allmulticast mode [ 320.030183][ T36] bridge_slave_1: left promiscuous mode [ 320.036506][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.055903][ T36] bridge_slave_0: left allmulticast mode [ 320.061602][ T36] bridge_slave_0: left promiscuous mode [ 320.067535][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.379762][T13294] delete_channel: no stack [ 320.516241][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 320.524584][ T5838] Bluetooth: hci2: command tx timeout [ 320.556507][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.569718][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.580526][ T36] bond0 (unregistering): Released all slaves [ 320.812514][T13301] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1875'. [ 320.821908][T13302] bridge_slave_1: left allmulticast mode [ 320.832197][T13302] bridge_slave_1: left promiscuous mode [ 320.839980][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.851973][T13302] bridge_slave_0: left allmulticast mode [ 320.861119][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.976858][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.984147][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.991599][T13209] bridge_slave_0: entered allmulticast mode [ 320.997807][ T5838] Bluetooth: hci0: command tx timeout [ 321.017945][T13209] bridge_slave_0: entered promiscuous mode [ 321.027476][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.034762][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.041991][T13209] bridge_slave_1: entered allmulticast mode [ 321.050158][T13209] bridge_slave_1: entered promiscuous mode [ 321.321340][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.493832][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.519979][T13224] chnl_net:caif_netlink_parms(): no params data found [ 321.812253][T13209] team0: Port device team_slave_0 added [ 321.871180][T13209] team0: Port device team_slave_1 added [ 322.315786][T13350] netlink: 'syz.4.1885': attribute type 5 has an invalid length. [ 322.357399][T13343] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 322.366502][ T1103] net_ratelimit: 6 callbacks suppressed [ 322.366520][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 322.403908][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.415551][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.452613][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.475157][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.482169][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.509350][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.546711][ T36] hsr_slave_0: left promiscuous mode [ 322.560390][ T36] hsr_slave_1: left promiscuous mode [ 322.570279][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.578518][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.592604][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.600814][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.605096][ T5838] Bluetooth: hci2: command tx timeout [ 322.641474][ T36] veth1_macvtap: left promiscuous mode [ 322.647360][ T36] veth0_macvtap: left promiscuous mode [ 322.653011][ T36] veth1_vlan: left promiscuous mode [ 322.663396][ T36] veth0_vlan: left promiscuous mode [ 323.084658][ T5838] Bluetooth: hci0: command tx timeout [ 323.121515][ T36] team0 (unregistering): Port device team_slave_1 removed [ 323.168842][ T36] team0 (unregistering): Port device team_slave_0 removed [ 323.572096][T13356] veth0_to_hsr: entered promiscuous mode [ 323.690575][T13356] veth0_to_hsr: left promiscuous mode [ 323.767876][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.781746][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.792499][T13224] bridge_slave_0: entered allmulticast mode [ 323.801853][T13224] bridge_slave_0: entered promiscuous mode [ 323.810450][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.817687][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.825464][T13224] bridge_slave_1: entered allmulticast mode [ 323.846169][T13224] bridge_slave_1: entered promiscuous mode [ 323.958133][T13372] delete_channel: no stack [ 324.017078][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.042196][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'. [ 324.059094][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1894'. [ 324.068901][T13379] netlink: 'syz.4.1894': attribute type 20 has an invalid length. [ 324.103148][T13209] hsr_slave_0: entered promiscuous mode [ 324.114615][T13209] hsr_slave_1: entered promiscuous mode [ 324.136726][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.250691][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 324.309199][T13224] team0: Port device team_slave_0 added [ 324.343482][T13224] team0: Port device team_slave_1 added [ 324.413982][T13398] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1901'. [ 324.539634][T13400] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 324.549123][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.564923][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.592219][T13407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1903'. [ 324.628030][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.659487][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1902'. [ 324.673305][T13413] 8021q: adding VLAN 0 to HW filter on device bond9 [ 324.684569][ T5838] Bluetooth: hci2: command tx timeout [ 324.716824][T13405] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.727520][T13405] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.736783][T13405] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.746191][T13405] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.758712][T13405] bond9: (slave geneve2): making interface the new active one [ 324.767401][T13405] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 