last executing test programs: 1m14.573885471s ago: executing program 1 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x6044}, 0x4016) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x7f}, &(0x7f0000000300)=0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x160, 0x2, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x4b04f}}, 0x20}}, 0x0) 1m12.776200502s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) 1m2.710972352s ago: executing program 1 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x6044}, 0x4016) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x7f}, &(0x7f0000000300)=0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x160, 0x2, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x4b04f}}, 0x20}}, 0x0) 59.935755444s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) 48.343469961s ago: executing program 1 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x6044}, 0x4016) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x7f}, &(0x7f0000000300)=0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x160, 0x2, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x4b04f}}, 0x20}}, 0x0) 47.33296567s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) 33.722128476s ago: executing program 1 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x6044}, 0x4016) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x7f}, &(0x7f0000000300)=0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x160, 0x2, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x4b04f}}, 0x20}}, 0x0) 32.921051098s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) 20.120695448s ago: executing program 1 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x6044}, 0x4016) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x7f}, &(0x7f0000000300)=0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x160, 0x2, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x4b04f}}, 0x20}}, 0x0) 19.205914565s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) 9.713697213s ago: executing program 1 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x6044}, 0x4016) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x7f}, &(0x7f0000000300)=0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x160, 0x2, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x4b04f}}, 0x20}}, 0x0) 9.129108878s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) 1.739387148s ago: executing program 2 (id=1723): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) syz_emit_ethernet(0x4b, &(0x7f00000000c0)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0xfffd, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}, {'\x00'}}}}}}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 64) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@remote, @remote, @void, {@x25={0x805, {0x3, 0xe8, 0x5, "2842815877ec94705d99b12a76082f22f28c010fe74b4531de8044be69aa35a2594be649c2c9e62dbe8eff22109363a5a514abfd5d25e7d5eb05d7ad13b796f6313a8f9f65cce5245fdb3dd577c2580db2bbcccf23ffea3b4393e53882b46169d56e5d7cc4fed35983c5390e176c649e30d92bd7a55b997fb59b11f0cddb509f45fae71981fed30ceefc8d1e58b9b8157538927e513fafac8f13840601d310bed74559f3cb52404a331d34a04ab7c31ce72d9a"}}}}}, 0xc4) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) 1.5691154s ago: executing program 2 (id=1726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x21}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffff1}]}, 0x34}}, 0x4801) 1.450564247s ago: executing program 2 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r6, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r6, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) (async) 1.352815573s ago: executing program 4 (id=1729): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811234000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 1.167835567s ago: executing program 2 (id=1731): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, 0x0) syz_open_procfs$namespace(r1, 0xfffffffffffffffd) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x448, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) 1.116432489s ago: executing program 4 (id=1732): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x18, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x0, 0xf0, 0x0, 0xa, 0x0, 0x0, 0x0, r6}, {@in6=@loopback={0xffffffffffffff80}, 0x4d2, 0x32}, @in=@private=0xa010101, {}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x24000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 1.048407651s ago: executing program 4 (id=1733): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={@none, 0x5, 0x7, 0x1, 0x9, 0x804e, "cf20ee2ffd36faec28ed48ebbf222136bc80585815a2b5df8ad995c1d07f208071ba4932f8958fb0553c75a049b6c40f6fff5d596a885d1bfb20923387c3be9d0a9ac5daab947bca902b844cc749fe9d1bdd230805a704db6d3a760950e2983eaf5a3eb418d8099a5db8b2c7858db9ba01d1af6448294a41cff7451440a2c34b"}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x84, @loopback, 0x4e20, 0x3, 'lblc\x00', 0xc, 0x7, 0x10}, {@private=0xa010101, 0x4e20, 0x3, 0x10000, 0x4, 0x4}}, 0x44) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x7620, 0x40, {{0x1f, 0x4, 0x3, 0x2, 0x7c, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@rr={0x7, 0x7, 0x65, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0x14, [@broadcast]}, @ssrr={0x89, 0x7, 0x20, [@multicast2]}, @ssrr={0x89, 0x2b, 0xa6, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @empty, @loopback, @rand_addr=0x64010101, @local, @broadcast, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0x52, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xf9, [@remote, @local, @empty, @private=0x7]}]}}}}}) connect$packet(r0, &(0x7f0000000300)={0x11, 0x10, r2, 0x1, 0xbc, 0x6, @remote}, 0x14) connect$packet(r0, &(0x7f0000000340)={0x11, 0x1c, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0x86, "6af9808ef2055e9b3e27a54a2eb94f96efc38e69ff7861e9ba61d2fcb9c28cd2250b1c59b32bbb8d6e0080e2f72195815a5ccb92a8166aad4251a7ca612a45dcf1e039e451eae4d250cd24bab7806f314c89f26f0c2e8606de6e649098232802fb74b2d4c521cab5abed5f294664468c04d89077d5f4fde814f2cbed1b9799873d51059f1f36"}, &(0x7f0000000580)=0x8e) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='pids.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000640)={0x123d, 0x8200, 0xa, 0x200, r6}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r7, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x220040c0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000e40)={{r9}, r10, 0x8, @inherit={0x58, &(0x7f00000009c0)={0x1, 0x2, 0x8, 0x8, {0x8, 0x80000001, 0xb, 0x8, 0x9}, [0x4, 0x100000000]}}, @devid=r11}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000001e40), 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000001e80)=0xfffffffb, 0x4) shutdown(r9, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001f00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001f40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000002100)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f80)={0x13c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xf4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x9}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8081}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x6010000}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)={0x8c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc084}, 0x4004) 932.055824ms ago: executing program 0 (id=1734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000032000000000000000000080000000000010000004e2415d5c1d8db56c226375199cde14d79dbfb24499c1cc08994b9250955a86cdc34d1df65f16854fe4f2fc949827fd66c9d8222eb0e034a2d0212fe2e2ecfca9ac7a74d630bc5bd2d469e6ba80c1882423e566442a292bce7a168bc7d350b54af27cbcfdfcf97c2d8b2b7ba148096f9f714203d8b2c7e536131e66e5da22a72f957a4e0c4d878dd18de1cefc3c8d9fed42ec8a6df572ffdf9cb2a1297b2df7166cc82d035c352d30781617d5528990ec00a1d9dd936ab80b0ede05808ae08b2e372903e676fd2a7e7cb5a62faac2385"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000049b581295af1273b407ab89532690000000000001f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x1000}) close(r0) (async) close(r0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r7, 0x6, 0x7, 0x6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, r11, 0x64fce33ba3dcdc5d, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x14) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r14, @ANYRES32=r10, @ANYBLOB="fd9d59f600080003b3b573aa82002bc1128c4c53fad61a", @ANYRES32=r13, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x40041}, 0x20000018) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 853.567162ms ago: executing program 4 (id=1735): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) listen(r0, 0x0) listen(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_emit_ethernet(0x36f, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000002000)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB="4cfb73116fb1efcba0fc52fd6cb564c6962e0c8eedfe58a1ad6a0a5d327ec762dd2fc93a99c6db8e257e8ffd3e72cb076c02b1830baaa3e8740b7cf825b48a0911202e570a1831cf336477a9a14e34db5bcb4953c09e94bb", @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf252600000000004a0006ac0f000000cc0000000801"], 0xfffffffffffffe06}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 773.636532ms ago: executing program 4 (id=1736): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r6, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 660.97138ms ago: executing program 0 (id=1737): syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', 0x0, 0x48, 0x2) 560.348319ms ago: executing program 4 (id=1738): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="af", 0x1}], 0x1) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0xf, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={r6, 0x2, 0x30}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e23, 0x5d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x40}]}}}]}, 0x5c}}, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) close(r7) 554.530926ms ago: executing program 0 (id=1739): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3, 0x3}, &(0x7f0000000080)=0x8) socket$igmp(0x2, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xab9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x2, 0x1, 0x1, 0x7, 0x1, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x92}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x3, 0x3, 0xa, 0xa, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x4, 0xb, 0x6, 0x20, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x20, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x2, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000000500)=[{0x0, 0x5, 0x9, 0xa}, {0x4, 0x5, 0xd, 0xa}], 0x10, 0xffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000080), &(0x7f0000000340)=r6}, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r9, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 457.399435ms ago: executing program 0 (id=1740): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 260.3066ms ago: executing program 2 (id=1741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x34, 0x34, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast, {[@lsrr={0x83, 0x3, 0xe9}]}}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x27, 0x0, 0x3, 0x0, 0x67, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f00000003c0)="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") syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r7, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 182.861776ms ago: executing program 0 (id=1742): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x1200510, 0x4) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x11, r0, 0x100000000) 93.58133ms ago: executing program 0 (id=1743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x0031\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002df3d28aa9c3e768a6900000085000000030000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000003240)={0x1, 0x8, 0x10001, 0xc, 0x800}, 0x14) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r10 = socket(0x2a, 0xa, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x1, 0xd4, 0x1, 0x0, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x8, 0x91c}}) bind$packet(r10, &(0x7f00000002c0)={0x11, 0xd, r11, 0x1, 0xfa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) shutdown(r9, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000f8ffffff004061104000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=1744): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='ip6tnl0\x00') r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xe3a, 0x0, r1, 0x9, '\x00', 0x0, r1, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x8cd46000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)={0x7, {{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x5, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @multicast2}}]}, 0x310) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x25c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000980)={0x1, 0xc0, 0x8000, 0x6, 0xe0000000, 0x8001, 0x3, 0x1ff, 0x0}, &(0x7f00000009c0)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r6, 0xfffffffe}, &(0x7f0000000a40)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000bc0)={0x0, 'veth1_macvtap\x00', {0x1}, 0x8000}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000c00)=0x7fff, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000c40)={0x0, 0x7}, &(0x7f0000000c80)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000cc0)={r6, 0x6b2b, 0x2, [0x5, 0xe]}, 0xc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x4, 0x9, 0x40, @local, @private0, 0x20, 0x7, 0x1, 0x99c}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000f00)={'gre0\x00', 0x0, 0x7800, 0x40, 0x5, 0x3, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x65, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x4, 0xc1, 0x8, 0xd, 0x7, @private1, @local, 0x1, 0x1, 0x6, 0xb}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001100)={'ip6tnl0\x00', &(0x7f0000001080)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x2, 0x2, 0xc, @remote, @remote, 0x1, 0x10, 0x800, 0xff}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001640)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001400)={0x1ec, r8, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) kernel console output (not intermixed with test programs): s: Directory 'hsr0' with parent 'hsr' already present! [ 157.314781][ T9348] Cannot create hsr debugfs directory [ 157.344333][ T6918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.702399][ T9401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.955'. [ 157.818604][ T9408] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 157.898089][ T9412] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.020841][ T9348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.056088][ T6918] bridge_slave_1: left allmulticast mode [ 158.062633][ T6918] bridge_slave_1: left promiscuous mode [ 158.080453][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.100008][ T9420] netlink: 'syz.0.959': attribute type 11 has an invalid length. [ 158.113660][ T6918] bridge_slave_0: left allmulticast mode [ 158.115332][ T9420] netlink: 'syz.0.959': attribute type 11 has an invalid length. [ 158.127521][ T6918] bridge_slave_0: left promiscuous mode [ 158.127855][ T9420] __nla_validate_parse: 2 callbacks suppressed [ 158.127865][ T9420] netlink: 224 bytes leftover after parsing attributes in process `syz.0.959'. [ 158.134247][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.157723][ T5851] Bluetooth: hci0: command tx timeout [ 158.643326][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.661609][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.679145][ T6918] bond0 (unregistering): Released all slaves [ 158.764816][ T9348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.017486][ T9348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.077807][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.968'. [ 159.162429][ T9348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.180939][ T9463] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 159.195774][ T5851] Bluetooth: hci3: command tx timeout [ 159.213741][ T9473] tipc: Enabling of bearer rejected, failed to enable media [ 159.391257][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 159.413347][ T9479] netlink: 48 bytes leftover after parsing attributes in process `syz.0.972'. [ 159.533259][ T9492] validate_nla: 1 callbacks suppressed [ 159.533273][ T9492] netlink: 'syz.4.975': attribute type 5 has an invalid length. [ 159.641191][ T6918] hsr_slave_0: left promiscuous mode [ 159.655020][ T6918] hsr_slave_1: left promiscuous mode [ 159.669711][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 159.670026][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.708244][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.718455][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.726242][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.744027][ T6918] veth1_macvtap: left promiscuous mode [ 159.749737][ T6918] veth0_macvtap: left promiscuous mode [ 159.755864][ T6918] veth1_vlan: left promiscuous mode [ 159.761207][ T6918] veth0_vlan: left promiscuous mode [ 159.776511][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'. [ 159.830790][ T9507] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 160.233247][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 160.235143][ T5851] Bluetooth: hci0: command tx timeout [ 160.270139][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 160.643117][ T9377] chnl_net:caif_netlink_parms(): no params data found [ 160.866887][ T9348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.898145][ T9348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.968762][ T9348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.986827][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.994680][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.002661][ T9377] bridge_slave_0: entered allmulticast mode [ 161.032722][ T9377] bridge_slave_0: entered promiscuous mode [ 161.067015][ T9348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.117363][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.125931][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.133927][ T9377] bridge_slave_1: entered allmulticast mode [ 161.145216][ T9377] bridge_slave_1: entered promiscuous mode [ 161.151271][ T9543] sctp: [Deprecated]: syz.0.988 (pid 9543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.151271][ T9543] Use struct sctp_sack_info instead [ 161.218273][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 161.234144][ T9545] tc_dump_action: action bad kind [ 161.241618][ T9547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.991'. [ 161.263292][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.266005][ T9550] IPVS: ip_vs_edit_dest(): server weight less than zero [ 161.279681][ T5851] Bluetooth: hci3: command tx timeout [ 161.291666][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.486500][ T9377] team0: Port device team_slave_0 added [ 161.500231][ T9377] team0: Port device team_slave_1 added [ 161.602095][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.613267][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.642690][ T9377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.650591][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 161.717947][ T9571] bridge_slave_1: left promiscuous mode [ 161.738670][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.753291][ T9571] bridge_slave_0: left allmulticast mode [ 161.775632][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.869127][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.878027][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.904729][ T9377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.922778][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 162.039285][ T9596] netlink: 'syz.2.1006': attribute type 13 has an invalid length. [ 162.173055][ T9377] hsr_slave_0: entered promiscuous mode [ 162.200441][ T9377] hsr_slave_1: entered promiscuous mode [ 162.213736][ T9377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.235499][ T9377] Cannot create hsr debugfs directory [ 162.317936][ T5851] Bluetooth: hci0: command tx timeout [ 162.346015][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.531856][ T9348] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.568243][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.575449][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.616875][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.624101][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.794772][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.803598][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.359375][ T5851] Bluetooth: hci3: command tx timeout [ 163.520505][ T9377] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.563533][ T9377] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.588374][ T9377] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.613667][ T9377] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.651530][ T9348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.761747][ T9348] veth0_vlan: entered promiscuous mode [ 163.826810][ T9348] veth1_vlan: entered promiscuous mode [ 163.855393][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.904206][ T9377] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.926324][ T9348] veth0_macvtap: entered promiscuous mode [ 163.949189][ T9348] veth1_macvtap: entered promiscuous mode [ 163.953146][ T9703] netlink: 'syz.4.1034': attribute type 4 has an invalid length. [ 163.968918][ T9703] __nla_validate_parse: 20 callbacks suppressed [ 163.968930][ T9703] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1034'. [ 163.969962][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.991261][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.003583][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.010690][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.040693][ T9703] netlink: 816 bytes leftover after parsing attributes in process `syz.4.1034'. [ 164.053511][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.054016][ T9703] netlink: 'syz.4.1034': attribute type 15 has an invalid length. [ 164.077516][ T9703] ipt_ECN: cannot use operation on non-tcp rule [ 164.082363][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.108998][ T9348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.117891][ T9348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.127332][ T9348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.136246][ T9348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.261095][ T1607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.286929][ T1607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.343673][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.358945][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.406348][ T5851] Bluetooth: hci0: command tx timeout [ 164.515373][ T9723] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1038'. [ 164.660472][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.750221][ T9377] veth0_vlan: entered promiscuous mode [ 164.794140][ T9377] veth1_vlan: entered promiscuous mode [ 164.876235][ T9377] veth0_macvtap: entered promiscuous mode [ 164.887486][ T9377] veth1_macvtap: entered promiscuous mode [ 164.912518][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.938746][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.972388][ T9377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.988320][ T9377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.998427][ T9377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.008065][ T9377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.242408][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.369401][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.411747][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.428645][ T9762] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1049'. [ 165.440746][ T5851] Bluetooth: hci3: command tx timeout [ 165.448433][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.507940][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.622355][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.672215][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.707774][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.732255][ T9776] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 165.861605][ T9783] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 165.923919][ T9781] block nbd0: server does not support multiple connections per device. [ 165.935925][ T9781] block nbd0: shutting down sockets [ 165.961727][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.971348][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.977002][ T9776] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 165.995793][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.008700][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.016529][ T9776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1054'. [ 166.030782][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.079798][ T1607] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.080826][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.209483][ T70] bridge_slave_1: left allmulticast mode [ 166.233629][ T70] bridge_slave_1: left promiscuous mode [ 166.256088][ T54] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.266476][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.282368][ T70] bridge_slave_0: left allmulticast mode [ 166.289455][ T70] bridge_slave_0: left promiscuous mode [ 166.299004][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.406268][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 166.707734][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.719510][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.729802][ T70] bond0 (unregistering): Released all slaves [ 166.743456][ T9804] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1060'. [ 167.334423][ T70] hsr_slave_0: left promiscuous mode [ 167.351867][ T70] hsr_slave_1: left promiscuous mode [ 167.359746][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.367894][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.376188][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.383880][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.401503][ T70] veth1_macvtap: left promiscuous mode [ 167.407622][ T70] veth0_macvtap: left promiscuous mode [ 167.413783][ T70] veth1_vlan: left promiscuous mode [ 167.419301][ T70] veth0_vlan: left promiscuous mode [ 167.829430][ T9830] IPVS: Scheduler module ip_vs_sip not found [ 167.869637][ T9834] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1067'. [ 168.017491][ T70] team0 (unregistering): Port device team_slave_1 removed [ 168.082726][ T70] team0 (unregistering): Port device team_slave_0 removed [ 168.085066][ T5851] Bluetooth: hci0: command tx timeout [ 168.119193][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 168.193900][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.205296][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.219995][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.230785][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.233829][ T9855] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1071'. [ 168.241168][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.512505][ T9853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.545859][ T9788] chnl_net:caif_netlink_parms(): no params data found [ 168.763560][ T9864] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.966147][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.988536][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.015193][ T9788] bridge_slave_0: entered allmulticast mode [ 169.023567][ T9788] bridge_slave_0: entered promiscuous mode [ 169.058268][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.071988][ T9877] __nla_validate_parse: 2 callbacks suppressed [ 169.072002][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1080'. [ 169.095137][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.102374][ T9788] bridge_slave_1: entered allmulticast mode [ 169.133659][ T9788] bridge_slave_1: entered promiscuous mode [ 169.234361][ T9879] veth1_vlan: left promiscuous mode [ 169.242986][ T9879] veth1_vlan: entered allmulticast mode [ 169.246316][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1083'. [ 169.251645][ T9879] bridge0: port 4(veth1_vlan) entered blocking state [ 169.257847][ T9887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1083'. [ 169.264732][ T9879] bridge0: port 4(veth1_vlan) entered disabled state [ 169.279812][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 169.306860][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.342396][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.455553][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 169.505502][ T9788] team0: Port device team_slave_0 added [ 169.514816][ T9788] team0: Port device team_slave_1 added [ 169.658395][ T9906] Illegal XDP return value 16128 on prog (id 221) dev lo, expect packet loss! [ 169.740566][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.768028][ T9903] vlan2: entered allmulticast mode [ 169.773700][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.785038][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.815936][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.846991][ T9911] tipc: Enabled bearer , priority 0 [ 169.859237][ T9905] syzkaller0: entered promiscuous mode [ 169.864753][ T9905] syzkaller0: entered allmulticast mode [ 169.886132][ T9905] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 169.893970][ T9905] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1090'. [ 169.904526][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 169.907117][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.931572][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.941128][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.969855][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.994822][ T9904] tipc: Resetting bearer [ 170.021944][ T9904] tipc: Disabling bearer [ 170.036582][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 170.049516][ T9918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'. [ 170.140416][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.156134][ T5851] Bluetooth: hci0: command tx timeout [ 170.241787][ T9788] hsr_slave_0: entered promiscuous mode [ 170.258334][ T9788] hsr_slave_1: entered promiscuous mode [ 170.264697][ T9788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.287662][ T9788] Cannot create hsr debugfs directory [ 170.313624][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.325703][ T5851] Bluetooth: hci3: command tx timeout [ 170.345874][ T9852] chnl_net:caif_netlink_parms(): no params data found [ 170.638169][ T9945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1100'. [ 170.820755][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.832979][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.852557][ T9852] bridge_slave_0: entered allmulticast mode [ 170.869345][ T9852] bridge_slave_0: entered promiscuous mode [ 170.914582][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.922567][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.932483][ T9852] bridge_slave_1: entered allmulticast mode [ 170.941924][ T9852] bridge_slave_1: entered promiscuous mode [ 171.111268][ T70] bridge_slave_1: left allmulticast mode [ 171.123857][ T70] bridge_slave_1: left promiscuous mode [ 171.137470][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.156562][ T70] bridge_slave_0: left allmulticast mode [ 171.170640][ T70] bridge_slave_0: left promiscuous mode [ 171.180624][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.440379][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.451351][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.461630][ T70] bond0 (unregistering): Released all slaves [ 171.477806][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.491283][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.708265][ T9852] team0: Port device team_slave_0 added [ 171.772614][ T9852] team0: Port device team_slave_1 added [ 171.864808][ T9992] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 171.876451][ T9990] IPVS: stopping backup sync thread 9992 ... [ 171.904324][ T9995] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 171.949937][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.958756][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.985582][ T9852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.017276][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.024289][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.085136][ T9852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.141536][T10000] xt_CT: No such helper "snmp_trap" [ 172.252461][ T5851] Bluetooth: hci0: command tx timeout [ 172.395564][ T5851] Bluetooth: hci3: command tx timeout [ 172.454023][ T9852] hsr_slave_0: entered promiscuous mode [ 172.460914][ T9852] hsr_slave_1: entered promiscuous mode [ 172.467593][ T9852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.483661][ T9852] Cannot create hsr debugfs directory [ 172.491664][ T9788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.542919][ T70] hsr_slave_0: left promiscuous mode [ 172.558249][ T70] hsr_slave_1: left promiscuous mode [ 172.564615][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.573235][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.581737][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.589765][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.618589][ T70] veth1_macvtap: left promiscuous mode [ 172.624248][ T70] veth0_macvtap: left promiscuous mode [ 172.630230][ T70] veth1_vlan: left promiscuous mode [ 172.636036][ T70] veth0_vlan: left promiscuous mode [ 173.010450][ T70] team0 (unregistering): Port device team_slave_1 removed [ 173.053244][ T70] team0 (unregistering): Port device team_slave_0 removed [ 173.399658][ T9788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.496656][ T9788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.542736][ T9788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.629561][T10045] netlink: 'syz.0.1127': attribute type 3 has an invalid length. [ 174.202677][T10062] __nla_validate_parse: 70 callbacks suppressed [ 174.202694][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1133'. [ 174.315021][ T5851] Bluetooth: hci0: command tx timeout [ 174.315552][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.337194][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 174.358079][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 174.464554][ T9788] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.476936][ T5851] Bluetooth: hci3: command tx timeout [ 174.550079][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.557273][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.586912][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.594111][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.962599][T10095] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1146'. [ 174.973558][ T9852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.007345][T10095] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 175.016219][ T9852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.017779][T10095] openvswitch: netlink: Message has 6332 unknown bytes. [ 175.063206][ T9852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.100167][ T9852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.292334][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.393166][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.418474][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.425684][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.450059][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.457248][ T6923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.497492][T10115] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.534046][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.621849][ T9852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.709512][ T9788] veth0_vlan: entered promiscuous mode [ 175.746569][ T9788] veth1_vlan: entered promiscuous mode [ 175.823512][ T9788] veth0_macvtap: entered promiscuous mode [ 175.848278][ T9788] veth1_macvtap: entered promiscuous mode [ 175.885958][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.909356][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.942640][ T9788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.968687][ T9788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.982881][ T9788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.992038][ T9788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.123939][ T9852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.240548][ T6918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.262519][ T6918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.335075][ T9852] veth0_vlan: entered promiscuous mode [ 176.351595][ T1607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.377334][ T9852] veth1_vlan: entered promiscuous mode [ 176.400836][ T1607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.466223][ T9852] veth0_macvtap: entered promiscuous mode [ 176.506837][ T9852] veth1_macvtap: entered promiscuous mode [ 176.555721][ T5851] Bluetooth: hci3: command tx timeout [ 176.654756][T10148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.769991][T10148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.794666][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 176.797494][T10159] pim6reg: entered allmulticast mode [ 176.835298][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.896958][T10148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.924505][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.942941][ T9852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.963142][ T9852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.995071][ T9852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.018402][ T9852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.063675][T10171] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.108125][ T6916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.171685][T10148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.283207][ T6916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.429818][ T6916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.589386][T10148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.681257][ T6916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.730775][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.731988][T10148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.740528][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.754961][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.763407][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.763749][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.780585][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.787541][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.846296][T10148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.943693][T10148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.065903][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.075989][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 178.088201][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.104000][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 178.135727][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1191'. [ 178.261012][ T6916] bridge_slave_1: left allmulticast mode [ 178.273130][ T6916] bridge_slave_1: left promiscuous mode [ 178.282025][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.487279][ T6916] bridge_slave_0: left allmulticast mode [ 178.517895][ T6916] bridge_slave_0: left promiscuous mode [ 178.523738][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.194239][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1197'. [ 179.511686][ T6916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.522373][ T6916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.532654][ T6916] bond0 (unregistering): Released all slaves [ 179.730587][T10230] batadv0: entered promiscuous mode [ 179.741196][T10230] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 179.751231][T10230] bond0: (slave macvlan3): Enslaving as a backup interface with an up link [ 179.845253][ T56] Bluetooth: hci0: command tx timeout [ 179.948907][T10214] delete_channel: no stack [ 180.112556][T10187] chnl_net:caif_netlink_parms(): no params data found [ 180.158876][ T6916] hsr_slave_0: left promiscuous mode [ 180.167027][ T6916] hsr_slave_1: left promiscuous mode [ 180.172774][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.180670][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.190075][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.197900][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.215780][ T6916] veth1_macvtap: left promiscuous mode [ 180.221289][ T6916] veth0_macvtap: left promiscuous mode [ 180.227102][ T6916] veth1_vlan: left promiscuous mode [ 180.232368][ T6916] veth0_vlan: left promiscuous mode [ 180.559832][ T6916] team0 (unregistering): Port device team_slave_1 removed [ 180.600392][ T6916] team0 (unregistering): Port device team_slave_0 removed [ 180.983465][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.999541][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.012562][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.031455][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.042532][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.264395][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1205'. [ 181.273556][ T54] bond0: (slave macvlan3): link status up again after 0 ms [ 181.286076][ T54] bond0: (slave macvlan3): link status up again after 0 ms [ 181.316579][ T54] bond0: (slave macvlan3): link status up again after 0 ms [ 181.335385][ T2952] bond0: (slave macvlan3): link status up again after 0 ms [ 181.379264][ T1607] bond0: (slave macvlan3): link status up again after 0 ms [ 181.402536][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 181.670096][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.691708][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.716499][T10187] bridge_slave_0: entered allmulticast mode [ 181.736852][T10187] bridge_slave_0: entered promiscuous mode [ 181.774302][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 181.795244][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.812834][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.833396][T10187] bridge_slave_1: entered allmulticast mode [ 181.842299][T10187] bridge_slave_1: entered promiscuous mode [ 181.880041][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 181.915791][ T56] Bluetooth: hci0: command tx timeout [ 182.012925][T10187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.032245][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 182.061588][T10187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.196090][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 182.250631][T10187] team0: Port device team_slave_0 added [ 182.264668][T10187] team0: Port device team_slave_1 added [ 182.339924][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 182.434381][T10303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.436562][ T6916] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.533725][T10187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.555027][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.605971][T10187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.628017][T10187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.644994][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.683130][T10187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.727438][ T6916] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.791680][T10304] syzkaller0: entered promiscuous mode [ 182.797465][T10304] syzkaller0: entered allmulticast mode [ 182.843119][ T6916] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.115052][ T56] Bluetooth: hci3: command tx timeout [ 183.998871][ T6916] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.122221][T10187] hsr_slave_0: entered promiscuous mode [ 184.130670][T10187] hsr_slave_1: entered promiscuous mode [ 184.155780][T10187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.171283][T10187] Cannot create hsr debugfs directory [ 184.618413][ T6916] bridge_slave_1: left allmulticast mode [ 184.624256][ T6916] bridge_slave_1: left promiscuous mode [ 184.633280][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.649615][ T6916] bridge_slave_0: left allmulticast mode [ 184.655444][ T6916] bridge_slave_0: left promiscuous mode [ 184.661101][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.000922][ T6916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.011791][ T6916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.023716][ T6916] bond0 (unregistering): Released all slaves [ 185.047498][T10251] chnl_net:caif_netlink_parms(): no params data found [ 185.195057][ T56] Bluetooth: hci3: command tx timeout [ 185.446261][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.453543][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.461303][T10251] bridge_slave_0: entered allmulticast mode [ 185.472339][T10251] bridge_slave_0: entered promiscuous mode [ 185.550072][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.572045][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.601992][T10251] bridge_slave_1: entered allmulticast mode [ 185.662053][T10251] bridge_slave_1: entered promiscuous mode [ 185.872555][ T6916] hsr_slave_0: left promiscuous mode [ 185.879387][ T6916] hsr_slave_1: left promiscuous mode [ 185.885442][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.893063][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.902143][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.909832][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.958919][ T6916] veth1_macvtap: left promiscuous mode [ 185.964512][ T6916] veth0_macvtap: left promiscuous mode [ 185.974779][ T6916] veth1_vlan: left promiscuous mode [ 185.982635][ T6916] veth0_vlan: left promiscuous mode [ 186.290464][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 186.306816][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 186.475793][ T6916] team0 (unregistering): Port device team_slave_1 removed [ 186.509917][ T6916] team0 (unregistering): Port device team_slave_0 removed [ 186.823424][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.849052][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.996081][T10251] team0: Port device team_slave_0 added [ 187.006574][T10414] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1266'. [ 187.008410][T10251] team0: Port device team_slave_1 added [ 187.035078][T10415] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1266'. [ 187.230408][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.264618][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.275009][ T56] Bluetooth: hci3: command tx timeout [ 187.322238][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.362260][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.392745][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.430724][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.454234][T10438] net_ratelimit: 4 callbacks suppressed [ 187.454256][T10438] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 187.565220][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 187.575529][T10187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.720774][T10187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.733454][T10187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.745404][T10187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.757677][T10458] sctp: [Deprecated]: syz.0.1277 (pid 10458) Use of int in maxseg socket option. [ 187.757677][T10458] Use struct sctp_assoc_value instead [ 187.767804][T10251] hsr_slave_0: entered promiscuous mode [ 187.774821][T10458] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1277'. [ 187.780240][T10251] hsr_slave_1: entered promiscuous mode [ 187.796107][T10251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.827540][T10251] Cannot create hsr debugfs directory [ 187.895296][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 187.928828][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 187.971088][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'. [ 188.044037][T10463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.147156][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 188.236096][T10472] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 