last executing test programs: 1m4.591308339s ago: executing program 3 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xdc5a000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 52.706640762s ago: executing program 3 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xdc5a000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 41.135530395s ago: executing program 3 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xdc5a000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 28.309081076s ago: executing program 3 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xdc5a000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 20.26095965s ago: executing program 2 (id=1172): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x3, 0x8, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x7, 0x1ff, 0xff}}) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x9e, 0xb8, &(0x7f0000000600)=""/184, 0x41100, 0x19, '\x00', r1, 0x19, r2, 0x8, &(0x7f0000001800)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001880)={0x0, 0xe, 0x6, 0xfffffffc}, 0x10, 0xdd5d, 0xffffffffffffffff, 0x1, &(0x7f00000019c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x0, 0x4, 0x1, 0x4}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0xc537}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f1100f20000005f00"], 0x0, 0x28}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x8, 0x10}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x2a, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000000000000002000000020000000200000000000000000000010500000008009000000000000100000500000000000000000100009541433b000000"], 0x0, 0x5a}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100165749b4454ceee6736168c22f15000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r9, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000010000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r12, 0x4) (async) r13 = openat$cgroup_ro(r9, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r10}, @alu={0x7, 0x0, 0xd, 0x7, 0x9, 0xfffffffffffffff0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xdf}], &(0x7f0000000340)='GPL\x00', 0x1b97b0e1, 0x5c, &(0x7f0000000380)=""/92, 0x1f00, 0x1, '\x00', r8, @tracing=0x1c, r7, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x2, 0x0, &(0x7f0000000480)=[{0x1, 0x5, 0x5, 0x3}, {0x0, 0x3, 0xf, 0x9}], 0x10, 0x5}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r12, 0xfffffffffffffe25) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYBLOB="55fa2ac2ad52eb551286cc9418aa695cccd098d113c243f2ba22dda213f877123fd4a6b3d8db230b7ec9b251a5463004efe84751723ff2913569448d0ff4f06328e389c7a3dc1d2b889694ca96e382710660949936488b07521ccbccb7084871e0eec72174537f86fdfebb7dd0b98727fa1665d5d73ab89ec049775458e7e19cfaf5a1888a3a2b1ee3af6c205c945cff665b860bbb0c6ac357ddaddb86871f01fd0eb6832d944e086b741c17160037f56bea100b39b8f97285979672a02f0b5ae9ccfda5868f222c484a7bbb10d24af64189bfe0be239769a227a3b03530dcc1ab3c41e45844bf9f3dfc665f0e136b5050168a36a0f9d643b4e06a2a3bcef16c406f48fbcfed865c233c24a6803f1c022e05cec5bb7a03ddf25070b78761dfb8501bceb31a27facf50a0f7a62c086cf0e5ab188724bd6030f75bbf93470daab20f675bb4a4d4aa4dad58b0051a29de8499c60748a6f90efd203981845c238395176de95681ea9bbd9a7eda2b1ff0a148d0ac983994bde8b1a4dd3a4e62524882798e04eaabf740cdad7117d1532089ea3f8063d693a15e62c622798a8bc54c1cd801a47cfe6841418af29f4d5fab813773632974b2109642acf1b603b0b7f55478e1fcef35e8e914777dcea17f2019f3df8e863040a96134cae99eb661cd7b1099c70d935e018628fb08dc74a30b323071d9cc92b5905d70a4e0b9280545a4aa9c40282e07506a3b4e0f15342a32c183464f88c2feb9cf19d883627275032f557ae2cadcec848ed72d39c566fcfc0a854d083a57bda211f9a5b8ac75d957949b461fe599a07b455b446a9894192ebcc948c593bd289047a16a7454586e5d68337ec488b49b914f2083ecce9a2fc6804f66af3efd18c4dc56e07720ee239702e01c765f7015b8c8677b562fe0959256386ac1e0762a9e887636f2ff26c64384b1cec84707b3b0cce7f95aec106e0e37527d6d9bdbc58a70935d56be5756a81c62263a849dc831969441686e86bc38dff06addb7d329ed87a95deed2278961bd13e98116116b6cc845e4360afb4abecce26b1fd2c89fc8c4de06a9e462fcc30c303f275cfa260499c8e5c0f7cf283d3a0f95ad4c61e701c2efd2e582b663358dab4f43f50f5121e51864543e7245c0fa71df3ac389ff84ee30ffd0e9fb96d8beb6c18fec929c7d424ff50c17ba8844a7e4b2d156859376bffa3baf95d4620a9bfd3990c063aaaeec6bde8e1ad5978a5f96384d89442e9e6e4171f3a455fb0e7fd16b3463582513942df7d81e4df79087e78c35fe832e75e9c0c33aea76ee4044659fc576844bd5eb36cee7f81950a4c71e78d510ee00c1aded207bdf4934f1a34ec066c31cc661480a113881de47f7f1ec0ebe73195ab1e33a727bb6d1d805ba597f6fc862cb6abb341b75c02547124bfc944c57aab3cace8e675ec195c097daa5e4109cd031e10a4fd0a5f7440d7dfb7f93689c0e0abd4745ba9bc4a7871e91b2f1919c824ad0163a6da18701d67d296c39d67436b9b356b001030aa040c1d09338eccd218a86adea38db458c06c9092f8f8e21a223faeee62fae341dff2cef4325daff5ed5fdb10d0a51e4bf06248ee14dc152bf1c7ac8c5ee400190d8c7e0da79032a76c9bc769b7a375aa0510694cdd9a58c21fb360c39e5a34df7a48b2bce0771cf9eff74d02e2a5bce03a5ab098c2a33839e15927756ab233f6676b8d846e2008aac7f4fe231daee150e0fb44109fefe64dce1a2b728823227a5764ad80d636d2f88d123185e91a15c4c632f3e251a5fe5f20054e1f2261b9c8768cbc41ac4dc540b5a80b1c8e9536e30a3f8ea58127fec615aa17568a58ffc4dec29e021ba1806653fa05188ad292280e0660efb90a865c670d17a73293fc81063949012ee50e7dfa281f83ae60cff555e0ca33cb30ab46dea4e64b3941c3e424f13fa4957eb8848a7bcc3d3a6267e5d5a3a3c84f0713ce75f98ed84f38c0748f594cfdd2543d1a4e102922d192db24650d338bf143c8d29fbb7ed756c6333f1790fbc555cc638299e3d850245fd5ed53c4b70dd9f5df66214be6e0bdebf2f300e40a8421deb962e4d02fe55e5c6f8d7f0d64f11936c45b84bed9054257f44101d8f85ac3e615789ef75d0ae01a17f1e35fd32644361f05dfebbe4db987c184a8ca895ddeb91e330c8ec8aafd91e34ec2b30e93cefd5ca54cc086dd243c99ca2224746aabfd69bb2c2a2ac86a0266e4444dd16eedf2e31601622dbc30463fafb869bbf8e6a580b31312b0696e9e9651023af90255f46fa9ba971105f98a8a2c0ec38b1884c4fdbe54ef49e35588b604bc04b928db1f3fa9205ee017d6f6ace057ceced2e168df486b775d35b267a8edec51e0108b499798a5737b3943124cdf207216670ace25e18b0a8a22550b1f03aba833f4be37e685b238d23b5b17a1b5e022c8f96b89fbbcc60c6cc785cc27f36549c22f5046fabb3a815c7ed95e657d19fd1b0c814bde30e75c1880b8b7f1f9616b15c5e52cb8252c0fcaeb5524e9923aa61cb3ad61300efd1cee90e37667fbef59635bf116e2ff9c33f4336d21985aba50476cc3d7a8249a3ae3a48c158d7ac57635144a823b37d557acb2fb9c7cce48f1deb7a5b0fb703842e816d6560b05e2ac4c0daed504b0c85121d2db18571cedbe7c95502b351541b5b39fab307d846b8d690c40739b13687c35c43c455d84d75a06c4ca6b7583a335677aea791ebae6c8be87dd77c53645832e9fc9bee8bf1725630ef599c791c0c4f7299a130792bffab5d1a7b604f4867145b36428ef4404db5cc96376cc60f17e661cadb2fd776993fb07f08f4861b654e4bbf05640a74cb247a4739d6148cb63b43e11b482da8a4d791c405a1e7dec66336f46ebf7099a6d307b9258af4219046fef4b3b024d56f1a3f6a97cc7515ad40dac7ce67978eff9ed952aba79c7dfbc29529fccbf17681f4150a398232cd3734025fc70569f53bdc1090a600aca3f22529ccd038e601e1c1812fdc4c6db5be680a19e97eab3c06bfa2ab6bd18113f910c2f74ce6719dfec523b92bcd071d5d892d7dc34faafa8eff814f9ba3eb74d9334afd6a339a1d2b8c8e4b7bd8186f5c0f1a7b12a18c71492c1953d6e2ad85905ec9d2e600feaea1027b8f355337238d1caf0a4244f06664b134aa6957469d3d0549b4c2a3dab48be0437d8a31feccfe1964d035aa355362866dc70dfc7b3e9139aa713a9342cf92cc2c2fe1b2616bc469d07406e93b35c90b483da664ba9786688987a65ef92b1ce51feb378ee518afb3fbb06fce0f2701feb1f7095399d6db7ab837894e9eeb2a2194ddc2575b4592c2af2a0f549c904731bd29c81c90a88ec03f8edee79c80a6983b625c28536d9fa1da7b1b695c9063adfb5842dc3b3e84a8774280693ca1d33c7fb3199bca45533d469511d19117a175916133ad17aacc97d1efd59bfc015edf4429734e2041eea56203c53617293a1706e95b32db9d9ddd7c7fdcc3ffb7360a0606a321ef3297ae8c7a5858ceda966a587e4286a8527ec71762111a8aa93df5753ce31b8dce6199480e0a9af15054f72de935e26b322375c80b622158a1de4a0444436160d3717a364560c585b425c2bb85cb5ace6dbb360372a47f143ae12625c49ef6ac21ace29fcb169a9f47e0e87b5657fe9efdff107ed7df4644a867b27eb9ec8f6fff252739bd9b94c2690fa569cdb4d6e31181d5a4cb733dfc4068d9f6c3cbb0fb560bc5b5ae4d4e814253ad5160ec514ae3b39e968e2c403fcbaba2179324b8f1e97f5e6f46a917f73c3fac8e2b5bb619c508e86643600347130bb680cbe3667a4edfcff699f53f9038de6e70ea2a1ff213661771323cab38f9ebbc46e335c8e79a05a8f766fe88000676d8b572d72534e94259a5d861c9f5cd9fba24834b49a405dbac44dab2bc1518a8be4511dfcf8f6601ab97b241a4b81cdce343a8c14e51c8413df1dbadef93a2cdf79ddb27f1e6f0323a4d1d465e7326b6a152f0d9027d5c8a6a4045b695e679eb15d18f1be594e926f597616ff14f2a272366058856ca9c1663e1b481159aa62fd47a8bb667ce0038cf987351dd6354353cd44a801542a87a5249aab4ae73c54bb1179d27854882bf954c5c0d47799d27729988efd269f997ae4e055c3b6841ca5c9a21e7be8fcd633896f9944702225ed48a5182b6fcab88b8137697fc948f44c9e048e7740f090e1f5ed58191bf36d019d0cc137d8d91b441938d9c983b9ba6e61488bf71076b427dea77d03a29d342f68bcf0ea16b882689eeb7aaf3e09643311b583162f4709dad9b1a75aebd73f8ece8b86000107d0b64af5ce858cef233e3cc9eda9debefa6bebdce9eada6c9acd4fe41fc17247e9ebeb5a575153909910f1f94778155fc23a2cc5260413f236e6151b4aaa8b3f5836e03a1fc6041a321550c9ce8f488ed12df6f43d5d9b679f13419beed163a3f7b6e15f838d6928917f1c2a0a44f83fdde7dc4ee2ac9e954ec7175b593d3a7f4645f6062f6ac8e5a86a3c9f0878dcf680915852e4ca0e4cff4481686b156bdb4f49df5328d56b112c8c7a13e2866c87e812d8386b3933dfd693b8cacf9e2cb1bcec4cdac2402d313e4217abd1d5d6040304acfbfcedb64e73ebe793941b05b86cab2c3948ec777697fd121e785276773708ccc4fbbf106ec4dc3fcfebeabb1d4409447915906e69be168d712d8521376957d96eb072052b9af79c60266c238f1989e25bb569eb31da16247d567310066d74496166f6ae3d8c3b6926bde1b8730a9677c7e0e7559e7e2b4733183390fb5a11a214446b57d1e8664fdceeb3abcc92b03ba1c32687c84718f0f41afd3076c79c88b5c57acfd492a69e19ca222ab0e671fc37b841042d46abd00909b27bdcdeafbc0d05446d6b67deda851465229e6ccebc90644e64713a46ed4cced7f56f5848c114710f1abe64f9d1122546a0e43d0cbd73735265988ae80d8b33241658ab01a20dbf39da0fa867ea9698f8757f7ee7f502bfb361c2e43d8df61f7d07dbfbe61ac58dc91ead53e0a22a49d82d3ef2b8402634b4f814bb52e0ce473ceb4c0f39e69c822193db6b5b234ea8f65e4c8b8280b328343bcf8a0c30285746e2d7b6f8215f5f68071f6132d315577d2b926efc6fc41095001260ade0ec3cdd28c24de4582f22dcce852d4ca6cd33294b71b195076099d15a7b0015303d86cd62a6388e8d158cad93229586fd10b58d351a62b2e6e007190b68f584afe591df71fcfb0347223bcc334b136bc72aa394e1d403ced9dbd3095eaf80c8a8a9145ce3f3cc63b2f9fe0fa5f3948be2cc1e328bed2639985491ea27ac3d7123db671d768edc195ba02001e7b46f923366b87d936c9e9117d178782f8279e4f6e31f65fef610d74ae9cccdf061076595f91b7b584725cb4933aaf8da4b29cdf484b0a6600541cae0bb6f7884cea8641da05c73ee98384c04b8dcbf52c21d72f6f5248f0a5141287e8d90ee82afab719fd4436cff4f82e3316a3bd6de9f1c73515b77dde452ab2bc15b732103c4ee907ddcd6f7fa6cdb925d6dbf81367cabaacdd4526450a4c98af3b7d2aefce572ac8566a9aa4c8c201ada428f77df6d48c9f45383d583a29ebc245de6a54697945ebb5dc74a528c8372db2819816ab1665a9edf6e34804be5a5d32e472aeb3705d0a5975cb02986b40805862075d7fd1c857ffdc95eb95389beff5dcf61beba42cb9aee0d81de6d00c84113e1243f3e503f9b4d19344a720c5aae1d15d5e39751546a1b5832046bc4cd77bf28213f3aa7f4b264d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 20.10740032s ago: executing program 2 (id=1174): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'macvlan1\x00', {}, 0x81f}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$unix(r3, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}}, 0x0) 19.765185784s ago: executing program 2 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@private0, r6}, 0x14) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r7, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) recvfrom(r5, 