last executing test programs: 1m1.082644858s ago: executing program 3 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040040) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x65, &(0x7f0000000600)='>\xac\xff\'z:\xe8\xbdb\x8e\x16\xaad\x1b\xce\x9d}]\x1b\x9d\xd9\x84\xfe5^\xf6\x9e9\x85S\xe4]N\xda\x97\xb4\xd8\x94[\f\x05[\xd5SrV|\xe87=i\x02\xb9\\\xcf\xd4\x8f!\xb2\xd0>\xafV\x96\x8b\xed\xa8>\x84\x93\x13\xd2\x95;\x1eXJ\x1e\x10\xe3\xbb,\xa9\xf5p\xff(O\xb8\x1al\x10y@\x00\xebby\xa2C\x0e'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fddb310706000000e65ac9bbb8cc4c17"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xa, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x190, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e30d0000000000000040000000", @ANYRES16=r8, @ANYBLOB="00032dbd70000100000009000000180004801300010062726f6164636173742d6c696e6b000014000980080002000800000008000200f7020000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40000c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7425000040000900fffffffffddbdf250200000004001f00592501"], 0x2574}, 0x1, 0x0, 0x0, 0x6404c490}, 0x2000c042) 54.913419245s ago: executing program 2 (id=140): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 51.015106105s ago: executing program 3 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040040) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x65, &(0x7f0000000600)='>\xac\xff\'z:\xe8\xbdb\x8e\x16\xaad\x1b\xce\x9d}]\x1b\x9d\xd9\x84\xfe5^\xf6\x9e9\x85S\xe4]N\xda\x97\xb4\xd8\x94[\f\x05[\xd5SrV|\xe87=i\x02\xb9\\\xcf\xd4\x8f!\xb2\xd0>\xafV\x96\x8b\xed\xa8>\x84\x93\x13\xd2\x95;\x1eXJ\x1e\x10\xe3\xbb,\xa9\xf5p\xff(O\xb8\x1al\x10y@\x00\xebby\xa2C\x0e'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fddb310706000000e65ac9bbb8cc4c17"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xa, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x190, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e30d0000000000000040000000", @ANYRES16=r8, @ANYBLOB="00032dbd70000100000009000000180004801300010062726f6164636173742d6c696e6b000014000980080002000800000008000200f7020000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40000c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7425000040000900fffffffffddbdf250200000004001f00592501"], 0x2574}, 0x1, 0x0, 0x0, 0x6404c490}, 0x2000c042) 43.49108399s ago: executing program 2 (id=140): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 35.319539152s ago: executing program 3 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040040) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x65, &(0x7f0000000600)='>\xac\xff\'z:\xe8\xbdb\x8e\x16\xaad\x1b\xce\x9d}]\x1b\x9d\xd9\x84\xfe5^\xf6\x9e9\x85S\xe4]N\xda\x97\xb4\xd8\x94[\f\x05[\xd5SrV|\xe87=i\x02\xb9\\\xcf\xd4\x8f!\xb2\xd0>\xafV\x96\x8b\xed\xa8>\x84\x93\x13\xd2\x95;\x1eXJ\x1e\x10\xe3\xbb,\xa9\xf5p\xff(O\xb8\x1al\x10y@\x00\xebby\xa2C\x0e'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fddb310706000000e65ac9bbb8cc4c17"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xa, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x190, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e30d0000000000000040000000", @ANYRES16=r8, @ANYBLOB="00032dbd70000100000009000000180004801300010062726f6164636173742d6c696e6b000014000980080002000800000008000200f7020000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40000c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7425000040000900fffffffffddbdf250200000004001f00592501"], 0x2574}, 0x1, 0x0, 0x0, 0x6404c490}, 0x2000c042) 33.35300838s ago: executing program 2 (id=140): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 31.598119001s ago: executing program 3 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040040) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x65, &(0x7f0000000600)='>\xac\xff\'z:\xe8\xbdb\x8e\x16\xaad\x1b\xce\x9d}]\x1b\x9d\xd9\x84\xfe5^\xf6\x9e9\x85S\xe4]N\xda\x97\xb4\xd8\x94[\f\x05[\xd5SrV|\xe87=i\x02\xb9\\\xcf\xd4\x8f!\xb2\xd0>\xafV\x96\x8b\xed\xa8>\x84\x93\x13\xd2\x95;\x1eXJ\x1e\x10\xe3\xbb,\xa9\xf5p\xff(O\xb8\x1al\x10y@\x00\xebby\xa2C\x0e'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fddb310706000000e65ac9bbb8cc4c17"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xa, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x190, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e30d0000000000000040000000", @ANYRES16=r8, @ANYBLOB="00032dbd70000100000009000000180004801300010062726f6164636173742d6c696e6b000014000980080002000800000008000200f7020000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40000c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7425000040000900fffffffffddbdf250200000004001f00592501"], 0x2574}, 0x1, 0x0, 0x0, 0x6404c490}, 0x2000c042) 21.190515515s ago: executing program 2 (id=140): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 20.704864066s ago: executing program 3 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040040) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x65, &(0x7f0000000600)='>\xac\xff\'z:\xe8\xbdb\x8e\x16\xaad\x1b\xce\x9d}]\x1b\x9d\xd9\x84\xfe5^\xf6\x9e9\x85S\xe4]N\xda\x97\xb4\xd8\x94[\f\x05[\xd5SrV|\xe87=i\x02\xb9\\\xcf\xd4\x8f!\xb2\xd0>\xafV\x96\x8b\xed\xa8>\x84\x93\x13\xd2\x95;\x1eXJ\x1e\x10\xe3\xbb,\xa9\xf5p\xff(O\xb8\x1al\x10y@\x00\xebby\xa2C\x0e'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fddb310706000000e65ac9bbb8cc4c17"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xa, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x190, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e30d0000000000000040000000", @ANYRES16=r8, @ANYBLOB="00032dbd70000100000009000000180004801300010062726f6164636173742d6c696e6b000014000980080002000800000008000200f7020000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40000c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7425000040000900fffffffffddbdf250200000004001f00592501"], 0x2574}, 0x1, 0x0, 0x0, 0x6404c490}, 0x2000c042) 11.030124579s ago: executing program 2 (id=140): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 7.484439529s ago: executing program 3 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040040) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x65, &(0x7f0000000600)='>\xac\xff\'z:\xe8\xbdb\x8e\x16\xaad\x1b\xce\x9d}]\x1b\x9d\xd9\x84\xfe5^\xf6\x9e9\x85S\xe4]N\xda\x97\xb4\xd8\x94[\f\x05[\xd5SrV|\xe87=i\x02\xb9\\\xcf\xd4\x8f!\xb2\xd0>\xafV\x96\x8b\xed\xa8>\x84\x93\x13\xd2\x95;\x1eXJ\x1e\x10\xe3\xbb,\xa9\xf5p\xff(O\xb8\x1al\x10y@\x00\xebby\xa2C\x0e'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fddb310706000000e65ac9bbb8cc4c17"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xa, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000700)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x190, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="210326bd7000ffcbdf2507"], 0x1c}}, 0x880) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e30d0000000000000040000000", @ANYRES16=r8, @ANYBLOB="00032dbd70000100000009000000180004801300010062726f6164636173742d6c696e6b000014000980080002000800000008000200f7020000"], 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40000c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7425000040000900fffffffffddbdf250200000004001f00592501"], 0x2574}, 0x1, 0x0, 0x0, 0x6404c490}, 0x2000c042) 4.174513742s ago: executing program 0 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x21}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x3, @empty, 0x3}}}, &(0x7f00000005c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={r6, 0x4, 0x1, [0x7]}, 0xa) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4f, 0x8, 0x0, 0x0}}, 0x10) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000780)={0x2b, 0x2}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x8, 0x20, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x3, 0x9, 0x0, 0x8, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}, @ringbuf_query], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r9, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40093}, 0x4810) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r10, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x41, 0x56}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x26, 0xac, "39c84a0ee85d623e375bb669cde6dd6abe0a5267c6a9d5c15e8e02fe525afee581fb"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000004) socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r12, 0x0) 3.742041441s ago: executing program 1 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030500000000000000000000000042925561d441ebeb6e71e91798cf3e1dc174fea65c4aa8f001d597fe710b0eb5498a55068bf2d18820e2b60dfe66b6cecdcd2a16bc63025b88992c88e562ed8a6907d019f59b80d7fda27f3f43765b119fe80e5a6aeb4ebd64dce8de12026ff56ff0f61aa1d30f2f1fd2f4b31b773fd62061301cdad504ce87634c00"/154, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) 3.509742849s ago: executing program 2 (id=140): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 1.78062603s ago: executing program 0 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x18d6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x100, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x100}}, 0x0) 1.777772567s ago: executing program 1 (id=1509): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b33, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x80000001, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x80000001, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e331104953fd", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x1, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private1}}}}}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r5, &(0x7f0000000d40), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r5, &(0x7f0000000d40), 0x0}, 0x20) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4e23, 0x7, @empty, 0xffff}, 0x1c) connect$inet6(r6, &(0x7f0000000580)={0xa, 0x4e22, 0xfffffff8, @loopback, 0x7}, 0x1c) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) sendmmsg$inet(r3, &(0x7f0000003440)=[{{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="1400000800000000000000000700c6"], 0x18}}], 0x2, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000003440)=[{{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="1400000800000000000000000700c6"], 0x18}}], 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'geneve1\x00', {'veth1_virt_wifi\x00'}, 0xfff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6c01, 0x3, 0xaecd, 0x4, 0x7}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6c01, 0x3, 0xaecd, 0x4, 0x7}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r7, 0x8, 0x30, 0x4, 0x6}, &(0x7f0000000240)=0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.775951408s ago: executing program 4 (id=1510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "67f01a05647aca00"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x28}, @NL802154_KEY_ATTR_ID={0x5, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x2, 0x8, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xb, 0x807, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x200, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2bba}, @NL80211_ATTR_IE={0x1c6, 0x2a, [@ibss={0x6, 0x2, 0xb}, @random_vendor={0xdd, 0x71, "ac7efdafe79e34cfd5cb05d7a619042f6abb93f64fcdc3a2edd4d7c5095d3af33e434e03c78303ee87633cdcbafb2b311112b17496dfd3cc03ba775ce33facf3f4a958f3e2ff14458c05412821592068b8845732f5a385d7a8d5da3d2e746d7bea7355360cb409b160e8b072bec0cf5431"}, @measure_req={0x26, 0x45, {0x9, 0xfc, 0x4, "aad97bb0ecd36c74bb99805258d46976cf35ff320ee7e6a8cb3ad9ddf6c46523b523559282efe47d6faeb046bfbca7a886eed3f8b914cd81fb2e983a6114706ad289"}}, @random_vendor={0xdd, 0x6f, "553e9fa1d4ce37b14a30f6c102ac505b27972a1d54e5af0f58321d9ff92da3c32c496b5b434af4998ed1f181a6b4b508c50cc12236a8e7d7054cab1445412b7cf66376a4ef10343f5f0c73c490e20256b6ac19f44c16e728a482c73693cefd214d3aeff20b929a27c04b63c576db19"}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x1, 0x5d}, 0x0, 0x4, @broadcast, 0x4a0, 0x3, 0x7}}, @preq={0x82, 0x67, {{0x1, 0x0, 0x1}, 0x10, 0x6, 0x3, @broadcast, 0x0, @void, 0x5354, 0x9, 0x7, [{{0x1}, @broadcast, 0x10001}, {{0x1}, @device_b, 0x1}, {{0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x7}, {{}, @device_a, 0x8}, {{}, @broadcast, 0xfffffff7}, {{0x1}, @broadcast, 0x305c}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x40004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) (async) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000003c0)={0x3}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.669564841s ago: executing program 0 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3508004500001c0066000000029078000000000000000000089057e0000002"], 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa0, 0x37, 0x800, 0x70bd2a, 0x25dfdbff, {0x20}, [@typed={0x8, 0x121, 0x0, 0x0, @u32=0x5c32}, @generic="e79f9a8fba57f9765ce7c05dd95a27eabd60fa2b81c28a96830f73971b2d9ae3ddd54a1c874a26b706d73ecab61ffbe78f9915b5f57a8d2ea93fc5c715d6550f4ccda52f41b94df9e3f8f678137b8ca5358a27626372565a81f4f09bf895b0342f67f7c54b2afe7112aa5865a317f00669cc86cb5d004cf1712754f80eb5e6e63ec1"]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) 1.281028561s ago: executing program 4 (id=1512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x20002808) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0xc, 0x0, "af49b3ae7a21708506032258900bccac9ae029bb81f1585ae0955ec35167df11a05d097da1d4790ed15f4ba293ea9e70b3a27c227470a0f2994a3da65cd5df91deb3403a17fda303a0fcbb4bb62b7182"}, 0xd8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) (rerun: 32) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@bridge_newneigh={0x64, 0x1c, 0x100, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r7, 0x8, 0xc0, 0x9}, [@NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xed}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x81}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8d}]}, @NDA_PROBES={0x8, 0x4, 0xcd}, @NDA_DST_IPV4={0x8, 0x1, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000600)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe53c}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r9) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd8, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xa8, 0x5b, "c2b2aa900810b7239549526c3a7f2130b401728a7bd17030532895140ac2467eaf21db2d5511c277a3ddef00e7fec3cafad93ba1fc624bb1afbaf9aa22caa5a7842ac040e3760d4a925fd3b68c04d3a21d76b728555bf7b283843cf0ba82420eca38a154d7729c4cf64b9c9a2fe9b8741e854dfeb0393b0a2abf4a4d743b85da627508b3a5d8fc490541d80e72ffc2a2e11ca337308b16ec31a99b34898ece31862750c4"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) bind$can_raw(r8, &(0x7f0000000980), 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_DEV(r12, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r13, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x53f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008845) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r9) r14 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r14, &(0x7f0000000b80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r12) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r9) (async) close(r9) 1.261969107s ago: executing program 1 (id=1513): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) listen(r0, 0x7ff) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={r1, 0xb9, "808f0783c093beb7e4fd5462e3c3415ee9ddb011b406e9c2e16948d59dcf32515e36e5f540ce3897511a4cd6712e7ae6dbeb365a9ac7d63cc097c6a1fc858456716332360328dc78b2db1942b984b392b1f89973268cdc60d21774408152dce5b613e569e36a294aa38615749b8ca4b5d50deee4ea1b99b292969c8e969ab3b35efe7708e66b0783832d8ae629baff4a243f8ba09f57ec4e904278ac0d02655ee24be1e66abc76ab72974128734a3a8af02fc9b97526f1858a"}, &(0x7f0000000080)=0xc1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 1.232459567s ago: executing program 4 (id=1514): mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0xfdff, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.069246867s ago: executing program 0 (id=1515): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "42af38373b2bb974dd67f521871d8c6ad5c0e276a00490f7b3ea10d1ab53d056", "542624a813fba13acf45da06c66dd165b80accc02ce75e5a546c063d21029bab", "e4ff2faa20a5a92e879585627e1c957a860371a33e59bf3f76c14dd6cac7e113", "1e3b84c48f5b5d99b6232e69de257a149457356deb89a1f6e560c445a9c75d5f", "b04164146855f1a0388161aea3693e3b98f3e2ebd53dd48034ee1c9c37b2fdb2", "bdc117210a993ea550d89f39", 