188.261640][T10187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.338360][T10187] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.379170][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.386382][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.421125][T10482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.431444][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 188.467860][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.475112][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.489000][T10486] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1284'. [ 188.544760][T10489] netlink: 'syz.2.1286': attribute type 3 has an invalid length. [ 188.574464][T10489] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1286'. [ 188.606462][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 188.657285][T10187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.886770][T10251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.923040][T10251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.951986][T10251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.980176][T10251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.013583][T10515] netlink: 'syz.0.1294': attribute type 13 has an invalid length. [ 189.039368][T10515] macvtap0: entered promiscuous mode [ 189.046748][T10515] macvtap0: refused to change device tx_queue_len [ 189.102675][T10187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.172921][T10524] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 189.205949][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 189.294232][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.324467][T10531] netlink: 'syz.0.1296': attribute type 10 has an invalid length. [ 189.327184][T10187] veth0_vlan: entered promiscuous mode [ 189.355425][ T56] Bluetooth: hci3: command tx timeout [ 189.370418][T10531] team0: Cannot enslave team device to itself [ 189.397307][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.417718][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.424949][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.448172][T10187] veth1_vlan: entered promiscuous mode [ 189.489042][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.496246][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.515971][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 189.647477][T10187] veth0_macvtap: entered promiscuous mode [ 189.690745][T10187] veth1_macvtap: entered promiscuous mode [ 189.771063][T10187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.791945][T10187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.820571][T10187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.845287][T10187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.854509][T10187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.867916][T10187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.881097][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 190.228712][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.254433][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.334231][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.534782][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.543024][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.585938][T10569] bond3: entered promiscuous mode [ 190.591497][T10569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.921555][T10577] smc: net device bond0 erased user defined pnetid SYZ2 [ 190.963855][T10251] veth0_vlan: entered promiscuous mode [ 191.007795][T10251] veth1_vlan: entered promiscuous mode [ 191.080680][T10251] veth0_macvtap: entered promiscuous mode [ 191.103413][T10251] veth1_macvtap: entered promiscuous mode [ 191.138935][T10579] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.146702][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.169209][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.197395][T10251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.213654][T10251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.224221][T10251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.233748][T10251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.274554][T10580] xfrm0: entered promiscuous mode [ 191.279863][T10580] xfrm0: entered allmulticast mode [ 191.376521][ T6918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.477703][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.498034][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.534846][ T1607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.547390][ T1607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.660558][ T6918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.852016][ T6918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.927896][ T6918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.191647][T10592] __nla_validate_parse: 5 callbacks suppressed [ 192.191664][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 192.211772][T10598] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1314'. [ 192.230161][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1313'. [ 192.243257][T10598] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1314'. [ 192.268062][T10597] nbd: couldn't find a device at index 16056320 [ 192.275217][ T6918] bridge_slave_1: left allmulticast mode [ 192.280888][ T6918] bridge_slave_1: left promiscuous mode [ 192.300309][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.321248][ T6918] bridge_slave_0: left allmulticast mode [ 192.332010][ T6918] bridge_slave_0: left promiscuous mode [ 192.343346][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.542348][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.552954][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.565027][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.580920][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.593723][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.784758][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.796293][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.808407][ T6918] bond0 (unregistering): Released all slaves [ 192.945224][ T70] net_ratelimit: 11 callbacks suppressed [ 192.945241][ T70] bond0: (slave macvlan3): failed to get link speed/duplex [ 193.085848][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 193.196758][ T70] bond0: (slave macvlan3): failed to get link speed/duplex [ 193.516729][T10614] netlink: 'syz.2.1317': attribute type 16 has an invalid length. [ 193.536175][T10614] netlink: 'syz.2.1317': attribute type 17 has an invalid length. [ 193.606580][ T6918] hsr_slave_0: left promiscuous mode [ 193.616561][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 193.625698][ T6918] hsr_slave_1: left promiscuous mode [ 193.631588][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.655040][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.665816][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.685284][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.722269][ T6918] veth1_macvtap: left promiscuous mode [ 193.745735][ T6918] veth0_macvtap: left promiscuous mode [ 193.751333][ T6918] veth1_vlan: left promiscuous mode [ 193.765061][ T6918] veth0_vlan: left promiscuous mode [ 193.860001][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.871052][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.881313][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.891405][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.900780][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.189407][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 194.228057][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 194.251942][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560819][T10620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.585627][ T70] bond0: (slave macvlan3): failed to get link speed/duplex [ 194.636927][ T5851] Bluetooth: hci0: command tx timeout [ 194.744543][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 194.871459][T10606] chnl_net:caif_netlink_parms(): no params data found [ 194.918218][T10642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.138330][ T70] bond0: (slave macvlan3): failed to get link speed/duplex [ 195.354640][T10606] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.357924][T10668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1334'. [ 195.363416][T10606] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.383588][T10606] bridge_slave_0: entered allmulticast mode [ 195.391805][T10606] bridge_slave_0: entered promiscuous mode [ 195.470749][ T6918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.489976][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.497393][T10606] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.504567][T10606] bridge_slave_1: entered allmulticast mode [ 195.511872][T10606] bridge_slave_1: entered promiscuous mode [ 195.537404][T10670] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1334'. [ 195.555470][T10668] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1334'. [ 195.690137][ T6918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.767201][T10606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.796099][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 195.841818][ T6918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.885009][T10688] netlink: 'syz.0.1339': attribute type 11 has an invalid length. [ 195.915528][T10688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1339'. [ 195.927584][T10606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.005453][ T5851] Bluetooth: hci3: command tx timeout [ 196.108185][ T6918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.142134][T10696] netlink: 'syz.2.1342': attribute type 21 has an invalid length. [ 196.160041][T10606] team0: Port device team_slave_0 added [ 196.178586][T10606] team0: Port device team_slave_1 added [ 196.216047][T10696] nbd1: detected capacity change from 0 to 4096 [ 196.224684][ T5851] block nbd1: Receive control failed (result -32) [ 196.264020][T10606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.281563][T10704] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 196.283379][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.319367][T10606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.333727][T10606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.343754][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.371923][T10606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.377269][T10705] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 196.596101][T10606] hsr_slave_0: entered promiscuous mode [ 196.605963][T10606] hsr_slave_1: entered promiscuous mode [ 196.615532][T10606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.624947][T10606] Cannot create hsr debugfs directory [ 196.679469][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'. [ 196.689085][ T6918] bridge_slave_1: left allmulticast mode [ 196.709458][ T6918] bridge_slave_1: left promiscuous mode [ 196.717166][ T5851] Bluetooth: hci0: command tx timeout [ 196.725798][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.749688][ T6918] bridge_slave_0: left allmulticast mode [ 196.759055][ T6918] bridge_slave_0: left promiscuous mode [ 196.764913][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.218636][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.229508][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.239639][ T6918] bond0 (unregistering): Released all slaves [ 197.275942][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 197.429939][T10624] chnl_net:caif_netlink_parms(): no params data found [ 197.431807][T10738] __nla_validate_parse: 1 callbacks suppressed [ 197.431822][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 197.665279][T10750] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 197.673056][T10750] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1357'. [ 197.725034][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'. [ 197.948044][T10755] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1359'. [ 197.971082][ T70] bond0: (slave macvlan3): failed to get link speed/duplex [ 198.075144][ T5851] Bluetooth: hci3: command tx timeout [ 198.092401][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.119760][T10624] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.135164][T10624] bridge_slave_0: entered allmulticast mode [ 198.153051][T10624] bridge_slave_0: entered promiscuous mode [ 198.197804][T10624] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.228743][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.246840][T10624] bridge_slave_1: entered allmulticast mode [ 198.282459][T10624] bridge_slave_1: entered promiscuous mode [ 198.297123][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 198.508388][T10803] sctp: [Deprecated]: syz.2.1367 (pid 10803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.508388][T10803] Use struct sctp_sack_info instead [ 198.633110][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 198.670846][ T6918] hsr_slave_0: left promiscuous mode [ 198.678296][ T6918] hsr_slave_1: left promiscuous mode [ 198.684287][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.710160][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.719634][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.736208][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.770365][ T6918] veth1_macvtap: left promiscuous mode [ 198.776573][ T6918] veth0_macvtap: left promiscuous mode [ 198.777716][T10815] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 198.782202][ T6918] veth1_vlan: left promiscuous mode [ 198.795515][ T6918] veth0_vlan: left promiscuous mode [ 198.808155][ T5851] Bluetooth: hci0: command tx timeout [ 198.951499][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 199.004095][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 199.304226][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 199.342951][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 199.845116][T10624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.864497][T10810] batadv_slave_0: default FDB implementation only supports local addresses [ 199.877853][T10812] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 199.905342][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 199.930067][T10624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.950478][T10828] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 200.058927][T10837] netlink: 'syz.4.1377': attribute type 12 has an invalid length. [ 200.068721][T10837] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1377'. [ 200.078171][T10624] team0: Port device team_slave_0 added [ 200.080982][T10624] team0: Port device team_slave_1 added [ 200.132260][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 200.142283][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 200.155733][ T5838] Bluetooth: hci3: command tx timeout [ 200.197917][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 200.261821][T10624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.280675][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.321898][T10624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.336882][T10624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.343923][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.370779][T10624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.440433][T10847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.455904][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 200.486854][T10857] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 200.605684][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 200.673187][T10624] hsr_slave_0: entered promiscuous mode [ 200.691988][T10624] hsr_slave_1: entered promiscuous mode [ 200.706584][T10624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.725914][T10624] Cannot create hsr debugfs directory [ 200.868381][T10606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.875401][ T5838] Bluetooth: hci0: command tx timeout [ 200.975990][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 201.030140][T10606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.101734][T10606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.114441][T10606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.310159][T10888] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 