0x0, 0x0, 0x10000, &(0x7f00000005c0)=@xdp={0x2c, 0x1, r6, 0x27}, 0x80) sendto$inet6(r5, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000004000000040003000c00468c3aa17c55dc6ba3888d5f5556ad5a4f51ea011e7fe4650407a864dcbe4200"/57], 0x24}}, 0x8000) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) 19.497118595s ago: executing program 2 (id=1181): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_IPPROTO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000440)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x8, 0x0, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, {[@dstopts={0x6}]}}}}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, {0x6, 0x4, 0x0, 0x6, 0x2, 0x65, 0x7, 0x2, 0x6, 0xb, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, {[@rr={0x7, 0x3, 0xce}]}}}}}}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket(0x10, 0x803, 0x0) 19.189523503s ago: executing program 2 (id=1185): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x4}, 0x9}], 0x1, 0x0, &(0x7f0000001240)={0x77359400}) 17.116177636s ago: executing program 3 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xdc5a000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 9.164234048s ago: executing program 2 (id=1185): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x4}, 0x9}], 0x1, 0x0, &(0x7f0000001240)={0x77359400}) 7.478738515s ago: executing program 0 (id=1258): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000140)=ANY=[], 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) unshare(0x44000200) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100ec50897863616e00000018000280140001000000fde8ac14859e9b7eda14c94f61867edeba572c569846dd6f149e1fd18f102b0dbd23ab5389551b9bc0d142f4a75702e17f8177a3ec79ab41a21044a9d8", @ANYRES32=0x0, @ANYBLOB="92c10700000000000a0003003a712f0756b80000"], 0x54}}, 0x0) 3.720101095s ago: executing program 4 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x2, 0x7ff, {{0x17, 0x4, 0x2, 0x1, 0x5c, 0x64, 0x0, 0x99, 0x0, 0x0, @loopback, @local, {[@ssrr={0x89, 0x2b, 0xef, [@remote, @private=0xa010101, @loopback, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0x7, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0x5, "26fc28"}, {0x1, 0x9, "4f1589d2b572a5"}]}, @noop]}}}}}) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={r7, 0x2}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000001800000129bd7000ffdbdf2580009400ff0136060000000008000f0004000000080006000500000008001900", @ANYRES32=r1, @ANYBLOB="06001c004e2300000c00090007000305", @ANYRES32=r2, @ANYBLOB="08000f000400000008000600010000000c00090007002807", @ANYRES32=r4, @ANYBLOB="0821060006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 3.670545239s ago: executing program 0 (id=1273): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x1, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100, 0x4848e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x80035}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x18c, 0x2c, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xb}, {0xa}, {0xf, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x160, 0x2, [@TCA_U32_INDEV={0x14}, @TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x144, 0x5, {0x46, 0x2, 0x3, 0x401, 0x277f, 0x2a01, 0x4, 0x3, [{0x5d, 0x2065dfa4, 0x3, 0x2}, {0x401, 0x0, 0x7, 0x1}, {0x1, 0x80000001, 0x898b, 0x4}, {0x808f, 0x8, 0xc63, 0x6170}, {0x7c2b, 0x5, 0x7ff, 0x7}, {0x2, 0x3f, 0x200, 0x5}, {0x6, 0x3, 0x9, 0xfffffff1}, {0x4, 0x4000, 0x10000, 0x5}, {0x9, 0x9, 0x5, 0x1}, {0x6, 0x2, 0xffffffff, 0x1}, {0x2, 0x6, 0x75, 0x4}, {0x583, 0x6, 0x7ff, 0x2}, {0x8e4, 0x3, 0x7, 0x8}, {0x101, 0x5, 0x2, 0x3}, {0xf, 0x11, 0x1, 0xe51d}, {0x2, 0x8, 0x800, 0x7ff}, {0x0, 0x8000, 0x1, 0x4}, {0x8, 0x87, 0x8b, 0x8}, {0x9, 0x6, 0x7, 0x38000}]}}]}}]}, 0x18c}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) socket$tipc(0x1e, 0x8, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00000000c0)={0xbec1, {{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}, {{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4a}}}, 0x108) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) 3.477662085s ago: executing program 4 (id=1274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x1, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETLINK(r2, 0x400454cd, 0xfffe) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x8, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xff80, 0xf}}]}}]}, 0x5b}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x20, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x200400d4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xec, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40200000000000061194c000000000085000000270002009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) 3.130289248s ago: executing program 4 (id=1277): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0xffff0000, 0x10, 0x0, &(0x7f0000000980)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)="1f", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x1000f) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000001c0)={0x32}, 0x8) sendmmsg$inet6(r7, &(0x7f0000000c80)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0x890) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10}, {}, {0xffe0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x13) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x58}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r0, 0xffffffffffffffff, 0x1b, 0x0, 0x4000}, 0x20) 2.813426647s ago: executing program 4 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 2.670685829s ago: executing program 0 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000", @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040050) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r1, 0x0) sendto$inet6(r1, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000", @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040050) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x40) (async) socket$inet6(0xa, 0x1, 0x84) (async) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) shutdown(r1, 0x0) (async) sendto$inet6(r1, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) (async) 2.516431162s ago: executing program 0 (id=1283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) write(r4, &(0x7f00000001c0)="b4", 0x1) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES16=r11, @ANYBLOB="310d2d45c9a82dc696359600000008000300", @ANYRES32=r12, @ANYBLOB="050008"], 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) 2.210931858s ago: executing program 0 (id=1285): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x2040010}, 0x200040b4) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x400, 0x70bd26, 0xe, {0x0, 0x0, 0x0, r6, {0xffed, 0xfff2}, {0x5, 0xfff2}, {0x8, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0xf0, 0x2c, 0xd27, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc0, 0x2, [@TCA_CGROUP_EMATCHES={0xbc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x22}, {0x1, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0xff}, {0xb3, 0x8000, 0x80000000, 0x4}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x5}, {0x9, 0xfffffffd, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5d80, 0x7, 0x101}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0x0, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x86f}, {0x3, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xf2f, 0x1, 0xffff}, {0x5, 0xfffffff9, 0x2, 0x2, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x5}, {0xa, 0x131f, 0x5, 0x8}}}]}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.16627691s ago: executing program 3 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xdc5a000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x33) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 2.125202228s ago: executing program 1 (id=1286): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="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", 0xfefb, 0x8c0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r7, 0x4, 0x5, 0x7, 0x2f7, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x80, 0x5, 0x3}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x184, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x170, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x23}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x114, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0xe8, 0x6, "d2fe7c0082bd6797b5985da8576773840ca0311c4b0395b7711864ec8af900c6e62d1a7ea3f6958d359748c901d3de4fc93a53d835f84c4dae1a7135b63a95b1446e01776125aa6102cce3b1ab476b93741c47419818ce0b5e0530569f6856313bbf96448254f04cf3feb56ca09cf8942dc0206c687d694cb1c5b22941143701da1f7d9d2d99e550b153907943839a7f0bda0ff7915ed3747a3766bb8a0e1e1cfea1d58ada8afa6e9518e450d7030f899dc9fae9e32b7e5d686f91c24ded6209d5ba22e10434729949c7477379a152590cf53b91be649b30ae893dbd4b4dc0cdf2627fb4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0xe002c813201d0c70}}}}]}]}, 0x184}}, 0x0) socket(0x10, 0x80002, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(r3, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000002c0)="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", 0xfefb, 0x8c0, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r7, 0x4, 0x5, 0x7, 0x2f7, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x80, 0x5, 0x3}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x184, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x170, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x23}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x114, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0xe8, 0x6, "d2fe7c0082bd6797b5985da8576773840ca0311c4b0395b7711864ec8af900c6e62d1a7ea3f6958d359748c901d3de4fc93a53d835f84c4dae1a7135b63a95b1446e01776125aa6102cce3b1ab476b93741c47419818ce0b5e0530569f6856313bbf96448254f04cf3feb56ca09cf8942dc0206c687d694cb1c5b22941143701da1f7d9d2d99e550b153907943839a7f0bda0ff7915ed3747a3766bb8a0e1e1cfea1d58ada8afa6e9518e450d7030f899dc9fae9e32b7e5d686f91c24ded6209d5ba22e10434729949c7477379a152590cf53b91be649b30ae893dbd4b4dc0cdf2627fb4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0xe002c813201d0c70}}}}]}]}, 0x184}}, 0x0) (async) 594.507897ms ago: executing program 0 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25040000001800018014000200766c616e310000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x103}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x400003}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000d80)=""/4102, 0x1006}, {&(0x7f0000004f80)=""/226, 0xe2}, {&(0x7f0000000340)=""/202, 0xca}], 0x4}, 0x401}], 0x4, 0x20, 0x0) 593.906971ms ago: executing program 1 (id=1288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) syz_emit_ethernet(0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60a70ddb00003a6cfe880000000000000000000000000001ff0200000000000000000000000000013a00000600000000fe80000000000000000000000000001cfe880000000000000000000000000001fc010000000000000000000000000001000000000000000000000000000000010000"], 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = getuid() sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@report={0x398, 0x20, 0x200, 0x70bd2d, 