last executing test programs: 2m39.064888229s ago: executing program 2 (id=564): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001380)={0x2, 0x2}) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000000080)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m38.82693387s ago: executing program 2 (id=567): socket$nl_netfilter(0x10, 0x3, 0xc) 2m38.679227634s ago: executing program 2 (id=568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f0000000740), &(0x7f0000000800)=r8}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x5, 0x0}, 0x8) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4}, 0x18) r11 = accept4(0xffffffffffffffff, &(0x7f0000000880)=@l2={0x1f, 0x0, @none}, &(0x7f0000000900)=0x80, 0x80000) sendmsg$nl_xfrm(r11, &(0x7f0000000b40)={&(0x7f0000000940), 0xc, &(0x7f0000000b00)={&(0x7f0000000980)=@delsa={0x174, 0x11, 0x2, 0x70bd25, 0x25dfdbfc, {@in6=@mcast2, 0x4d5, 0x2, 0xff}, [@offload={0xc, 0x1c, {r3}}, @algo_auth={0x105, 0x1, {{'wp384-generic\x00'}, 0x5e8, "21c80dacb073f4e22e3108d82f3b2e82ffa9df3f7cd8436519c02f093840e1c46f6e66c8693041dc730298cbaffd8cf68cedd108730ed1e2d0cd817ea815a1f6598b934e2c868506a81771d3874d2e0a2c62a29c5fdf5490966351ae83509fed19041334fe2c653dc0cab49e2de1e8b1cf139c14e7359a34669a646c37cf241f35528243ea9154995ef3e5c7c8ae550e02b1b3059afb9dc8f9f6b0abbb75c55d61cd651d5fac753c9ba01d9ce9c7eb974211a5ea3bb5cf5f9220c48fa7"}}, @mark={0xc, 0x15, {0x35075b, 0x4}}, @lifetime_val={0x24, 0x9, {0x1, 0x10000, 0x4, 0x4}}, @XFRMA_SET_MARK={0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x20044000}, 0x80) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x80e, 0x8, 0x11010, 0xffffffffffffffff, 0x19140e58, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5, @void, @value, @value}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x8000, 0xc3, 0x2, 0x4000, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x1, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x9, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0xe2a, 0xb3, &(0x7f0000000300)=""/179, 0x41000, 0x2, '\x00', r3, @fallback=0x4, r7, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x7, 0x1, 0x9}, 0x10, r9, r10, 0x3, &(0x7f0000000600)=[r12, r13], &(0x7f0000000640)=[{0x4, 0x4, 0x9, 0x8}, {0x4, 0x2, 0xd, 0x2}, {0x4, 0x1, 0xd, 0x2}], 0x10, 0x9, @void, @value}, 0x94) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) 2m37.883394432s ago: executing program 2 (id=570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000004000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="000000009800"/28, @ANYRES32=r0, @ANYBLOB="00000000010100"/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000800000000000000000000000000e3ff0000000000000000"]) 2m37.795271048s ago: executing program 2 (id=571): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x5, 0x0, 0x10000000, "c8119df9ba26"}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x8, 0x70bd29, 0x7, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4ec4, 0xd}}}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2000c010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m37.493901643s ago: executing program 2 (id=572): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000000300000004080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0007000010000008000000ff63700a072ccc"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x5, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611069000000000095000000000000006454b86c1daf0bd3279f61f96c301abbab6c1c544740a85ff68b050635497a64bd2609e18dc5a8acd82d65a88d762e376e35bea2529c546857d1a97e01405f61785cd9c7f531c596d941ca17c11ba6f1442705398930691e5dc251494477c1678800e3cd80e730aa3b91a9f6b981daa7bb2d7f74a909253a395447fc48a941025b8294a1ba51e1af724a887e85cc844193dfd9d47f993309f0002ed018740f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000002010300000000000000000000080003ac6e4000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r7, 0xfff) accept(r7, 0xfffffffffffffffd, &(0x7f0000000440)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8915, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m35.819161719s ago: executing program 1 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xff, 0xfffb}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x11}, 0x8) (async) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) 2m35.741176701s ago: executing program 1 (id=587): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0x65, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x200, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x2, {[@mptcp=@mp_fclose={0x1e, 0xc, 0xbb, 0x0, 0xfffffffffffffffb}]}}}}}}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/196, &(0x7f0000000100)=0xc4) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) 2m35.263331672s ago: executing program 1 (id=589): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 2m34.313781281s ago: executing program 1 (id=591): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x4, 0x60, 0x65, 0x0, 0x15, 0x6, 0x0, @local, @loopback, {[@timestamp={0x44, 0x8, 0xa1, 0x0, 0xc, [0x9]}]}}, @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x4e23, 0x4e24, 0x1, 0x2}, [{0x10000, 0xffffffff, 0x80000000, 0x7fffffff, 0xfffffff9, 0x5524, 0x0, 0xffffffb}]}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201000000"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r5, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 2m34.011405259s ago: executing program 1 (id=592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xb5, 0x4c, &(0x7f0000000180)="0c556c53487a5b5232555713656a83c3c0eaed21b50f93efa70b825e985a7a504e31a094ad6aca611322948ce328b83892b7da8ad1b3f2e9a8bd8986f2272fb7e73ef56db06bdc93544b5e200014b148882f0bc86d8c7bda93dc5f51dd9ce7daeadb8f67629a1342e2114975ba51b38385a2d2e647df3d59ce7fe502f490e8f1072167f42b842a7ca0324b9ad37bcdc5cdecdc94f437bbc1a46538154c4b07b69cc9a60a7542f39ba055b37bb3f3cb567b0856c5d3", &(0x7f0000000000)=""/76, 0xeb, 0x0, 0x1e, 0x78, &(0x7f0000000240)="855f50ddbf472c0f2e2403c21608da5faf4614be0c28683a962c912e6747", &(0x7f0000000280)="9e2adeb3eb22b3efe6c93ae567c6e12bcaf4d8fd6b84987c93b7355ac131fccf8dfa504652c1033f4a4562c7121c07c98bee656c2ca089b171d0f69466572fad11cb33b44cee52b2d2e97b797cc9dfc49ec714369942ed47f7ed6023eb9a8ef32e2a7d361fa2d4baab120ed3dd128ae46d86f4df4ee8fc6b", 0x1, 0x0, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m33.801221004s ago: executing program 1 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) 2m22.380067233s ago: executing program 32 (id=572): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000000300000004080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0007000010000008000000ff63700a072ccc"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x5, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611069000000000095000000000000006454b86c1daf0bd3279f61f96c301abbab6c1c544740a85ff68b050635497a64bd2609e18dc5a8acd82d65a88d762e376e35bea2529c546857d1a97e01405f61785cd9c7f531c596d941ca17c11ba6f1442705398930691e5dc251494477c1678800e3cd80e730aa3b91a9f6b981daa7bb2d7f74a909253a395447fc48a941025b8294a1ba51e1af724a887e85cc844193dfd9d47f993309f0002ed018740f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000002010300000000000000000000080003ac6e4000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r7, 0xfff) accept(r7, 0xfffffffffffffffd, &(0x7f0000000440)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8915, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m18.62831064s ago: executing program 33 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) 1m47.600679711s ago: executing program 5 (id=791): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0xffe0, 0xffe0}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m46.908418058s ago: executing program 3 (id=530): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x234, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 1m43.907878657s ago: executing program 4 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0c02030000000000000000000000000000ffe8ed035af75879010afa0102fc000000000000000000000000000000fe800000000000000000000000000043fe8000000000000000000000000000bbfe80000000730000000000000000000000000000bb00"/112], 0x68) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 1m27.081120837s ago: executing program 5 (id=791): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0xffe0, 0xffe0}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.468788131s ago: executing program 3 (id=530): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x234, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 1m23.616458765s ago: executing program 4 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0c02030000000000000000000000000000ffe8ed035af75879010afa0102fc000000000000000000000000000000fe800000000000000000000000000043fe8000000000000000000000000000bbfe80000000730000000000000000000000000000bb00"/112], 0x68) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 1m6.556725932s ago: executing program 5 (id=791): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0xffe0, 0xffe0}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.005085225s ago: executing program 3 (id=530): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x234, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 1m3.723139858s ago: executing program 4 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0c02030000000000000000000000000000ffe8ed035af75879010afa0102fc000000000000000000000000000000fe800000000000000000000000000043fe8000000000000000000000000000bbfe80000000730000000000000000000000000000bb00"/112], 0x68) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 47.922428653s ago: executing program 5 (id=791): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0xffe0, 0xffe0}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.385729036s ago: executing program 3 (id=530): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x234, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 42.328621339s ago: executing program 4 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0c02030000000000000000000000000000ffe8ed035af75879010afa0102fc000000000000000000000000000000fe800000000000000000000000000043fe8000000000000000000000000000bbfe80000000730000000000000000000000000000bb00"/112], 0x68) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 26.456712778s ago: executing program 5 (id=791): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0xffe0, 0xffe0}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.670996051s ago: executing program 3 (id=530): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x234, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 22.926846095s ago: executing program 4 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0c02030000000000000000000000000000ffe8ed035af75879010afa0102fc000000000000000000000000000000fe800000000000000000000000000043fe8000000000000000000000000000bbfe80000000730000000000000000000000000000bb00"/112], 0x68) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 19.963284563s ago: executing program 0 (id=1163): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}]}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001080006040001aaaaaaaaaa26ac1414bbaaaaaaaaaa00ac1414bbfc7baf23d130e2d608393e4d045ef4606b2dab8072ae669a443304f7eda3b5fd87cd0ca842d5a6c42b6249e6f2cb9b9b"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, &(0x7f0000000440)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 19.670742624s ago: executing program 0 (id=1165): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd2d}, 0x14}}, 0x0) 19.139092364s ago: executing program 0 (id=1166): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xe4, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 18.860247147s ago: executing program 0 (id=1168): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x1003}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x799d, [{0x10, 0x0, 0x9}, {0x4, 0x3, 0x8}, {0x1, 0x2, 0xff}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 18.731379366s ago: executing program 0 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x18}, [@typed={0x4, 0x75}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x48000) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 18.609998722s ago: executing program 0 (id=1170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x41, 0x2}, @func={0xb, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x854ee1d151a25f7, 0x0, 0x61]}}, &(0x7f00000002c0)=""/211, 0x52, 0xd3, 0x0, 0x10, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x41, 0x2}, @func={0xb, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x854ee1d151a25f7, 0x0, 0x61]}}, &(0x7f00000002c0)=""/211, 0x52, 0xd3, 0x0, 0x10, 0x0, @void, @value}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 6.314809299s ago: executing program 3 (id=530): r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x234, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x27c}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 4.859603381s ago: executing program 5 (id=791): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0xffe0, 0xffe0}, {0x10, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.505139016s ago: executing program 34 (id=1170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x41, 0x2}, @func={0xb, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x854ee1d151a25f7, 0x0, 0x61]}}, &(0x7f00000002c0)=""/211, 0x52, 0xd3, 0x0, 0x10, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x41, 0x2}, @func={0xb, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x854ee1d151a25f7, 0x0, 0x61]}}, &(0x7f00000002c0)=""/211, 0x52, 0xd3, 0x0, 0x10, 0x0, @void, @value}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 3.087808992s ago: executing program 4 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0c02030000000000000000000000000000ffe8ed035af75879010afa0102fc000000000000000000000000000000fe800000000000000000000000000043fe8000000000000000000000000000bbfe80000000730000000000000000000000000000bb00"/112], 0x68) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 1.428453741s ago: executing program 6 (id=1206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{}, "ee6a8e64a9f4d496", "2742cd9e1a7dee0a5709069c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x36) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x22, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8d57}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0xb, 0x3, 0x0, 0x8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xc6, &(0x7f00000006c0)=""/198, 0x40f00, 0x62, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x54f167e6}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x3, 0x2, 0xa, 0x7}], 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='ufshcd_upiu\x00', r5, 0x0, 0x9366}, 0x18) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000007c0)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340), 0x4) 1.315406865s ago: executing program 6 (id=1207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020605000000000000000000000000200900020073797a1100000040b5bce31c42827488c5f27a9f71000500010007000000050005000a0000010c00078008001240fffffffa11000300686173683a69702c706f"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r1], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.210734652s ago: executing program 6 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x1, 0xfffffe01}, 0x10, 0x0, 0xd4dd, 0x68, 0x1f, 'syz1\x00', "35d5b1b96bc973e5d0c11f55638d7b01ea8c046314a1dc27bb46d39f57ce23f4", "7c929610b9436ac7c8d90d450fcac9af6013862a7a260a89632bae7b14391424", [{0x887, 0xffff, {0x3, 0x9}}, {0x0, 0x357, {0x1, 0x9}}, {0x0, 0x2, {0x0, 0x9b6}}, {0x0, 0x0, {0x0, 0x7}}, {0x81, 0xf402, {0x0, 0x1}}, {0x4, 0x0, {0x2, 0xd74}}, {0x5, 0x1, {0x1}}, {0xf, 0xa, {0x1, 0x172b}}, {0x6, 0x4, {0x2, 0x1ff}}, {0x3, 0xe, {0x2, 0x1d6}}, {0x6, 0x9, {0x3, 0x4}}, {0x6, 0x8, {0x3, 0xa}}, {0x9, 0x4, {0x0, 0x7}}, {0x971, 0xf72, {0x1, 0x9}}, {0x1, 0x5, {0x0, 0x1}}, {0x800, 0x4, {0x3, 0x4062}}, {0xff, 0xffff, {0x6}}, {0x3, 0xd, {0x1, 0xdb}}, {0xe4ef, 0x3, {0x0, 0x8000}}, {0x3, 0x6, {0x1, 0xa}}, {0x5, 0x5, {0x3, 0x2}}, {0xc7, 0x800, {0x2, 0x8}}, {0xb0a9, 0x3, {0x1, 0x8000}}, {0x800, 0x535, {0x2, 0x3}}, {0x0, 0xe, {0x2, 0x2}}, {0x15b, 0x4, {0x2, 0x800}}, {0x4, 0x10, {0x0, 0x9}}, {0x4, 0x6, {0x2, 0x3}}, {0xd, 0x3, {0x3, 0x8000}}, {0x1ff, 0x8, {0x0, 0x800}}, {0x0, 0x6548, {0x2, 0x4}}, {0x100, 0xc3d3, {0x1, 0xffff9a28}}, {0x10, 0x50, {0x1, 0xffffff7f}}, {0x61a, 0x5, {0x3, 0x7}}, {0x0, 0x800, {0x0, 0x1}}, {0x800, 0x100, {0x2, 0x1}}, {0x33d6, 0xffff, {0x0, 0x42}}, {0x6, 0x39, {0x3, 0x7}}, {0x8b23, 0x400, {0x3, 0x40}}, {0x8, 0x0, {0x3, 0x800}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x884) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x6, 