201.329092][T10888] nbd: error processing sock list [ 201.403451][T10892] netlink: 'syz.0.1393': attribute type 24 has an invalid length. [ 201.426416][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 201.439760][T10892] netlink: 'syz.0.1393': attribute type 11 has an invalid length. [ 201.444224][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 201.451008][T10894] netlink: 'syz.0.1393': attribute type 24 has an invalid length. [ 201.454126][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 201.655895][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 201.690665][T10906] syzkaller1: entered promiscuous mode [ 201.705882][T10906] syzkaller1: entered allmulticast mode [ 201.868465][T10606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.930355][T10606] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.960194][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.967371][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.014805][T10927] Unsupported ieee802154 address type: 0 [ 202.053804][T10926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.074729][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.081991][ T6923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.238299][ T5851] Bluetooth: hci3: command tx timeout [ 202.261847][T10624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.287223][T10624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.324745][T10624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.352601][T10624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.649348][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.726688][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.771101][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.778308][ T6918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.850556][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.857768][ T6920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.952751][T10973] bond4: entered allmulticast mode [ 202.980896][T10973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.011581][ T6918] net_ratelimit: 5 callbacks suppressed [ 203.011599][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 203.142635][T10606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.155519][ T30] audit: type=1800 audit(1746923753.383:2): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1413" name="cgroup.controllers" dev="tmpfs" ino=1942 res=0 errno=0 [ 203.209252][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 203.411402][T10606] veth0_vlan: entered promiscuous mode [ 203.454197][T10606] veth1_vlan: entered promiscuous mode [ 203.477085][ T70] bond0: (slave macvlan3): failed to get link speed/duplex [ 203.527500][T11003] __nla_validate_parse: 11 callbacks suppressed [ 203.527518][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 203.579665][T10606] veth0_macvtap: entered promiscuous mode [ 203.643418][T10606] veth1_macvtap: entered promiscuous mode [ 203.803303][T10606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.869693][T10606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.894641][T10606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.918873][T10606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.933985][T10606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.949986][T10606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.971685][T11012] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1424'. [ 204.077408][T10624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.100924][T11017] IPVS: length: 157 != 24 [ 204.129182][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 204.303072][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 204.359194][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.385129][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.415259][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 204.439234][T10624] veth0_vlan: entered promiscuous mode [ 204.466519][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.471338][T10624] veth1_vlan: entered promiscuous mode [ 204.496915][T11031] pim6reg: entered allmulticast mode [ 204.507130][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.544589][ T6918] team0: left allmulticast mode [ 204.551347][ T6918] team_slave_0: left allmulticast mode [ 204.567564][ T6918] team_slave_1: left allmulticast mode [ 204.577233][T11032] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 204.583806][ T6918] geneve0: left allmulticast mode [ 204.592171][ T6918] team0: left promiscuous mode [ 204.605371][ T6918] team_slave_0: left promiscuous mode [ 204.611058][ T6918] team_slave_1: left promiscuous mode [ 204.617795][ T6918] geneve0: left promiscuous mode [ 204.623262][ T6918] bridge0: port 3(team0) entered disabled state [ 204.636062][ T6918] bridge_slave_1: left allmulticast mode [ 204.645449][ T6918] bridge_slave_1: left promiscuous mode [ 204.652116][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.743511][ T6918] bridge_slave_0: left allmulticast mode [ 204.750902][ T6918] bridge_slave_0: left promiscuous mode [ 204.756979][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.812634][T11072] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 204.821778][T11072] netlink: 'syz.2.1433': attribute type 11 has an invalid length. [ 204.833154][T11072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1433'. [ 204.911358][T11074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.934775][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 204.991941][T11075] x_tables: duplicate underflow at hook 3 [ 205.009995][ T6918] team0: Port device geneve0 removed [ 205.183064][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.194648][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.209151][ T6918] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 205.219354][ T6918] bond0 (unregistering): Released all slaves [ 205.306464][ T6918] bond1 (unregistering): Released all slaves [ 205.388905][ T6918] bond2 (unregistering): Released all slaves [ 205.691430][T10624] veth0_macvtap: entered promiscuous mode [ 205.700080][T11084] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 205.711549][T10624] veth1_macvtap: entered promiscuous mode [ 205.740670][T10624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.762851][T10624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.778107][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 205.800173][T10624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.810099][T10624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.821070][T10624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.830794][T10624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.860604][T11093] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 205.877395][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 205.989201][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.013107][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.018857][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 206.109109][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.128028][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.138688][T11099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1444'. [ 206.175931][ T6611] bond0: (slave macvlan3): failed to get link speed/duplex [ 206.305825][ T6611] bond0: (slave macvlan3): failed to get link speed/duplex [ 206.739410][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1446'. [ 206.907369][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.918779][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.929053][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.937255][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.949539][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.331972][ T6918] hsr_slave_0: left promiscuous mode [ 207.337794][ T6918] hsr_slave_1: left promiscuous mode [ 207.358076][ T6918] veth1_macvtap: left promiscuous mode [ 207.363583][ T6918] veth0_macvtap: left promiscuous mode [ 207.369395][ T6918] veth1_vlan: left promiscuous mode [ 207.374673][ T6918] veth0_vlan: left promiscuous mode [ 207.585300][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 208.008253][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.017802][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.032627][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.048996][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.062195][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.092521][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 208.127398][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 208.137737][ T6611] smc: removing ib device syz2 [ 208.739741][T11141] __nla_validate_parse: 2 callbacks suppressed [ 208.739756][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 208.774692][T11107] chnl_net:caif_netlink_parms(): no params data found [ 208.805746][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 208.831914][ T6920] net_ratelimit: 7 callbacks suppressed [ 208.831930][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 208.991349][T11141] bond3: entered promiscuous mode [ 209.004140][T11153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1458'. [ 209.028112][T11141] bond3: entered allmulticast mode [ 209.033523][T11141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.048161][ T5851] Bluetooth: hci0: command tx timeout [ 209.125358][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 209.227972][T11160] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 209.245496][T11159] netlink: 'syz.4.1460': attribute type 13 has an invalid length. [ 209.257030][T11159] netlink: 'syz.4.1460': attribute type 58 has an invalid length. [ 209.287634][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 209.295484][T11159] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1460'. [ 209.341670][T11160] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 209.439093][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'. [ 209.537690][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'. [ 209.617814][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 209.760237][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 209.815631][T11190] Bluetooth: MGMT ver 1.23 [ 209.856071][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.879692][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.911695][T11107] bridge_slave_0: entered allmulticast mode [ 209.940148][T11107] bridge_slave_0: entered promiscuous mode [ 209.987809][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.009356][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.017532][T11107] bridge_slave_1: entered allmulticast mode [ 210.068389][T11107] bridge_slave_1: entered promiscuous mode [ 210.155129][ T5851] Bluetooth: hci3: command tx timeout [ 210.277668][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.291968][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.389434][T11107] team0: Port device team_slave_0 added [ 210.406883][T11107] team0: Port device team_slave_1 added [ 210.469028][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.484977][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.516801][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.533370][T11210] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 210.534610][T11132] chnl_net:caif_netlink_parms(): no params data found [ 210.573221][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.588331][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.621655][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.783582][ T6916] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.926519][T11228] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 211.030264][ T6916] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.086489][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 211.115508][ T5851] Bluetooth: hci0: command tx timeout [ 211.134483][T11107] hsr_slave_0: entered promiscuous mode [ 211.141545][T11107] hsr_slave_1: entered promiscuous mode [ 211.167219][ T6916] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.313374][ T6916] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.365067][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.382451][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.405358][T11132] bridge_slave_0: entered allmulticast mode [ 211.413254][T11253] xt_bpf: check failed: parse error [ 211.427387][T11132] bridge_slave_0: entered promiscuous mode [ 211.456402][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.463741][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.477597][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 211.489491][T11132] bridge_slave_1: entered allmulticast mode [ 211.500928][T11132] bridge_slave_1: entered promiscuous mode [ 211.509149][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 211.520513][T11256] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1480'. [ 211.660412][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.679459][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.874291][T11132] team0: Port device team_slave_0 added [ 211.940920][T11132] team0: Port device team_slave_1 added [ 212.059993][ T6916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.082972][T11282] tipc: Enabling of bearer rejected, failed to enable media [ 212.180337][ T6916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.195742][T11296] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 212.219286][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.236544][ T5851] Bluetooth: hci3: command tx timeout [ 212.245811][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.278036][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.349715][ T6916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.369425][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.387699][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.430950][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.467093][T11300] netlink: 'syz.4.1493': attribute type 39 has an invalid length. [ 212.526182][T11305] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 212.552203][T11315] x_tables: duplicate underflow at hook 2 [ 212.561941][T11315] x_tables: duplicate underflow at hook 2 [ 212.574111][ T6916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.632760][T11300] syz_tun (unregistering): left allmulticast mode [ 212.641373][T11300] syz_tun (unregistering): left promiscuous mode [ 212.648426][T11300] bridge0: port 3(syz_tun) entered disabled state [ 212.670583][T11132] hsr_slave_0: entered promiscuous mode [ 212.678763][T11132] hsr_slave_1: entered promiscuous mode [ 212.687558][T11132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.696397][T11132] Cannot create hsr debugfs directory [ 212.917777][ T6916] bridge_slave_1: left allmulticast mode [ 212.923465][ T6916] bridge_slave_1: left promiscuous mode [ 212.933163][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.942373][ T6916] bridge_slave_0: left allmulticast mode [ 212.949103][ T6916] bridge_slave_0: left promiscuous mode [ 212.958411][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.969002][ T6916] bridge_slave_1: left allmulticast mode [ 212.974651][ T6916] bridge_slave_1: left promiscuous mode [ 212.983250][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.992455][ T6916] bridge_slave_0: left allmulticast mode [ 213.001176][ T6916] bridge_slave_0: left promiscuous mode [ 213.008219][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.198388][ T5851] Bluetooth: hci0: command tx timeout [ 213.519861][ T6916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.531502][ T6916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.542061][ T6916] bond0 (unregistering): Released all slaves [ 213.637855][ T6916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.648277][ T6916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.659672][ T6916] bond0 (unregistering): Released all slaves [ 213.779927][ T6611] bond0: (slave macvlan3): failed to get link speed/duplex [ 213.970532][T11350] __nla_validate_parse: 12 callbacks suppressed [ 213.970547][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'. [ 214.009258][T11346] xt_CT: No such helper "snmp" [ 214.014816][T11346] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 214.088713][T11355] netlink: 