0x25dfdbff, {0x3c, {@in=@local, @in=@broadcast, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0xff, r4, r5}}, [@algo_auth={0x12e, 0x1, {{'sha256-generic\x00'}, 0x730, "3231b5e32db2b1996a1222e9f693fec2dfd2e859bd7bf48df73099e5f47f2d1f391adf450990169df16ed954f9852fa41e817a923204a99a768ca06c9e3d9c262740e0e82a14a25e5bff9fa239ef1d17c9144f1c28ce6c005d3bcc439c609fb7069e3d671064d6d2514f798285de9fdfd3632804dd4fa87fac58c5435c70c2d7324c13a22b560110c52ab26e77d63689e4802662a19c088ecbb89fd5b8f982913693f4e9bcbb235f6703de360f5993e5bad1032a90be42e5b0434dbd3e60fc0c8c496b5c2024c5af488109996d0f91b62b047919fd0d0bc051fd8fd6c356b7bb4c61af1e5161"}}, @extra_flags={0x8, 0x18, 0x1824000}, @policy_type={0xa}, @migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local, @in6=@empty, @in=@local, 0x0, 0x4, 0x0, 0x3507, 0x2, 0x2}, {@in=@remote, @in6=@empty, @in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xf0, 0x0, 0x0, 0x0, 0x8, 0xa}, {@in=@local, @in6=@local, @in=@remote, @in=@private=0xa010101, 0x0, 0x2, 0x0, 0x3504, 0x2, 0x2}]}, @algo_comp={0xef, 0x3, {{'lzs\x00'}, 0x538, "03e4a331f172ae89c863a2a2aeddba376f98cca65b4a2f285458a5a7344da743228c7bcc35d9971ec0257ca0a8bab9172b27fa701adcaf0cd3fab601790a324a13b68b04ea608d52e5db234d568c6970a1cbb5b126e819511b18a61da0f5fccbba9973f440f5923685e4d3adbec3bc4f346b32a04b8268808045a9396733b7042963cf76ea2ccec38361337e66a8a729039621ee93d27179c431ed2e5a6cd7f9e48d1cfd212d5f"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0x0, 0x3}}]}, 0x398}, 0x1, 0x0, 0x0, 0xc010}, 0x20044800) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 592.831519ms ago: executing program 4 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xf8, 0x42, &(0x7f0000000300)="b44e20af238985dde46131d7f5d9f40efdbc4df2bf2e6d0d6938dd49ea91a07f575760e30e4258c90ca7cf2122234f20fb2945ee1cd350c309232c7a8b1ce8d5b1e2fb1f62a34feaa018d13eeecea95d0acad38bb0e1b2a05355095b86c06e9ba1a522483b7a8a0fa33dcf4cc7e0ca15e61659c4ceb28f7460e46c4a02bb9ba089b6f86be9e34c4dda457b2bb51a19ba2d9d2c491913785c1f428b544a2b0f5efb0a74a34ee906ca9527d469152ca0d7cf7736097aeb5c8e16fb27c54de42b648465a147d681c0e44d4596ec0ca7846d07ebfd5debd2687db45081b013b497d6295895707c032ca945616ef535e0982b30cd068a052808be", &(0x7f0000000000)=""/66, 0x1, 0x0, 0x0, 0x5e, &(0x7f0000000140), &(0x7f0000000180)="e81718e1b710f5f42ba8450ecba82d24c279b712474b9912e7206adece0caf9e465823dab8653a140f566f866f37a614cad6f3a762ade810502c1fe3828cf50f55607accb949466129e26036767d667e8f380b176db3f77dd96168eeebe1", 0x5, 0x0, 0xfffff38f}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 357.363258ms ago: executing program 1 (id=1290): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{}, "ee6a8e64a9f4d496", "2742cd9e1a7dee0a5709069c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 345.317295ms ago: executing program 4 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150003000000050005000a"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000300000000000000330000cd5aedbe67ff9e4ea6273cc8b6000e0001006e657464006e657464657673696d30ddff07008e00"/67], 0x3c}}, 0x20000040) 187.572009ms ago: executing program 1 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) 37.45291ms ago: executing program 1 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r1, 0x10, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (rerun: 32) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) (async) listen(r4, 0x3) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r8, @ANYBLOB="01ad00000000fbdbdf25170000000c00058004000280040002805400068004000300080006002000000008000600020000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000050e858cb"], 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) (async) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x3ec, r8, 0x0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa567}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x58}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "f33909d9e781ab27251007658986635b08c5580ed9707bc4d8d608d953b0fe2ee7d9c4"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4306d540db6ef1204ed577e659a879b36040810f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f7e}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000003}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @remote, 0xb3d2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x0, 0x3, "745ce8a663f319f1dec249fe3726185786407ee8bfa13acde766ab5d8c8a48528faccf29674d2ea2207f4d627d4c64fb6ca0ad31ccb778c983f0197cd8fe38232032d69bc168f58a85706c1d1616f4d254a0ef42451f7e992dc1da7131e3ca28468c85ed3a64bfd805c286eba8c9c24331b547e7c9123d424ed0e48eff505fb2fd52684309038438338e3a"}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_REKEYING={0x0, 0x6, 0x80}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_KEY_MASTER, @TIPC_NLA_NODE_REKEYING={0x0, 0x6, 0x2}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0xc004}, 0x4004801) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) kernel console output (not intermixed with test programs): e_parse: 2 callbacks suppressed [ 139.741693][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 140.250125][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.265147][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.380243][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.392666][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.603164][ T7967] netlink: 'syz.4.576': attribute type 29 has an invalid length. [ 140.621924][ T7969] netlink: 'syz.4.576': attribute type 29 has an invalid length. [ 140.650047][ T7967] netlink: 500 bytes leftover after parsing attributes in process `syz.4.576'. [ 140.975927][ T801] wlan1: Trigger new scan to find an IBSS to join [ 141.047790][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.585'. [ 141.112203][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.293195][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.468963][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.521244][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 141.662430][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.002921][ T8017] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 142.012302][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 142.252510][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 142.291564][ T12] bridge_slave_1: left allmulticast mode [ 142.299690][ T12] bridge_slave_1: left promiscuous mode [ 142.311752][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.342259][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 142.371228][ T12] bridge_slave_0: left allmulticast mode [ 142.383232][ T12] bridge_slave_0: left promiscuous mode [ 142.391657][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.392253][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.415381][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.432376][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.445178][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.453187][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.851621][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 142.959565][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.970996][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.982282][ T12] bond0 (unregistering): Released all slaves [ 143.659300][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 143.702396][ T12] hsr_slave_0: left promiscuous mode [ 143.745779][ T8078] Cannot find set identified by id 0 to match [ 143.775394][ T12] hsr_slave_1: left promiscuous mode [ 143.784260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.793782][ T8072] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 143.797939][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.826483][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 143.908798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.921625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.972988][ T12] veth1_macvtap: left promiscuous mode [ 143.979835][ T12] veth0_macvtap: left promiscuous mode [ 143.990077][ T12] veth1_vlan: left promiscuous mode [ 143.995990][ T12] veth0_vlan: left promiscuous mode [ 144.015318][ T64] wlan1: Trigger new scan to find an IBSS to join [ 144.495875][ T5862] Bluetooth: hci3: command tx timeout [ 144.653895][ T12] team0 (unregistering): Port device team_slave_1 removed [ 144.693858][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.199059][ T8094] tipc: Failed to obtain node identity [ 145.204617][ T8094] tipc: Enabling of bearer rejected, failed to enable media [ 145.575365][ T8116] Bluetooth: MGMT ver 1.23 [ 145.623654][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 145.813107][ T8134] FAULT_INJECTION: forcing a failure. [ 145.813107][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.869952][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.2.626 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 145.869985][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.869997][ T8134] Call Trace: [ 145.870004][ T8134] [ 145.870012][ T8134] dump_stack_lvl+0x189/0x250 [ 145.870044][ T8134] ? __pfx____ratelimit+0x10/0x10 [ 145.870075][ T8134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.870099][ T8134] ? __pfx__printk+0x10/0x10 [ 145.870127][ T8134] ? __might_fault+0xb0/0x130 [ 145.870163][ T8134] should_fail_ex+0x414/0x560 [ 145.870207][ T8134] _copy_from_user+0x2d/0xb0 [ 145.870232][ T8134] ___sys_sendmsg+0x158/0x2a0 [ 145.870262][ T8134] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.870329][ T8134] ? __fget_files+0x2a/0x420 [ 145.870355][ T8134] ? __fget_files+0x3a0/0x420 [ 145.870392][ T8134] __x64_sys_sendmsg+0x19b/0x260 [ 145.870422][ T8134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.870457][ T8134] ? __pfx_ksys_write+0x10/0x10 [ 145.870478][ T8134] ? rcu_is_watching+0x15/0xb0 [ 145.870509][ T8134] ? do_syscall_64+0xbe/0x3b0 [ 145.870533][ T8134] do_syscall_64+0xfa/0x3b0 [ 145.870552][ T8134] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.870582][ T8134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.870602][ T8134] ? clear_bhb_loop+0x60/0xb0 [ 145.870627][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.870647][ T8134] RIP: 0033:0x7fe26798e929 [ 145.870666][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.870683][ T8134] RSP: 002b:00007fe2657f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.870707][ T8134] RAX: ffffffffffffffda RBX: 00007fe267bb5fa0 RCX: 00007fe26798e929 [ 145.870721][ T8134] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 145.870734][ T8134] RBP: 00007fe2657f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.870747][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.870760][ T8134] R13: 0000000000000000 R14: 00007fe267bb5fa0 R15: 00007ffeb8628c48 [ 145.870794][ T8134] [ 146.282665][ T8150] __nla_validate_parse: 1 callbacks suppressed [ 146.282685][ T8150] netlink: 88 bytes leftover after parsing attributes in process `syz.4.631'. [ 146.367294][ T8143] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.392501][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.408785][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.418935][ T8030] bridge_slave_0: entered allmulticast mode [ 146.427104][ T8030] bridge_slave_0: entered promiscuous mode [ 