324.776416][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 324.798378][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.805549][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.835476][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.866805][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.936925][T13420] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1906'. [ 325.038114][T13424] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1907'. [ 325.058071][T13424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.065406][T13424] IPv6: NLM_F_CREATE should be set when creating new route [ 325.072683][T13424] IPv6: NLM_F_CREATE should be set when creating new route [ 325.089807][T13224] hsr_slave_0: entered promiscuous mode [ 325.121112][T13429] netlink: 'syz.4.1910': attribute type 21 has an invalid length. [ 325.129270][T13224] hsr_slave_1: entered promiscuous mode [ 325.129505][T13429] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1910'. [ 325.145359][T13224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.153018][T13224] Cannot create hsr debugfs directory [ 325.165537][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.169742][ T5838] Bluetooth: hci0: command tx timeout [ 325.279792][T13434] bridge0: port 3(gretap0) entered blocking state [ 325.288886][T13434] bridge0: port 3(gretap0) entered disabled state [ 325.296433][T13434] gretap0: entered allmulticast mode [ 325.303102][T13434] gretap0: entered promiscuous mode [ 325.314643][T13434] bridge0: port 3(gretap0) entered blocking state [ 325.321230][T13434] bridge0: port 3(gretap0) entered forwarding state [ 325.433993][T13437] batadv_slave_0: entered promiscuous mode [ 325.506804][T13443] netlink: 'syz.3.1914': attribute type 21 has an invalid length. [ 325.626378][T13443] netlink: 'syz.3.1914': attribute type 14 has an invalid length. [ 325.638588][T13451] Bluetooth: MGMT ver 1.23 [ 325.707891][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.780773][T13456] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 325.945896][T13209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.993552][T13209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.021195][T13209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.133644][T13209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.385172][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 326.525060][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.554527][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 326.579750][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.655970][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.663231][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.700883][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.708118][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.754490][ T5838] Bluetooth: hci2: command tx timeout [ 326.795255][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 326.889883][T13209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.908231][T13209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.930970][T13224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.959227][T13224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.022754][T13224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.048608][T13224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.083854][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 327.295484][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 327.416693][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.500339][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.582873][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.590097][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.619842][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.627115][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.657278][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 327.693705][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.703697][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.723380][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.734123][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.743846][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.806520][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 327.842103][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.085105][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.161872][T13209] veth0_vlan: entered promiscuous mode [ 328.197509][T13209] veth1_vlan: entered promiscuous mode [ 328.255928][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.292812][T13209] veth0_macvtap: entered promiscuous mode [ 328.319208][T13209] veth1_macvtap: entered promiscuous mode [ 328.351721][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.377794][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.408369][T13209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.434621][T13209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.474743][T13209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.483498][T13209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.565096][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.618925][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.671202][T13511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 328.829320][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.861418][ T9492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.888584][ T9492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.025079][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.034596][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.048201][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.109056][T13224] veth0_vlan: entered promiscuous mode [ 329.212211][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.278953][T13224] veth1_vlan: entered promiscuous