0x30}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r11, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x966, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x966, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @alu={0x4, 0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @generic={0xa, 0xc, 0x3, 0xe, 0x5e30}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xd4, &(0x7f00000000c0)=""/212, 0x41000, 0x10, '\x00', r2, 0x25, r5, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r8, 0x1, r9, r10, 0x1, r11, r12], &(0x7f00000003c0)=[{0x1, 0x1, 0x4, 0x1}, {0x2, 0x5, 0x6, 0xb}], 0x10, 0xffffff7c, @void, @value}, 0x94) 567.265784ms ago: executing program 6 (id=1209): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x5, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) 151.350022ms ago: executing program 6 (id=1210): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x805, 0x2) (async) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x805, 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x140b, 0xa0b, 0x170bd28, 0xa5dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) 0s ago: executing program 6 (id=1211): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000037000701ffffff038005004980a8000000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): allmulticast mode [ 196.074382][ T9741] bridge_slave_0: entered promiscuous mode [ 196.130866][ T9843] tipc: Enabling of bearer rejected, failed to enable media [ 196.150926][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.168423][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.188280][ T9741] bridge_slave_1: entered allmulticast mode [ 196.198585][ T9741] bridge_slave_1: entered promiscuous mode [ 196.209088][ T5852] Bluetooth: hci5: command tx timeout [ 196.344815][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.357827][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.516865][ T9845] vxcan1 speed is unknown, defaulting to 1000 [ 196.536082][ T9741] team0: Port device team_slave_0 added [ 196.580715][ T9741] team0: Port device team_slave_1 added [ 196.840374][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.847456][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.937336][ T9741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.944348][ T9882] netlink: 36 bytes leftover after parsing attributes in process `syz.6.817'. [ 197.119519][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.126707][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.158937][ T9741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.432254][ T9741] hsr_slave_0: entered promiscuous mode [ 197.449962][ T9741] hsr_slave_1: entered promiscuous mode [ 197.456393][ T9741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.489403][ T9741] Cannot create hsr debugfs directory [ 197.493224][ T5852] Bluetooth: hci2: command tx timeout [ 197.583681][ T9761] chnl_net:caif_netlink_parms(): no params data found [ 197.729926][ T5852] Bluetooth: hci0: command tx timeout [ 197.747822][ T9918] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 197.779201][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'. [ 197.812829][ T9922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.857273][ T9922] bridge0: port 3(batadv1) entered blocking state [ 197.864026][ T9922] bridge0: port 3(batadv1) entered disabled state [ 197.875514][ T9922] batadv1: entered allmulticast mode [ 197.884217][ T9922] batadv1: entered promiscuous mode [ 198.056925][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.270929][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.290577][ T5852] Bluetooth: hci5: command tx timeout [ 198.367009][ T3011] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 198.376796][ T3011] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 198.391398][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.398587][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.406900][ T9761] bridge_slave_0: entered allmulticast mode [ 198.409464][ T9952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.422651][ T9761] bridge_slave_0: entered promiscuous mode [ 198.430208][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 198.454582][ T9952] macvtap1: entered allmulticast mode [ 198.460152][ T9952] veth0_macvtap: entered allmulticast mode [ 198.524225][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.543697][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.563820][ T9761] bridge_slave_1: entered allmulticast mode [ 198.574296][ T9761] bridge_slave_1: entered promiscuous mode [ 198.617630][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.925824][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.955888][ T9973] netlink: 144 bytes leftover after parsing attributes in process `syz.6.835'. [ 198.968223][ T9761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.185573][ T9761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.274736][ T9845] chnl_net:caif_netlink_parms(): no params data found [ 199.294768][ T9984] netlink: 'syz.6.836': attribute type 9 has an invalid length. [ 199.524024][ T9761] team0: Port device team_slave_0 added [ 199.552589][ T9761] team0: Port device team_slave_1 added [ 199.569170][ T5842] Bluetooth: hci2: command tx timeout [ 199.809039][ T5842] Bluetooth: hci0: command tx timeout [ 199.859068][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.873300][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.906713][ T9761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.933447][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.943025][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.969929][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.165290][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 200.296767][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.314758][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 200.330891][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.347586][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.355123][ T9845] bridge_slave_0: entered allmulticast mode [ 200.366732][ T9845] bridge_slave_0: entered promiscuous mode [ 200.380437][ T5842] Bluetooth: hci5: command tx timeout [ 200.404124][ T9761] hsr_slave_0: entered promiscuous mode [ 200.411968][ T9761] hsr_slave_1: entered promiscuous mode [ 200.418036][ T9761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.426007][ T9761] Cannot create hsr debugfs directory [ 200.459282][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.475243][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.483638][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.494585][ T9845] bridge_slave_1: entered allmulticast mode [ 200.503293][ T9845] bridge_slave_1: entered promiscuous mode [ 200.592428][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.876392][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.930169][ T9845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.944931][ T9845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.174654][ T9845] team0: Port device team_slave_0 added [ 201.226296][ T9845] team0: Port device team_slave_1 added [ 201.250524][ T9741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.389346][ T9741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.471821][ T9741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.490630][ T9741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.517112][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.537497][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.571447][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 201.572160][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 201.578178][ T5842] Bluetooth: hci3: command 0x0401 tx timeout [ 201.609218][ T9845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.636781][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.644199][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.670560][ T5854] Bluetooth: hci2: command tx timeout [ 201.677815][ T9845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.806845][ T9845] hsr_slave_0: entered promiscuous mode [ 201.826269][ T9845] hsr_slave_1: entered promiscuous mode [ 201.834075][ T9845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.842016][ T9845] Cannot create hsr debugfs directory [ 201.944441][ T13] bridge_slave_1: left allmulticast mode [ 201.953416][ T13] bridge_slave_1: left promiscuous mode [ 201.975453][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.005865][ T13] bridge_slave_0: left allmulticast mode [ 202.026642][ T13] bridge_slave_0: left promiscuous mode [ 202.035053][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.056011][ T13] bridge_slave_1: left allmulticast mode [ 202.064822][ T13] bridge_slave_1: left promiscuous mode [ 202.072079][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.085685][ T13] bridge_slave_0: left allmulticast mode [ 202.093306][ T13] bridge_slave_0: left promiscuous mode [ 202.099803][T10074] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 202.107739][T10074] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 202.112972][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.120741][T10074] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 202.132888][T10074] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 202.142360][T10074] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 202.151318][T10074] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 202.160208][T10074] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 202.168127][T10074] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 202.555808][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.566609][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.577177][ T13] bond0 (unregistering): Released all slaves [ 202.894707][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.905186][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.920484][ T13] bond0 (unregistering): Released all slaves [ 202.982833][T10076] netlink: 184 bytes leftover after parsing attributes in process `syz.0.856'. [ 203.245613][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 203.315045][T10080] validate_nla: 122 callbacks suppressed [ 203.315064][T10080] netlink: 'syz.0.859': attribute type 30 has an invalid length. [ 203.440871][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 203.485880][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.861'. [ 203.494977][T10080] netlink: 'syz.0.859': attribute type 30 has an invalid length. [ 203.700074][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.739098][ T5852] Bluetooth: hci2: command tx timeout [ 203.905100][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.6.866'. [ 203.919171][T10102] netlink: 'syz.6.866': attribute type 1 has an invalid length. [ 203.945207][ T9761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.963379][ T9741] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.015538][ T9761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.052536][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 204.066457][T10105] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 204.133355][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.148830][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.158567][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.165769][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.206622][ T9761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.264751][ T9761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.568452][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.872'. [ 204.629315][T10129] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 204.894694][ T13] hsr_slave_0: left promiscuous mode [ 204.918113][T10139] ip6t_srh: unknown srh match flags 4001 [ 204.924661][ T13] hsr_slave_1: left promiscuous mode [ 204.940834][T10139] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 204.949697][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.957137][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.959196][T10139] netlink: 144 bytes leftover after parsing attributes in process `syz.0.873'. [ 204.981981][T10139] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 205.005334][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.024884][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.026799][T10139] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 205.056445][T10139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.873'. [ 205.095512][ T13] hsr_slave_0: left promiscuous mode [ 205.106476][ T13] hsr_slave_1: left promiscuous mode [ 205.132210][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.148965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.169640][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.177102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.262744][ T13] veth1_macvtap: left promiscuous mode [ 205.268311][ T13] veth0_macvtap: left promiscuous mode [ 205.288868][ T13] veth1_vlan: left promiscuous mode [ 205.294213][ T13] veth0_vlan: left promiscuous mode [ 205.319883][ T13] veth1_macvtap: left promiscuous mode [ 205.325423][ T13] veth0_macvtap: left promiscuous mode [ 205.335769][ T13] veth1_vlan: left promiscuous mode [ 205.341508][ T13] veth0_vlan: left promiscuous mode [ 205.898522][ T13] team0 (unregistering): Port device team_slave_1 removed [ 205.937377][ T13] team0 (unregistering): Port device team_slave_0 removed [ 206.663490][ T13] team0 (unregistering): Port device team_slave_1 removed [ 206.702156][ T13] team0 (unregistering): Port device team_slave_0 removed [ 207.253261][ T9845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.312854][ T9845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.391097][T10155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.875'. [ 207.403569][ T9845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.442505][ T9845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.570953][T10161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.594432][ T9741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.616901][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.721673][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.761078][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.768284][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.851916][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.859145][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.182246][ T9845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.256751][ T9845] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.323749][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.330975][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.391678][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.398930][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.576805][ T9741] veth0_vlan: entered promiscuous mode [ 208.611250][ T9741] veth1_vlan: entered promiscuous mode [ 208.687668][ T9761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.744220][ T9741] veth0_macvtap: entered promiscuous mode [ 208.798874][ T9741] veth1_macvtap: entered promiscuous mode [ 208.860333][ T9761] veth0_vlan: entered promiscuous mode [ 208.903756][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.930852][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.961780][ T9761] veth1_vlan: entered promiscuous mode [ 208.982323][ T9741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.007187][ T9741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.028389][ T9741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.045302][T10203] netlink: 'syz.6.885': attribute type 32 has an invalid length. [ 209.065351][ T9741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.226257][ T9761] veth0_macvtap: entered promiscuous mode [ 209.250205][ T9761] veth1_macvtap: entered promiscuous mode [ 209.305872][ T9845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.421351][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.443659][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.483666][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.495472][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.603562][ T9761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.621047][ T9761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.635277][ T9761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.670753][ T9761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.743006][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.756544][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.994416][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.029452][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.169942][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.181395][T10238] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 