146.438626][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.446115][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.453626][ T8030] bridge_slave_1: entered allmulticast mode [ 146.461930][ T8030] bridge_slave_1: entered promiscuous mode [ 146.513184][ T8156] netlink: 'syz.2.632': attribute type 11 has an invalid length. [ 146.536823][ T8156] netlink: 224 bytes leftover after parsing attributes in process `syz.2.632'. [ 146.574895][ T5862] Bluetooth: hci3: command tx timeout [ 146.586139][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.610112][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.709274][ T8030] team0: Port device team_slave_0 added [ 146.794428][ T8030] team0: Port device team_slave_1 added [ 146.872636][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 146.889386][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 146.911963][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 146.925570][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.637'. [ 146.943802][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.944238][ T8169] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.954827][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.001783][ T8173] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 147.016362][ T8173] netlink: 144 bytes leftover after parsing attributes in process `syz.0.638'. [ 147.020943][ T8169] netlink: 'syz.2.636': attribute type 13 has an invalid length. [ 147.028536][ T8173] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 147.043258][ T8173] netlink: 'syz.0.638': attribute type 2 has an invalid length. [ 147.055852][ T49] wlan1: Trigger new scan to find an IBSS to join [ 147.065075][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.070884][ T8173] netlink: 64 bytes leftover after parsing attributes in process `syz.0.638'. [ 147.169090][ T8169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.187092][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.196819][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.228187][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.389278][ T8030] hsr_slave_0: entered promiscuous mode [ 147.401311][ T8030] hsr_slave_1: entered promiscuous mode [ 147.423228][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.431233][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 147.434762][ T8030] Cannot create hsr debugfs directory [ 147.983416][ T8216] netlink: 300 bytes leftover after parsing attributes in process `syz.4.651'. [ 148.059589][ T4534] wlan1: Creating new IBSS network, BSSID 32:ca:7f:bd:4d:2a [ 148.552970][ T8242] sctp: [Deprecated]: syz.1.660 (pid 8242) Use of int in maxseg socket option. [ 148.552970][ T8242] Use struct sctp_assoc_value instead [ 148.656785][ T5862] Bluetooth: hci3: command tx timeout [ 148.974895][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.983582][ T12] wlan1: Trigger new scan to find an IBSS to join [ 149.079615][ T8267] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.088911][ T8267] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.097755][ T8267] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.107019][ T8267] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.198834][ T8256] syz_tun: entered promiscuous mode [ 149.204891][ T8256] syz_tun: entered allmulticast mode [ 149.351830][ T8030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.360336][ T8275] FAULT_INJECTION: forcing a failure. [ 149.360336][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.396973][ T8030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.400221][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.4.667 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 149.400248][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.400258][ T8275] Call Trace: [ 149.400265][ T8275] [ 149.400273][ T8275] dump_stack_lvl+0x189/0x250 [ 149.400299][ T8275] ? __pfx____ratelimit+0x10/0x10 [ 149.400328][ T8275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.400349][ T8275] ? __pfx__printk+0x10/0x10 [ 149.400374][ T8275] ? __might_fault+0xb0/0x130 [ 149.400414][ T8275] should_fail_ex+0x414/0x560 [ 149.400445][ T8275] _copy_from_iter+0x1db/0x16f0 [ 149.400468][ T8275] ? rcu_is_watching+0x15/0xb0 [ 149.400491][ T8275] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 149.400514][ T8275] ? __pfx__copy_from_iter+0x10/0x10 [ 149.400535][ T8275] ? __build_skb_around+0x257/0x3e0 [ 149.400559][ T8275] ? netlink_sendmsg+0x642/0xb30 [ 149.400579][ T8275] ? skb_put+0x11b/0x210 [ 149.400603][ T8275] netlink_sendmsg+0x6b2/0xb30 [ 149.400634][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.400659][ T8275] ? aa_sock_msg_perm+0x94/0x160 [ 149.400687][ T8275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.400712][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.400735][ T8275] __sock_sendmsg+0x21c/0x270 [ 149.400755][ T8275] ____sys_sendmsg+0x505/0x830 [ 149.400784][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.400816][ T8275] ? import_iovec+0x74/0xa0 [ 149.400840][ T8275] ___sys_sendmsg+0x21f/0x2a0 [ 149.400866][ T8275] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.400925][ T8275] ? __fget_files+0x2a/0x420 [ 149.400948][ T8275] ? __fget_files+0x3a0/0x420 [ 149.400982][ T8275] __x64_sys_sendmsg+0x19b/0x260 [ 149.401007][ T8275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.401040][ T8275] ? __pfx_ksys_write+0x10/0x10 [ 149.401058][ T8275] ? rcu_is_watching+0x15/0xb0 [ 149.401084][ T8275] ? do_syscall_64+0xbe/0x3b0 [ 149.401105][ T8275] do_syscall_64+0xfa/0x3b0 [ 149.401121][ T8275] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.401147][ T8275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.401169][ T8275] ? clear_bhb_loop+0x60/0xb0 [ 149.401190][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.401207][ T8275] RIP: 0033:0x7f890d38e929 [ 149.401223][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.401237][ T8275] RSP: 002b:00007f890e189038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.401258][ T8275] RAX: ffffffffffffffda RBX: 00007f890d5b5fa0 RCX: 00007f890d38e929 [ 149.401270][ T8275] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 149.401281][ T8275] RBP: 00007f890e189090 R08: 0000000000000000 R09: 0000000000000000 [ 149.401292][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.401302][ T8275] R13: 0000000000000000 R14: 00007f890d5b5fa0 R15: 00007fff5acfce78 [ 149.401332][ T8275] [ 149.889121][ T8030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.915198][ T8030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.279985][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.363647][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.404450][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.411763][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.443203][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.450482][ T801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.737000][ T5862] Bluetooth: hci3: command tx timeout [ 151.530191][ T8336] __nla_validate_parse: 4 callbacks suppressed [ 151.530221][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 151.795363][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.080284][ T8030] veth0_vlan: entered promiscuous mode [ 152.125979][ T8030] veth1_vlan: entered promiscuous mode [ 152.220276][ T8030] veth0_macvtap: entered promiscuous mode [ 152.241633][ T8030] veth1_macvtap: entered promiscuous mode [ 152.278156][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.310665][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 152.322365][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.361458][ T8030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.372125][ T8030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.385123][ T8030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.394007][ T8030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.439677][ T8360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.501579][ T8367] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 152.715835][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 152.737953][ T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.757186][ T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.857465][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.886097][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.280295][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 153.290284][ T8412] FAULT_INJECTION: forcing a failure. [ 153.290284][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 153.305198][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.1.706 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 153.305228][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.305239][ T8412] Call Trace: [ 153.305247][ T8412] [ 153.305256][ T8412] dump_stack_lvl+0x189/0x250 [ 153.305286][ T8412] ? __pfx____ratelimit+0x10/0x10 [ 153.305316][ T8412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.305339][ T8412] ? __pfx__printk+0x10/0x10 [ 153.305372][ T8412] ? __pfx___might_resched+0x10/0x10 [ 153.305394][ T8412] ? fs_reclaim_acquire+0x7d/0x100 [ 153.305427][ T8412] should_fail_ex+0x414/0x560 [ 153.305460][ T8412] should_failslab+0xa8/0x100 [ 153.305488][ T8412] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 153.305513][ T8412] ? __alloc_skb+0x112/0x2d0 [ 153.305542][ T8412] __alloc_skb+0x112/0x2d0 [ 153.305569][ T8412] netlink_ack+0x146/0xa50 [ 153.305589][ T8412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.305609][ T8412] ? ref_tracker_free+0x63a/0x7d0 [ 153.305635][ T8412] ? __copy_skb_header+0xa7/0x550 [ 153.305662][ T8412] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.305704][ T8412] netlink_rcv_skb+0x28c/0x470 [ 153.305728][ T8412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.305751][ T8412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.305789][ T8412] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.305812][ T8412] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.305840][ T8412] netlink_unicast+0x759/0x8e0 [ 153.305874][ T8412] netlink_sendmsg+0x805/0xb30 [ 153.305908][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.305933][ T8412] ? aa_sock_msg_perm+0x94/0x160 [ 153.305961][ T8412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.305989][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.306014][ T8412] __sock_sendmsg+0x21c/0x270 [ 153.306036][ T8412] ____sys_sendmsg+0x505/0x830 [ 153.306068][ T8412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.306103][ T8412] ? import_iovec+0x74/0xa0 [ 153.306130][ T8412] ___sys_sendmsg+0x21f/0x2a0 [ 153.306172][ T8412] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.306241][ T8412] ? __fget_files+0x2a/0x420 [ 153.306265][ T8412] ? __fget_files+0x3a0/0x420 [ 153.306303][ T8412] __x64_sys_sendmsg+0x19b/0x260 [ 153.306333][ T8412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.306369][ T8412] ? __pfx_ksys_write+0x10/0x10 [ 153.306390][ T8412] ? rcu_is_watching+0x15/0xb0 [ 153.306419][ T8412] ? do_syscall_64+0xbe/0x3b0 [ 153.306443][ T8412] do_syscall_64+0xfa/0x3b0 [ 153.306460][ T8412] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.306487][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.306506][ T8412] ? clear_bhb_loop+0x60/0xb0 [ 153.306531][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.306551][ T8412] RIP: 0033:0x7f34bab8e929 [ 153.306569][ T8412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.306584][ T8412] RSP: 002b:00007f34bb9b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.306607][ T8412] RAX: ffffffffffffffda RBX: 00007f34badb5fa0 RCX: 00007f34bab8e929 [ 153.306621][ T8412] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 153.306632][ T8412] RBP: 00007f34bb9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 153.306643][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.306654][ T8412] R13: 0000000000000000 R14: 00007f34badb5fa0 R15: 00007ffe70b94d18 [ 153.306685][ T8412] [ 153.326296][ T8413] netlink: 'syz.4.705': attribute type 2 has an invalid length. [ 153.369759][ T8415] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20004 [ 153.416143][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 153.457848][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.627982][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 153.642158][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 153.868614][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 154.000196][ T8428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.016985][ T4534] wlan1: Trigger new scan to find an IBSS to join [ 154.059968][ T8444] openvswitch: netlink: Message has 4 unknown bytes. [ 154.154255][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.358575][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.517377][ T8457] netlink: 'syz.0.715': attribute type 2 has an invalid length. [ 154.525465][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 154.575636][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 154.599726][ T8458] netlink: 'syz.0.715': attribute type 2 has an invalid length. [ 154.691222][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.809175][ T8466] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 154.862755][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.938031][ T36] wlan1: Creating new IBSS network, BSSID 82:ed:a7:1e:7a:97 [ 154.958378][ T8479] netlink: 'syz.4.721': attribute type 4 has an invalid length. [ 155.103486][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.119062][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.127443][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.143194][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.151242][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.603435][ T49] bridge_slave_1: left allmulticast mode [ 155.625524][ T49] bridge_slave_1: left promiscuous mode [ 155.638966][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.673077][ T49] bridge_slave_0: left allmulticast mode [ 155.683901][ T49] bridge_slave_0: left promiscuous mode [ 155.692307][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.218054][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.231275][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.241954][ T49] bond0 (unregistering): Released all slaves [ 156.320558][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.360605][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.610587][ T8539] __nla_validate_parse: 4 callbacks suppressed [ 156.610608][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 157.059658][ T49] hsr_slave_0: left promiscuous mode [ 157.113881][ T49] hsr_slave_1: left promiscuous mode [ 157.143743][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 157.151362][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.169392][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.177966][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.192509][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.221728][ T49] veth1_macvtap: left promiscuous mode [ 157.228227][ T5167] Bluetooth: hci3: command tx timeout [ 157.233350][ T49] veth0_macvtap: left promiscuous mode [ 157.239562][ T49] veth1_vlan: left promiscuous mode [ 157.245698][ T49] veth0_vlan: left promiscuous mode [ 157.724558][ T49] team0 (unregistering): Port device team_slave_1 removed [ 157.768309][ T49] team0 (unregistering): Port device team_slave_0 removed [ 158.301880][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 158.407809][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 158.768390][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.775927][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.783197][ T8483] bridge_slave_0: entered allmulticast mode [ 158.812602][ T8483] bridge_slave_0: entered promiscuous mode [ 158.850759][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.863202][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.874425][ T8483] bridge_slave_1: entered allmulticast mode [ 158.888925][ T8483] bridge_slave_1: entered promiscuous mode [ 158.979945][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.016000][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 159.022848][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.172642][ T8483] team0: Port device team_slave_0 added [ 159.194314][ T8483] team0: Port device team_slave_1 added [ 159.220375][ T8620] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 159.230771][ T8620] netlink: 224 bytes leftover after parsing attributes in process `syz.2.760'. [ 159.241775][ T8620] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 159.252741][ T8619] netlink: 68 bytes leftover after parsing attributes in process `syz.1.762'. [ 159.263616][ T8619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.762'. [ 159.294944][ T5167] Bluetooth: hci3: command tx timeout [ 159.311061][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.760'. [ 159.323640][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.330922][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.358100][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.377726][ T8620] gre0: entered promiscuous mode [ 159.384522][ T8620] gre0: entered allmulticast mode [ 159.399092][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.407515][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.436465][ T8623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.451373][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.688803][ T8483] hsr_slave_0: entered promiscuous mode [ 159.703655][ T8483] hsr_slave_1: entered promiscuous mode [ 159.718381][ T8483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.727577][ T8483] Cannot create hsr debugfs directory [ 160.695134][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.775'. [ 160.834136][ T8686] netlink: 48 bytes leftover after parsing attributes in process `syz.1.776'. [ 161.096071][ T8483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.110272][ T8483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.121367][ T8483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.134433][ T8483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.216630][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.241986][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.254724][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.261868][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.279584][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.286742][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.385000][ T5167] Bluetooth: hci3: command tx timeout [ 161.521203][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.572799][ T8483] veth0_vlan: entered promiscuous mode [ 161.587389][ T8483] veth1_vlan: entered promiscuous mode [ 161.618723][ T8483] veth0_macvtap: entered promiscuous mode [ 161.631202][ T8483] veth1_macvtap: entered promiscuous mode [ 161.651655][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.669554][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.682828][ T8483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.692742][ T8483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.702435][ T8483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.713900][ T8483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.793573][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.808185][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.836616][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.846384][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.858792][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.597115][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.606216][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.614733][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.624417][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.632447][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.812497][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 164.896779][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.904007][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.911455][ T8705] bridge_slave_0: entered allmulticast mode [ 164.919097][ T8705] bridge_slave_0: entered promiscuous mode [ 164.929300][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.937163][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.944401][ T8705] bridge_slave_1: entered allmulticast mode [ 164.952926][ T8705] bridge_slave_1: entered promiscuous mode [ 164.991938][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.006547][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.044435][ T8705] team0: Port device team_slave_0 added [ 165.054029][ T8705] team0: Port device team_slave_1 added [ 165.088615][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.096065][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.122295][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.135352][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.142357][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.169460][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.223513][ T8705] hsr_slave_0: entered promiscuous mode [ 165.230382][ T8705] hsr_slave_1: entered promiscuous mode [ 165.237327][ T8705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.245905][ T8705] Cannot create hsr debugfs directory [ 165.522622][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.603030][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.671124][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.760285][ T36] bridge_slave_1: left allmulticast mode [ 165.766252][ T36] bridge_slave_1: left promiscuous mode [ 165.771969][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.783240][ T36] bridge_slave_0: left allmulticast mode [ 165.794962][ T36] bridge_slave_0: left promiscuous mode [ 165.800716][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.121312][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.132958][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.144424][ T36] bond0 (unregistering): Released all slaves [ 166.413583][ T36] hsr_slave_0: left promiscuous mode [ 166.420419][ T36] hsr_slave_1: left promiscuous mode [ 166.432190][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.439824][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.447697][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.455328][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.476352][ T36] veth1_macvtap: left promiscuous mode [ 166.481897][ T36] veth0_macvtap: left promiscuous mode [ 166.487775][ T36] veth1_vlan: left promiscuous mode [ 166.493065][ T36] veth0_vlan: left promiscuous mode [ 166.655237][ T5167] Bluetooth: hci3: command tx timeout [ 166.934960][ T36] team0 (unregistering): Port device team_slave_1 removed [ 166.979867][ T36] team0 (unregistering): Port device team_slave_0 removed [ 167.462230][ T8705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.480482][ T8705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.497682][ T8705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.511331][ T8705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.647769][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.671581][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.685761][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.692986][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.709600][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.716802][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.923106][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.972721][ T8705] veth0_vlan: entered promiscuous mode [ 167.985076][ T8705] veth1_vlan: entered promiscuous mode [ 168.021748][ T8705] veth0_macvtap: entered promiscuous mode [ 168.031343][ T8705] veth1_macvtap: entered promiscuous mode [ 168.053309][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.068575][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.082282][ T8705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.091901][ T8705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.100767][ T8705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.109576][ T8705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.184994][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.192859][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.223959][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.231981][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.069289][ T4534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.960252][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.969684][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.978056][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.987801][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.997765][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.173641][ T8724] chnl_net:caif_netlink_parms(): no params data found [ 171.255158][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.262469][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.270028][ T8724] bridge_slave_0: entered allmulticast mode [ 171.277413][ T8724] bridge_slave_0: entered promiscuous mode [ 171.286536][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.293671][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.302612][ T8724] bridge_slave_1: entered allmulticast mode [ 171.310401][ T8724] bridge_slave_1: entered promiscuous mode [ 171.350723][ T8724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.362964][ T8724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.407237][ T8724] team0: Port device team_slave_0 added [ 171.415979][ T8724] team0: Port device team_slave_1 added [ 171.449282][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.456350][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.483281][ T8724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.495863][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.502854][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.530139][ T8724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.581455][ T8724] hsr_slave_0: entered promiscuous mode [ 171.588020][ T8724] hsr_slave_1: entered promiscuous mode [ 171.594061][ T8724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.602073][ T8724] Cannot create hsr debugfs directory [ 171.984362][ T4534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.040124][ T4534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.110276][ T4534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.237735][ T4534] bridge_slave_1: left allmulticast mode [ 172.243987][ T4534] bridge_slave_1: left promiscuous mode [ 172.250056][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.260078][ T4534] bridge_slave_0: left allmulticast mode [ 172.266195][ T4534] bridge_slave_0: left promiscuous mode [ 172.271967][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.590174][ T4534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.602110][ T4534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.613081][ T4534] bond0 (unregistering): Released all slaves [ 172.893636][ T4534] hsr_slave_0: left promiscuous mode [ 172.900665][ T4534] hsr_slave_1: left promiscuous mode [ 172.907051][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.914555][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.926403][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.933862][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.951635][ T4534] veth1_macvtap: left promiscuous mode [ 172.959582][ T4534] veth0_macvtap: left promiscuous mode [ 172.965512][ T4534] veth1_vlan: left promiscuous mode [ 172.970807][ T4534] veth0_vlan: left promiscuous mode [ 173.055597][ T5167] Bluetooth: hci3: command tx timeout [ 173.427953][ T4534] team0 (unregistering): Port device team_slave_1 removed [ 173.468061][ T4534] team0 (unregistering): Port device team_slave_0 removed [ 173.976375][ T8724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.988251][ T8724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.011361][ T8724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.031943][ T8724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.138033][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.169799][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.190621][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.197779][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.216975][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.224291][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.432267][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.479887][ T8724] veth0_vlan: entered promiscuous mode [ 174.491670][ T8724] veth1_vlan: entered promiscuous mode [ 174.522640][ T8724] veth0_macvtap: entered promiscuous mode [ 174.533016][ T8724] veth1_macvtap: entered promiscuous mode [ 174.554298][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.570529][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.583468][ T8724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.592497][ T8724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.601882][ T8724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.610763][ T8724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.681718][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.696623][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.722755][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.731009][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.449698][ T801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.410132][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.419623][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.427673][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.436314][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.444931][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.623053][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 177.712166][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.719641][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.727106][ T8743] bridge_slave_0: entered allmulticast mode [ 177.734239][ T8743] bridge_slave_0: entered promiscuous mode [ 177.742577][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.749900][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.757524][ T8743] bridge_slave_1: entered allmulticast mode [ 177.764922][ T8743] bridge_slave_1: entered promiscuous mode [ 177.803818][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.816819][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.855892][ T8743] team0: Port device team_slave_0 added [ 177.864070][ T8743] team0: Port device team_slave_1 added [ 177.897288][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.904279][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.930706][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.943684][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.950808][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.985236][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.011991][ T801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.064609][ T8743] hsr_slave_0: entered promiscuous mode [ 178.071149][ T8743] hsr_slave_1: entered promiscuous mode [ 178.077925][ T8743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.085093][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 178.086204][ T8743] Cannot create hsr debugfs directory [ 178.119581][ T801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.206948][ T801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.337739][ T801] bridge_slave_1: left allmulticast mode [ 178.343458][ T801] bridge_slave_1: left promiscuous mode [ 178.351532][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.360772][ T801] bridge_slave_0: left allmulticast mode [ 178.367813][ T801] bridge_slave_0: left promiscuous mode [ 178.373615][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.689763][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.701200][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.711516][ T801] bond0 (unregistering): Released all slaves [ 178.973017][ T801] hsr_slave_0: left promiscuous mode [ 178.980374][ T801] hsr_slave_1: left promiscuous mode [ 178.988100][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.996923][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.010006][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.023515][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.042367][ T801] veth1_macvtap: left promiscuous mode [ 179.047973][ T801] veth0_macvtap: left promiscuous mode [ 179.053544][ T801] veth1_vlan: left promiscuous mode [ 179.059472][ T801] veth0_vlan: left promiscuous mode [ 179.500051][ T801] team0 (unregistering): Port device team_slave_1 removed [ 179.537284][ T5167] Bluetooth: hci3: command tx timeout [ 179.557163][ T801] team0 (unregistering): Port device team_slave_0 removed [ 180.010608][ T8743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.027879][ T8743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.046958][ T8743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.058474][ T8743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.190558][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.212097][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.228532][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.235861][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.251874][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.259031][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.478353][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.531262][ T8743] veth0_vlan: entered promiscuous mode [ 180.545602][ T8743] veth1_vlan: entered promiscuous