mode [ 329.355326][T13502] chnl_net:caif_netlink_parms(): no params data found [ 329.499108][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.546826][T13224] veth0_macvtap: entered promiscuous mode [ 329.579466][T13224] veth1_macvtap: entered promiscuous mode [ 329.794834][ T5838] Bluetooth: hci4: command tx timeout [ 329.808137][ T5906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.834183][T13502] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.841813][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.851994][T13502] bridge_slave_0: entered allmulticast mode [ 329.881568][T13502] bridge_slave_0: entered promiscuous mode [ 329.892677][T13502] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.908306][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.919946][T13502] bridge_slave_1: entered allmulticast mode [ 329.928364][T13502] bridge_slave_1: entered promiscuous mode [ 329.962505][ T5906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.038774][T13502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.051675][T13502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.070091][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.078762][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.101060][ T5906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.161587][T13502] team0: Port device team_slave_0 added [ 330.170729][T13502] team0: Port device team_slave_1 added [ 330.181858][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.212805][T13224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.223446][T13224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.232607][T13224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.242144][T13224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.273384][T13502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.280851][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.308034][T13502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.341458][ T5906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.361818][T13502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.369032][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.396480][T13502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.478635][T13502] hsr_slave_0: entered promiscuous mode [ 330.486086][T13502] hsr_slave_1: entered promiscuous mode [ 330.493272][T13502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.501574][T13502] Cannot create hsr debugfs directory [ 330.641100][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.649821][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.715944][ T5906] bridge_slave_1: left allmulticast mode [ 330.721637][ T5906] bridge_slave_1: left promiscuous mode [ 330.727673][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.739212][ T5906] bridge_slave_0: left allmulticast mode [ 330.745264][ T5906] bridge_slave_0: left promiscuous mode [ 330.751049][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.063469][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.075950][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.087164][ T5906] bond0 (unregistering): Released all slaves [ 331.113443][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.124663][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.362715][T13502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.477610][T13502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.618150][T13502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.777028][T13502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.884317][ T5838] Bluetooth: hci4: command tx timeout [ 331.932723][T13557] __nla_validate_parse: 9 callbacks suppressed [ 331.932742][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'. [ 332.062462][ T5906] hsr_slave_0: left promiscuous mode [ 332.075081][ T5906] hsr_slave_1: left promiscuous mode [ 332.081277][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.105114][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.113243][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.135054][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.180512][ T5906] veth1_macvtap: left promiscuous mode [ 332.190895][ T5906] veth0_macvtap: left promiscuous mode [ 332.203328][ T5906] veth1_vlan: left promiscuous mode [ 332.208839][ T5906] veth0_vlan: left promiscuous mode [ 332.286211][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.296295][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.304436][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.312508][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.321137][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.882619][ T5906] team0 (unregistering): Port device team_slave_1 removed [ 333.054642][T13568] tipc: Failed to remove unknown binding: 66,1,1/3241934688:2529566933/2529566935 [ 333.083080][T13570] Bluetooth: MGMT ver 1.23 [ 333.090858][T13568] tipc: Failed to remove unknown binding: 66,1,1/3241934688:2529566933/2529566935 [ 333.107604][ T5906] team0 (unregistering): Port device team_slave_0 removed [ 333.114400][T13568] tipc: Failed to remove unknown binding: 66,1,1/3241934688:2529566933/2529566935 [ 333.146644][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 333.382396][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.401462][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.418340][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.439820][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.455384][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.750736][ T9499] net_ratelimit: 5 callbacks suppressed [ 333.750758][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.778214][T13573] netlink: 'syz.3.1954': attribute type 2 has an invalid length. [ 333.960083][ T5838] Bluetooth: hci4: command tx timeout [ 