'syz.2.1508': attribute type 6 has an invalid length. [ 214.166616][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 214.263384][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 214.286108][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1510'. [ 214.316486][ T5851] Bluetooth: hci3: command tx timeout [ 214.385664][T11371] netlink: 'syz.4.1514': attribute type 21 has an invalid length. [ 214.427016][T11371] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1514'. [ 214.486557][ T6916] hsr_slave_0: left promiscuous mode [ 214.492815][ T6916] hsr_slave_1: left promiscuous mode [ 214.502116][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.510859][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.520204][T11373] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1513'. [ 214.528056][T11378] netlink: 'syz.2.1516': attribute type 32 has an invalid length. [ 214.530182][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.541264][T11378] netlink: 'syz.2.1516': attribute type 32 has an invalid length. [ 214.544498][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.564702][ T6916] hsr_slave_0: left promiscuous mode [ 214.571608][ T6916] hsr_slave_1: left promiscuous mode [ 214.577682][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.585486][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.593530][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.601196][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.667977][T11383] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 214.672176][ T6916] veth1_macvtap: left promiscuous mode [ 214.683296][ T6916] veth0_macvtap: left promiscuous mode [ 214.690725][ T6916] veth1_vlan: left promiscuous mode [ 214.698766][ T6916] veth0_vlan: left promiscuous mode [ 214.704686][ T6916] veth1_macvtap: left promiscuous mode [ 214.710499][ T6916] veth0_macvtap: left promiscuous mode [ 214.719466][ T6916] veth1_vlan: left promiscuous mode [ 214.724732][ T6916] veth0_vlan: left promiscuous mode [ 215.146724][ T6916] team0 (unregistering): Port device team_slave_1 removed [ 215.179399][ T6916] team0 (unregistering): Port device team_slave_0 removed [ 215.285083][ T5851] Bluetooth: hci0: command tx timeout [ 215.733623][ T6916] team0 (unregistering): Port device team_slave_1 removed [ 215.769145][ T6916] team0 (unregistering): Port device team_slave_0 removed [ 216.085106][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 216.104003][T11107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.164684][T11107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.185872][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 216.201726][T11107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.214212][T11107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.214261][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1519'. [ 216.291648][T11386] bridge4: entered promiscuous mode [ 216.298853][T11386] bridge4: entered allmulticast mode [ 216.317454][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 216.395260][ T5851] Bluetooth: hci3: command tx timeout [ 216.446117][T11397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'. [ 216.495932][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 216.569133][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.631606][T11404] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1525'. [ 216.655460][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.708513][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.715704][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.735927][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 216.763726][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.770917][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.786483][T11409] syzkaller1: entered promiscuous mode [ 216.792081][T11409] syzkaller1: entered allmulticast mode [ 216.840463][T11409] netlink: 'syz.4.1527': attribute type 21 has an invalid length. [ 216.886370][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 216.895387][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1527'. [ 217.070487][T11132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.084238][T11132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.109736][T11132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.131130][T11132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.175138][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 217.316376][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 217.435640][T11132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.448861][ T6916] bond0: (slave macvlan3): failed to get link speed/duplex [ 217.501370][T11132] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.527142][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.534309][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.597310][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.604547][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.636127][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 217.650900][T11452] pim6reg: entered allmulticast mode [ 217.676219][T11452] pim6reg: left allmulticast mode [ 217.766105][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.890567][T11132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.003495][T11107] veth0_vlan: entered promiscuous mode [ 218.023916][T11107] veth1_vlan: entered promiscuous mode [ 218.044213][T11473] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 218.075645][T11473] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 218.126730][T11107] veth0_macvtap: entered promiscuous mode [ 218.143336][T11107] veth1_macvtap: entered promiscuous mode [ 218.204809][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.242734][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.280792][T11107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.292530][T11107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.312916][T11107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.335219][T11107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.441876][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.590273][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.612505][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.654164][ T6923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.671675][T11132] veth0_vlan: entered promiscuous mode [ 218.679047][ T6923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.707050][T11132] veth1_vlan: entered promiscuous mode [ 218.788423][T11132] veth0_macvtap: entered promiscuous mode [ 218.832216][T11132] veth1_macvtap: entered promiscuous mode [ 218.970170][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.990523][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.006131][T11132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.019305][T11132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.030635][T11132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.042989][T11132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.219097][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.241497][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.309773][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.320959][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.328719][ T2952] net_ratelimit: 8 callbacks suppressed [ 219.328734][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 219.476299][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 219.649280][ T2952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.705257][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 219.821671][ T2952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.855548][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 219.965115][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 220.075978][ T6916] bond0: (slave macvlan3): failed to get link speed/duplex [ 220.120094][ T2952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.195892][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 220.305728][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 220.339450][ T2952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.425485][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 220.495663][T11512] __nla_validate_parse: 2 callbacks suppressed [ 220.495680][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 220.536633][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 220.639015][ T2952] bridge_slave_1: left allmulticast mode [ 220.644713][ T2952] bridge_slave_1: left promiscuous mode [ 220.665278][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.677001][ T2952] bridge_slave_0: left allmulticast mode [ 220.682681][ T2952] bridge_slave_0: left promiscuous mode [ 220.692649][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.794164][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.807954][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.823569][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.847670][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.856891][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.038475][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.050970][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.061218][ T2952] bond0 (unregistering): Released all slaves [ 221.270735][T11516] chnl_net:caif_netlink_parms(): no params data found [ 221.343749][ T2952] hsr_slave_0: left promiscuous mode [ 221.349763][ T2952] hsr_slave_1: left promiscuous mode [ 221.358357][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.366210][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.373837][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.381729][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.399664][ T2952] veth1_macvtap: left promiscuous mode [ 221.405299][ T2952] veth0_macvtap: left promiscuous mode [ 221.410929][ T2952] veth1_vlan: left promiscuous mode [ 221.416455][ T2952] veth0_vlan: left promiscuous mode [ 221.660314][T11532] Can't find ip_set type bitmap:ip,mac [ 222.028229][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 222.051284][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.060384][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.073028][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.093179][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.106671][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.127395][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 222.536139][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 222.551802][T11516] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.559674][T11516] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.567184][T11516] bridge_slave_0: entered allmulticast mode [ 222.577852][T11516] bridge_slave_0: entered promiscuous mode [ 222.698186][T11516] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.708629][T11516] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.723848][T11516] bridge_slave_1: entered allmulticast mode [ 222.734592][T11516] bridge_slave_1: entered promiscuous mode [ 222.838436][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 222.875572][T11516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.938399][T11516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.965224][ T5851] Bluetooth: hci0: command tx timeout [ 223.051088][T11572] sctp: [Deprecated]: syz.4.1569 (pid 11572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.051088][T11572] Use struct sctp_sack_info instead [ 223.054771][T11576] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1571'. [ 223.086141][T11516] team0: Port device team_slave_0 added [ 223.117407][T11516] team0: Port device team_slave_1 added [ 223.198349][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.221526][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.261738][T11516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.278968][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.323176][T11516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.348535][T11516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.364946][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.413177][T11516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.499839][T11516] hsr_slave_0: entered promiscuous mode [ 223.520667][T11516] hsr_slave_1: entered promiscuous mode [ 223.607383][ T2952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.771248][ T2952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.880240][ T2952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.898288][T11622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1581'. [ 223.908856][T11627] xt_l2tp: v2 sid > 0xffff: 262144 [ 223.972391][ T2952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.068555][T11632] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1585'. [ 224.100827][T11545] chnl_net:caif_netlink_parms(): no params data found [ 224.156939][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 224.157166][ T5851] Bluetooth: hci3: command tx timeout [ 224.199576][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 224.309730][ T2952] bridge_slave_1: left allmulticast mode [ 224.319488][ T2952] bridge_slave_1: left promiscuous mode [ 224.326399][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.338218][ T2952] bridge_slave_0: left allmulticast mode [ 224.343892][ T2952] bridge_slave_0: left promiscuous mode [ 224.350521][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.694401][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.707369][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.718338][ T2952] bond0 (unregistering): Released all slaves [ 224.742228][T11545] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.749620][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.758878][T11545] bridge_slave_0: entered allmulticast mode [ 224.779779][T11545] bridge_slave_0: entered promiscuous mode [ 224.811869][T11647] tc_dump_action: action bad kind [ 224.862804][T11545] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.875116][T11545] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.882600][T11545] bridge_slave_1: entered allmulticast mode [ 224.897347][T11545] bridge_slave_1: entered promiscuous mode [ 224.998789][T11659] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 225.029405][T11545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.045060][ T5851] Bluetooth: hci0: command tx timeout [ 225.061705][T11545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.123521][ T2952] hsr_slave_0: left promiscuous mode [ 225.133181][ T2952] hsr_slave_1: left promiscuous mode [ 225.141068][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.148971][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.158598][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.167267][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.193802][ T2952] veth1_macvtap: left promiscuous mode [ 225.199737][ T2952] veth0_macvtap: left promiscuous mode [ 225.205750][ T2952] veth1_vlan: left promiscuous mode [ 225.211122][ T2952] veth0_vlan: left promiscuous mode [ 225.566053][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 225.610465][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 225.664492][T11675] sctp: [Deprecated]: syz.0.1598 (pid 11675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.664492][T11675] Use struct sctp_sack_info instead [ 226.039326][T11545] team0: Port device team_slave_0 added [ 226.069014][T11678] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 226.091415][T11545] team0: Port device team_slave_1 added [ 226.198512][T11685] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 226.233981][T11545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.241951][ T5851] Bluetooth: hci3: command tx timeout [ 226.251292][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.280548][T11545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.323482][T11545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.331178][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.382977][T11545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.411130][T11695] __nla_validate_parse: 4 callbacks suppressed [ 226.411147][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 226.613668][T11545] hsr_slave_0: entered promiscuous mode [ 226.637832][T11545] hsr_slave_1: entered promiscuous mode [ 