0x294, 0xffffffff, 0x400, 0x1, 0x3}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120609020000002bbd7000fbdbdf93"], 0x10}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x8915, 0x0) r4 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122', @ANYRESHEX], 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100003063cb7a60000000064f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004800128044000100697036677265"], 0x74}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x100) unshare(0x2000400) r7 = socket(0x11, 0x800000003, 0x0) accept4$packet(r7, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4a, &(0x7f0000000040)={0x0, 0x0}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x4000010, 0xffffffffffffffff, 0x37e13000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) sendmmsg$inet(r6, &(0x7f0000003440), 0x0, 0x40000) 1.066574301s ago: executing program 4 (id=1516): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x50, r2, 0x401, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x971b}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 875.732136ms ago: executing program 0 (id=1517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44005}, 0x840) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x4b, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x2e, 0x3d, 0x67, 0x0, 0x0, 0x21, 0x0, @multicast1, @multicast2, {[@noop]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x3, 0x6, "29a91d", 0x3, "dcab8f"}, "95ac34d509c9a8b6fc1ef41a98ef4e2986901c094b"}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x6b1, 0x203, 0xf10, 0x2e6]}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="9bf57d81f9cf32f92df63438976cd2232f195d0d4cb5f59c7761b41c7daf9d4bcf81e325dc9c3fc8319c7d4a00000dbc777f8cd7cb6f8069034591c36d5a31350de86fe207076d5c36d29fff01000048b914b88452c78ec3cc85bc21fc20401c78cceddc8d4a373e99c73bbfa7120600000000000000cb9c3d4de514cb52e305be720ab4af8d69de5f7696"], 0x1c}}, 0x810) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 853.926734ms ago: executing program 4 (id=1518): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7800, 0x1, 0x8, 0x1000, {{0x14, 0x4, 0x1, 0x25, 0x50, 0x67, 0x0, 0xbc, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@timestamp_prespec={0x44, 0x3c, 0xc7, 0x3, 0xa, [{@local, 0x1}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010101, 0x5}, {@multicast2}, {@multicast1, 0x969}, {@remote, 0xff000000}, {@private=0xa010102, 0xffff}]}]}}}}}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x62, r1}, {0x2, 0x1, 0x2, 0x0, 0x7, 0x8, 0x8, 0xe}, {0x2, 0x3, 0xf, 0x4}, 0x5, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in=@multicast1, 0x4d2, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3507, 0x3, 0x0, 0x1, 0x8, 0x9, 0x859}}, 0xe8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x511480, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) r7 = socket$rxrpc(0x21, 0x2, 0x2) close(r7) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x497817ed, 0x2) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r6) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3b}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc61}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x48040) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001980110a26782078ede8cc7ea32ad28832bc92d079b1c68be1466ca79f0819f316ccd2d89b9f0e7fc78ea33aee4494ad1119ae1be1b02180e5d3f9e5ec0216044d59062761d162b203eed878977a2d533b1591a0c87bf2f7a9b112c46eca9dcd921995fc0102206d9d73b635091869069c6eb9d16d0309ca88869c370e6791f05b05c81fdbeb52921e42e1ca069764909bd2"], 0x18}], 0x1}, 0x0) 673.119868ms ago: executing program 0 (id=1519): r0 = socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000040)={0xfffffffffffffff9, 0x9e8, 0x1, 0x3, 0x8c53, 0x3, 0x7}, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x900000000000, 0x401, 0x3, 0x2, 0xb}, &(0x7f00000000c0)={0x80, 0xfffffffffffffff9, 0x0, 0x6, 0x80000000, 0x3, 0xfd, 0xfffffffffffffffb}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0xdc62]}, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x8}, @void, @eth={@broadcast, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x7}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x5, 0x32, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x36) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000480)={@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x80, 0x0, [{@local}, {}, {@local}, {@local}, {@local}, {@loopback}, {@dev}, {}]}}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010600000c1100fc010000000000000000000000000000ff020000000000000000000000007801000000"], 0x0) 509.016402ms ago: executing program 4 (id=1520): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000980)={0x0, 0x4, 0xffffffffffffff46, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netpci0\x00', 0x0}) close(r0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010080f5823c3a99af0cde000000", @ANYRES32=r5], 0x20}}, 0x20008040) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) close(r6) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r10, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 260.072954ms ago: executing program 1 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) (async) 109.251444ms ago: executing program 1 (id=1522): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r3, r2}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x300, 0x108, 0x0, 0x210, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108, 0xf4030000}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) 0s ago: executing program 1 (id=1523): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1}}}], 0x20}, 0x40100) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) read(r2, &(0x7f0000000100)=""/58, 0x3a) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="b5d7aea92014f39d82ec917da7a99c2f41be95447c42bbfa1babb6da4396cf7fba3096b2e3727ee085b150e857a9a9131297d0082ff017f0b0ba6620d81c1417365d5c4345fd604940db8688081b63b22053cac747f4f40af7920bf1ced71ee5118941cc805a7eff2aa8e51b8b51fd95a22cac231e152a7f2828a56efaa6dec09dde50135a4836f01cdd01260e3a68080c31c66f52123407210dff06dcdd53f2d8a45492bb53f804457484dd6940b7f6b14290329eefc859dcf982de3e0b935b1c72e17c5c4c5707c8faaaaddcd4a66d20fcef67efdec909d0f627ad550d", 0xde) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) kernel console output (not intermixed with test programs): 5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.411990][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.423447][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.434142][ T5901] bond0 (unregistering): Released all slaves [ 168.561783][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.592790][ T9799] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.625626][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.632731][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.653330][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.660427][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.781431][ T9799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.826261][ T9799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.958885][ T5901] hsr_slave_0: left promiscuous mode [ 168.970193][ T5901] hsr_slave_1: left promiscuous mode [ 168.987146][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.003199][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.066436][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.083880][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.193031][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.206305][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.216157][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.225728][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.228153][ T5901] veth1_macvtap: left promiscuous mode [ 169.233569][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.245830][ T5901] veth0_macvtap: left promiscuous mode [ 169.251443][ T5901] veth1_vlan: left promiscuous mode [ 169.257025][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.265291][ T5901] veth0_vlan: left promiscuous mode [ 169.293265][ T5835] Bluetooth: hci1: command tx timeout [ 170.258942][ T5901] team0 (unregistering): Port device team_slave_1 removed [ 170.296603][ T5901] team0 (unregistering): Port device team_slave_0 removed [ 170.751252][ T9988] lo speed is unknown, defaulting to 1000 [ 170.784633][ T9993] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 170.793860][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.874516][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 170.950376][ T9997] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 171.004969][ T9997] bond3: (slave batadv3): Enslaving as a backup interface with an up link [ 171.028997][ T9993] bond3 (unregistering): (slave batadv3): Releasing backup interface [ 171.040316][ T9993] bond3 (unregistering): Released all slaves [ 171.069390][T10004] netlink: 'syz.0.1047': attribute type 11 has an invalid length. [ 171.152102][ T9799] veth0_vlan: entered promiscuous mode [ 171.175484][T10011] 8021q: VLANs not supported on lo [ 171.193996][T10011] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1048'. [ 171.260318][ T9799] veth1_vlan: entered promiscuous mode [ 171.289850][ T5835] Bluetooth: hci4: command tx timeout [ 171.364321][ T5835] Bluetooth: hci1: command tx timeout [ 171.381797][ T9799] veth0_macvtap: entered promiscuous mode [ 171.410127][T10023] netlink: 'syz.1.1051': attribute type 21 has an invalid length. [ 171.419441][T10023] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.427369][T10023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.435086][T10023] IPv6: NLM_F_CREATE should be set when creating new route [ 171.442327][T10023] IPv6: NLM_F_CREATE should be set when creating new route [ 171.449608][T10023] IPv6: NLM_F_CREATE should be set when creating new route [ 171.462505][ T9799] veth1_macvtap: entered promiscuous mode [ 171.474614][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 171.507184][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.541732][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.558542][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.628084][ T9799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.655800][ T9799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.666734][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.676574][ T9799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.685676][ T9799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.694516][ T9799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.703288][ T9799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.855954][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.879619][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.900911][ T9988] bridge_slave_0: entered allmulticast mode [ 171.911788][ T9988] bridge_slave_0: entered promiscuous mode [ 171.939655][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.947374][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.955198][ T9988] bridge_slave_1: entered allmulticast mode [ 171.962375][ T9988] bridge_slave_1: entered promiscuous mode [ 172.050059][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.065534][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.114528][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1057'. [ 172.131509][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1057'. [ 172.154013][ T9988] team0: Port device team_slave_0 added [ 172.162799][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.171067][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.200245][ T9988] team0: Port device team_slave_1 added [ 172.250514][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.263198][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.289651][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.302193][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.309290][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.335442][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.385185][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.414211][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.474405][ T9988] hsr_slave_0: entered promiscuous mode [ 172.482787][ T9988] hsr_slave_1: entered promiscuous mode [ 172.491600][ T9988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.499992][ T9988] Cannot create hsr debugfs directory [ 172.606976][T10059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1060'. [ 172.958373][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.070131][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.144981][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.157740][ T9988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.168938][ T9988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.179496][ T9988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.191069][ T9988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.263547][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.283475][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.305906][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.313110][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.340984][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.348163][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.364593][ T5835] Bluetooth: hci4: command tx timeout [ 173.400835][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.438332][ T9988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.449631][ T9988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.844614][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 173.863508][ T70] bridge_slave_1: left allmulticast mode [ 173.873273][ T70] bridge_slave_1: left promiscuous mode [ 173.879000][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.907568][T10078] netlink: 'syz.4.1065': attribute type 11 has an invalid length. [ 173.957338][ T70] bridge_slave_0: left allmulticast mode [ 173.964311][ T70] bridge_slave_0: left promiscuous mode [ 173.970224][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.145060][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.180949][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.188929][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.203024][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.214311][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.231754][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.468310][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.488401][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.502774][ T70] bond0 (unregistering): Released all slaves [ 174.640552][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.685630][ T9988] veth0_vlan: entered promiscuous mode [ 174.699089][ T9988] veth1_vlan: entered promiscuous mode [ 174.706942][T10097] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 174.841336][T10091] lo speed is unknown, defaulting to 1000 [ 174.948613][ T9988] veth0_macvtap: entered promiscuous mode [ 174.985103][ T9988] veth1_macvtap: entered promiscuous mode [ 175.116575][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.145436][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.165917][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.197132][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.228737][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.322648][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'. [ 175.342484][ T70] hsr_slave_0: left promiscuous mode [ 175.378451][ T70] hsr_slave_1: left promiscuous mode [ 175.394294][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.401727][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.418460][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.426666][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.443918][ T5144] Bluetooth: hci4: command tx timeout [ 175.458268][ T70] veth1_macvtap: left promiscuous mode [ 175.464358][ T70] veth0_macvtap: left promiscuous mode [ 175.469960][ T70] veth1_vlan: left promiscuous