333.966501][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.077187][T13502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.108279][T13502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.175610][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.193820][T13502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.222841][T13502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.355327][ T5838] Bluetooth: hci0: command tx timeout [ 334.514354][ T9499] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.525371][ T1103] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.706176][T13601] syzkaller1: entered promiscuous mode [ 334.729011][T13601] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 334.791512][T13502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.876566][T13502] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.886237][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.918867][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.926210][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.971419][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.978665][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.096897][ T5906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.187349][T13605] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 335.231953][ T5906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.428109][ T5906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.474858][ T5838] Bluetooth: hci2: command tx timeout [ 335.525429][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.701108][ T5906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.788210][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 336.037124][ T5838] Bluetooth: hci4: command tx timeout [ 336.042925][T13633] netlink: 'syz.3.1967': attribute type 11 has an invalid length. [ 336.134793][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 336.281545][T13560] chnl_net:caif_netlink_parms(): no params data found [ 336.351381][ T5906] bridge_slave_1: left allmulticast mode [ 336.376727][ T5906] bridge_slave_1: left promiscuous mode [ 336.394595][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.428860][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 336.438331][ T5838] Bluetooth: hci0: command tx timeout [ 336.462087][ T5906] bridge_slave_0: left allmulticast mode [ 336.481126][ T5906] bridge_slave_0: left promiscuous mode [ 336.506383][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.881160][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.899329][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.909718][ T5906] bond0 (unregistering): Released all slaves [ 336.952253][T13660] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1973'. [ 336.988919][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.060456][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 337.332005][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 337.569257][ T5838] Bluetooth: hci2: command tx timeout [ 337.816264][T13560] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.840793][T13560] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.862566][T13560] bridge_slave_0: entered allmulticast mode [ 337.888677][T13560] bridge_slave_0: entered promiscuous mode [ 337.961948][T13560] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.975634][T13560] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.984042][T13560] bridge_slave_1: entered allmulticast mode [ 337.999408][T13560] bridge_slave_1: entered promiscuous mode [ 338.026260][ T5906] hsr_slave_0: left promiscuous mode [ 338.032374][ T5906] hsr_slave_1: left promiscuous mode [ 338.039328][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.047096][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.056343][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.064100][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.089042][ T5906] veth1_macvtap: left promiscuous mode [ 338.094715][ T5906] veth0_macvtap: left promiscuous mode [ 338.100292][ T5906] veth1_vlan: left promiscuous mode [ 338.105682][ T5906] veth0_vlan: left promiscuous mode [ 338.333051][T13681] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 338.571924][ T5906] team0 (unregistering): Port device team_slave_1 removed [ 338.622204][ T5906] team0 (unregistering): Port device team_slave_0 removed [ 339.010917][T13560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.034385][ T9492] net_ratelimit: 1 callbacks suppressed [ 339.034405][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.062875][T13575] chnl_net:caif_netlink_parms(): no params data found [ 339.092645][T13560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.191193][T13560] team0: Port device team_slave_0 added [ 339.294063][T13560] team0: Port device team_slave_1 added [ 339.317911][T13712] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1984'. [ 339.491013][T13560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.498364][T13560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.524927][T13560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.539564][T13560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.547059][T13560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.577721][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 339.583744][T13560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.634983][ T5838] Bluetooth: hci2: command tx timeout [ 339.658951][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.670213][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.683012][T13575] bridge_slave_0: entered allmulticast mode [ 339.693162][T13575] bridge_slave_0: entered promiscuous mode [ 339.718189][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 339.728660][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 339.744964][T13725] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.1989'. [ 339.754829][T13725] sch_tbf: burst 0 is lower than device lo mtu (17233) ! [ 339.796588][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.803886][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.812653][T13575] bridge_slave_1: entered allmulticast mode [ 339.830041][T13575] bridge_slave_1: entered promiscuous mode [ 339.946991][T13502] veth0_vlan: entered promiscuous mode [ 339.970853][T13560] hsr_slave_0: entered promiscuous mode [ 339.983371][T13560] hsr_slave_1: entered promiscuous mode [ 339.988363][T13737] netlink: 'syz.0.1993': attribute type 58 has an invalid length. [ 340.004614][T13737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1993'. [ 340.017762][T13735] tipc: Enabled bearer , priority 10 [ 340.037784][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.070335][T13502] veth1_vlan: entered promiscuous mode [ 340.113164][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.165951][ T6612] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.220058][T13575] team0: Port device team_slave_0 added [ 340.246296][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1995'. [ 340.257318][T13742] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 340.272267][T13575] team0: Port device team_slave_1 added [ 340.277133][T13744] openvswitch: netlink: Flow key attr not present in new flow. [ 340.298396][T13744] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.429416][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.440323][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.467725][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.486810][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.503218][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.546277][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.611098][T13754] pimreg3: entered allmulticast mode [ 340.617192][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 340.633584][T13750] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 340.641555][T13750] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 340.746078][T13502] veth0_macvtap: entered promiscuous mode [ 340.826088][T13575] hsr_slave_0: entered promiscuous mode [ 340.832724][T13575] hsr_slave_1: entered promiscuous mode [ 340.848082][T13575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.856109][T13575] Cannot create hsr debugfs directory [ 340.869039][T13760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.876349][T13760] IPv6: NLM_F_CREATE should be set when creating new route [ 340.885248][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.899974][T13502] veth1_macvtap: entered promiscuous mode [ 341.086203][T13502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.113694][T13502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.190543][T13502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.200174][T13502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.209276][T13502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.218550][T13502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.337241][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.390833][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.410688][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.497888][T13779] netlink: zone id is out of range [ 341.503288][T13779] netlink: zone id is out of range [ 341.507149][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.509914][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.524173][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.526649][T13779] netlink: zone id is out of range [ 341.542529][T13779] netlink: zone id is out of range [ 341.626812][T13560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.650069][T13560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.715397][ T5838] Bluetooth: hci2: command tx timeout [ 341.749201][T13560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.791076][T13560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.937647][T13796] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 341.999020][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.023377][T13797] __nla_validate_parse: 4 callbacks suppressed [ 342.023396][T13797] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2013'. [ 342.050633][T13797] unsupported nla_type 58 [ 342.057154][T13796] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 342.112999][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.248459][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.407124][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.469956][T13575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.517942][T13575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.525307][T13809] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2016'. [ 342.541305][T13575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.577169][T13575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.739583][T13560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.760293][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 342.770794][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 342.826958][T13560] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.856740][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 342.881487][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 342.893357][T13815] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 342.905723][ T36] bridge_slave_1: left allmulticast mode [ 342.911416][ T36] bridge_slave_1: left promiscuous mode [ 342.918800][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.933511][ T36] bridge_slave_0: left allmulticast mode [ 342.939998][ T36] bridge_slave_0: left promiscuous mode [ 