226.649949][T11545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.672591][T11545] Cannot create hsr debugfs directory [ 226.758171][T11516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.807660][T11516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.818779][T11516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.875914][ T54] net_ratelimit: 5 callbacks suppressed [ 226.875931][ T54] bond0: (slave macvlan3): failed to get link speed/duplex [ 226.905077][T11516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.989201][T11732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1611'. [ 227.002820][T11731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1611'. [ 227.026231][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 227.046986][T11735] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 227.080621][T11735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.115129][ T5851] Bluetooth: hci0: command tx timeout [ 227.142850][T11735] bond5: (slave veth3): Enslaving as an active interface with a down link [ 227.205497][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 227.229530][T11516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.261586][T11516] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.284565][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.291796][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.310407][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.317629][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.428846][T11747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.440848][ T6923] bond0: (slave macvlan3): failed to get link speed/duplex [ 227.566398][ T6916] bond0: (slave macvlan3): failed to get link speed/duplex [ 227.729559][T11763] netlink: 'syz.0.1621': attribute type 11 has an invalid length. [ 227.753956][T11763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1621'. [ 227.763891][ T6611] bond0: (slave macvlan3): failed to get link speed/duplex [ 227.807452][T11545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.831143][T11545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.848420][T11545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.877444][T11545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.962110][T11516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.016591][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 228.089409][T11516] veth0_vlan: entered promiscuous mode [ 228.106219][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1627'. [ 228.187151][T11516] veth1_vlan: entered promiscuous mode [ 228.211282][T11784] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1629'. [ 228.230222][T11784] dvmrp1: left allmulticast mode [ 228.292360][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 228.328068][ T5851] Bluetooth: hci3: command tx timeout [ 228.341309][T11545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.365643][ T6916] bond0: (slave macvlan3): failed to get link speed/duplex [ 228.437636][T11516] veth0_macvtap: entered promiscuous mode [ 228.455798][T11545] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.469632][T11516] veth1_macvtap: entered promiscuous mode [ 228.489952][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.497136][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.512880][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'. [ 228.534412][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.541604][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.588544][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 228.625715][T11516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.704466][T11516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.748022][T11516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.758553][T11516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.768348][T11516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.777941][T11516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.797302][ T6916] bond0: (slave macvlan3): failed to get link speed/duplex [ 228.888970][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1635'. [ 229.011215][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.035472][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.078874][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.094263][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.196548][ T5851] Bluetooth: hci0: command tx timeout [ 229.232874][T11545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.341963][T11841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'. [ 229.368995][T11545] veth0_vlan: entered promiscuous mode [ 229.400259][T11545] veth1_vlan: entered promiscuous mode [ 229.468389][T11545] veth0_macvtap: entered promiscuous mode [ 229.479158][T11545] veth1_macvtap: entered promiscuous mode [ 229.516352][T11545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.536889][T11851] netlink: 'syz.0.1647': attribute type 7 has an invalid length. [ 229.541639][T11545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.557907][T11545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.567976][T11545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.586933][T11545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.610785][T11545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.644949][T11858] netlink: 'syz.2.1649': attribute type 16 has an invalid length. [ 229.647639][T11851] : entered promiscuous mode [ 229.652891][T11858] netlink: 'syz.2.1649': attribute type 3 has an invalid length. [ 229.802000][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.828822][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.888549][ T6916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.920509][ T6916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.056315][ T2952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.533687][ T2952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.739511][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.749448][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.757831][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.768397][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.777381][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.945569][ T2952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.979332][T11890] chnl_net:caif_netlink_parms(): no params data found [ 231.037878][ T2952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.072895][T11890] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.081078][T11890] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.088378][T11890] bridge_slave_0: entered allmulticast mode [ 231.096170][T11890] bridge_slave_0: entered promiscuous mode [ 231.103976][T11890] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.111743][T11890] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.119098][T11890] bridge_slave_1: entered allmulticast mode [ 231.126807][T11890] bridge_slave_1: entered promiscuous mode [ 231.161549][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.183256][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.230457][T11890] team0: Port device team_slave_0 added [ 231.245285][T11890] team0: Port device team_slave_1 added [ 231.251401][ T2952] bridge_slave_1: left allmulticast mode [ 231.257506][ T2952] bridge_slave_1: left promiscuous mode [ 231.263232][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.273615][ T2952] bridge_slave_0: left allmulticast mode [ 231.281018][ T2952] bridge_slave_0: left promiscuous mode [ 231.287040][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.612527][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.632789][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.653414][ T2952] bond0 (unregistering): Released all slaves [ 231.823538][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.851496][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.895148][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.917338][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.932016][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.963738][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.010162][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.026038][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.034423][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.049071][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.065720][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.133882][T11920] net_ratelimit: 16 callbacks suppressed [ 232.133901][T11920] netlink: ct family unspecified [ 232.145363][T11920] openvswitch: netlink: Actions may not be safe on all matching packets [ 232.195628][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 232.205312][T11909] tipc: Enabled bearer , priority 0 [ 232.217180][T11922] ieee802154 phy0 wpan0: encryption failed: -90 [ 232.237917][T11907] syzkaller0: entered promiscuous mode [ 232.243536][T11907] syzkaller0: entered allmulticast mode [ 232.358307][T11907] tipc: Resetting bearer [ 232.365317][T11926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 232.417189][T11929] __nla_validate_parse: 4 callbacks suppressed [ 232.417207][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'. [ 232.433066][T11906] tipc: Resetting bearer [ 232.467457][T11906] tipc: Disabling bearer [ 232.500414][T11890] hsr_slave_0: entered promiscuous mode [ 232.508091][T11890] hsr_slave_1: entered promiscuous mode [ 232.530483][T11890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.543795][T11890] Cannot create hsr debugfs directory [ 232.550018][T11934] xt_TCPMSS: Only works on TCP SYN packets [ 232.608247][ T2952] hsr_slave_0: left promiscuous mode [ 232.614298][ T2952] hsr_slave_1: left promiscuous mode [ 232.621133][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.629723][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.639475][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.650539][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.672997][ T2952] veth1_macvtap: left promiscuous mode [ 232.678883][ T2952] veth0_macvtap: left promiscuous mode [ 232.684442][ T2952] veth1_vlan: left promiscuous mode [ 232.690476][ T2952] veth0_vlan: left promiscuous mode [ 232.717339][T11943] Bluetooth: MGMT ver 1.23 [ 232.800028][ T56] Bluetooth: hci0: command tx timeout [ 233.073021][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 233.107863][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 233.556005][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 233.586575][T11949] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 233.707191][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 233.800496][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 233.810291][T11966] Bluetooth: MGMT ver 1.23 [ 233.905067][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 233.935653][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 234.165845][ T56] Bluetooth: hci3: command tx timeout [ 234.174205][ T2952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.201260][T11914] chnl_net:caif_netlink_parms(): no params data found [ 234.264447][ T2952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.364732][ T2952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.382823][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.390559][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.398011][T11914] bridge_slave_0: entered allmulticast mode [ 234.405325][T11914] bridge_slave_0: entered promiscuous mode [ 234.412998][T11914] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.425031][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.432255][T11914] bridge_slave_1: entered allmulticast mode [ 234.440639][T11914] bridge_slave_1: entered promiscuous mode [ 234.467759][ T2952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.559567][T11914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.598108][T11914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.678267][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 234.697321][T11914] team0: Port device team_slave_0 added [ 234.716598][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 234.728076][T11914] team0: Port device team_slave_1 added [ 234.809494][T11890] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.826284][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 234.828383][T11890] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.849847][T11914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.857166][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.885297][ T56] Bluetooth: hci0: command tx timeout [ 234.885795][T11914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.955417][T11890] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.988991][T11890] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.010108][T11914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.025479][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.055496][T11914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.088485][T12019] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 235.097536][ T2952] bridge_slave_1: left allmulticast mode [ 235.103202][ T2952] bridge_slave_1: left promiscuous mode [ 235.109411][T12019] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1691'. [ 235.120534][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.128513][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 235.143314][ T2952] bridge_slave_0: left allmulticast mode [ 235.153255][ T2952] bridge_slave_0: left promiscuous mode [ 235.161754][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.450652][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.461280][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.471510][ T2952] bond0 (unregistering): Released all slaves [ 235.505898][ T1607] bond0: (slave macvlan3): failed to get link speed/duplex [ 235.617369][T11914] hsr_slave_0: entered promiscuous mode [ 235.627183][T11914] hsr_slave_1: entered promiscuous mode [ 235.762319][T12042] netlink: 'syz.0.1699': attribute type 29 has an invalid length. [ 235.780216][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 235.879563][T12055] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1702'. [ 235.889094][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1702'. [ 235.964577][T12052] netlink: 'syz.4.1703': attribute type 4 has an invalid length. [ 235.994064][T12060] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 236.145183][ T2952] hsr_slave_0: left promiscuous mode [ 236.167903][ T2952] hsr_slave_1: left promiscuous mode [ 236.174135][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.183213][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.193920][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.202279][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.235305][ T56] Bluetooth: hci3: command tx timeout [ 236.252195][ T2952] veth1_macvtap: left promiscuous mode [ 236.258124][ T2952] veth0_macvtap: left promiscuous mode [ 236.263906][ T2952] veth1_vlan: left promiscuous mode [ 236.269671][ T2952] veth0_vlan: left promiscuous mode [ 236.854978][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 236.892401][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 236.957165][ T56] Bluetooth: hci0: command tx timeout [ 237.223221][T12091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.609860][ T6918] bond0: (slave macvlan3): failed to get link speed/duplex [ 237.726678][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 237.788437][T12131] __nla_validate_parse: 3 callbacks suppressed [ 237.788454][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1719'. [ 237.848149][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.876327][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 238.002193][T11890] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.036309][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.043555][ T6918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.059762][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.066944][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.150470][T12155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1725'. [ 238.176214][T12155] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 238.186380][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 238.274573][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 