210.189801][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.290425][T10246] __nla_validate_parse: 1 callbacks suppressed [ 210.290444][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.891'. [ 210.531909][ T8192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.583738][ T9845] veth0_vlan: entered promiscuous mode [ 210.671537][ T8192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.856615][ T8192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.949383][ T9845] veth1_vlan: entered promiscuous mode [ 211.061932][ T8192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.293095][ T9845] veth0_macvtap: entered promiscuous mode [ 211.332365][ T9845] veth1_macvtap: entered promiscuous mode [ 211.392611][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.443292][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.482747][ T9845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.525225][ T9845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.538954][ T9845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.566876][ T9845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.790530][ T8192] bridge_slave_1: left allmulticast mode [ 211.797673][ T8192] bridge_slave_1: left promiscuous mode [ 211.810771][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.823968][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.826322][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.840095][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.850171][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.863596][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.864537][ T8192] bridge_slave_0: left allmulticast mode [ 211.896340][ T8192] bridge_slave_0: left promiscuous mode [ 211.906741][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.636566][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.660334][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.685319][ T8192] bond0 (unregistering): Released all slaves [ 212.828967][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.837785][T10280] vxcan1 speed is unknown, defaulting to 1000 [ 212.844387][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.869571][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.883632][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.892855][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.905969][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.962503][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.187432][T10313] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 213.225698][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.258202][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.326666][T10307] vxcan1 speed is unknown, defaulting to 1000 [ 213.422650][T10326] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.901'. [ 213.796481][T10338] netlink: 'syz.6.903': attribute type 10 has an invalid length. [ 213.883156][T10338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.933068][T10338] team0: Port device bond0 added [ 214.033442][T10336] vxcan1 speed is unknown, defaulting to 1000 [ 214.395183][ T8192] hsr_slave_0: left promiscuous mode [ 214.401622][ T8192] hsr_slave_1: left promiscuous mode [ 214.407645][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.417022][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.425539][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.433603][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.455305][ T8192] veth1_macvtap: left promiscuous mode [ 214.461920][ T8192] veth0_macvtap: left promiscuous mode [ 214.467530][ T8192] veth1_vlan: left promiscuous mode [ 214.473651][ T8192] veth0_vlan: left promiscuous mode [ 214.931420][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 215.009267][ T5852] Bluetooth: hci5: command tx timeout [ 215.015599][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 215.288972][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.298377][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.309136][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.330418][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.347676][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.600343][T10346] ip6gre1: entered allmulticast mode [ 215.623035][T10280] chnl_net:caif_netlink_parms(): no params data found [ 215.744059][T10354] xt_l2tp: v2 doesn't support IP mode [ 215.815369][T10347] vxcan1 speed is unknown, defaulting to 1000 [ 216.314298][T10280] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.358868][T10280] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.366164][T10280] bridge_slave_0: entered allmulticast mode [ 216.441214][T10280] bridge_slave_0: entered promiscuous mode [ 216.464976][T10280] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.478396][T10280] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.491904][T10280] bridge_slave_1: entered allmulticast mode [ 216.556828][T10280] bridge_slave_1: entered promiscuous mode [ 216.649195][T10280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.746416][T10280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.783749][T10307] chnl_net:caif_netlink_parms(): no params data found [ 216.842905][T10280] team0: Port device team_slave_0 added [ 216.887447][T10386] raw_sendmsg: syz.0.910 forgot to set AF_INET. Fix it! [ 216.892769][T10280] team0: Port device team_slave_1 added [ 217.015351][T10280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.033282][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.100092][ T5854] Bluetooth: hci5: command tx timeout [ 217.101988][T10280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.198408][T10280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.219529][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.255445][T10280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.383313][ T8192] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.414667][ T5854] Bluetooth: hci2: command tx timeout [ 217.539280][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 217.700217][ T8192] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.736062][T10421] sctp: [Deprecated]: syz.6.914 (pid 10421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.736062][T10421] Use struct sctp_sack_info instead [ 217.784697][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.803754][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.811397][T10307] bridge_slave_0: entered allmulticast mode [ 217.820127][T10307] bridge_slave_0: entered promiscuous mode [ 217.877538][T10280] hsr_slave_0: entered promiscuous mode [ 217.885430][T10280] hsr_slave_1: entered promiscuous mode [ 217.897095][T10280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.922240][T10280] Cannot create hsr debugfs directory [ 217.951788][ T8192] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.996327][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.006468][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.013906][T10307] bridge_slave_1: entered allmulticast mode [ 218.022974][T10307] bridge_slave_1: entered promiscuous mode [ 218.115302][ T8192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.215752][T10434] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.229858][T10347] chnl_net:caif_netlink_parms(): no params data found [ 218.264951][T10307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.290075][T10307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.341158][T10437] xt_hashlimit: size too large, truncated to 1048576 [ 218.503652][T10444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.644311][T10307] team0: Port device team_slave_0 added [ 218.724788][T10453] netlink: 'syz.0.921': attribute type 7 has an invalid length. [ 218.797712][T10307] team0: Port device team_slave_1 added [ 219.063916][T10307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.092687][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.134554][T10475] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 219.150648][T10475] netlink: 'syz.0.924': attribute type 2 has an invalid length. [ 219.158597][T10307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.184812][ T5854] Bluetooth: hci5: command tx timeout [ 219.262854][T10307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.270212][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.296711][T10307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.489404][ T5854] Bluetooth: hci2: command tx timeout [ 219.720765][T10347] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.735747][T10347] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.762958][T10347] bridge_slave_0: entered allmulticast mode [ 219.774537][T10347] bridge_slave_0: entered promiscuous mode [ 219.807707][T10494] netlink: 'syz.0.929': attribute type 12 has an invalid length. [ 219.819305][T10494] netlink: 'syz.0.929': attribute type 29 has an invalid length. [ 219.827078][T10494] netlink: 148 bytes leftover after parsing attributes in process `syz.0.929'. [ 219.836461][T10494] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 219.845805][T10494] netlink: 47 bytes leftover after parsing attributes in process `syz.0.929'. [ 219.888598][T10347] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.906714][T10347] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.920323][T10347] bridge_slave_1: entered allmulticast mode [ 219.928299][T10347] bridge_slave_1: entered promiscuous mode [ 219.992379][ T8192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.004494][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.931'. [ 220.026943][T10307] hsr_slave_0: entered promiscuous mode [ 220.039382][T10307] hsr_slave_1: entered promiscuous mode [ 220.046230][T10307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.057734][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.931'. [ 220.066715][T10307] Cannot create hsr debugfs directory [ 220.192046][ T8192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.364993][T10347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.430266][T10347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.482306][ T8192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.683558][T10535] No such timeout policy "syz0" [ 220.775321][ T8192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.826069][T10347] team0: Port device team_slave_0 added [ 220.842856][T10347] team0: Port device team_slave_1 added [ 221.021522][T10543] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 221.040123][T10543] macsec1: entered allmulticast mode [ 221.059336][T10543] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 221.102337][T10543] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 221.113310][T10543] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 221.175546][T10347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.198769][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.254165][ T5854] Bluetooth: hci5: command tx timeout [ 221.257282][T10347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.381073][T10347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.389564][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.416948][T10347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.569889][ T5854] Bluetooth: hci2: command tx timeout [ 221.629849][T10347] hsr_slave_0: entered promiscuous mode [ 221.638605][T10347] hsr_slave_1: entered promiscuous mode [ 221.645532][T10347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.653362][T10347] Cannot create hsr debugfs directory [ 221.741943][ T8192] bridge_slave_1: left allmulticast mode [ 221.747910][ T8192] bridge_slave_1: left promiscuous mode [ 221.761894][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.777993][ T8192] bridge_slave_0: left allmulticast mode [ 221.785146][ T8192] bridge_slave_0: left promiscuous mode [ 221.791255][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.803438][ T8192] bridge_slave_1: left allmulticast mode [ 221.809368][ T8192] bridge_slave_1: left promiscuous mode [ 221.815116][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.835281][ T8192] bridge_slave_0: left allmulticast mode [ 221.844886][ T8192] bridge_slave_0: left promiscuous mode [ 221.854526][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.522052][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.537064][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.548334][ T8192] bond0 (unregistering): Released all slaves [ 222.844514][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.856029][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.866408][ T8192] bond0 (unregistering): Released all slaves [ 223.050806][T10280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.083191][T10280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.101536][T10280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.205318][T10280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.549208][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 223.585865][T10615] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 223.652768][ T5854] Bluetooth: hci2: command tx timeout [ 223.932476][T10280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.188509][T10280] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.279569][T10641] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.955'. [ 224.334630][T10645] veth1_macvtap: left promiscuous mode [ 224.372835][T10645] macsec0: entered promiscuous mode [ 224.378093][T10645] macsec0: entered allmulticast mode [ 224.457367][T10307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.523602][T10652] netlink: 104 bytes leftover after parsing attributes in process `syz.0.956'. [ 224.534843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.542061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.652448][T10307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.694588][T10307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.729716][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.736940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.823695][ T8192] hsr_slave_0: left promiscuous mode [ 224.843655][ T8192] hsr_slave_1: left promiscuous mode [ 224.860468][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.868072][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.883389][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.891644][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.914668][ T8192] hsr_slave_0: left promiscuous mode [ 224.930876][ T8192] hsr_slave_1: left promiscuous mode [ 224.936982][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.946002][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.954557][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.962880][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.975074][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.958'. [ 225.014457][ T8192] veth1_macvtap: left promiscuous mode [ 225.020187][ T8192] veth0_macvtap: left promiscuous mode [ 225.025774][ T8192] veth1_vlan: left promiscuous mode [ 225.031422][ T8192] veth0_vlan: left promiscuous mode [ 225.048077][ T8192] veth1_macvtap: left promiscuous mode [ 225.054716][ T8192] veth0_macvtap: left promiscuous mode [ 225.061106][ T8192] veth1_vlan: left promiscuous mode [ 225.066471][ T8192] veth0_vlan: left promiscuous mode [ 225.678208][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 225.723031][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 226.456898][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 226.498301][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 226.882553][T10307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.986166][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 227.107799][T10675] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 227.265028][T10280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.275991][T10280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.751718][T10347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.793513][T10347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.803160][T10706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.843553][T10307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.932175][T10307] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.989621][T10347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.001270][T10347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.021791][T10707] netlink: 'syz.0.966': attribute type 3 has an invalid length. [ 228.039354][T10707] netlink: 'syz.0.966': attribute