342.947349][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.971113][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.981593][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.992079][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.002196][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.010334][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.348577][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.360561][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.371080][ T36] bond0 (unregistering): Released all slaves [ 343.391573][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 343.401519][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 343.412474][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 343.422305][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 343.491708][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.498984][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.607407][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.610857][T13827] [ 343.614598][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.616830][T13827] ====================================================== [ 343.616842][T13827] WARNING: possible circular locking dependency detected [ 343.638116][T13827] 6.15.0-rc6-syzkaller-00183-gb95ed5517354 #0 Not tainted [ 343.645228][T13827] ------------------------------------------------------ [ 343.652241][T13827] syz.0.2021/13827 is trying to acquire lock: [ 343.658322][T13827] ffffffff8f44d898 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 343.667509][T13827] [ 343.667509][T13827] but task is already holding lock: [ 343.674876][T13827] ffff88802933c370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 343.684139][T13827] [ 343.684139][T13827] which lock already depends on the new lock. [ 343.684139][T13827] [ 343.694540][T13827] [ 343.694540][T13827] the existing dependency chain (in reverse order) is: [ 343.703554][T13827] [ 343.703554][T13827] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 343.711559][T13827] lock_acquire+0x120/0x360 [ 343.716601][T13827] _raw_spin_lock_bh+0x36/0x50 [ 343.721917][T13827] nr_rt_device_down+0x12a/0x720 [ 343.727384][T13827] nr_device_event+0x137/0x150 [ 343.732673][T13827] notifier_call_chain+0x1b3/0x3e0 [ 343.738305][T13827] __dev_notify_flags+0x18d/0x2e0 [ 343.743855][T13827] netif_change_flags+0xe8/0x1a0 [ 343.749320][T13827] dev_change_flags+0x130/0x260 [ 343.754696][T13827] dev_ioctl+0x7b4/0x1150 [ 343.759559][T13827] sock_do_ioctl+0x22c/0x300 [ 343.764672][T13827] sock_ioctl+0x576/0x790 [ 343.769520][T13827] __se_sys_ioctl+0xf9/0x170 [ 343.774644][T13827] do_syscall_64+0xf6/0x210 [ 343.779679][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.786096][T13827] [ 343.786096][T13827] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 343.793927][T13827] lock_acquire+0x120/0x360 [ 343.798966][T13827] _raw_spin_lock_bh+0x36/0x50 [ 343.804255][T13827] nr_rt_device_down+0xa9/0x720 [ 343.809642][T13827] nr_device_event+0x137/0x150 [ 343.814937][T13827] notifier_call_chain+0x1b3/0x3e0 [ 343.820576][T13827] __dev_notify_flags+0x18d/0x2e0 [ 343.826134][T13827] netif_change_flags+0xe8/0x1a0 [ 343.831605][T13827] dev_change_flags+0x130/0x260 [ 343.836982][T13827] dev_ioctl+0x7b4/0x1150 [ 343.841858][T13827] sock_do_ioctl+0x22c/0x300 [ 343.846968][T13827] sock_ioctl+0x576/0x790 [ 343.851838][T13827] __se_sys_ioctl+0xf9/0x170 [ 343.856956][T13827] do_syscall_64+0xf6/0x210 [ 343.861987][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.868404][T13827] [ 343.868404][T13827] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 343.876320][T13827] validate_chain+0xb9b/0x2140 [ 343.881613][T13827] __lock_acquire+0xaac/0xd20 [ 343.886824][T13827] lock_acquire+0x120/0x360 [ 343.891855][T13827] _raw_spin_lock_bh+0x36/0x50 [ 343.897146][T13827] nr_rt_ioctl+0x390/0xd50 [ 343.902097][T13827] sock_do_ioctl+0xd9/0x300 [ 343.907127][T13827] sock_ioctl+0x576/0x790 [ 343.911980][T13827] __se_sys_ioctl+0xf9/0x170 [ 343.917102][T13827] do_syscall_64+0xf6/0x210 [ 343.922137][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.928557][T13827] [ 343.928557][T13827] other info that might help us debug this: [ 343.928557][T13827] [ 343.938783][T13827] Chain exists of: [ 343.938783][T13827] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 343.938783][T13827] [ 343.952616][T13827] Possible unsafe locking scenario: [ 343.952616][T13827] [ 343.960067][T13827] CPU0 CPU1 [ 343.965435][T13827] ---- ---- [ 343.970800][T13827] lock(&nr_node->node_lock); [ 343.975572][T13827] lock(nr_node_list_lock); [ 343.982688][T13827] lock(&nr_node->node_lock); [ 343.989979][T13827] lock(nr_neigh_list_lock); [ 343.994662][T13827] [ 343.994662][T13827] *** DEADLOCK *** [ 343.994662][T13827] [ 344.002801][T13827] 2 locks held by syz.0.2021/13827: [ 344.008000][T13827] #0: ffffffff8f44d8f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 344.017514][T13827] #1: ffff88802933c370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 344.027195][T13827] [ 344.027195][T13827] stack backtrace: [ 344.033107][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.0.2021 Not tainted 6.15.0-rc6-syzkaller-00183-gb95ed5517354 #0 PREEMPT(full) [ 344.033130][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.033146][T13827] Call Trace: [ 344.033158][T13827] [ 344.033168][T13827] dump_stack_lvl+0x189/0x250 [ 344.033196][T13827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.033221][T13827] ? __pfx__printk+0x10/0x10 [ 344.033239][T13827] ? print_lock_name+0xde/0x100 [ 344.033268][T13827] print_circular_bug+0x2ee/0x310 [ 344.033289][T13827] check_noncircular+0x134/0x160 [ 344.033310][T13827] validate_chain+0xb9b/0x2140 [ 344.033338][T13827] __lock_acquire+0xaac/0xd20 [ 344.033364][T13827] ? nr_rt_ioctl+0x390/0xd50 [ 344.033389][T13827] lock_acquire+0x120/0x360 [ 344.033412][T13827] ? nr_rt_ioctl+0x390/0xd50 [ 344.033439][T13827] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.033461][T13827] ? nr_rt_ioctl+0x390/0xd50 [ 344.033486][T13827] _raw_spin_lock_bh+0x36/0x50 [ 344.033504][T13827] ? nr_rt_ioctl+0x390/0xd50 [ 344.033528][T13827] nr_rt_ioctl+0x390/0xd50 [ 344.033560][T13827] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 344.033590][T13827] ? apparmor_capable+0x137/0x1b0 [ 344.033619][T13827] ? capable+0x89/0xe0 [ 344.033634][T13827] ? nr_ioctl+0x1b1/0x3b0 [ 344.033656][T13827] sock_do_ioctl+0xd9/0x300 [ 344.033674][T13827] ? __pfx_sock_do_ioctl+0x10/0x10 [ 344.033690][T13827] ? __lock_acquire+0xaac/0xd20 [ 344.033720][T13827] sock_ioctl+0x576/0x790 [ 344.033735][T13827] ? __pfx_sock_ioctl+0x10/0x10 [ 344.033752][T13827] ? __fget_files+0x3a0/0x420 [ 344.033775][T13827] ? __fget_files+0x2a/0x420 [ 344.033799][T13827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 344.033824][T13827] ? __pfx_sock_ioctl+0x10/0x10 [ 344.033838][T13827] __se_sys_ioctl+0xf9/0x170 [ 344.033857][T13827] do_syscall_64+0xf6/0x210 [ 344.033881][T13827] ? clear_bhb_loop+0x60/0xb0 [ 344.033900][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.033917][T13827] RIP: 0033:0x7fca1798e969 [ 344.033937][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.033952][T13827] RSP: 002b:00007fca157f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.033970][T13827] RAX: ffffffffffffffda RBX: 00007fca17bb5fa0 RCX: 00007fca1798e969 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 344.033983][T13827] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 344.033993][T13827] RBP: 00007fca17a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 344.034004][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.034014][T13827] R13: 0000000000000000 R14: 00007fca17bb5fa0 R15: 00007fff879adf68 [ 344.034033][T13827] [ 344.295431][ T5906] net_ratelimit: 19 callbacks suppressed [ 344.295451][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.331343][T13560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.341968][T13560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.415996][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.588531][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.914859][ T9492] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.074658][ T5834] Bluetooth: hci4: command tx timeout [ 345.134517][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.219339][ T36] hsr_slave_0: left promiscuous mode [ 345.233908][ T36] hsr_slave_1: left promiscuous mode [ 345.248045][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.256853][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.267052][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.277706][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.303691][ T36] veth1_macvtap: left promiscuous mode [ 345.309383][ T36] veth0_macvtap: left promiscuous mode [ 345.324678][ T36] veth1_vlan: left promiscuous mode [ 345.330023][ T36] veth0_vlan: left promiscuous mode [ 345.489511][ T36] team0 (unregistering): Port device team_slave_1 removed [ 345.517233][ T36] team0 (unregistering): Port device team_slave_0 removed [ 345.660012][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.776873][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.894856][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.005083][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.134369][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.413484][ T36] bridge_slave_1: left allmulticast mode [ 346.419388][ T36] bridge_slave_1: left promiscuous mode [ 346.425252][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.433469][ T36] bridge_slave_0: left allmulticast mode [ 346.442879][ T36] bridge_slave_0: left promiscuous mode [ 346.448625][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.457557][ T36] bridge_slave_1: left allmulticast mode [ 346.463326][ T36] bridge_slave_1: left promiscuous mode [ 346.469872][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.478305][ T36] bridge_slave_0: left allmulticast mode [ 346.484092][ T36] bridge_slave_0: left promiscuous mode [ 346.489886][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.658392][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.668589][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.682855][ T36] bond0 (unregistering): Released all slaves [ 346.696951][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.707121][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.717848][ T36] bond0 (unregistering): Released all slaves [ 347.025655][ T36] hsr_slave_0: left promiscuous mode [ 347.031421][ T36] hsr_slave_1: left promiscuous mode [ 347.037732][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.046671][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.058767][ T36] hsr_slave_0: left promiscuous mode [ 347.067075][ T36] hsr_slave_1: left promiscuous mode [ 347.072776][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.080918][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.198575][ T36] team0 (unregistering): Port device team_slave_1 removed [ 347.221419][ T36] team0 (unregistering): Port device team_slave_0 removed [ 347.359955][ T36] team0 (unregistering): Port device team_slave_1 removed [ 347.382090][ T36] team0 (unregistering): Port device team_slave_0 removed [ 349.334576][ T36] net_ratelimit: 22 callbacks suppressed [ 349.334598][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.454572][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.564641][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.674487][ T5906] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.784654][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.894472][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.004566][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.125224][ T53] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.234481][ T9484] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.344513][ T9499] bond2: (slave ip6gretap1): failed to get link speed/duplex