238.316438][ T56] Bluetooth: hci3: command tx timeout [ 238.337920][ T6611] bond0: (slave macvlan3): failed to get link speed/duplex [ 238.387452][T11914] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.431642][T12168] vlan4: entered promiscuous mode [ 238.456534][T12168] bridge0: entered promiscuous mode [ 238.500531][T11914] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.518673][T11914] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.569690][T11914] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.583744][T12180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1732'. [ 238.594148][T12181] xt_l2tp: unknown flags: 18 [ 238.658808][T11890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.804252][T11890] veth0_vlan: entered promiscuous mode [ 238.831410][T11890] veth1_vlan: entered promiscuous mode [ 238.846748][T11914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.866035][ T6611] bond0: (slave macvlan3): failed to get link speed/duplex [ 238.920438][T11914] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.941518][T11890] veth0_macvtap: entered promiscuous mode [ 238.969392][T11890] veth1_macvtap: entered promiscuous mode [ 239.027465][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.034622][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.045604][ T56] Bluetooth: hci0: command tx timeout [ 239.080059][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.087277][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.157359][T11890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.165563][ T6920] bond0: (slave macvlan3): failed to get link speed/duplex [ 239.202434][T11890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.229319][T11890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.239000][T11890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.248197][T11890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.257119][T11890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.286612][T12207] syzkaller0: entered allmulticast mode [ 239.308870][T12207] syzkaller0 (unregistering): left allmulticast mode [ 239.365734][ T6916] bond0: (slave macvlan3): failed to get link speed/duplex [ 239.503660][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.512162][ T2952] bond0: (slave macvlan3): failed to get link speed/duplex [ 239.519800][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.550809][T12214] netlink: 'syz.2.1741': attribute type 2 has an invalid length. [ 239.564550][T11914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.633653][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.640082][ T6916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.653736][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.668237][ T6916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.670844][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 239.706935][T12220] netlink: 'syz.0.1743': attribute type 7 has an invalid length. [ 239.722731][T11914] veth0_vlan: entered promiscuous mode [ 239.730042][ T5877] ------------[ cut here ]------------ [ 239.735885][ T5877] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 239.746557][ T5877] WARNING: CPU: 1 PID: 5877 at net/mac80211/rate.c:404 __rate_control_send_low+0x63b/0x890 [ 239.756527][T12220] netlink: 'syz.0.1743': attribute type 8 has an invalid length. [ 239.756610][ T5877] Modules linked in: [ 239.764276][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 239.777097][ T5877] [ 239.779718][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:4 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 239.791811][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.801889][ T5877] Workqueue: mld mld_ifc_work [ 239.806612][ T5877] RIP: 0010:__rate_control_send_low+0x63b/0x890 [ 239.812880][ T5877] Code: 42 0f b6 04 28 84 c0 0f 85 e9 01 00 00 41 8b 0e 48 c7 c7 60 38 8c 8c 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 b6 aa b6 f6 90 <0f> 0b 90 90 e9 6f fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c fb [ 239.827419][T11914] veth1_vlan: entered promiscuous mode [ 239.832513][ T5877] RSP: 0018:ffffc90004436540 EFLAGS: 00010246 [ 239.844088][ T5877] RAX: ccc005415ba2c000 RBX: 000000000000000c RCX: ffff88805d59bc00 [ 239.852122][ T5877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 239.860147][ T5877] RBP: 0000000000000084 R08: 0000000000000003 R09: 0000000000000004 [ 239.868178][ T5877] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000000 [ 239.876191][ T5877] R13: dffffc0000000000 R14: ffff8880254330d8 R15: ffff88802682dde8 [ 239.884178][ T5877] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 239.893168][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.898520][T11914] veth0_macvtap: entered promiscuous mode [ 239.899773][ T5877] CR2: 00007f4dbdfd4f98 CR3: 0000000064c0e000 CR4: 00000000003526f0 [ 239.899793][ T5877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.912363][T11914] veth1_macvtap: entered promiscuous mode [ 239.913513][ T5877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.913529][ T5877] Call Trace: [ 239.913548][ T5877] [ 239.941548][ T5877] rate_control_send_low+0x194/0x7a0 [ 239.946905][ T5877] rate_control_get_rate+0x20b/0x5d0 [ 239.952227][ T5877] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 239.957941][ T5877] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 239.964041][ T5877] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 239.970350][ T5877] invoke_tx_handlers_late+0xb6/0x1820 [ 239.975882][ T5877] ? ieee80211_tx_h_select_key+0xc72/0x1900 [ 239.981809][ T5877] ieee80211_tx_dequeue+0x2f32/0x4310 [ 239.987285][ T5877] ? ret_from_fork_asm+0x1a/0x30 [ 239.992266][ T5877] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 239.998037][ T5877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.003469][ T5877] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 240.009607][ T5877] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 240.016242][ T5877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.021656][ T5877] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 240.027454][ T5877] ? do_raw_spin_unlock+0x122/0x240 [ 240.032675][ T5877] ieee80211_queue_skb+0x19e5/0x2180 [ 240.038054][ T5877] ieee80211_tx+0x297/0x420 [ 240.041397][T11914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.042573][ T5877] ? __pfx_ieee80211_tx+0x10/0x10 [ 240.042626][ T5877] ? ieee80211_xmit+0x315/0x400 [ 240.059739][ T5877] __ieee80211_subif_start_xmit+0xd29/0x14c0 [ 240.065779][ T5877] ? worker_thread+0x8a0/0xda0 [ 240.070552][ T5877] ? kthread+0x70e/0x8a0 [ 240.074818][ T5877] ? __ieee80211_subif_start_xmit+0x2bf/0x14c0 [ 240.081046][ T5877] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 240.087541][ T5877] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 240.093810][ T5877] ieee80211_subif_start_xmit+0xe1/0x460 [ 240.099504][ T5877] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 240.103980][T11914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.105790][ T5877] ? __lock_acquire+0xaac/0xd20 [ 240.105830][ T5877] dev_hard_start_xmit+0x2ff/0x880 [ 240.105873][ T5877] __dev_queue_xmit+0x1adf/0x3a70 [ 240.105909][ T5877] ? __dev_queue_xmit+0x27e/0x3a70 [ 240.105950][ T5877] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.105972][ T5877] ? read_seqbegin+0x122/0x250 [ 240.105987][ T5877] ? neigh_resolve_output+0x438/0x750 [ 240.147951][T11914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.148820][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.159940][T11914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.162705][ T5877] ? read_seqbegin+0x1ac/0x250 [ 240.162730][ T5877] ? __pfx_read_seqbegin+0x10/0x10 [ 240.181353][ T5877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.186796][ T5877] ? eth_header+0x11b/0x200 [ 240.191322][ T5877] ? __asan_memcpy+0x40/0x70 [ 240.195998][ T5877] ip6_finish_output2+0x11fb/0x16a0 [ 240.201223][ T5877] ? ip6_finish_output2+0x701/0x16a0 [ 240.201974][T11914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.206545][ T5877] ? __pfx_ip6_finish_output2+0x10/0x10 [ 240.206572][ T5877] ? ip6_mtu+0x7d/0x3f0 [ 240.206592][ T5877] ? ip6_mtu+0x7d/0x3f0 [ 240.206613][ T5877] ip6_finish_output+0x234/0x7d0 [ 240.206636][ T5877] NF_HOOK+0x9e/0x380 [ 240.206655][ T5877] ? NF_HOOK+0x101/0x380 [ 240.206673][ T5877] ? __pfx_NF_HOOK+0x10/0x10 [ 240.206695][ T5877] ? __pfx_dst_output+0x10/0x10 [ 240.244668][T11914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.246998][ T5877] ? icmp6_dst_alloc+0x3a5/0x420 [ 240.247026][ T5877] ? icmp6_dst_alloc+0x3a5/0x420 [ 240.247050][ T5877] mld_sendpack+0x800/0xd80 [ 240.247093][ T5877] ? mld_sendpack+0x1de/0xd80 [ 240.247113][ T5877] ? __pfx_mld_sendpack+0x10/0x10 [ 240.247159][ T5877] mld_ifc_work+0x835/0xde0 [ 240.247180][ T5877] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.247200][ T5877] ? process_scheduled_works+0x9ec/0x17a0 [ 240.296516][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 240.300673][ T5877] process_scheduled_works+0xadb/0x17a0 [ 240.300739][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.321210][ T5877] worker_thread+0x8a0/0xda0 [ 240.325854][ T5877] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.332212][ T5877] ? __kthread_parkme+0x7b/0x200 [ 240.337208][ T5877] kthread+0x70e/0x8a0 [ 240.341302][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 240.346467][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.351079][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.355715][ T5877] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.360937][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.366192][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.370811][ T5877] ret_from_fork+0x4b/0x80 [ 240.375271][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.379881][ T5877] ret_from_fork_asm+0x1a/0x30 [ 240.384685][ T5877] [ 240.387759][ T5877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.395048][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:4 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 240.407119][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.417189][ T5877] Workqueue: mld mld_ifc_work [ 240.421891][ T5877] Call Trace: [ 240.425181][ T5877] [ 240.428123][ T5877] dump_stack_lvl+0x99/0x250 [ 240.432732][ T5877] ? __asan_memcpy+0x40/0x70 [ 240.437348][ T5877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.442572][ T5877] ? __pfx__printk+0x10/0x10 [ 240.447195][ T5877] panic+0x2db/0x790 [ 240.451122][ T5877] ? __pfx_panic+0x10/0x10 [ 240.455550][ T5877] ? show_trace_log_lvl+0x4fb/0x550 [ 240.460775][ T5877] ? ret_from_fork_asm+0x1a/0x30 [ 240.465742][ T5877] __warn+0x31b/0x4b0 [ 240.469749][ T5877] ? __rate_control_send_low+0x63b/0x890 [ 240.475401][ T5877] ? __rate_control_send_low+0x63b/0x890 [ 240.481051][ T5877] report_bug+0x2be/0x4f0 [ 240.485395][ T5877] ? __rate_control_send_low+0x63b/0x890 [ 240.491045][ T5877] ? __rate_control_send_low+0x63b/0x890 [ 240.496695][ T5877] ? __rate_control_send_low+0x63d/0x890 [ 240.502344][ T5877] handle_bug+0x84/0x160 [ 240.506608][ T5877] exc_invalid_op+0x1a/0x50 [ 240.511126][ T5877] asm_exc_invalid_op+0x1a/0x20 [ 240.515987][ T5877] RIP: 0010:__rate_control_send_low+0x63b/0x890 [ 240.522244][ T5877] Code: 42 0f b6 04 28 84 c0 0f 85 e9 01 00 00 41 8b 0e 48 c7 c7 60 38 8c 8c 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 b6 aa b6 f6 90 <0f> 0b 90 90 e9 6f fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c fb [ 240.541865][ T5877] RSP: 0018:ffffc90004436540 EFLAGS: 00010246 [ 240.547955][ T5877] RAX: ccc005415ba2c000 RBX: 000000000000000c RCX: ffff88805d59bc00 [ 240.555939][ T5877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 240.563922][ T5877] RBP: 0000000000000084 R08: 0000000000000003 R09: 0000000000000004 [ 240.571911][ T5877] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000000 [ 240.579900][ T5877] R13: dffffc0000000000 R14: ffff8880254330d8 R15: ffff88802682dde8 [ 240.587934][ T5877] rate_control_send_low+0x194/0x7a0 [ 240.593253][ T5877] rate_control_get_rate+0x20b/0x5d0 [ 240.598573][ T5877] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 240.604248][ T5877] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 240.610351][ T5877] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 240.616616][ T5877] invoke_tx_handlers_late+0xb6/0x1820 [ 240.622107][ T5877] ? ieee80211_tx_h_select_key+0xc72/0x1900 [ 240.628036][ T5877] ieee80211_tx_dequeue+0x2f32/0x4310 [ 240.633470][ T5877] ? ret_from_fork_asm+0x1a/0x30 [ 240.638445][ T5877] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 240.644186][ T5877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.649616][ T5877] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 240.655714][ T5877] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 240.662329][ T5877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.667720][ T5877] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 240.673465][ T5877] ? do_raw_spin_unlock+0x122/0x240 [ 240.678683][ T5877] ieee80211_queue_skb+0x19e5/0x2180 [ 240.683997][ T5877] ieee80211_tx+0x297/0x420 [ 240.688508][ T5877] ? __pfx_ieee80211_tx+0x10/0x10 [ 240.693578][ T5877] ? ieee80211_xmit+0x315/0x400 [ 240.698455][ T5877] __ieee80211_subif_start_xmit+0xd29/0x14c0 [ 240.704453][ T5877] ? worker_thread+0x8a0/0xda0 [ 240.709226][ T5877] ? kthread+0x70e/0x8a0 [ 240.713494][ T5877] ? __ieee80211_subif_start_xmit+0x2bf/0x14c0 [ 240.719678][ T5877] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 240.726130][ T5877] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 240.732392][ T5877] ieee80211_subif_start_xmit+0xe1/0x460 [ 240.738036][ T5877] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 240.744276][ T5877] ? __lock_acquire+0xaac/0xd20 [ 240.749149][ T5877] dev_hard_start_xmit+0x2ff/0x880 [ 240.754303][ T5877] __dev_queue_xmit+0x1adf/0x3a70 [ 240.759359][ T5877] ? __dev_queue_xmit+0x27e/0x3a70 [ 240.764507][ T5877] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.769901][ T5877] ? read_seqbegin+0x122/0x250 [ 240.774678][ T5877] ? neigh_resolve_output+0x438/0x750 [ 240.780066][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.785294][ T5877] ? read_seqbegin+0x1ac/0x250 [ 240.790063][ T5877] ? __pfx_read_seqbegin+0x10/0x10 [ 240.795169][ T5877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.800560][ T5877] ? eth_header+0x11b/0x200 [ 240.805076][ T5877] ? __asan_memcpy+0x40/0x70 [ 240.809684][ T5877] ip6_finish_output2+0x11fb/0x16a0 [ 240.814885][ T5877] ? ip6_finish_output2+0x701/0x16a0 [ 240.820174][ T5877] ? __pfx_ip6_finish_output2+0x10/0x10 [ 240.825722][ T5877] ? ip6_mtu+0x7d/0x3f0 [ 240.829896][ T5877] ? ip6_mtu+0x7d/0x3f0 [ 240.834054][ T5877] ip6_finish_output+0x234/0x7d0 [ 240.838982][ T5877] NF_HOOK+0x9e/0x380 [ 240.842950][ T5877] ? NF_HOOK+0x101/0x380 [ 240.847189][ T5877] ? __pfx_NF_HOOK+0x10/0x10 [ 240.851788][ T5877] ? __pfx_dst_output+0x10/0x10 [ 240.856626][ T5877] ? icmp6_dst_alloc+0x3a5/0x420 [ 240.861555][ T5877] ? icmp6_dst_alloc+0x3a5/0x420 [ 240.866498][ T5877] mld_sendpack+0x800/0xd80 [ 240.871019][ T5877] ? mld_sendpack+0x1de/0xd80 [ 240.875967][ T5877] ? __pfx_mld_sendpack+0x10/0x10 [ 240.881040][ T5877] mld_ifc_work+0x835/0xde0 [ 240.885547][ T5877] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.890746][ T5877] ? process_scheduled_works+0x9ec/0x17a0 [ 240.896458][ T5877] process_scheduled_works+0xadb/0x17a0 [ 240.902041][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.908038][ T5877] worker_thread+0x8a0/0xda0 [ 240.912630][ T5877] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.918968][ T5877] ? __kthread_parkme+0x7b/0x200 [ 240.923900][ T5877] kthread+0x70e/0x8a0 [ 240.927965][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 240.933065][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.937649][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.942229][ T5877] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.947415][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.952615][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.957218][ T5877] ret_from_fork+0x4b/0x80 [ 240.961637][ T5877] ? __pfx_kthread+0x10/0x10 [ 240.966229][ T5877] ret_from_fork_asm+0x1a/0x30 [ 240.971007][ T5877] [ 240.974267][ T5877] Kernel Offset: disabled [ 240.978589][ T5877] Rebooting in 86400 seconds..