type 3 has an invalid length. [ 228.048132][T10709] netlink: 'syz.0.966': attribute type 3 has an invalid length. [ 228.063283][T10709] netlink: 'syz.0.966': attribute type 3 has an invalid length. [ 228.123737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.130951][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.193051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.200258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.260418][T10280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.281221][T10728] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.970'. [ 228.319429][T10728] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 228.371542][T10731] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 228.652432][T10745] : renamed from veth0_vlan [ 228.737180][T10347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.855382][T10347] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.922666][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.929863][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.000465][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.007645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.245780][T10307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.382944][T10280] veth0_vlan: entered promiscuous mode [ 229.415245][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'. [ 229.441982][T10280] veth1_vlan: entered promiscuous mode [ 229.479640][T10307] veth0_vlan: entered promiscuous mode [ 229.536505][T10307] veth1_vlan: entered promiscuous mode [ 229.585632][T10280] veth0_macvtap: entered promiscuous mode [ 229.627586][T10280] veth1_macvtap: entered promiscuous mode [ 229.681495][T10307] veth0_macvtap: entered promiscuous mode [ 229.718503][T10307] veth1_macvtap: entered promiscuous mode [ 229.752571][T10280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.776673][T10280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.794988][T10280] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.805696][T10280] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.820272][T10280] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.829532][T10280] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.850936][T10307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.885714][T10307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.914661][T10347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.933785][T10307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.943129][T10307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.973381][T10307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.011074][T10307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.270445][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.283467][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.332317][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.346243][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.414709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.430403][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.497578][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.527181][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.964449][ T8192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.054921][T10347] veth0_vlan: entered promiscuous mode [ 231.134392][ T8192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.217442][T10347] veth1_vlan: entered promiscuous mode [ 231.303414][ T8192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.467157][ T8192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.500856][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'. [ 231.510913][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 231.554978][T10347] veth0_macvtap: entered promiscuous mode [ 231.572397][T10827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.774824][T10347] veth1_macvtap: entered promiscuous mode [ 231.843236][T10347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.894002][T10347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.926532][T10347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.948809][T10347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.957577][T10347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.984974][T10347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.036001][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.051200][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.059460][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.067957][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.077802][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.256558][ T8192] bridge_slave_1: left allmulticast mode [ 232.263928][ T8192] bridge_slave_1: left promiscuous mode [ 232.275611][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.284976][ T8192] bridge_slave_0: left allmulticast mode [ 232.294687][ T8192] bridge_slave_0: left promiscuous mode [ 232.300996][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.735442][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.736590][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.758240][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.758483][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.766448][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.783934][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.785631][ T8192] bond0 (unregistering): Released all slaves [ 232.791674][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.807863][T10838] vxcan1 speed is unknown, defaulting to 1000 [ 232.893118][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.922362][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.192534][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.206606][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.390809][T10846] vxcan1 speed is unknown, defaulting to 1000 [ 233.620987][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 233.987339][T10883] netlink: 'syz.6.991': attribute type 39 has an invalid length. [ 234.130770][ T5852] Bluetooth: hci0: command tx timeout [ 234.471821][T10838] chnl_net:caif_netlink_parms(): no params data found [ 234.602561][ T8192] hsr_slave_0: left promiscuous mode [ 234.615032][ T8192] hsr_slave_1: left promiscuous mode [ 234.626355][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.634057][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.645637][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.655932][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.685053][ T8192] veth1_macvtap: left promiscuous mode [ 234.695142][ T8192] veth0_macvtap: left promiscuous mode [ 234.703893][ T8192] veth1_vlan: left promiscuous mode [ 234.709391][ T8192] veth0_vlan: left promiscuous mode [ 234.849487][ T5852] Bluetooth: hci5: command tx timeout [ 235.128552][T10906] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.128873][ T5923] IPVS: starting estimator thread 0... [ 235.269015][T10909] IPVS: using max 29 ests per chain, 69600 per kthread [ 235.291188][T10916] netlink: 596 bytes leftover after parsing attributes in process `syz.0.992'. [ 235.303330][T10916] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 235.755769][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.765426][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.775936][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.794523][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.810692][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.004939][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 236.045800][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 236.212934][ T5852] Bluetooth: hci0: command tx timeout [ 236.640104][T10935] vxcan1 speed is unknown, defaulting to 1000 [ 236.645270][T10949] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 236.656179][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.669781][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.677057][T10838] bridge_slave_0: entered allmulticast mode [ 236.722264][T10838] bridge_slave_0: entered promiscuous mode [ 236.743229][T10838] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.765450][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.785437][T10838] bridge_slave_1: entered allmulticast mode [ 236.830903][T10838] bridge_slave_1: entered promiscuous mode [ 236.929376][ T5852] Bluetooth: hci5: command tx timeout [ 237.045644][T10966] netlink: 'syz.6.999': attribute type 33 has an invalid length. [ 237.072288][T10966] netlink: 152 bytes leftover after parsing attributes in process `syz.6.999'. [ 237.083608][T10838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.275390][T10838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.305186][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 237.396919][T10955] syzkaller1: entered promiscuous mode [ 237.406622][T10955] syzkaller1: entered allmulticast mode [ 237.575225][T10838] team0: Port device team_slave_0 added [ 237.612639][T10838] team0: Port device team_slave_1 added [ 237.693375][T10838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.705875][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.737128][T10838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.776038][T10846] chnl_net:caif_netlink_parms(): no params data found [ 237.813796][T10838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.825943][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.859789][T10838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.889309][ T5854] Bluetooth: hci2: command tx timeout [ 237.988201][ T8192] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.060850][ T8192] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.289494][ T5854] Bluetooth: hci0: command tx timeout [ 238.311688][ T8192] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.460923][T10838] hsr_slave_0: entered promiscuous mode [ 238.478165][T10838] hsr_slave_1: entered promiscuous mode [ 238.492153][T10838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.503542][T10838] Cannot create hsr debugfs directory [ 238.577039][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.593839][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.603108][T10846] bridge_slave_0: entered allmulticast mode [ 238.621174][T10846] bridge_slave_0: entered promiscuous mode [ 238.662361][ T8192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.738325][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.756402][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.766781][T10846] bridge_slave_1: entered allmulticast mode [ 238.789387][T10846] bridge_slave_1: entered promiscuous mode [ 238.849453][T11028] ipvlan0: entered promiscuous mode [ 238.854919][T11028] ipvlan0: entered allmulticast mode [ 238.860749][T11028] : entered allmulticast mode [ 239.003919][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.021340][ T5854] Bluetooth: hci5: command tx timeout [ 239.037523][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.047407][T10935] chnl_net:caif_netlink_parms(): no params data found [ 239.069865][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 239.194346][T10846] team0: Port device team_slave_0 added [ 239.213657][T10846] team0: Port device team_slave_1 added [ 239.233517][T11042] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 239.335796][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.343004][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.373728][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.486537][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.497561][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.529608][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.610941][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.618318][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.626150][T10935] bridge_slave_0: entered allmulticast mode [ 239.634432][T10935] bridge_slave_0: entered promiscuous mode [ 239.733784][ T8192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.765651][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.775992][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.791975][T10935] bridge_slave_1: entered allmulticast mode [ 239.816134][T10935] bridge_slave_1: entered promiscuous mode [ 239.899557][ T8192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.969011][ T5854] Bluetooth: hci2: command tx timeout [ 240.181145][T10846] hsr_slave_0: entered promiscuous mode [ 240.188024][T10846] hsr_slave_1: entered promiscuous mode [ 240.196546][T10846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.204439][T10846] Cannot create hsr debugfs directory [ 240.354548][T10935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.369589][ T5854] Bluetooth: hci0: command tx timeout [ 240.410495][ T8192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.466847][T10935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.628061][ T8192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.796724][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.818296][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.853265][T10935] team0: Port device team_slave_0 added [ 240.864664][T11093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.906090][T11094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.923400][T10935] team0: Port device team_slave_1 added [ 241.005393][T10935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.029440][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.074037][T10935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.091136][ T5854] Bluetooth: hci5: command tx timeout [ 241.124528][T10935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.141539][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.170338][T10935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.362017][T10935] hsr_slave_0: entered promiscuous mode [ 241.368351][T10935] hsr_slave_1: entered promiscuous mode [ 241.388968][T10935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.396697][T10935] Cannot create hsr debugfs directory [ 241.514965][T11110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1023'. [ 241.621150][ T8192] bridge_slave_1: left allmulticast mode [ 241.627235][ T8192] bridge_slave_1: left promiscuous mode [ 241.635918][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 241.640849][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.645032][T11113] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 241.664053][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.664504][ T8192] bridge_slave_0: left allmulticast mode [ 241.680237][ T8192] bridge_slave_0: left promiscuous mode [ 241.685995][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.697048][ T8192] bridge_slave_1: left allmulticast mode [ 241.703059][ T8192] bridge_slave_1: left promiscuous mode [ 241.709744][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.719394][ T8192] bridge_slave_0: left allmulticast mode [ 241.725039][ T8192] bridge_slave_0: left promiscuous mode [ 241.734517][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.790735][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1024'. [ 242.049419][ T5854] Bluetooth: hci2: command tx timeout [ 242.092025][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.103040][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.114518][ T8192] bond0 (unregistering): Released all slaves [ 242.403371][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.414398][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.425896][ T8192] bond0 (unregistering): Released all slaves [ 242.485264][T10838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.516701][T10838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.665392][T10838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.776531][T10838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.777346][T11125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1027'. [ 243.071642][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 243.534914][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1034'. [ 243.545283][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1034'. [ 243.555043][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 243.565193][T11157] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.1033'. [ 243.688930][T10838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.803578][T10838] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.834292][T10846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.895984][T10846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.933315][T10846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.003586][ T8192] hsr_slave_0: left promiscuous mode [ 244.025207][ T8192] hsr_slave_1: left promiscuous mode [ 244.033280][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.047556][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.076710][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.093224][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.115517][ T8192] hsr_slave_0: left promiscuous mode [ 244.124230][ T8192] hsr_slave_1: left promiscuous mode [ 244.131847][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.138964][ T5854] Bluetooth: hci2: command tx timeout [ 244.144490][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.152647][ T8192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.160694][ T8192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.199410][ T8192] veth1_macvtap: left promiscuous mode [ 244.204955][ T8192] veth0_macvtap: left promiscuous mode [ 244.211100][ T8192] veth1_vlan: left promiscuous mode [ 244.216550][ T8192] veth0_vlan: left promiscuous mode [ 244.224819][ T8192] veth1_macvtap: left promiscuous mode [ 244.230947][ T8192] veth0_macvtap: left promiscuous mode [ 244.236579][ T8192] veth1_vlan: left promiscuous mode [ 244.242420][ T8192] veth0_vlan: left promiscuous mode [ 244.815216][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 244.861031][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 245.599162][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 245.642230][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 246.023469][T10846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.070329][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.077507][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.191087][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.198259][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.446761][T10838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.736086][T11202] netlink: 'syz.0.1046': attribute type 21 has an invalid length. [ 246.759326][T11202] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.793216][T10935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.892691][T10935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.938926][T10935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.973729][T10935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.070719][T11215] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1048'. [ 247.134003][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.206046][T10838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.374090][T10846] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.396894][T10935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.426205][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 247.443895][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.451210][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.487041][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.494257][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.536830][T10935] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.653288][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.660585][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.725266][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.732476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.174572][T10838] veth0_vlan: entered promiscuous mode [ 248.210479][T10838] veth1_vlan: entered promiscuous mode [ 248.258410][T11246] macsec0: left promiscuous mode [ 248.264872][T11246] macsec0: left allmulticast mode [ 248.310695][T10838] veth0_macvtap: entered promiscuous mode [ 248.332746][T10838] veth1_macvtap: entered promiscuous mode [ 248.415680][T10838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.423017][T11251] xt_l2tp: v2 tid > 0xffff: 150994944 [ 248.467466][T11251] netlink: 'syz.0.1054': attribute type 6 has an invalid length. [ 248.486413][T10838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.524231][T10838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.535912][T10838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.546245][T10838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.562484][T10838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.585865][T11255] netlink: 'syz.0.1055': attribute type 24 has an invalid length. [ 248.608050][T10846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.668510][T10935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.785711][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.796937][T10846] veth0_vlan: entered promiscuous mode [ 248.818499][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.853343][T10846] veth1_vlan: entered promiscuous mode [ 248.891767][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.913112][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.007009][T10846] veth0_macvtap: entered promiscuous mode [ 249.059789][T10846] veth1_macvtap: entered promiscuous mode [ 249.161483][T10846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.307251][T11275] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 249.502139][T10846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.683618][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.802233][T10846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.832072][T10846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.864589][T10846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.880356][T10846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.985420][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.165293][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.286072][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.411016][T10935] veth0_vlan: entered promiscuous mode [ 250.449834][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.469425][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.547573][T10935] veth1_vlan: entered promiscuous mode [ 250.605054][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.647415][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.844241][T11308] IPVS: Error connecting to the multicast addr [ 250.877802][T10935] veth0_macvtap: entered promiscuous mode [ 250.920739][ T49] bridge_slave_1: left allmulticast mode [ 250.926447][ T49] bridge_slave_1: left promiscuous mode [ 250.957659][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.021896][ T49] bridge_slave_0: left allmulticast mode [ 251.040451][ T49] bridge_slave_0: left promiscuous mode [ 251.047445][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.402942][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.424683][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.434805][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.449530][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.464910][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.782464][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.797825][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.809228][ T49] bond0 (unregistering): Released all slaves [ 251.966282][T10935] veth1_macvtap: entered promiscuous mode [ 252.229261][T10935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.236657][T11325] vxcan1 speed is unknown, defaulting to 1000 [ 252.393147][T10935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.417168][T10935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.449402][T10935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.458152][T10935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.479977][T10935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.803447][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.817434][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.956782][ T49] hsr_slave_0: left promiscuous mode [ 252.965652][ T49] hsr_slave_1: left promiscuous mode [ 252.971753][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.979341][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.987608][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.995407][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.017454][ T49] veth1_macvtap: left promiscuous mode [ 253.023049][ T49] veth0_macvtap: left promiscuous mode [ 253.029094][ T49] veth1_vlan: left promiscuous mode [ 253.034456][ T49] veth0_vlan: left promiscuous mode [ 253.570458][ T5854] Bluetooth: hci0: command tx timeout [ 253.597385][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 253.608368][T11368] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 253.625394][T11368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.628300][ T49] team0 (unregistering): Port device team_slave_1 removed [ 253.737452][ T49] team0 (unregistering): Port device team_slave_0 removed [ 253.796267][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.806402][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.819860][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.829080][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.841979][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.425252][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.441273][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.508915][T11374] vxcan1 speed is unknown, defaulting to 1000 [ 254.569840][T11383] netlink: 'syz.0.1070': attribute type 11 has an invalid length. [ 254.602275][T11383] netlink: 'syz.0.1070': attribute type 11 has an invalid length. [ 254.611720][T11383] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1070'. [ 254.902917][T11325] chnl_net:caif_netlink_parms(): no params data found [ 255.423912][T11325] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.448942][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.456233][T11325] bridge_slave_0: entered allmulticast mode [ 255.481136][T11325] bridge_slave_0: entered promiscuous mode [ 255.584907][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.613126][T11325] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.620660][T11325] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.627913][T11325] bridge_slave_1: entered allmulticast mode [ 255.642733][T11325] bridge_slave_1: entered promiscuous mode [ 255.648774][ T5852] Bluetooth: hci0: command tx timeout [ 255.737146][T11325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.760216][T11325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.823105][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.829783][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.849699][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.893929][ T5852] Bluetooth: hci5: command tx timeout [ 255.935058][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.954564][T11325] team0: Port device team_slave_0 added [ 255.986607][T11325] team0: Port device team_slave_1 added [ 256.028138][T11325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.035173][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.062788][T11325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.087020][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.113025][T11325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.120711][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.148528][T11325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.224968][T11325] hsr_slave_0: entered promiscuous mode [ 256.233510][T11325] hsr_slave_1: entered promiscuous mode [ 256.240195][T11325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.247747][T11325] Cannot create hsr debugfs directory [ 256.492968][T11374] chnl_net:caif_netlink_parms(): no params data found [ 256.612691][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.646436][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1079'. [ 256.781786][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.049213][T11446] netlink: 'syz.6.1079': attribute type 1 has an invalid length. [ 257.079898][T11453] openvswitch: netlink: Actions may not be safe on all matching packets [ 257.158478][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.172827][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.186367][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.203162][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.220581][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.228287][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.305205][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.405771][T11461] tipc: Started in network mode [ 257.411084][T11461] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 257.430984][T11461] tipc: Enabled bearer , priority 10 [ 257.579899][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.587139][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.600065][T11374] bridge_slave_0: entered allmulticast mode [ 257.612693][T11374] bridge_slave_0: entered promiscuous mode [ 257.699338][T11456] vxcan1 speed is unknown, defaulting to 1000 [ 257.705594][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.713985][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.722643][T11374] bridge_slave_1: entered allmulticast mode [ 257.734489][ T5852] Bluetooth: hci0: command tx timeout [ 257.742354][T11374] bridge_slave_1: entered promiscuous mode [ 257.789473][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1084'. [ 257.908475][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.970476][ T5852] Bluetooth: hci5: command tx timeout [ 257.994109][T11481] x_tables: duplicate underflow at hook 1 [ 258.105968][T11484] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 258.112708][T11484] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 258.125925][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.345387][T11374] team0: Port device team_slave_0 added [ 258.548888][ T5997] tipc: Node number set to 4269801514 [ 258.563194][T11374] team0: Port device team_slave_1 added [ 258.619031][ T49] bridge_slave_1: left allmulticast mode [ 258.624731][ T49] bridge_slave_1: left promiscuous mode [ 258.643798][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.656716][ T49] bridge_slave_0: left allmulticast mode [ 258.662957][ T49] bridge_slave_0: left promiscuous mode [ 258.669188][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.683848][ T49] bridge_slave_1: left allmulticast mode [ 258.690466][ T49] bridge_slave_1: left promiscuous mode [ 258.697097][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.707474][ T49] bridge_slave_0: left allmulticast mode [ 258.722125][ T49] bridge_slave_0: left promiscuous mode [ 258.727900][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.182996][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.194689][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.204999][ T49] bond0 (unregistering): Released all slaves [ 259.329114][ T5852] Bluetooth: hci2: command tx timeout [ 259.547583][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.567116][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.578886][ T49] bond0 (unregistering): Released all slaves [ 259.673405][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.690039][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.732442][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.809183][ T5852] Bluetooth: hci0: command tx timeout [ 259.836341][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.844046][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.871730][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.049009][ T5852] Bluetooth: hci5: command tx timeout [ 260.225408][T11534] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 260.266135][T11534] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1095'. [ 260.285494][T11534] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 260.360779][T11374] hsr_slave_0: entered promiscuous mode [ 260.382249][T11374] hsr_slave_1: entered promiscuous mode [ 260.403301][T11374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.420903][T11374] Cannot create hsr debugfs directory [ 260.475244][T11544] ipt_ECN: cannot use operation on non-tcp rule [ 260.527654][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1099'. [ 260.630867][T11552] netlink: 'syz.6.1100': attribute type 29 has an invalid length. [ 260.660110][T11550] macvtap1: entered promiscuous mode [ 260.672545][T11550] vlan0: entered promiscuous mode [ 260.677998][T11550] macvtap1: entered allmulticast mode [ 260.686521][T11550] vlan0: entered allmulticast mode [ 260.775419][T11325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.913168][T11557] netlink: 'syz.6.1100': attribute type 29 has an invalid length. [ 260.924199][T11325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.025861][T11325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.071859][T11456] chnl_net:caif_netlink_parms(): no params data found [ 261.114221][T11325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.125082][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1103'. [ 