mode [ 175.476005][ T70] veth0_vlan: left promiscuous mode [ 175.552306][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1080'. [ 175.573340][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 175.592790][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1080'. [ 175.612451][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1080'. [ 175.889271][ T70] team0 (unregistering): Port device team_slave_1 removed [ 175.927507][ T70] team0 (unregistering): Port device team_slave_0 removed [ 176.323648][ T5144] Bluetooth: hci1: command tx timeout [ 176.332772][T10120] netlink: 'syz.0.1076': attribute type 21 has an invalid length. [ 176.343445][T10120] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1076'. [ 176.362273][T10129] dummy0: entered promiscuous mode [ 176.370045][T10129] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 176.410145][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.453270][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.485980][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.525991][ T9988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.551581][ T9988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.573253][ T9988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.581983][ T9988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.865994][ T9151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.917223][ T9151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.984251][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.992116][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.018910][T10172] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 177.040051][T10091] chnl_net:caif_netlink_parms(): no params data found [ 177.451904][T10193] netlink: 'syz.4.1096': attribute type 2 has an invalid length. [ 177.463705][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.470807][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.491349][T10091] bridge_slave_0: entered allmulticast mode [ 177.499000][T10091] bridge_slave_0: entered promiscuous mode [ 177.507979][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.515194][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.522372][T10091] bridge_slave_1: entered allmulticast mode [ 177.530730][T10091] bridge_slave_1: entered promiscuous mode [ 177.609839][T10091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.656139][T10091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.757056][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.822789][T10091] team0: Port device team_slave_0 added [ 177.832145][T10091] team0: Port device team_slave_1 added [ 177.858034][T10091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.865155][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.891762][T10091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.916448][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.931108][T10091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.938486][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.965373][T10091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.001687][T10091] hsr_slave_0: entered promiscuous mode [ 178.008050][T10091] hsr_slave_1: entered promiscuous mode [ 178.020105][T10091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.027749][T10091] Cannot create hsr debugfs directory [ 178.125495][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.197802][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.292578][ T70] bridge_slave_1: left allmulticast mode [ 178.298573][ T70] bridge_slave_1: left promiscuous mode [ 178.307687][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.316375][ T70] bridge_slave_0: left allmulticast mode [ 178.322035][ T70] bridge_slave_0: left promiscuous mode [ 178.328103][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.416598][ T5144] Bluetooth: hci1: command tx timeout [ 178.642374][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.659663][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.669480][ T70] bond0 (unregistering): Released all slaves [ 178.834077][T10091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.907053][T10091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.916953][T10091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.927926][T10091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.242244][T10091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.259828][T10091] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.281228][T10218] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 179.313020][T10091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.355175][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.360674][T10091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.392424][T10223] __nla_validate_parse: 3 callbacks suppressed [ 179.392438][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'. [ 179.414419][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.422230][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.431187][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.434956][T10223] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1105'. [ 179.439111][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 179.459259][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.482034][ T70] hsr_slave_0: left promiscuous mode [ 179.488420][ T70] hsr_slave_1: left promiscuous mode [ 179.497255][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.523467][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.558986][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.573556][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.598562][ T70] veth1_macvtap: left promiscuous mode [ 179.604215][ T70] veth0_macvtap: left promiscuous mode [ 179.609811][ T70] veth1_vlan: left promiscuous mode [ 179.615204][ T70] veth0_vlan: left promiscuous mode [ 180.074829][ T70] team0 (unregistering): Port device team_slave_1 removed [ 180.113926][ T70] team0 (unregistering): Port device team_slave_0 removed [ 180.469637][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.476854][ T9151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.486883][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.494016][ T9151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.501747][ T5843] Bluetooth: hci1: command tx timeout [ 180.539335][T10219] lo speed is unknown, defaulting to 1000 [ 180.552885][T10238] v: renamed from veth1_virt_wifi (while UP) [ 180.912717][T10091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.107630][T10091] veth0_vlan: entered promiscuous mode [ 181.141982][T10266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1112'. [ 181.157447][T10091] veth1_vlan: entered promiscuous mode [ 181.204114][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 181.210605][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 181.272284][T10219] chnl_net:caif_netlink_parms(): no params data found [ 181.367950][T10091] veth0_macvtap: entered promiscuous mode [ 181.436744][T10091] veth1_macvtap: entered promiscuous mode [ 181.466926][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.490842][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 181.490938][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.507232][T10219] bridge_slave_0: entered allmulticast mode [ 181.514291][T10219] bridge_slave_0: entered promiscuous mode [ 181.521835][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.529218][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.536489][T10219] bridge_slave_1: entered allmulticast mode [ 181.543434][T10219] bridge_slave_1: entered promiscuous mode [ 181.603584][ T5835] Bluetooth: hci4: command tx timeout [ 181.611153][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.650693][T10091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.661543][T10091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.672714][T10091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.681722][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.753729][T10297] ip6t_srh: unknown srh invflags 5F00 [ 181.762630][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1121'. [ 181.775388][T10091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.788192][T10091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.806103][T10091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.817911][T10091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.826832][T10091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.850439][T10300] xt_hashlimit: size too large, truncated to 1048576 [ 181.867329][T10091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.893348][T10091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.927349][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 181.935569][T10219] team0: Port device team_slave_0 added [ 181.970098][T10219] team0: Port device team_slave_1 added [ 181.974028][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 182.102893][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.118121][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.183119][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.205088][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.212067][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.273187][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.457376][T10219] hsr_slave_0: entered promiscuous mode [ 182.471758][T10219] hsr_slave_1: entered promiscuous mode [ 182.485186][T10219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.499130][T10219] Cannot create hsr debugfs directory [ 182.564134][ T5835] Bluetooth: hci1: command tx timeout [ 182.570829][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.584662][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.621151][T10318] syzkaller0: entered promiscuous mode [ 182.629942][T10318] syzkaller0: entered allmulticast mode [ 182.675949][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1128'. [ 182.782616][T10325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.834206][ T9151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.842798][ T9151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.889610][T10325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.909263][T10325] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 182.931089][T10325] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 182.985541][T10326] bond3: (slave vlan2): Opening slave failed [ 183.334515][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 183.373348][T10334] netlink: 'syz.1.1131': attribute type 30 has an invalid length. [ 183.381204][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 183.578995][ T9151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.684202][ T5835] Bluetooth: hci4: command tx timeout [ 183.783655][ T9151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.891671][ T9151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.939453][T10219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.970278][ T9151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.983941][T10219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.995219][T10219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.009167][T10219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.132342][ T9151] bridge_slave_1: left allmulticast mode [ 184.144176][ T9151] bridge_slave_1: left promiscuous mode [ 184.153299][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.177969][ T9151] bridge_slave_0: left allmulticast mode [ 184.190550][ T9151] bridge_slave_0: left promiscuous mode [ 184.196829][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.806809][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.820288][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.833629][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.849245][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.868494][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.875955][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.936514][ T9151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.955257][ T9151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.972333][ T9151] bond0 (unregistering): Released all slaves [ 185.073893][T10352] lo speed is unknown, defaulting to 1000 [ 185.084442][T10219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.160640][T10219] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.211591][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.218759][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.399855][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.407031][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.700204][T10373] netlink: 'syz.1.1140': attribute type 11 has an invalid length. [ 185.769127][ T5835] Bluetooth: hci4: command tx timeout [ 185.963624][ T9151] hsr_slave_0: left promiscuous mode [ 185.987018][ T9151] hsr_slave_1: left promiscuous mode [ 185.995303][ T9151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.013032][ T9151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.026686][ T9151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.052937][ T9151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.116227][ T9151] veth1_macvtap: left promiscuous mode [ 186.136395][ T9151] veth0_macvtap: left promiscuous mode [ 186.155106][ T9151] veth1_vlan: left promiscuous mode [ 186.160438][ T9151] veth0_vlan: left promiscuous mode [ 186.882630][ T9151] team0 (unregistering): Port device team_slave_1 removed [ 186.916138][T10393] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 186.928176][T10393] __nla_validate_parse: 1 callbacks suppressed [ 186.928203][T10393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1144'. [ 186.961749][ T9151] team0 (unregistering): Port device team_slave_0 removed [ 186.975887][ T5835] Bluetooth: hci1: command tx timeout [ 187.358260][T10352] chnl_net:caif_netlink_parms(): no params data found [ 187.491014][T10219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.640795][T10410] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 187.672782][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.703261][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.710466][T10352] bridge_slave_0: entered allmulticast mode [ 187.717925][T10352] bridge_slave_0: entered promiscuous mode [ 187.760954][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.782113][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.789705][T10352] bridge_slave_1: entered allmulticast mode [ 187.797036][T10352] bridge_slave_1: entered promiscuous mode [ 187.843527][ T5835] Bluetooth: hci4: command tx timeout [ 187.929178][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.967395][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.043223][T10219] veth0_vlan: entered promiscuous mode [ 188.108944][T10219] veth1_vlan: entered promiscuous mode [ 188.154410][T10352] team0: Port device team_slave_0 added [ 188.172940][T10352] team0: Port device team_slave_1 added [ 188.235964][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.255522][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.282646][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.299058][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.306721][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.335661][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.424690][T10352] hsr_slave_0: entered promiscuous mode [ 188.438385][T10352] hsr_slave_1: entered promiscuous mode [ 188.451881][T10352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.470111][T10352] Cannot create hsr debugfs directory [ 188.486019][T10219] veth0_macvtap: entered promiscuous mode [ 188.546984][T10219] veth1_macvtap: entered promiscuous mode [ 188.622655][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.642951][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.655477][T10219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.715152][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.731475][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.755876][T10219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.795233][T10219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.832847][T10219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.843222][T10219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.851954][T10219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.005159][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.012992][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.053708][ T5835] Bluetooth: hci1: command tx timeout [ 189.126873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.146416][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.230934][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 189.267067][T10469] bridge_slave_1: left allmulticast mode [ 189.272748][T10469] bridge_slave_1: left promiscuous mode [ 189.291161][T10473] xt_l2tp: unknown flags: 18 [ 189.301411][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.459198][T10352] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.484328][T10352] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.525559][T10352] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.554302][T10352] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.659099][T10485] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 189.669337][T10485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1173'. [ 189.750249][ T5901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.780051][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1172'. [ 189.890102][ T5901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.971138][ T5901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.026057][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.043511][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.068411][ T5901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.088623][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.095726][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.112062][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.119176][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.238278][ T5901] bridge_slave_1: left allmulticast mode [ 190.247090][ T5901] bridge_slave_1: left promiscuous mode [ 190.253119][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.276527][ T5901] bridge_slave_0: left allmulticast mode [ 190.282292][ T5901] bridge_slave_0: left promiscuous mode [ 190.293496][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.588610][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.603481][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.618352][ T5901] bond0 (unregistering): Released all slaves [ 190.650210][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.682834][T10352] veth0_vlan: entered promiscuous mode [ 190.696415][T10352] veth1_vlan: entered promiscuous mode [ 190.741303][T10352] veth0_macvtap: entered promiscuous mode [ 190.772297][T10352] veth1_macvtap: entered promiscuous mode [ 190.787889][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.798388][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.808818][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.819375][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.830446][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.853455][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.870197][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.880275][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.891285][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.902293][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.942795][T10352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.951694][T10352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.972092][T10352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.981213][T10352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.074299][T10499] sctp: [Deprecated]: syz.4.1176 (pid 10499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.074299][T10499] Use struct sctp_sack_info instead [ 191.136879][ T5835] Bluetooth: hci1: command tx timeout [ 191.271428][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.283079][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.411366][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 191.438015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.473428][T10515] netlink: 'syz.1.1179': attribute type 8 has an invalid length. [ 191.481325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.550437][ T5901] hsr_slave_0: left promiscuous mode [ 191.590675][ T5901] hsr_slave_1: left promiscuous mode [ 191.610644][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.627846][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.643476][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.657687][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.665802][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.665851][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.685031][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 191.690619][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.707119][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.715977][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.723491][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.751635][ T5901] veth1_macvtap: left promiscuous mode [ 191.758023][ T5901] veth0_macvtap: left promiscuous mode [ 191.768498][ T5901] veth1_vlan: left promiscuous mode [ 191.773947][ T5901] veth0_vlan: left promiscuous mode [ 192.165698][ T5901] team0 (unregistering): Port device team_slave_1 removed [ 192.206473][ T5901] team0 (unregistering): Port device team_slave_0 removed [ 192.838634][T10525] lo speed is unknown, defaulting to 1000 [ 192.856547][T10538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1185'. [ 193.108471][T10552] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1189'. [ 193.206704][T10543] team0 (unregistering): Port device wg2 removed [ 193.446790][T10525] chnl_net:caif_netlink_parms(): no params data found [ 193.797580][ T5835] Bluetooth: hci4: command tx timeout [ 193.851364][ T5901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.878810][T10525] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.886721][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.894849][T10525] bridge_slave_0: entered allmulticast mode [ 193.902123][T10525] bridge_slave_0: entered promiscuous mode [ 193.910202][T10525] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.917968][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.925361][T10525] bridge_slave_1: entered allmulticast mode [ 193.932292][T10525] bridge_slave_1: entered promiscuous mode [ 193.970498][T10525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.986013][T10525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.015425][T10525] team0: Port device team_slave_0 added [ 194.022482][T10525] team0: Port device team_slave_1 added [ 194.041860][T10525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.049019][T10525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.075594][T10525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.096501][T10525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.103840][T10525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.130315][T10525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.162673][T10525] hsr_slave_0: entered promiscuous mode [ 194.170065][T10525] hsr_slave_1: entered promiscuous mode [ 194.180203][T10525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.187917][T10525] Cannot create hsr debugfs directory [ 194.429295][ T5901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.489230][T10577] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1197'. [ 194.602497][ T5901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.622560][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 194.653323][T10587] netlink: 'syz.0.1196': attribute type 8 has an invalid length. [ 194.700856][T10587] netlink: 'syz.0.1196': attribute type 21 has an invalid length. [ 194.717635][T10587] netlink: 'syz.0.1196': attribute type 20 has an invalid length. [ 194.738106][T10587] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.814855][ T5901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.867131][T10592] –eth0_vlan: renamed from bridge_slave_1 [ 194.951758][T10525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.048245][T10525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.060530][T10525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.075474][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.088366][T10605] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 195.099758][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.128552][T10525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.131886][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.144544][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.155345][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.163667][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.217164][T10605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.243755][T10606] bond4: (slave gretap2): making interface the new active one [ 195.268432][T10606] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 195.349628][T10602] lo speed is unknown, defaulting to 1000 [ 195.350420][T10609] pim6reg1: entered promiscuous mode [ 195.361487][T10609] pim6reg1: entered allmulticast mode [ 195.381075][ T5901] bridge_slave_1: left allmulticast mode [ 195.394098][ T5901] bridge_slave_1: left promiscuous mode [ 195.402957][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.411627][ T5901] bridge_slave_0: left allmulticast mode [ 195.417806][ T5901] bridge_slave_0: left promiscuous mode [ 195.423897][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.729263][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.740580][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.751663][ T5901] bond0 (unregistering): Released all slaves [ 195.762102][T10615] bridge1: entered allmulticast mode [ 195.844698][ T5835] Bluetooth: hci4: command tx timeout [ 196.336788][T10525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.380309][T10525] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.381319][T10649] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1213'. [ 196.474254][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.481457][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.507227][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.514412][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.606971][T10602] chnl_net:caif_netlink_parms(): no params data found [ 196.650878][ T5901] hsr_slave_0: left promiscuous mode [ 196.695336][ T5901] hsr_slave_1: left promiscuous mode [ 196.701630][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.713355][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.727442][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.735005][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.744177][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.771061][ T5901] veth1_macvtap: left promiscuous mode [ 196.781214][ T5901] veth0_macvtap: left promiscuous mode [ 196.787238][ T5901] veth1_vlan: left promiscuous mode [ 196.792557][ T5901] veth0_vlan: left promiscuous mode [ 197.203715][ T5835] Bluetooth: hci1: command tx timeout [ 197.381000][ T5901] team0 (unregistering): Port device team_slave_1 removed [ 197.427821][ T5901] team0 (unregistering): Port device team_slave_0 removed [ 197.923375][ T5835] Bluetooth: hci4: command tx timeout [ 198.142302][T10602] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.151821][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.159354][T10602] bridge_slave_0: entered allmulticast mode [ 198.167416][T10602] bridge_slave_0: entered promiscuous mode [ 198.211106][T10525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.230913][T10602] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.238431][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.247619][T10602] bridge_slave_1: entered allmulticast mode [ 198.263942][T10602] bridge_slave_1: entered promiscuous mode [ 198.283925][T10710] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 198.307599][T10702] lo speed is unknown, defaulting to 1000 [ 198.391033][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 198.443512][T10706] lo speed is unknown, defaulting to 1000 [ 198.459268][T10710] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 198.478742][T10710] bond5: (slave batadv2): Enslaving as a backup interface with an up link [ 198.489648][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.532776][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.608515][T10720] openvswitch: netlink: Message has 2 unknown bytes. [ 198.625296][T10720] openvswitch: netlink: Actions may not be safe on all matching packets [ 198.640957][T10602] team0: Port device team_slave_0 added [ 198.693147][T10602] team0: Port device team_slave_1 added [ 198.740712][T10525] veth0_vlan: entered promiscuous mode [ 198.801444][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.810742][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.893270][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.934685][T10525] veth1_vlan: entered promiscuous mode [ 198.984594][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.991571][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.019957][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.271128][T10602] hsr_slave_0: entered promiscuous mode [ 199.283590][ T5835] Bluetooth: hci1: command tx timeout [ 199.308579][T10602] hsr_slave_1: entered promiscuous mode [ 199.319595][T10602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.334867][T10602] Cannot create hsr debugfs directory [ 199.341713][T10752] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1236'. [ 199.356534][T10525] veth0_macvtap: entered promiscuous mode [ 199.366609][T10525] veth1_macvtap: entered promiscuous mode [ 199.670999][T10525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.684608][T10525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.697084][T10525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.733364][T10759] ªªªªªªŽd¡öa: renamed from syzkaller0 [ 199.756095][T10525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.767847][T10525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.779297][T10525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.889301][T10764] Cannot find del_set index 4 as target [ 199.895152][T10525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.914745][T10525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.933303][T10525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.952372][T10525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.962425][T10767] sctp: [Deprecated]: syz.0.1240 (pid 10767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.962425][T10767] Use struct sctp_sack_info instead [ 200.003486][ T5835] Bluetooth: hci4: command tx timeout [ 200.188012][T10771] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 200.221380][T10771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1241'. [ 200.304108][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.329834][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.430610][T10783] netlink: 'syz.0.1243': attribute type 30 has an invalid length. [ 200.500655][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.541638][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.602647][T10790] pim6reg: entered allmulticast mode [ 200.854248][T10602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.865809][T10602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.886658][T10602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.913807][T10602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 201.156363][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.257147][T10602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.330079][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.363380][ T5835] Bluetooth: hci1: command tx timeout [ 201.395843][T10602] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.446263][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.453446][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.498614][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.543704][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.550824][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.645187][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.814784][ T12] bridge_slave_1: left allmulticast mode [ 201.820477][ T12] bridge_slave_1: left promiscuous mode [ 201.826889][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.836072][ T12] bridge_slave_0: left allmulticast mode [ 201.841736][ T12] bridge_slave_0: left promiscuous mode [ 201.848455][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.171588][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.182200][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.199494][ T12] bond0 (unregistering): Released all slaves [ 202.228874][T10602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.287377][T10602] veth0_vlan: entered promiscuous mode [ 202.312571][T10602] veth1_vlan: entered promiscuous mode [ 202.358604][T10602] veth0_macvtap: entered promiscuous mode [ 202.368813][T10602] veth1_macvtap: entered promiscuous mode [ 202.420654][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.431997][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.448329][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.459025][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.471056][T10602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.507856][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.525844][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.536224][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.546960][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.558186][T10602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.582769][T10602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.598117][T10602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.613297][T10602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.622013][T10602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.650973][ T12] hsr_slave_0: left promiscuous mode [ 202.713807][ T12] hsr_slave_1: left promiscuous mode [ 202.725869][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.744265][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.783767][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.791211][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.876659][ T12] veth1_macvtap: left promiscuous mode [ 202.900628][ T12] veth0_macvtap: left promiscuous mode [ 202.944653][ T12] veth1_vlan: left promiscuous mode [ 202.962467][ T12] veth0_vlan: left promiscuous mode [ 202.993862][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 203.039884][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 203.051653][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.060409][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.071741][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.098508][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.106310][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.114858][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.443670][ T5835] Bluetooth: hci1: command tx timeout [ 203.604685][ T12] team0 (unregistering): Port device team_slave_1 removed [ 203.671270][ T12] team0 (unregistering): Port device team_slave_0 removed [ 204.145870][T10824] netlink: 'syz.1.1253': attribute type 21 has an invalid length. [ 204.200241][T10854] lo speed is unknown, defaulting to 1000 [ 204.251153][T10839] lo speed is unknown, defaulting to 1000 [ 204.394685][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.417148][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.434859][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.464032][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.589523][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 204.664184][T10866] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 204.760898][T10871] netlink: 'syz.0.1264': attribute type 10 has an invalid length. [ 204.799695][T10871] team0: Device hsr_slave_0 failed to register rx_handler [ 205.092067][T10882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 205.173576][T10839] chnl_net:caif_netlink_parms(): no params data found [ 205.203981][ T5835] Bluetooth: hci4: command tx timeout [ 205.297832][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.313307][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.320562][T10839] bridge_slave_0: entered allmulticast mode [ 205.328188][T10839] bridge_slave_0: entered promiscuous mode [ 205.352794][T10887] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.392495][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.399950][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.414213][T10839] bridge_slave_1: entered allmulticast mode [ 205.431377][T10839] bridge_slave_1: entered promiscuous mode [ 205.534063][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.651517][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.671851][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.701514][T10839] team0: Port device team_slave_0 added [ 205.710092][T10839] team0: Port device team_slave_1 added [ 205.732655][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.740722][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.767097][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.780308][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.788321][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.814902][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.851734][T10839] hsr_slave_0: entered promiscuous mode [ 205.858166][T10839] hsr_slave_1: entered promiscuous mode [ 205.864602][T10839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.872166][T10839] Cannot create hsr debugfs directory [ 205.904551][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.050281][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.107171][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.170559][ T70] bridge_slave_1: left allmulticast mode [ 206.176406][ T70] bridge_slave_1: left promiscuous mode [ 206.182180][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.192198][ T70] bridge_slave_0: left allmulticast mode [ 206.198239][ T70] bridge_slave_0: left promiscuous mode [ 206.204116][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.659878][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 206.870575][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.899443][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.923709][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.936263][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.936603][ T70] bond0 (unregistering): Released all slaves [ 206.950798][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.960487][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.969236][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.977287][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.039450][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.050140][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.064440][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.082372][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.092972][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.102234][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.117723][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.158133][T10922] lo speed is unknown, defaulting to 1000 [ 207.158339][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 207.198300][T10925] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 207.268018][T10925] bond6: entered promiscuous mode [ 207.273729][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.283381][ T5144] Bluetooth: hci4: command tx timeout [ 207.342582][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.349939][T10925] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 207.361324][T10925] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 207.375051][T10925] bond6: (slave ip6gre1): making interface the new active one [ 207.382667][T10925] ip6gre1: entered promiscuous mode [ 207.390017][T10925] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 207.399644][T10839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.552103][T10927] bond6 (unregistering): (slave ip6gre1): Releasing backup interface [ 207.560365][T10927] ip6gre1: left promiscuous mode [ 207.569608][T10927] bond6 (unregistering): Released all slaves [ 207.590818][T10839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.630287][T10839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.698060][T10839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.799359][ T70] hsr_slave_0: left promiscuous mode [ 207.805600][ T70] hsr_slave_1: left promiscuous mode [ 207.811697][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.819694][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.831198][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.838707][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.859184][ T70] veth1_macvtap: left promiscuous mode [ 207.864860][ T70] veth0_macvtap: left promiscuous mode [ 207.870386][ T70] veth1_vlan: left promiscuous mode [ 207.875917][ T70] veth0_vlan: left promiscuous mode [ 208.232981][ T70] team0 (unregistering): Port device team_slave_1 removed [ 208.269147][ T70] team0 (unregistering): Port device team_slave_0 removed [ 208.689573][T10839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.709866][T10922] chnl_net:caif_netlink_parms(): no params data found [ 208.745607][T10839] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.784440][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.791573][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.849923][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.863819][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.883378][T10922] bridge_slave_0: entered allmulticast mode [ 208.889913][T10922] bridge_slave_0: entered promiscuous mode [ 208.898154][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.905313][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.912443][T10922] bridge_slave_1: entered allmulticast mode [ 208.920344][T10922] bridge_slave_1: entered promiscuous mode [ 208.930904][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.937990][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.959852][T10839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.992780][T10922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.024347][T10922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.043268][ T5144] Bluetooth: hci1: command tx timeout [ 209.077409][T10922] team0: Port device team_slave_0 added [ 209.095940][T10922] team0: Port device team_slave_1 added [ 209.173841][T10922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.180834][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.243972][T10922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.283420][T10922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.314026][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.350804][T10922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.378777][ T5144] Bluetooth: hci4: command tx timeout [ 209.397397][T10839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.524962][T10922] hsr_slave_0: entered promiscuous mode [ 209.531584][T10922] hsr_slave_1: entered promiscuous mode [ 209.550500][T10922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.558256][T10922] Cannot create hsr debugfs directory [ 209.706071][T10839] veth0_vlan: entered promiscuous mode [ 209.724593][T10839] veth1_vlan: entered promiscuous mode [ 209.791504][T10839] veth0_macvtap: entered promiscuous mode [ 209.835624][T10967] netlink: 'syz.1.1286': attribute type 10 has an invalid length. [ 209.842148][T10971] __nla_validate_parse: 27 callbacks suppressed [ 209.842166][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 209.846815][T10839] veth1_macvtap: entered promiscuous mode [ 209.926921][T10967] ieee802154 phy0 wpan0: entered promiscuous mode [ 209.935431][T10975] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.946531][T10967] bond0: (slave wpan0): Enslaving as an active interface with an up link [ 209.991205][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.004503][T10976] netlink: 'syz.4.1288': attribute type 4 has an invalid length. [ 210.012260][T10976] netlink: 'syz.4.1288': attribute type 12 has an invalid length. [ 210.030741][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.054083][T10839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.085318][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'. [ 210.109597][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.121875][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.134754][T10839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.151502][T10839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.160617][T10839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.182876][T10839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.203630][T10839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.217886][T10980] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.252705][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1290'. [ 210.336512][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.358261][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.462350][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.465107][T10922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.491979][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.513764][T10922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.529462][T10922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.554958][T10922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.695572][T10922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.774978][T10922] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.799987][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.807159][ T9151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.848033][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.855205][ T9151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.926612][T10922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.953615][T10922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.022349][T11005] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1299'. [ 211.033797][T11012] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1299'. [ 211.121700][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1302'. [ 211.131798][ T5144] Bluetooth: hci1: command tx timeout [ 211.256476][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.365972][T10922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.437882][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.481570][T10922] veth0_vlan: entered promiscuous mode [ 211.494207][T10922] veth1_vlan: entered promiscuous mode [ 211.518581][T10922] veth0_macvtap: entered promiscuous mode [ 211.529105][T10922] veth1_macvtap: entered promiscuous mode [ 211.545031][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.555837][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.566298][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.576986][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.588079][T10922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.601345][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.612711][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.623377][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.634113][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.647198][T10922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.674143][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.699071][T10922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.708094][T10922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.717449][T10922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.726622][T10922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.778108][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.851572][ T9151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.859596][ T9151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.887457][ T9151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.899405][ T9151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.942821][ T70] bridge_slave_1: left allmulticast mode [ 211.950415][ T70] bridge_slave_1: left promiscuous mode [ 211.956320][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.970062][ T70] bridge_slave_0: left allmulticast mode [ 211.976199][ T70] bridge_slave_0: left promiscuous mode [ 211.981924][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.303796][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.326575][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.340178][ T70] bond0 (unregistering): Released all slaves [ 212.851994][ T70] hsr_slave_0: left promiscuous mode [ 212.875431][ T70] hsr_slave_1: left promiscuous mode [ 212.890832][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.908880][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.917781][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.933139][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.953376][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 212.963448][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 213.003841][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 213.012731][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 213.024401][ T70] veth1_macvtap: left promiscuous mode [ 213.029938][ T70] veth0_macvtap: left promiscuous mode [ 213.064135][ T70] veth1_vlan: left promiscuous mode [ 213.074043][ T70] veth0_vlan: left promiscuous mode [ 213.119270][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.128690][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.137803][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.147733][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.157879][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.169330][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.515449][ T70] team0 (unregistering): Port device team_slave_1 removed [ 213.551664][ T70] team0 (unregistering): Port device team_slave_0 removed [ 213.927941][T11040] lo speed is unknown, defaulting to 1000 [ 214.106651][T11044] netem: change failed [ 214.424882][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.464712][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.495422][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.554379][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.562411][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.570504][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.645203][T11066] lo speed is unknown, defaulting to 1000 [ 214.730317][T11040] chnl_net:caif_netlink_parms(): no params data found [ 214.895489][T11090] netlink: 'syz.4.1320': attribute type 2 has an invalid length. [ 214.903929][T11090] netlink: 'syz.4.1320': attribute type 8 has an invalid length. [ 214.911679][T11090] __nla_validate_parse: 4 callbacks suppressed [ 214.911692][T11090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1320'. [ 214.964379][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 214.998881][T11094] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.022106][T11091] veth1_macvtap: left promiscuous mode [ 215.156516][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.158529][T11106] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 215.205103][ T5835] Bluetooth: hci1: command tx timeout [ 215.222978][T11040] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.259092][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.273410][T11040] bridge_slave_0: entered allmulticast mode [ 215.280797][T11040] bridge_slave_0: entered promiscuous mode [ 215.290235][T11040] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.298459][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.318445][T11040] bridge_slave_1: entered allmulticast mode [ 215.329559][T11040] bridge_slave_1: entered promiscuous mode [ 215.426454][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.557179][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.584518][T11125] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 215.588553][T11122] openvswitch: netlink: Unknown nsh attribute 0 [ 215.592394][T11125] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1327'. [ 215.612563][T11122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.650549][T11040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.720697][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.767186][T11040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.869549][T11040] team0: Port device team_slave_0 added [ 215.895486][T11040] team0: Port device team_slave_1 added [ 215.970406][T11040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.986117][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.028445][T11040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.053909][T11040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.060891][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.100880][T11040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.117943][T11140] syz_tun: entered promiscuous mode [ 216.129133][T11140] syz_tun: entered allmulticast mode [ 216.146342][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'. [ 216.173207][T11066] chnl_net:caif_netlink_parms(): no params data found [ 216.265107][ T70] bridge_slave_1: left allmulticast mode [ 216.270844][ T70] bridge_slave_1: left promiscuous mode [ 216.277015][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.290875][ T70] bridge_slave_0: left allmulticast mode [ 216.302675][ T70] bridge_slave_0: left promiscuous mode [ 216.315620][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.653186][ T5835] Bluetooth: hci4: command tx timeout [ 216.692260][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.706179][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.717267][ T70] bond0 (unregistering): Released all slaves [ 216.748538][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 216.819873][T11040] hsr_slave_0: entered promiscuous mode [ 216.871069][T11040] hsr_slave_1: entered promiscuous mode [ 216.885248][T11159] netlink: 'syz.4.1337': attribute type 2 has an invalid length. [ 216.893151][T11040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.900733][T11040] Cannot create hsr debugfs directory [ 217.051108][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.058695][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.066595][T11066] bridge_slave_0: entered allmulticast mode [ 217.073730][T11066] bridge_slave_0: entered promiscuous mode [ 217.109199][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.123509][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.130899][T11066] bridge_slave_1: entered allmulticast mode [ 217.145235][T11066] bridge_slave_1: entered promiscuous mode [ 217.152017][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 217.283238][ T5835] Bluetooth: hci1: command tx timeout [ 217.365831][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.391908][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.407838][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 217.432249][T11182] netlink: 'syz.4.1344': attribute type 12 has an invalid length. [ 217.494495][T11066] team0: Port device team_slave_0 added [ 217.613846][T11066] team0: Port device team_slave_1 added [ 217.717904][ T70] hsr_slave_0: left promiscuous mode [ 217.728127][ T70] hsr_slave_1: left promiscuous mode [ 217.738122][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.752636][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.771452][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.787761][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.827374][ T70] veth1_macvtap: left promiscuous mode [ 217.832928][ T70] veth0_macvtap: left promiscuous mode [ 217.839044][ T70] veth1_vlan: left promiscuous mode [ 217.844591][ T70] veth0_vlan: left promiscuous mode [ 218.221164][T11194] sctp: [Deprecated]: syz.0.1348 (pid 11194) Use of int in max_burst socket option. [ 218.221164][T11194] Use struct sctp_assoc_value instead [ 218.387024][ T70] team0 (unregistering): Port device team_slave_1 removed [ 218.434574][ T70] team0 (unregistering): Port device team_slave_0 removed [ 218.723746][ T5835] Bluetooth: hci4: command tx timeout [ 218.840813][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.853578][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.880198][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.906671][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.914371][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.942344][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.094787][T11066] hsr_slave_0: entered promiscuous mode [ 219.101591][T11066] hsr_slave_1: entered promiscuous mode [ 219.140667][T11066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.151956][T11066] Cannot create hsr debugfs directory [ 219.365120][ T5835] Bluetooth: hci1: command tx timeout [ 219.580442][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 219.649766][T11230] ªªªªªª: renamed from vlan0 (while UP) [ 219.877953][T11244] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 219.902098][T11244] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1366'. [ 219.916811][T11247] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1367'. [ 220.057289][T11254] sctp: [Deprecated]: syz.0.1368 (pid 11254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.057289][T11254] Use struct sctp_sack_info instead [ 220.111364][T11254] sctp: [Deprecated]: syz.0.1368 (pid 11254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.111364][T11254] Use struct sctp_sack_info instead [ 220.143271][T11066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.183841][T11066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.195079][T11066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.207837][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 220.219487][T11066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.244351][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 220.337679][T11040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.404033][T11040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.425104][T11040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.452871][T11040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.582700][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.638973][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.667110][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.674281][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.726440][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.733582][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.776022][T11278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.803554][ T5835] Bluetooth: hci4: command tx timeout [ 220.828379][T11280] lo speed is unknown, defaulting to 1000 [ 220.932331][T11040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.007500][T11040] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.038284][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.045462][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.065652][T11290] netlink: 'syz.1.1379': attribute type 10 has an invalid length. [ 221.091741][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.098921][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.194539][T11066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.302607][T11066] veth0_vlan: entered promiscuous mode [ 221.340973][T11066] veth1_vlan: entered promiscuous mode [ 221.451059][ T5835] Bluetooth: hci1: command tx timeout [ 221.507112][T11040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.538788][T11040] veth0_vlan: entered promiscuous mode [ 221.549332][T11040] veth1_vlan: entered promiscuous mode [ 221.575197][T11066] veth0_macvtap: entered promiscuous mode [ 221.593720][T11066] veth1_macvtap: entered promiscuous mode [ 221.611516][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.622309][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.633838][T11066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.668833][T11040] veth0_macvtap: entered promiscuous mode [ 221.677951][T11040] veth1_macvtap: entered promiscuous mode [ 221.692416][T11040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.703088][T11040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.712913][T11040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.723568][T11040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.734549][T11040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.744225][T11040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.754755][T11040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.765782][T11040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.830187][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.841318][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.851896][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.862684][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.874815][T11066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.890063][T11040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.901277][T11040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.910123][T11040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.918948][T11040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.929215][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 221.954575][T11066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.963711][T11066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.972427][T11066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.988328][T11066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.202421][T11315] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 222.302078][ T9151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.311873][ T9151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.403561][ T9149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.416306][ T9149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.499042][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.515159][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.535930][ T9149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.560070][ T9149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.894057][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 222.912449][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 222.924866][T11340] netlink: 'syz.1.1393': attribute type 12 has an invalid length. [ 222.932277][T11341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'. [ 222.932681][T11340] netlink: 'syz.1.1393': attribute type 11 has an invalid length. [ 223.171929][T11357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1399'. [ 223.183356][T11353] netlink: 'syz.4.1398': attribute type 2 has an invalid length. [ 223.299367][T11362] dvmrp0: entered allmulticast mode [ 223.438002][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.046455][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.058580][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.067841][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.077045][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.088496][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.097639][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.105854][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.136657][T11376] lo speed is unknown, defaulting to 1000 [ 224.293493][T11376] chnl_net:caif_netlink_parms(): no params data found [ 224.344136][T11376] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.351259][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.358570][T11376] bridge_slave_0: entered allmulticast mode [ 224.365874][T11376] bridge_slave_0: entered promiscuous mode [ 224.373921][T11376] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.381084][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.388556][T11376] bridge_slave_1: entered allmulticast mode [ 224.395672][T11376] bridge_slave_1: entered promiscuous mode [ 224.422993][T11376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.434451][T11376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.458986][T11376] team0: Port device team_slave_0 added [ 224.467432][T11376] team0: Port device team_slave_1 added [ 