261.242928][T11570] macvlan2: entered promiscuous mode [ 261.262743][T11570] macvlan2: entered allmulticast mode [ 261.274677][T11570] batadv0: entered promiscuous mode [ 261.284820][T11570] batadv0: entered allmulticast mode [ 261.307356][T11570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.337683][T11570] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 261.411813][ T5852] Bluetooth: hci2: command tx timeout [ 261.475327][T11573] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.646379][T11572] vlan3: entered allmulticast mode [ 261.653437][T11572] veth1: entered allmulticast mode [ 261.793326][ T49] hsr_slave_0: left promiscuous mode [ 261.806605][ T49] hsr_slave_1: left promiscuous mode [ 261.815120][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.826487][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.851358][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.865081][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.885507][ T49] hsr_slave_0: left promiscuous mode [ 261.896697][ T49] hsr_slave_1: left promiscuous mode [ 261.903159][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.911564][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.923411][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.948823][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.003011][ T49] veth1_macvtap: left promiscuous mode [ 262.008939][ T49] veth0_macvtap: left promiscuous mode [ 262.014722][ T49] veth1_vlan: left promiscuous mode [ 262.020195][ T49] veth0_vlan: left promiscuous mode [ 262.026802][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 262.040296][ T49] veth1_macvtap: left promiscuous mode [ 262.045967][ T49] veth0_macvtap: left promiscuous mode [ 262.052329][ T49] veth1_vlan: left promiscuous mode [ 262.057814][ T49] veth0_vlan: left promiscuous mode [ 262.134600][ T5852] Bluetooth: hci5: command tx timeout [ 262.713289][ T49] team0 (unregistering): Port device team_slave_1 removed [ 262.758326][ T49] team0 (unregistering): Port device team_slave_0 removed [ 263.495463][ T49] team0 (unregistering): Port device team_slave_1 removed [ 263.499140][ T5852] Bluetooth: hci2: command tx timeout [ 263.541153][ T49] team0 (unregistering): Port device team_slave_0 removed [ 263.942585][T11606] veth1_macvtap: entered promiscuous mode [ 264.048742][T11607] veth0_macvtap (unregistering): left allmulticast mode [ 264.058357][T11612] netlink: 'syz.0.1112': attribute type 11 has an invalid length. [ 264.161898][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.189084][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.196610][T11456] bridge_slave_0: entered allmulticast mode [ 264.205428][T11456] bridge_slave_0: entered promiscuous mode [ 264.245987][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.262270][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.275502][T11615] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 264.284497][T11456] bridge_slave_1: entered allmulticast mode [ 264.293553][T11456] bridge_slave_1: entered promiscuous mode [ 264.413047][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.497694][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.801563][T11456] team0: Port device team_slave_0 added [ 264.835862][T11456] team0: Port device team_slave_1 added [ 265.086705][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.108970][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.137861][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.154606][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.161944][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.188495][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.325112][T11325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.341560][T11641] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1117'. [ 265.541498][T11641] team0: Port device bond0 removed [ 265.554783][T11641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.570858][ T5852] Bluetooth: hci2: command tx timeout [ 265.578262][T11641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.598289][T11641] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 265.617824][T11641] batadv0: left allmulticast mode [ 265.624675][T11641] batadv0: left promiscuous mode [ 265.638083][T11641] bond0 (unregistering): Released all slaves [ 265.793061][T11456] hsr_slave_0: entered promiscuous mode [ 265.800068][T11456] hsr_slave_1: entered promiscuous mode [ 265.806450][T11456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.835552][T11456] Cannot create hsr debugfs directory [ 265.899491][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.997594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.004821][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.061694][T11660] batadv0: entered promiscuous mode [ 266.074883][T11665] netlink: 'syz.0.1119': attribute type 4 has an invalid length. [ 266.085044][T11660] batadv0: left promiscuous mode [ 266.127243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.134472][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.228226][T11374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.240545][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 266.353033][T11374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.429044][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1121'. [ 266.467677][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 266.496217][T11374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.505757][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 266.531045][T11374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.780294][T11689] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 266.800216][T11690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.809914][T11694] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 266.855493][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 267.237876][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.365821][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.413779][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.421101][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.482421][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.489606][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.555408][T11719] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 267.565070][T11719] tipc: Enabled bearer , priority 10 [ 267.610828][T11721] tipc: Enabling of bearer rejected, already enabled [ 267.756359][T11325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.878318][T11456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.933245][T11734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.946671][T11737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.962895][T11456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.997462][T11456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.057080][T11456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.433582][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.502652][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.540487][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.637923][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.645228][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.714014][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.721244][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.818054][T11325] veth0_vlan: entered promiscuous mode [ 268.854082][T11325] veth1_vlan: entered promiscuous mode [ 268.886997][T11374] veth0_vlan: entered promiscuous mode [ 268.987980][T11374] veth1_vlan: entered promiscuous mode [ 269.044534][T11325] veth0_macvtap: entered promiscuous mode [ 269.065386][T11325] veth1_macvtap: entered promiscuous mode [ 269.137379][T11325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.285785][T11325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.345671][T11325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.366652][T11779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 269.377731][T11325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.401034][T11325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.421745][T11325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.468169][T11374] veth0_macvtap: entered promiscuous mode [ 269.761488][T11374] veth1_macvtap: entered promiscuous mode [ 269.904154][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.966056][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.070536][T11374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.084505][T11374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.096379][T11374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.105658][T11374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.161336][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.184867][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.377143][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.422643][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.474846][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.507530][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.555895][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.671730][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.703519][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.203494][ T2980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.393012][ T2980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.589668][ T2980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.648352][T11456] veth0_vlan: entered promiscuous mode [ 271.736412][ T2980] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.796813][T11456] veth1_vlan: entered promiscuous mode [ 271.939788][T11456] veth0_macvtap: entered promiscuous mode [ 272.091449][T11456] veth1_macvtap: entered promiscuous mode [ 272.173158][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.196155][ T2980] bridge_slave_1: left allmulticast mode [ 272.203365][ T2980] bridge_slave_1: left promiscuous mode [ 272.209942][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.230983][ T2980] bridge_slave_0: left allmulticast mode [ 272.236687][ T2980] bridge_slave_0: left promiscuous mode [ 272.259012][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.326746][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.336262][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.344246][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.354279][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.362110][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.906062][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.917690][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.930537][ T2980] bond0 (unregistering): Released all slaves [ 272.951447][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.007561][T11456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.008475][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.017596][T11456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.045188][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.046456][T11456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.062263][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.062534][T11456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.097323][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.109313][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.335784][T11846] vxcan1 speed is unknown, defaulting to 1000 [ 273.747555][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.780691][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.889523][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.897395][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.100027][T11863] vxcan1 speed is unknown, defaulting to 1000 [ 274.196789][T11899] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1153'. [ 274.455450][ T5854] Bluetooth: hci0: command tx timeout [ 274.927979][T11846] chnl_net:caif_netlink_parms(): no params data found [ 275.169702][ T5852] Bluetooth: hci5: command tx timeout [ 275.262666][ T2980] hsr_slave_0: left promiscuous mode [ 275.270342][ T2980] hsr_slave_1: left promiscuous mode [ 275.283455][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.319528][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.345382][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.364644][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.405991][ T2980] veth1_macvtap: left promiscuous mode [ 275.415042][ T2980] veth0_macvtap: left promiscuous mode [ 275.421759][ T2980] veth1_vlan: left promiscuous mode [ 275.434565][ T2980] veth0_vlan: left promiscuous mode [ 276.102182][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 276.180514][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 276.209574][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.233479][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.243191][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.261852][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.280298][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.540107][ T5852] Bluetooth: hci0: command tx timeout [ 276.684371][T11939] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 276.814256][T11950] netlink: 'syz.6.1159': attribute type 1 has an invalid length. [ 276.862727][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 276.874007][T11950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.996571][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.006516][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.015591][T11846] bridge_slave_0: entered allmulticast mode [ 277.027711][T11846] bridge_slave_0: entered promiscuous mode [ 277.052227][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.064981][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.074829][T11846] bridge_slave_1: entered allmulticast mode [ 277.086036][T11846] bridge_slave_1: entered promiscuous mode [ 277.246387][T11846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.257972][ T5852] Bluetooth: hci5: command tx timeout [ 277.277490][T11944] vxcan1 speed is unknown, defaulting to 1000 [ 277.367397][T11846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.442423][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1162'. [ 277.645923][T11846] team0: Port device team_slave_0 added [ 277.673451][T11863] chnl_net:caif_netlink_parms(): no params data found [ 277.729783][T11846] team0: Port device team_slave_1 added [ 277.799598][T11993] FAULT_INJECTION: forcing a failure. [ 277.799598][T11993] name failslab, interval 1, probability 0, space 0, times 1 [ 277.840881][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.6.1164 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 277.840909][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.840926][T11993] Call Trace: [ 277.840937][T11993] [ 277.840945][T11993] dump_stack_lvl+0x189/0x250 [ 277.840975][T11993] ? __pfx____ratelimit+0x10/0x10 [ 277.840999][T11993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.841022][T11993] ? __pfx__printk+0x10/0x10 [ 277.841056][T11993] should_fail_ex+0x414/0x560 [ 277.841082][T11993] should_failslab+0xa8/0x100 [ 277.841103][T11993] kmem_cache_alloc_noprof+0x73/0x3c0 [ 277.841127][T11993] ? skb_clone+0x212/0x3a0 [ 277.841154][T11993] skb_clone+0x212/0x3a0 [ 277.841178][T11993] __netlink_deliver_tap+0x404/0x850 [ 277.841212][T11993] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.841233][T11993] netlink_deliver_tap+0x19c/0x1b0 [ 277.841254][T11993] netlink_sendskb+0x68/0x140 [ 277.841274][T11993] netlink_rcv_skb+0x28c/0x470 [ 277.841294][T11993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.841320][T11993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.841354][T11993] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.841371][T11993] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.841396][T11993] netlink_unicast+0x758/0x8d0 [ 277.841425][T11993] netlink_sendmsg+0x805/0xb30 [ 277.841455][T11993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.841477][T11993] ? aa_sock_msg_perm+0x94/0x160 [ 277.841499][T11993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.841519][T11993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.841539][T11993] __sock_sendmsg+0x219/0x270 [ 277.841566][T11993] ____sys_sendmsg+0x505/0x830 [ 277.841593][T11993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.841624][T11993] ? import_iovec+0x74/0xa0 [ 277.841645][T11993] ___sys_sendmsg+0x21f/0x2a0 [ 277.841668][T11993] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.841727][T11993] ? __fget_files+0x2a/0x420 [ 277.841745][T11993] ? __fget_files+0x3a0/0x420 [ 277.841773][T11993] __x64_sys_sendmsg+0x19b/0x260 [ 277.841797][T11993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.841827][T11993] ? __pfx_ksys_write+0x10/0x10 [ 277.841850][T11993] ? do_syscall_64+0xbe/0x3b0 [ 277.841871][T11993] do_syscall_64+0xfa/0x3b0 [ 277.841885][T11993] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.841907][T11993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.841923][T11993] ? clear_bhb_loop+0x60/0xb0 [ 277.841945][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.841961][T11993] RIP: 0033:0x7f0cfcb8e929 [ 277.841982][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.841997][T11993] RSP: 002b:00007f0cfda70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.842019][T11993] RAX: ffffffffffffffda RBX: 00007f0cfcdb6160 RCX: 00007f0cfcb8e929 [ 277.842031][T11993] RDX: 0000000020000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 277.842042][T11993] RBP: 00007f0cfda70090 R08: 0000000000000000 R09: 0000000000000000 [ 277.842053][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.842064][T11993] R13: 0000000000000001 R14: 00007f0cfcdb6160 R15: 00007ffec6c24ed8 [ 277.842093][T11993] [ 278.173267][ T5852] Bluetooth: hci3: command 0x0401 tx timeout [ 278.347572][T11846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.358878][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.386499][ T5852] Bluetooth: hci2: command tx timeout [ 278.394207][T11846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.466652][T11846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.478188][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.504824][T11846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.610723][ T5852] Bluetooth: hci0: command tx timeout [ 278.641646][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1167'. [ 278.735714][T12016] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.862034][T11846] hsr_slave_0: entered promiscuous mode [ 278.891426][T11846] hsr_slave_1: entered promiscuous mode [ 278.902093][T11846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.919137][T11846] Cannot create hsr debugfs directory [ 278.985311][T11863] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.998903][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.016485][T11863] bridge_slave_0: entered allmulticast mode [ 279.033196][T11863] bridge_slave_0: entered promiscuous mode [ 279.058442][T12007] vxcan1 speed is unknown, defaulting to 1000 [ 279.117867][T11863] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.135863][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.146076][T11863] bridge_slave_1: entered allmulticast mode [ 279.157980][T11863] bridge_slave_1: entered promiscuous mode [ 279.221127][ T2980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.247311][T12028] Driver unsupported XDP return value 0 on prog (id 344) dev N/A, expect packet loss! [ 279.328901][ T5852] Bluetooth: hci5: command tx timeout [ 279.533600][ T2980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.588219][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.644694][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.681323][ T2980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.778332][T11863] team0: Port device team_slave_0 added [ 279.825771][ T2980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.845326][T11863] team0: Port device team_slave_1 added [ 279.918037][T11863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.934038][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.961057][T11863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.019510][T11863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.026644][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.071810][T11863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.230633][T11944] chnl_net:caif_netlink_parms(): no params data found [ 280.449641][ T5852] Bluetooth: hci2: command tx timeout [ 280.511986][T11863] hsr_slave_0: entered promiscuous mode [ 280.518280][T11863] hsr_slave_1: entered promiscuous mode [ 280.539794][T11863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.547721][T11863] Cannot create hsr debugfs directory [ 280.607123][ T2980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.691501][ T5852] Bluetooth: hci0: command tx timeout [ 280.896385][ T2980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.038456][ T2980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.064001][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.089890][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.107438][T11944] bridge_slave_0: entered allmulticast mode [ 281.127259][T11944] bridge_slave_0: entered promiscuous mode [ 281.144057][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.158788][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.176623][T11944] bridge_slave_1: entered allmulticast mode [ 281.188427][T11944] bridge_slave_1: entered promiscuous mode [ 281.267956][ T2980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.354232][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1172'. [ 281.366009][T12060] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1172'. [ 281.406557][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.421345][ T5852] Bluetooth: hci5: command tx timeout [ 281.512192][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.745328][T11944] team0: Port device team_slave_0 added [ 281.802348][T11944] team0: Port device team_slave_1 added [ 281.826235][T11846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.837998][ T2980] bridge_slave_1: left allmulticast mode [ 281.844416][ T2980] bridge_slave_1: left promiscuous mode [ 281.853148][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.863130][ T2980] bridge_slave_0: left allmulticast mode [ 281.871438][ T2980] bridge_slave_0: left promiscuous mode [ 281.877227][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.887562][ T2980] bridge_slave_1: left allmulticast mode [ 281.900201][ T2980] bridge_slave_1: left promiscuous mode [ 281.905907][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.915855][ T2980] bridge_slave_0: left allmulticast mode [ 281.923146][ T2980] bridge_slave_0: left promiscuous mode [ 281.929112][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.285547][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.297723][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.311595][ T2980] bond0 (unregistering): Released all slaves [ 282.530717][ T5845] Bluetooth: hci2: command tx timeout [ 282.569737][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.582587][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.592731][ T2980] bond0 (unregistering): Released all slaves [ 282.712199][T11846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.777293][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.801823][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.831535][T12082] FAULT_INJECTION: forcing a failure. [ 282.831535][T12082] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 282.838548][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.846913][T12082] CPU: 1 UID: 0 PID: 12082 Comm: syz.6.1177 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 282.846938][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.846948][T12082] Call Trace: [ 282.846955][T12082] [ 282.846962][T12082] dump_stack_lvl+0x189/0x250 [ 282.846991][T12082] ? __pfx____ratelimit+0x10/0x10 [ 282.847015][T12082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.847037][T12082] ? __pfx__printk+0x10/0x10 [ 282.847067][T12082] should_fail_ex+0x414/0x560 [ 282.847092][T12082] _copy_to_user+0x31/0xb0 [ 282.847111][T12082] simple_read_from_buffer+0xe1/0x170 [ 282.847134][T12082] proc_fail_nth_read+0x1df/0x250 [ 282.847156][T12082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.847178][T12082] ? rw_verify_area+0x258/0x650 [ 282.847200][T12082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.847220][T12082] vfs_read+0x1fd/0x980 [ 282.847248][T12082] ? __pfx___mutex_lock+0x10/0x10 [ 282.847265][T12082] ? __pfx_vfs_read+0x10/0x10 [ 282.847289][T12082] ? __fget_files+0x2a/0x420 [ 282.847311][T12082] ? __fget_files+0x3a0/0x420 [ 282.847326][T12082] ? __fget_files+0x2a/0x420 [ 282.847353][T12082] ksys_read+0x145/0x250 [ 282.847370][T12082] ? __pfx_ksys_read+0x10/0x10 [ 282.847397][T12082] ? do_syscall_64+0xbe/0x3b0 [ 282.847417][T12082] do_syscall_64+0xfa/0x3b0 [ 282.847431][T12082] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.847453][T12082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.847469][T12082] ? clear_bhb_loop+0x60/0xb0 [ 282.847488][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.847504][T12082] RIP: 0033:0x7f0cfcb8d33c [ 282.847519][T12082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.847532][T12082] RSP: 002b:00007f0cfda70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.847551][T12082] RAX: ffffffffffffffda RBX: 00007f0cfcdb6160 RCX: 00007f0cfcb8d33c [ 282.847563][T12082] RDX: 000000000000000f RSI: 00007f0cfda700a0 RDI: 0000000000000006 [ 282.847573][T12082] RBP: 00007f0cfda70090 R08: 0000000000000000 R09: 0000000000000000 [ 282.847583][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.847592][T12082] R13: 0000000000000001 R14: 00007f0cfcdb6160 R15: 00007ffec6c24ed8 [ 282.847621][T12082] [ 283.106434][T11846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.164278][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.174270][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.202791][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.215641][T11846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.491792][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 283.511169][T12090] syzkaller0: entered promiscuous mode [ 283.516682][T12090] syzkaller0: entered allmulticast mode [ 283.572710][T11944] hsr_slave_0: entered promiscuous mode [ 283.586825][T11944] hsr_slave_1: entered promiscuous mode [ 283.599238][T11944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.606837][T11944] Cannot create hsr debugfs directory [ 284.611911][ T5845] Bluetooth: hci2: command tx timeout [ 285.434147][T11863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.452110][T11863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.478531][T11863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.550723][T11863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.955155][T11846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.039793][ T2980] hsr_slave_0: left promiscuous mode [ 286.045761][ T2980] hsr_slave_1: left promiscuous mode [ 286.057681][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.065583][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.074544][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.083543][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.097333][ T2980] hsr_slave_0: left promiscuous mode [ 286.103988][ T2980] hsr_slave_1: left promiscuous mode [ 286.110702][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.118138][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.126482][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.135329][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.171827][ T2980] veth1_macvtap: left promiscuous mode [ 286.177438][ T2980] veth0_macvtap: left promiscuous mode [ 286.183643][ T2980] veth1_vlan: left promiscuous mode [ 286.190592][ T2980] veth0_vlan: left promiscuous mode [ 286.197994][ T2980] veth1_macvtap: left promiscuous mode [ 286.204467][ T2980] veth0_macvtap: left promiscuous mode [ 286.210552][ T2980] veth1_vlan: left promiscuous mode [ 286.217042][ T2980] veth0_vlan: left promiscuous mode [ 286.261186][T12119] netlink: 'syz.6.1180': attribute type 3 has an invalid length. [ 286.765125][T12129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.902693][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 286.946660][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 287.677920][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 287.720922][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 288.221672][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1185'. [ 288.234732][T11846] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.246689][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.305119][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.312301][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.365051][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.372259][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.410750][T11863] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.454162][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.461388][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.557935][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.565187][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.645195][T11944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.683604][T11944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.705677][T11944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.770585][T11944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.874507][T12141] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1188'. [ 288.903917][T11863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.150360][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.214351][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1189'. [ 289.220887][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.270972][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.278250][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.314228][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.321431][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.433327][T11846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.502270][T11863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.585810][T12164] netlink: 204172 bytes leftover after parsing attributes in process `syz.6.1191'. [ 289.636408][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.669521][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.681548][T11863] veth0_vlan: entered promiscuous mode [ 289.734274][T11863] veth1_vlan: entered promiscuous mode [ 289.842630][T11863] veth0_macvtap: entered promiscuous mode [ 289.872763][T11863] veth1_macvtap: entered promiscuous mode [ 289.928409][T11863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.008093][T11863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.042789][T11863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.052986][T11863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.064535][T11863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.074394][T11863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.216219][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.225890][T12181] net veth1_virt_wifi .: renamed from virt_wifi0 [ 290.386323][T11846] veth0_vlan: entered promiscuous mode [ 290.406137][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.431720][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.474305][T11846] veth1_vlan: entered promiscuous mode [ 290.545984][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.576610][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.614069][T11846] veth0_macvtap: entered promiscuous mode [ 290.639067][T11846] veth1_macvtap: entered promiscuous mode [ 290.704088][T12192] netlink: 'syz.6.1197': attribute type 33 has an invalid length. [ 290.725404][T11846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.729894][T12192] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1197'. [ 290.760424][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1197'. [ 290.796326][T11846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.961107][T11846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.981710][T11846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.993740][T11846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.019158][T11846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.022764][T12202] netlink: 'syz.6.1198': attribute type 7 has an invalid length. [ 291.225614][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.322142][T12206] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 291.443795][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.526691][T11944] veth0_vlan: entered promiscuous mode [ 291.576487][T11944] veth1_vlan: entered promiscuous mode [ 291.613034][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.633687][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.667051][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.755569][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.782847][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.798096][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.840555][T11944] veth0_macvtap: entered promiscuous mode [ 291.864983][T11944] veth1_macvtap: entered promiscuous mode [ 291.902916][T11944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.934281][T11944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.960861][T11944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.971868][T11944] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.980882][T11944] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.991293][T11944] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.280782][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.311377][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.314679][ T12] bridge_slave_1: left allmulticast mode [ 292.329051][ T12] bridge_slave_1: left promiscuous mode [ 292.334851][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.380164][ T12] bridge_slave_0: left allmulticast mode [ 292.385861][ T12] bridge_slave_0: left promiscuous mode [ 292.410498][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.140921][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.150630][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.159873][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.182251][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.197882][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.364664][T12248] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1201'. [ 293.413580][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.443146][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.469318][ T12] bond0 (unregistering): Released all slaves [ 293.690260][T12254] sock: sock_set_timeout: `syz.6.1202' (pid 12254) tries to set negative timeout [ 293.754727][T12240] vxcan1 speed is unknown, defaulting to 1000 [ 293.762770][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.793934][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.046351][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.056305][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.068412][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.076749][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.085388][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.650096][T12265] vxcan1 speed is unknown, defaulting to 1000 [ 294.824360][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.833168][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.842321][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.852169][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.865120][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.114392][ T12] hsr_slave_0: left promiscuous mode [ 295.130441][ T12] hsr_slave_1: left promiscuous mode [ 295.136531][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.158738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.167806][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.178178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.230224][ T12] veth1_macvtap: left promiscuous mode [ 295.235817][ T12] veth0_macvtap: left promiscuous mode [ 295.270203][ T12] veth1_vlan: left promiscuous mode [ 295.275619][ T12] veth0_vlan: left promiscuous mode [ 295.328795][ T5845] Bluetooth: hci0: command tx timeout [ 296.133724][ T5845] Bluetooth: hci5: command tx timeout [ 296.176809][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.303919][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.421815][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.432073][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.441195][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.449310][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.462638][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.805006][T12276] vxcan1 speed is unknown, defaulting to 1000 [ 296.928907][ T5852] Bluetooth: hci2: command tx timeout [ 297.010634][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1209'. [ 297.173850][T12316] team_slave_0: entered promiscuous mode [ 297.179842][T12316] team_slave_1: entered promiscuous mode [ 297.408895][ T5852] Bluetooth: hci0: command tx timeout [ 297.448491][T12309] vxcan1 speed is unknown, defaulting to 1000 [ 297.602130][T12240] chnl_net:caif_netlink_parms(): no params data found [ 298.049692][ T31] INFO: task syz.1.594:8425 blocked for more than 143 seconds. [ 298.057481][ T31] Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.102596][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.208704][ T31] task:syz.1.594 state:D stack:26184 pid:8425 tgid:8424 ppid:5849 task_flags:0x400140 flags:0x00004004 [ 298.209032][ T5852] Bluetooth: hci5: command tx timeout [ 298.240046][ T31] Call Trace: [ 298.243382][ T31] [ 298.246335][ T31] __schedule+0x16f5/0x4d00 [ 298.274983][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.281828][ T31] ? schedule+0x165/0x360 [ 298.286230][ T31] ? __pfx___schedule+0x10/0x10 [ 298.292148][ T31] ? schedule+0x91/0x360 [ 298.296464][ T31] schedule+0x165/0x360 [ 298.300817][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.306404][ T31] __mutex_lock+0x724/0xe80 [ 298.311041][ T31] ? __mutex_lock+0x51b/0xe80 [ 298.315751][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 298.321797][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.326865][ T31] ? __nlmsg_put+0xef/0x1b0 [ 298.331541][ T31] ? genlmsg_put+0x137/0x2e0 [ 298.336167][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 298.341832][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 298.347933][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 298.353592][ T31] ? kernel_text_address+0xa5/0xe0 [ 298.358934][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 298.364532][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 298.371569][ T31] genl_rcv_msg+0x60e/0x790 [ 298.376118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.383392][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 298.396218][ T31] netlink_rcv_skb+0x205/0x470 [ 298.401344][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.406415][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.418803][ T31] ? down_read+0x1ad/0x2e0 [ 298.423278][ T31] genl_rcv+0x28/0x40 [ 298.427298][ T31] netlink_unicast+0x758/0x8d0 [ 298.438647][ T31] netlink_sendmsg+0x805/0xb30 [ 298.443478][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.458988][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 298.463992][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.477545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.487453][ T31] __sock_sendmsg+0x219/0x270 [ 298.498670][ T31] ____sys_sendmsg+0x505/0x830 [ 298.503610][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.515540][ T31] ? import_iovec+0x74/0xa0 [ 298.520397][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 298.525114][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.529046][ T5852] Bluetooth: hci7: command tx timeout [ 298.542628][ T31] ? __fget_files+0x2a/0x420 [ 298.547381][ T31] ? __fget_files+0x3a0/0x420 [ 298.554935][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 298.566274][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.574489][ T31] ? rcu_is_watching+0x15/0xb0 [ 298.586438][ T31] ? do_syscall_64+0xbe/0x3b0 [ 298.595206][ T31] do_syscall_64+0xfa/0x3b0 [ 298.603907][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.614411][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.624388][ T31] ? clear_bhb_loop+0x60/0xb0 [ 298.632199][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.638139][ T31] RIP: 0033:0x7fd37ef8e929 [ 298.646595][ T31] RSP: 002b:00007fd37fd16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.658384][ T31] RAX: ffffffffffffffda RBX: 00007fd37f1b5fa0 RCX: 00007fd37ef8e929 [ 298.675195][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 298.684935][ T31] RBP: 00007fd37f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 298.706153][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.714976][ T31] R13: 0000000000000000 R14: 00007fd37f1b5fa0 R15: 00007ffe9f4b2438 [ 298.730863][ T31] [ 298.734071][ T31] [ 298.734071][ T31] Showing all locks held in the system: [ 298.758032][ T31] 6 locks held by kworker/u8:0/12: [ 298.763553][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.790941][ T31] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.809890][ T31] #2: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 298.825661][ T31] #3: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 298.836195][ T31] #4: ffff8880294114e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 298.854890][ T31] #5: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 298.867412][ T31] 1 lock held by khungtaskd/31: [ 298.876722][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 298.890324][ T31] 1 lock held by dhcpcd/5502: [ 298.896709][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 298.908521][ T31] 2 locks held by getty/5598: [ 298.918526][ T31] #0: ffff88814c81f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 298.936375][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 298.946987][ T31] 3 locks held by kworker/0:5/5909: [ 298.952675][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.964002][ T31] #1: ffffc900045afbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.975453][ T31] #2: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 298.985777][ T31] 3 locks held by kworker/0:8/5997: [ 298.991276][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 299.004223][ T31] #1: ffffc9000551fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 299.009711][ T5852] Bluetooth: hci2: command tx timeout [ 299.015605][ T31] #2: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 299.031278][ T31] 3 locks held by kworker/u8:10/8192: [ 299.036668][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 299.048481][ T31] #1: ffffc9000c5d7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 299.059622][ T31] #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 299.068732][ T31] 2 locks held by syz.2.572/8299: [ 299.073780][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.082130][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 299.092443][ T31] 2 locks held by syz.1.594/8425: [ 299.098546][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.106836][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 299.117043][ T31] 2 locks held by syz.0.1170/12022: [ 299.122390][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.130713][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 299.141003][ T31] 2 locks held by syz-executor/12240: [ 299.146379][ T31] #0: ffffffff8eca4d80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 299.155986][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 299.165229][ T31] 2 locks held by syz-executor/12265: [ 299.171423][ T31] #0: ffffffff8fa15008 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 299.181262][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 299.190586][ T31] 1 lock held by syz-executor/12276: [ 299.195886][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 299.206274][ T31] 2 locks held by syz-executor/12309: [ 299.211827][ T31] #0: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 299.221852][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 299.231513][ T31] 5 locks held by syz.6.1211/12334: [ 299.236705][ T31] #0: ffff888056db4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 299.246775][ T31] #1: ffff888056db4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 299.256787][ T31] #2: ffffffff8f6783a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 299.266942][ T31] #3: ffff88807f1c8338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 299.276521][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 299.287902][ T31] [ 299.296663][ T31] ============================================= [ 299.296663][ T31] [ 299.316256][ T31] NMI backtrace for cpu 1 [ 299.316278][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 299.316298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.316309][ T31] Call Trace: [ 299.316316][ T31] [ 299.316324][ T31] dump_stack_lvl+0x189/0x250 [ 299.316350][ T31] ? __wake_up_klogd+0xd9/0x110 [ 299.316373][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.316396][ T31] ? __pfx__printk+0x10/0x10 [ 299.316426][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 299.316450][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 299.316468][ T31] ? _printk+0xcf/0x120 [ 299.316489][ T31] ? __pfx__printk+0x10/0x10 [ 299.316509][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.316532][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 299.316556][ T31] watchdog+0xfee/0x1030 [ 299.316579][ T31] ? watchdog+0x1de/0x1030 [ 299.316607][ T31] kthread+0x70e/0x8a0 [ 299.316629][ T31] ? __pfx_watchdog+0x10/0x10 [ 299.316648][ T31] ? __pfx_kthread+0x10/0x10 [ 299.316668][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.316689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.316709][ T31] ? __pfx_kthread+0x10/0x10 [ 299.316734][ T31] ret_from_fork+0x3f9/0x770 [ 299.316757][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 299.316785][ T31] ? __switch_to_asm+0x39/0x70 [ 299.316801][ T31] ? __switch_to_asm+0x33/0x70 [ 299.316815][ T31] ? __pfx_kthread+0x10/0x10 [ 299.316834][ T31] ret_from_fork_asm+0x1a/0x30 [ 299.316867][ T31] [ 299.316873][ T31] Sending NMI from CPU 1 to CPUs 0: [ 299.477080][ C0] NMI backtrace for cpu 0 [ 299.477096][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 299.477114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.477123][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 299.477148][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 c6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 299.477160][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 299.477174][ C0] RAX: 7f67d9b000ea9100 RBX: ffffffff81975d58 RCX: 7f67d9b000ea9100 [ 299.477186][ C0] RDX: 0000000000000001 RSI: ffffffff8d982587 RDI: ffffffff8be28b80 [ 299.477197][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 299.477208][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa110f0 [ 299.477219][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 299.477229][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 299.477241][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.477252][ C0] CR2: 0000555d3b9e2018 CR3: 000000000df38000 CR4: 00000000003526f0 [ 299.477265][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.477274][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.477284][ C0] Call Trace: [ 299.477290][ C0] [ 299.477296][ C0] default_idle+0x13/0x20 [ 299.477311][ C0] default_idle_call+0x74/0xb0 [ 299.477327][ C0] do_idle+0x1e8/0x510 [ 299.477344][ C0] ? __pfx_do_idle+0x10/0x10 [ 299.477365][ C0] cpu_startup_entry+0x44/0x60 [ 299.477378][ C0] rest_init+0x2de/0x300 [ 299.477392][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 299.477412][ C0] start_kernel+0x47d/0x500 [ 299.477429][ C0] x86_64_start_reservations+0x24/0x30 [ 299.477454][ C0] x86_64_start_kernel+0x143/0x1c0 [ 299.477471][ C0] common_startup_64+0x13e/0x147 [ 299.477494][ C0] [ 299.478488][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 299.684179][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 299.695975][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.706025][ T31] Call Trace: [ 299.709334][ T31] [ 299.712263][ T31] dump_stack_lvl+0x99/0x250 [ 299.716856][ T31] ? __asan_memcpy+0x40/0x70 [ 299.721456][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.726661][ T31] ? __pfx__printk+0x10/0x10 [ 299.731256][ T31] panic+0x2db/0x790 [ 299.735156][ T31] ? __pfx_panic+0x10/0x10 [ 299.739574][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 299.745415][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 299.750808][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 299.756996][ T31] watchdog+0x102d/0x1030 [ 299.761344][ T31] ? watchdog+0x1de/0x1030 [ 299.765774][ T31] kthread+0x70e/0x8a0 [ 299.769878][ T31] ? __pfx_watchdog+0x10/0x10 [ 299.774566][ T31] ? __pfx_kthread+0x10/0x10 [ 299.779152][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.784363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.789570][ T31] ? __pfx_kthread+0x10/0x10 [ 299.794156][ T31] ret_from_fork+0x3f9/0x770 [ 299.798831][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 299.803941][ T31] ? __switch_to_asm+0x39/0x70 [ 299.808702][ T31] ? __switch_to_asm+0x33/0x70 [ 299.813456][ T31] ? __pfx_kthread+0x10/0x10 [ 299.818042][ T31] ret_from_fork_asm+0x1a/0x30 [ 299.822814][ T31] [ 299.826102][ T31] Kernel Offset: disabled [ 299.830428][ T31] Rebooting in 86400 seconds..