224.492480][T11376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.499720][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.526298][T11376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.538638][T11376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.545731][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.573237][T11376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.602162][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.637545][T11376] hsr_slave_0: entered promiscuous mode [ 224.644419][T11376] hsr_slave_1: entered promiscuous mode [ 224.650482][T11376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.658802][T11376] Cannot create hsr debugfs directory [ 224.677671][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.000048][T11388] tipc: Enabling of bearer rejected, already enabled [ 225.036631][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.045947][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.057918][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.083517][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.094346][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.111450][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.290761][T11397] lo speed is unknown, defaulting to 1000 [ 225.371877][ T53] bridge_slave_1: left allmulticast mode [ 225.394477][ T53] bridge_slave_1: left promiscuous mode [ 225.400219][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.428429][T11414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1412'. [ 225.446221][ T53] bridge_slave_0: left allmulticast mode [ 225.462088][ T53] bridge_slave_0: left promiscuous mode [ 225.472349][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.571931][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 225.581077][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 225.854142][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.874908][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.892912][ T53] bond0 (unregistering): Released all slaves [ 225.945524][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1413'. [ 225.979212][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1413'. [ 226.160168][T11429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.169121][ T5835] Bluetooth: hci1: command tx timeout [ 226.306308][T11425] syzkaller1: entered promiscuous mode [ 226.327964][T11425] syzkaller1: entered allmulticast mode [ 226.693330][ T53] hsr_slave_0: left promiscuous mode [ 226.725426][ T53] hsr_slave_1: left promiscuous mode [ 226.749230][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.761179][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.784290][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.801896][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.814150][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 226.834245][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 226.847334][ T53] veth1_macvtap: left promiscuous mode [ 226.854149][T11454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1422'. [ 226.863174][ T53] veth0_macvtap: left promiscuous mode [ 226.863299][ T53] veth1_vlan: left promiscuous mode [ 226.884858][T11454] block nbd0: Unsupported socket: shutdown callout must be supported. [ 226.884859][ T53] veth0_vlan: left promiscuous mode [ 227.012281][T11460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1425'. [ 227.203883][ T5835] Bluetooth: hci4: command tx timeout [ 227.290080][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 227.536056][ T53] team0 (unregistering): Port device team_slave_1 removed [ 227.573802][ T53] team0 (unregistering): Port device team_slave_0 removed [ 227.950621][T11376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.972158][T11376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.987998][T11458] lo speed is unknown, defaulting to 1000 [ 228.040453][T11376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.109289][T11376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.193951][T11397] chnl_net:caif_netlink_parms(): no params data found [ 228.252968][ T5835] Bluetooth: hci1: command tx timeout [ 228.498884][T11376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.558306][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.573826][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.581032][T11397] bridge_slave_0: entered allmulticast mode [ 228.588514][T11397] bridge_slave_0: entered promiscuous mode [ 228.653484][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.670504][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.678036][T11397] bridge_slave_1: entered allmulticast mode [ 228.686300][T11397] bridge_slave_1: entered promiscuous mode [ 228.713604][T11376] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.745047][T11376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.755618][T11376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.781234][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.788393][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.815561][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.822749][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.935649][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.946990][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.159552][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.210769][T11376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.220835][T11397] team0: Port device team_slave_0 added [ 229.229479][T11397] team0: Port device team_slave_1 added [ 229.261036][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.293378][ T5835] Bluetooth: hci4: command tx timeout [ 229.436359][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.478572][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.493284][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.537881][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.554838][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.563275][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.600998][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.649813][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.743487][T11376] veth0_vlan: entered promiscuous mode [ 229.824286][T11376] veth1_vlan: entered promiscuous mode [ 229.849234][T11397] hsr_slave_0: entered promiscuous mode [ 229.945352][T11397] hsr_slave_1: entered promiscuous mode [ 229.985349][T11397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.992945][T11397] Cannot create hsr debugfs directory [ 230.230561][ T53] bridge_slave_1: left allmulticast mode [ 230.236442][ T53] bridge_slave_1: left promiscuous mode [ 230.242200][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.259373][ T53] bridge_slave_0: left allmulticast mode [ 230.265468][ T53] bridge_slave_0: left promiscuous mode [ 230.271217][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.325057][ T5835] Bluetooth: hci1: command tx timeout [ 230.484044][T11576] __nla_validate_parse: 10 callbacks suppressed [ 230.484065][T11576] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1445'. [ 230.516945][T11576] sctp: [Deprecated]: syz.0.1445 (pid 11576) Use of int in maxseg socket option. [ 230.516945][T11576] Use struct sctp_assoc_value instead [ 230.689983][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.709610][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.720246][ T53] bond0 (unregistering): Released all slaves [ 231.073564][T11376] veth0_macvtap: entered promiscuous mode [ 231.082248][T11376] veth1_macvtap: entered promiscuous mode [ 231.159179][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.172174][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.182086][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.192872][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.204751][T11376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.214216][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.224715][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.234631][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.245107][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.255891][T11376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.289721][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 231.320668][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 231.326401][T11376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.339046][T11376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.348392][T11376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.357209][T11376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.366224][ T5835] Bluetooth: hci4: command tx timeout [ 231.543442][ T53] hsr_slave_0: left promiscuous mode [ 231.550885][ T53] hsr_slave_1: left promiscuous mode [ 231.595896][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.612846][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.630991][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.639041][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.684315][ T53] veth1_macvtap: left promiscuous mode [ 231.689969][ T53] veth0_macvtap: left promiscuous mode [ 231.696196][ T53] veth1_vlan: left promiscuous mode [ 231.701580][ T53] veth0_vlan: left promiscuous mode [ 232.136022][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 232.155159][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1463'. [ 232.321297][ T53] team0 (unregistering): Port device team_slave_1 removed [ 232.366029][ T53] team0 (unregistering): Port device team_slave_0 removed [ 232.410005][ T5835] Bluetooth: hci1: command tx timeout [ 232.893577][ T9149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.903130][ T9149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.912822][T11632] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.919507][T11632] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.963871][ T9154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.971812][ T9154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.140932][T11397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.191312][T11397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.205197][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 233.229199][T11651] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1470'. [ 233.241120][T11397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.260035][T11654] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 233.315118][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 233.325328][T11397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.334971][T11656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'. [ 233.454972][ T5835] Bluetooth: hci4: command tx timeout [ 233.672481][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.785231][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.886642][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.916208][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.936957][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.952930][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.960031][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.977978][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.985061][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.126730][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.162179][T11397] veth0_vlan: entered promiscuous mode [ 234.182130][T11397] veth1_vlan: entered promiscuous mode [ 234.204204][T11397] veth0_macvtap: entered promiscuous mode [ 234.212837][T11397] veth1_macvtap: entered promiscuous mode [ 234.228236][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.238976][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.249138][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.259783][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.270578][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.282782][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.293587][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.304128][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.314713][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.327626][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.340418][T11397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.349636][T11397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.358822][T11397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.367710][T11397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.423464][ T9154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.431284][ T9154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.458560][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.473060][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.482420][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.594934][ T53] bridge_slave_1: left allmulticast mode [ 234.600583][ T53] bridge_slave_1: left promiscuous mode [ 234.608393][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.617863][ T53] bridge_slave_0: left allmulticast mode [ 234.624649][ T53] bridge_slave_0: left promiscuous mode [ 234.630315][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.937397][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.947955][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.966094][ T53] bond0 (unregistering): Released all slaves [ 235.213107][ T53] hsr_slave_0: left promiscuous mode [ 235.219177][ T53] hsr_slave_1: left promiscuous mode [ 235.228795][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.241980][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.267303][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.274925][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.298195][ T53] veth1_macvtap: left promiscuous mode [ 235.303848][ T53] veth0_macvtap: left promiscuous mode [ 235.309385][ T53] veth1_vlan: left promiscuous mode [ 235.314912][ T53] veth0_vlan: left promiscuous mode [ 235.533855][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'. [ 235.710397][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.719517][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.739953][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.748458][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.772023][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.780446][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.809499][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 236.104304][ T53] team0 (unregistering): Port device team_slave_1 removed [ 236.145776][ T53] team0 (unregistering): Port device team_slave_0 removed [ 236.518029][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 236.536251][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 236.553169][T11701] netlink: 'syz.0.1480': attribute type 3 has an invalid length. [ 236.631624][T11702] lo speed is unknown, defaulting to 1000 [ 236.857522][T11718] IPv6: sit3: Disabled Multicast RS [ 237.259446][T11702] chnl_net:caif_netlink_parms(): no params data found [ 237.322184][T11702] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.329535][T11702] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.337455][T11702] bridge_slave_0: entered allmulticast mode [ 237.344784][T11702] bridge_slave_0: entered promiscuous mode [ 237.378006][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.392420][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.399731][T11702] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.407397][T11702] bridge_slave_1: entered allmulticast mode [ 237.416073][T11702] bridge_slave_1: entered promiscuous mode [ 237.440761][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.451874][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.480772][T11702] team0: Port device team_slave_0 added [ 237.488225][T11702] team0: Port device team_slave_1 added [ 237.510161][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.517381][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.543777][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.556195][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.563607][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.589913][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.638217][T11702] hsr_slave_0: entered promiscuous mode [ 237.644792][T11702] hsr_slave_1: entered promiscuous mode [ 237.651071][T11702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.659288][T11702] Cannot create hsr debugfs directory [ 237.853270][ T5144] Bluetooth: hci1: command tx timeout [ 237.979005][T11702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.987654][T11702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.997576][T11702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.007494][T11702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.071754][T11702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.091651][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.102911][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.110027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.128534][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.135679][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.176463][T11702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.350625][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.392862][T11702] veth0_vlan: entered promiscuous mode [ 238.457071][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.515552][T11702] veth1_vlan: entered promiscuous mode [ 238.594757][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.680166][T11702] veth0_macvtap: entered promiscuous mode [ 238.733164][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.794851][T11702] veth1_macvtap: entered promiscuous mode [ 238.812775][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.824036][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.826613][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.850662][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.855871][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.876104][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.876289][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.894912][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.906091][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.912052][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 238.922099][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.926361][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.941116][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.951164][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.963787][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.985590][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.002955][T11702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.011846][T11702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.021287][T11702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.030169][T11702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.157333][T11753] lo speed is unknown, defaulting to 1000 [ 239.163438][T11761] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1498'. [ 239.172412][T11761] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1498'. [ 239.199743][ T1149] bridge_slave_1: left allmulticast mode [ 239.206311][ T1149] bridge_slave_1: left promiscuous mode [ 239.212097][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.222415][ T1149] bridge_slave_0: left allmulticast mode [ 239.228541][ T1149] bridge_slave_0: left promiscuous mode [ 239.234520][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.590389][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.601071][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.614067][ T1149] bond0 (unregistering): Released all slaves [ 239.625881][T11762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1498'. [ 239.635370][T11762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1498'. [ 239.731199][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.753865][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.841465][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.852099][T11764] batadv_slave_0: entered promiscuous mode [ 239.889009][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.913372][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.927993][ T5835] Bluetooth: hci1: command tx timeout [ 240.309141][T11753] chnl_net:caif_netlink_parms(): no params data found [ 240.479352][ T1149] hsr_slave_0: left promiscuous mode [ 240.490920][ T1149] hsr_slave_1: left promiscuous mode [ 240.502739][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.510473][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.518672][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.522482][T11797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 240.536065][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.568370][ T1149] veth1_macvtap: left promiscuous mode [ 240.575421][ T1149] veth0_macvtap: left promiscuous mode [ 240.580988][ T1149] veth1_vlan: left promiscuous mode [ 240.586555][ T1149] veth0_vlan: left promiscuous mode [ 240.826600][T11802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1507'. [ 241.085486][ T5835] Bluetooth: hci4: command tx timeout [ 241.162367][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 241.202307][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 241.748263][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.757064][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.764419][T11753] bridge_slave_0: entered allmulticast mode [ 241.771387][T11753] bridge_slave_0: entered promiscuous mode [ 241.793394][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.807398][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.817707][T11753] bridge_slave_1: entered allmulticast mode [ 241.826433][T11753] bridge_slave_1: entered promiscuous mode [ 241.882235][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.895260][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.929129][T11753] team0: Port device team_slave_0 added [ 241.940381][T11753] team0: Port device team_slave_1 added [ 241.971167][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.982529][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.008907][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.021520][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.029971][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.056781][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.100247][T11753] hsr_slave_0: entered promiscuous mode [ 242.112207][T11753] hsr_slave_1: entered promiscuous mode [ 242.119115][T11753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.127564][T11753] Cannot create hsr debugfs directory [ 242.168686][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.261753][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.315201][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.377692][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.480744][ T1149] bridge_slave_1: left allmulticast mode [ 242.488755][ T1149] bridge_slave_1: left promiscuous mode [ 242.495043][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.504347][ T1149] bridge_slave_0: left allmulticast mode [ 242.510009][ T1149] bridge_slave_0: left promiscuous mode [ 242.516222][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.974898][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.985076][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.992830][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.002875][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.011103][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 243.018636][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.073890][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.096271][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.112160][ T1149] bond0 (unregistering): Released all slaves [ 243.123531][ T5144] Bluetooth: hci4: command tx timeout [ 243.276267][T11822] lo speed is unknown, defaulting to 1000 [ 243.530914][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 243.563222][T11753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.600195][T11753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.676498][T11753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.749200][T11753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.027267][ T1149] hsr_slave_0: left promiscuous mode [ 244.042237][ T1149] hsr_slave_1: left promiscuous mode [ 244.049457][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.058091][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.066559][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.074705][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.102838][ T1149] veth1_macvtap: left promiscuous mode [ 244.108526][ T1149] veth0_macvtap: left promiscuous mode [ 244.114591][ T1149] veth1_vlan: left promiscuous mode [ 244.119861][ T1149] veth0_vlan: left promiscuous mode [ 244.553955][T11880] ================================================================== [ 244.562065][T11880] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x13f/0xa50 [ 244.570106][T11880] Write of size 4 at addr 000000000000004c by task syz.1.1523/11880 [ 244.578065][T11880] [ 244.580387][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.1.1523 Not tainted 6.13.0-rc6-syzkaller-00165-gcbc16bceea78 #0 [ 244.591133][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.601182][T11880] Call Trace: [ 244.604458][T11880] [ 244.607403][T11880] dump_stack_lvl+0x241/0x360 [ 244.612105][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.617326][T11880] ? __pfx__printk+0x10/0x10 [ 244.621916][T11880] ? _printk+0xd5/0x120 [ 244.626068][T11880] print_report+0xe8/0x550 [ 244.630480][T11880] ? __virt_addr_valid+0x58/0x530 [ 244.635503][T11880] ? mac802154_header_create+0x13f/0xa50 [ 244.641145][T11880] kasan_report+0x143/0x180 [ 244.645652][T11880] ? mac802154_header_create+0x13f/0xa50 [ 244.651293][T11880] kasan_check_range+0x282/0x290 [ 244.656239][T11880] mac802154_header_create+0x13f/0xa50 [ 244.661708][T11880] ? __pfx_mac802154_header_create+0x10/0x10 [ 244.667689][T11880] ? neigh_connected_output+0x1d5/0x450 [ 244.673232][T11880] ? read_seqbegin+0x157/0x2b0 [ 244.677991][T11880] ? lockdep_hardirqs_on+0x99/0x150 [ 244.683188][T11880] ? read_seqbegin+0x208/0x2b0 [ 244.687954][T11880] ? __pfx_mac802154_header_create+0x10/0x10 [ 244.693932][T11880] neigh_connected_output+0x27f/0x450 [ 244.699309][T11880] ? ip_finish_output2+0x45f/0x1390 [ 244.704500][T11880] ? ip_finish_output2+0x45f/0x1390 [ 244.709694][T11880] ip_finish_output2+0xe70/0x1390 [ 244.714723][T11880] ? nf_hook+0x9e/0x450 [ 244.719134][T11880] ? ip_finish_output2+0x45f/0x1390 [ 244.724333][T11880] ? __pfx_ip_finish_output2+0x10/0x10 [ 244.729782][T11880] ? ip_setup_cork+0x4e0/0x9c0 [ 244.734540][T11880] ? ip_fast_csum+0x1f4/0x2b0 [ 244.739207][T11880] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 244.744072][T11880] ? __ip_finish_output+0x349/0x400 [ 244.749266][T11880] ip_push_pending_frames+0xbf/0x150 [ 244.754544][T11880] raw_sendmsg+0x1aad/0x2430 [ 244.759138][T11880] ? __pfx_raw_sendmsg+0x10/0x10 [ 244.764078][T11880] ? aa_sk_perm+0x96d/0xab0 [ 244.768599][T11880] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.773461][T11880] ? inet_sendmsg+0x330/0x390 [ 244.778137][T11880] __sock_sendmsg+0x1a6/0x270 [ 244.782817][T11880] ____sys_sendmsg+0x52a/0x7e0 [ 244.787580][T11880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.792856][T11880] ? __fget_files+0x2a/0x410 [ 244.797444][T11880] ? __fget_files+0x2a/0x410 [ 244.802055][T11880] __sys_sendmsg+0x269/0x350 [ 244.806650][T11880] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.811772][T11880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.818106][T11880] ? do_syscall_64+0x100/0x230 [ 244.822877][T11880] ? do_syscall_64+0xb6/0x230 [ 244.827550][T11880] do_syscall_64+0xf3/0x230 [ 244.832053][T11880] ? clear_bhb_loop+0x35/0x90 [ 244.836722][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.842622][T11880] RIP: 0033:0x7f9626985d29 [ 244.847043][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.866645][T11880] RSP: 002b:00007f962784e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.875064][T11880] RAX: ffffffffffffffda RBX: 00007f9626b75fa0 RCX: 00007f9626985d29 [ 244.883038][T11880] RDX: 0000000000040100 RSI: 0000000020001640 RDI: 0000000000000003 [ 244.891002][T11880] RBP: 00007f9626a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 244.898987][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.906956][T11880] R13: 0000000000000000 R14: 00007f9626b75fa0 R15: 00007ffeef077c38 [ 244.914931][T11880] [ 244.917952][T11880] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.945779][T11880] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.953003][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.1.1523 Not tainted 6.13.0-rc6-syzkaller-00165-gcbc16bceea78 #0 [ 244.963772][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.973839][T11880] Call Trace: [ 244.977121][T11880] [ 244.980055][T11880] dump_stack_lvl+0x241/0x360 [ 244.984754][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.989968][T11880] ? __pfx__printk+0x10/0x10 [ 244.994571][T11880] ? preempt_schedule+0xe1/0xf0 [ 244.999435][T11880] ? vscnprintf+0x5d/0x90 [ 245.003780][T11880] panic+0x349/0x880 [ 245.007689][T11880] ? check_panic_on_warn+0x21/0xb0 [ 245.012809][T11880] ? __pfx_panic+0x10/0x10 [ 245.017239][T11880] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 245.023234][T11880] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 245.029580][T11880] ? print_report+0xe8/0x550 [ 245.034188][T11880] check_panic_on_warn+0x86/0xb0 [ 245.039139][T11880] ? mac802154_header_create+0x13f/0xa50 [ 245.044786][T11880] end_report+0x77/0x160 [ 245.049042][T11880] kasan_report+0x154/0x180 [ 245.053560][T11880] ? mac802154_header_create+0x13f/0xa50 [ 245.059216][T11880] kasan_check_range+0x282/0x290 [ 245.064171][T11880] mac802154_header_create+0x13f/0xa50 [ 245.069648][T11880] ? __pfx_mac802154_header_create+0x10/0x10 [ 245.075639][T11880] ? neigh_connected_output+0x1d5/0x450 [ 245.081179][T11880] ? read_seqbegin+0x157/0x2b0 [ 245.085934][T11880] ? lockdep_hardirqs_on+0x99/0x150 [ 245.091129][T11880] ? read_seqbegin+0x208/0x2b0 [ 245.095887][T11880] ? __pfx_mac802154_header_create+0x10/0x10 [ 245.101863][T11880] neigh_connected_output+0x27f/0x450 [ 245.107235][T11880] ? ip_finish_output2+0x45f/0x1390 [ 245.112439][T11880] ? ip_finish_output2+0x45f/0x1390 [ 245.117629][T11880] ip_finish_output2+0xe70/0x1390 [ 245.122647][T11880] ? nf_hook+0x9e/0x450 [ 245.126792][T11880] ? ip_finish_output2+0x45f/0x1390 [ 245.131984][T11880] ? __pfx_ip_finish_output2+0x10/0x10 [ 245.137435][T11880] ? ip_setup_cork+0x4e0/0x9c0 [ 245.142187][T11880] ? ip_fast_csum+0x1f4/0x2b0 [ 245.146855][T11880] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 245.151697][T11880] ? __ip_finish_output+0x349/0x400 [ 245.156893][T11880] ip_push_pending_frames+0xbf/0x150 [ 245.162173][T11880] raw_sendmsg+0x1aad/0x2430 [ 245.166772][T11880] ? __pfx_raw_sendmsg+0x10/0x10 [ 245.171710][T11880] ? aa_sk_perm+0x96d/0xab0 [ 245.176212][T11880] ? __pfx_aa_sk_perm+0x10/0x10 [ 245.181060][T11880] ? inet_sendmsg+0x330/0x390 [ 245.185730][T11880] __sock_sendmsg+0x1a6/0x270 [ 245.190402][T11880] ____sys_sendmsg+0x52a/0x7e0 [ 245.195158][T11880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.200433][T11880] ? __fget_files+0x2a/0x410 [ 245.205023][T11880] ? __fget_files+0x2a/0x410 [ 245.209613][T11880] __sys_sendmsg+0x269/0x350 [ 245.214197][T11880] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.219314][T11880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.225633][T11880] ? do_syscall_64+0x100/0x230 [ 245.230390][T11880] ? do_syscall_64+0xb6/0x230 [ 245.235062][T11880] do_syscall_64+0xf3/0x230 [ 245.239558][T11880] ? clear_bhb_loop+0x35/0x90 [ 245.244226][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.250120][T11880] RIP: 0033:0x7f9626985d29 [ 245.254528][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.274126][T11880] RSP: 002b:00007f962784e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.282530][T11880] RAX: ffffffffffffffda RBX: 00007f9626b75fa0 RCX: 00007f9626985d29 [ 245.290493][T11880] RDX: 0000000000040100 RSI: 0000000020001640 RDI: 0000000000000003 [ 245.298454][T11880] RBP: 00007f9626a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 245.306503][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.314462][T11880] R13: 0000000000000000 R14: 00007f9626b75fa0 R15: 00007ffeef077c38 [ 245.322429][T11880] [ 245.325680][T11880] Kernel Offset: disabled [ 245.329993][T11880] Rebooting in 86400 seconds..