mode [ 180.578298][ T8743] veth0_macvtap: entered promiscuous mode [ 180.588338][ T8743] veth1_macvtap: entered promiscuous mode [ 180.610518][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.624229][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.640831][ T8743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.650122][ T8743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.659998][ T8743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.668960][ T8743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.738724][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.750669][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.773519][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.783086][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.740010][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.698112][ T8770] No such timeout policy "syz0" [ 183.862866][ T8782] pim6reg1: entered promiscuous mode [ 183.885329][ T8782] pim6reg1: entered allmulticast mode [ 184.463930][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.506772][ T8815] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 184.529668][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.550664][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.563306][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.580036][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.588230][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.637557][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.669869][ T8830] __nla_validate_parse: 3 callbacks suppressed [ 184.669890][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 184.760290][ T8830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.788830][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.876958][ T8830] vlan2: entered allmulticast mode [ 184.882339][ T8830] bond1: entered allmulticast mode [ 185.019019][ T8844] xt_limit: Overflow, try lower: 2147483649/128 [ 185.063805][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 185.208844][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 185.231188][ T8849] netlink: 164 bytes leftover after parsing attributes in process `syz.0.800'. [ 185.469667][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.805'. [ 185.579911][ T12] bridge_slave_1: left allmulticast mode [ 185.599990][ T12] bridge_slave_1: left promiscuous mode [ 185.617790][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.647269][ T12] bridge_slave_0: left allmulticast mode [ 185.652986][ T12] bridge_slave_0: left promiscuous mode [ 185.679006][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.133587][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.144510][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.154816][ T12] bond0 (unregistering): Released all slaves [ 186.186903][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 186.463989][ T8895] syzkaller1: entered promiscuous mode [ 186.487696][ T8895] syzkaller1: entered allmulticast mode [ 186.649440][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 186.666284][ T5862] Bluetooth: hci3: command tx timeout [ 186.703737][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.711180][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.719657][ T8820] bridge_slave_0: entered allmulticast mode [ 186.728074][ T8820] bridge_slave_0: entered promiscuous mode [ 186.770676][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.788530][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.815540][ T8820] bridge_slave_1: entered allmulticast mode [ 186.823692][ T8820] bridge_slave_1: entered promiscuous mode [ 186.880135][ T8919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.050540][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 187.083266][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.159909][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.228432][ T12] hsr_slave_0: left promiscuous mode [ 187.239204][ T12] hsr_slave_1: left promiscuous mode [ 187.245746][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.253276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.263719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.271596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.291999][ T12] veth1_macvtap: left promiscuous mode [ 187.298851][ T12] veth0_macvtap: left promiscuous mode [ 187.304477][ T12] veth1_vlan: left promiscuous mode [ 187.309895][ T12] veth0_vlan: left promiscuous mode [ 187.375120][ T801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 187.911073][ T12] team0 (unregistering): Port device team_slave_1 removed [ 187.963018][ T12] team0 (unregistering): Port device team_slave_0 removed [ 188.429822][ T8820] team0: Port device team_slave_0 added [ 188.441115][ T8941] tipc: Enabled bearer , priority 0 [ 188.495075][ T8942] syzkaller0: entered promiscuous mode [ 188.500801][ T8942] syzkaller0: entered allmulticast mode [ 188.517057][ T8820] team0: Port device team_slave_1 added [ 188.622178][ T8959] !: renamed from dummy0 (while UP) [ 188.714864][ T8946] tipc: Resetting bearer [ 188.745159][ T5862] Bluetooth: hci3: command tx timeout [ 188.802756][ T8946] tipc: Disabling bearer [ 188.911091][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.931369][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 188.939570][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.972013][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.981425][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 189.003201][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.010295][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.046544][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.116397][ T8985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.834'. [ 189.178952][ T8969] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 189.344263][ T8997] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 189.382966][ T8820] hsr_slave_0: entered promiscuous mode [ 189.405448][ T8820] hsr_slave_1: entered promiscuous mode [ 189.431829][ T8820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.453185][ T8820] Cannot create hsr debugfs directory [ 189.648841][ T9007] lo speed is unknown, defaulting to 1000 [ 189.702840][ T9007] lo speed is unknown, defaulting to 1000 [ 189.758748][ T9007] lo speed is unknown, defaulting to 1000 [ 190.003360][ T9023] __nla_validate_parse: 1 callbacks suppressed [ 190.003381][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 190.444762][ T5927] lo speed is unknown, defaulting to 1000 [ 190.450866][ T9007] infiniband syz0: set active [ 190.455844][ T9007] infiniband syz0: added lo [ 190.462863][ T9007] syz0: rxe_create_cq: returned err = -12 [ 190.482096][ T9007] infiniband syz0: Couldn't create ib_mad CQ [ 190.515367][ T9007] infiniband syz0: Couldn't open port 1 [ 190.579701][ T9041] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 190.612560][ T9007] RDS/IB: syz0: added [ 190.618306][ T9007] smc: adding ib device syz0 with port count 1 [ 190.621307][ T9044] xfrm1: entered allmulticast mode [ 190.625235][ T9007] smc: ib device syz0 port 1 has pnetid [ 190.642990][ T10] lo speed is unknown, defaulting to 1000 [ 190.668365][ T9041] batman_adv: batadv0: Adding interface: team0 [ 190.676652][ T9041] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 190.703666][ T9041] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 190.741644][ T9007] lo speed is unknown, defaulting to 1000 [ 190.834168][ T5862] Bluetooth: hci3: command tx timeout [ 190.886438][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 190.945371][ T8820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.983817][ T8820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.026243][ T8820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.087057][ T8820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.123006][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.4.856'. [ 191.152227][ T9063] netlink: 'syz.0.857': attribute type 23 has an invalid length. [ 191.302921][ T9061] netlink: 256 bytes leftover after parsing attributes in process `syz.0.857'. [ 191.330145][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 191.367455][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 191.484597][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.547817][ T9007] lo speed is unknown, defaulting to 1000 [ 191.549366][ T9080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.562970][ T9080] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 191.589751][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.613593][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 191.642149][ T9083] bridge4: entered promiscuous mode [ 191.648058][ T9083] bridge4: entered allmulticast mode [ 191.675845][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.683121][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.756756][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.763912][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.293758][ T9106] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 192.479877][ T9007] lo speed is unknown, defaulting to 1000 [ 192.512970][ T9113] netlink: 64 bytes leftover after parsing attributes in process `syz.4.870'. [ 192.550847][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'. [ 192.569118][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.598341][ T9115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.871'. [ 192.638245][ T9115] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 192.646132][ T9115] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 192.727765][ T9117] v: renamed from ip6_vti0 (while UP) [ 192.792389][ T8820] veth0_vlan: entered promiscuous mode [ 192.813152][ T8820] veth1_vlan: entered promiscuous mode [ 192.895937][ T5862] Bluetooth: hci3: command tx timeout [ 192.905337][ T8820] veth0_macvtap: entered promiscuous mode [ 192.939439][ T8820] veth1_macvtap: entered promiscuous mode [ 192.970604][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.998972][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.016427][ T8820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.028195][ T8820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.038851][ T8820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.049232][ T8820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.066320][ T9007] lo speed is unknown, defaulting to 1000 [ 193.216936][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.229907][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.320192][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.352790][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.696962][ T9007] lo speed is unknown, defaulting to 1000 [ 194.312391][ T9152] lo speed is unknown, defaulting to 1000 [ 194.398349][ T9162] tipc: Started in network mode [ 194.403379][ T9162] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 194.425342][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454055][ T9162] tipc: Enabled bearer , priority 10 [ 195.251066][ T4534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.337870][ T4534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.574913][ T5919] tipc: Node number set to 4269801514 [ 195.641123][ T4534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.712041][ T4534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.861232][ T4534] bridge_slave_1: left allmulticast mode [ 195.867104][ T4534] bridge_slave_1: left promiscuous mode [ 195.872931][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.889909][ T4534] bridge_slave_0: left allmulticast mode [ 195.895951][ T4534] bridge_slave_0: left promiscuous mode [ 195.903095][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.032550][ T9184] __nla_validate_parse: 4 callbacks suppressed [ 196.032573][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 196.276762][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 196.532159][ T9214] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 196.540209][ T9214] netlink: 144 bytes leftover after parsing attributes in process `syz.4.900'. [ 196.588703][ T9214] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 196.605478][ T9214] netlink: 'syz.4.900': attribute type 2 has an invalid length. [ 196.624787][ T9214] netlink: 64 bytes leftover after parsing attributes in process `syz.4.900'. [ 196.659331][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.675972][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.691245][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.713718][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.737231][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.804371][ T4534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.819872][ T4534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.831354][ T4534] bond0 (unregistering): Released all slaves [ 196.849303][ T9205] netlink: 'syz.1.898': attribute type 3 has an invalid length. [ 196.857356][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.898'. [ 196.890159][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.920865][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.087056][ T9218] lo speed is unknown, defaulting to 1000 [ 197.131610][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 197.177687][ T9221] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 197.322541][ T9242] x_tables: duplicate underflow at hook 2 [ 197.460713][ T9249] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 198.297648][ T4534] hsr_slave_0: left promiscuous mode [ 198.313985][ T9279] netlink: zone id is out of range [ 198.319927][ T4534] hsr_slave_1: left promiscuous mode [ 198.320280][ T9279] netlink: zone id is out of range [ 198.339694][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.347523][ T9279] netlink: zone id is out of range [ 198.353540][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.382757][ T9279] netlink: zone id is out of range [ 198.389767][ T9279] netlink: zone id is out of range [ 198.398033][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.410049][ T9279] netlink: zone id is out of range [ 198.420583][ T9279] netlink: zone id is out of range [ 198.426922][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.429104][ T9279] netlink: zone id is out of range [ 198.440914][ T9279] netlink: zone id is out of range [ 198.492204][ T4534] veth1_macvtap: left promiscuous mode [ 198.507346][ T4534] veth0_macvtap: left promiscuous mode [ 198.516263][ T4534] veth1_vlan: left promiscuous mode [ 198.521697][ T4534] veth0_vlan: left promiscuous mode [ 198.814928][ T5862] Bluetooth: hci3: command tx timeout [ 198.971315][ T9296] netlink: 388 bytes leftover after parsing attributes in process `syz.4.924'. [ 199.269313][ T4534] team0 (unregistering): Port device team_slave_1 removed [ 199.339035][ T4534] team0 (unregistering): Port device team_slave_0 removed [ 200.225277][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 200.384210][ T9329] Bluetooth: MGMT ver 1.23 [ 200.515086][ T9340] netlink: 'syz.1.936': attribute type 1 has an invalid length. [ 200.526699][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 200.547927][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.557197][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.564575][ T9218] bridge_slave_0: entered allmulticast mode [ 200.573695][ T9218] bridge_slave_0: entered promiscuous mode [ 200.591635][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.599106][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.606603][ T9218] bridge_slave_1: entered allmulticast mode [ 200.616575][ T9218] bridge_slave_1: entered promiscuous mode [ 200.694169][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.710347][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.737440][ T9342] bridge0: entered allmulticast mode [ 200.743527][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 200.762552][ T9342] bridge_slave_1: left allmulticast mode [ 200.769642][ T9342] bridge_slave_1: left promiscuous mode [ 200.776004][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.789012][ T9342] bridge_slave_0: left allmulticast mode [ 200.794932][ T9342] bridge_slave_0: left promiscuous mode [ 200.800850][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.825323][ T9342] bridge0 (unregistering): left allmulticast mode [ 200.884202][ T9218] team0: Port device team_slave_0 added [ 200.894982][ T5862] Bluetooth: hci3: command tx timeout [ 200.904400][ T9218] team0: Port device team_slave_1 added [ 200.952861][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.960304][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.995503][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.008793][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.015887][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.044605][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.278038][ T9218] hsr_slave_0: entered promiscuous mode [ 201.295300][ T9218] hsr_slave_1: entered promiscuous mode [ 201.303563][ T9218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.313481][ T9218] Cannot create hsr debugfs directory [ 201.551205][ T9357] xt_CT: No such helper "syz0" [ 201.643423][ T9376] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 201.660270][ T9375] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 201.739437][ T9376] bond2: entered promiscuous mode [ 201.745350][ T9376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.753859][ T9375] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 201.807786][ T9382] netlink: 'syz.4.949': attribute type 10 has an invalid length. [ 201.820205][ T9374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.831952][ T9374] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 201.854144][ T9374] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 201.878450][ T9374] bond2: (slave wireguard0): making interface the new active one [ 201.886920][ T9374] wireguard0: entered promiscuous mode [ 201.895033][ T9374] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 202.120801][ T9387] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 202.458794][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 202.499891][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 202.509343][ T9411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.957'. [ 202.509370][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 202.509407][ T9411] netlink: 31 bytes leftover after parsing attributes in process `syz.0.957'. [ 202.509424][ T9411] netlink: 'syz.0.957': attribute type 2 has an invalid length. [ 202.509458][ T9411] netlink: 31 bytes leftover after parsing attributes in process `syz.0.957'. [ 202.679259][ T9218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.696033][ T9218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.733942][ T9218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.762910][ T9218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.890555][ T9425] netlink: 128 bytes leftover after parsing attributes in process `syz.2.961'. [ 202.931004][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 202.974891][ T5862] Bluetooth: hci3: command tx timeout [ 203.009107][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.107269][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.148966][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.156325][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.189663][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.196950][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.229861][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 203.287739][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 203.359312][ T9436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.516485][ T9441] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 204.124879][ T9472] lo speed is unknown, defaulting to 1000 [ 204.417775][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.526606][ T9491] vlan0: entered promiscuous mode [ 204.552595][ T9491] team0: Port device vlan0 added [ 204.632397][ T9218] veth0_vlan: entered promiscuous mode [ 204.654972][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.721942][ T9218] veth1_vlan: entered promiscuous mode [ 204.812122][ T9218] veth0_macvtap: entered promiscuous mode [ 204.862502][ T9218] veth1_macvtap: entered promiscuous mode [ 204.913517][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.995837][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.038048][ T9218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.055608][ T5862] Bluetooth: hci3: command tx timeout [ 205.070177][ T9218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.081668][ T9218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.114432][ T9218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.243422][ T9517] nbd: illegal input index -8454144 [ 205.559681][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.594674][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.663553][ T9528] xt_cgroup: path and classid specified [ 205.745722][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.753666][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.895049][ T9533] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 205.902759][ T9533] netlink: 'syz.1.995': attribute type 2 has an invalid length. [ 206.389474][ T801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.573752][ T801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.650388][ T801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.817724][ T801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.903721][ T801] bridge_slave_1: left allmulticast mode [ 206.910236][ T801] bridge_slave_1: left promiscuous mode [ 206.916231][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.926359][ T801] bridge_slave_0: left allmulticast mode [ 206.932047][ T801] bridge_slave_0: left promiscuous mode [ 206.937889][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.277042][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.287949][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.299115][ T801] bond0 (unregistering): Released all slaves [ 207.730203][ T9567] __nla_validate_parse: 145 callbacks suppressed [ 207.730225][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 207.787242][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1006'. [ 207.869215][ T801] hsr_slave_0: left promiscuous mode [ 207.927417][ T801] hsr_slave_1: left promiscuous mode [ 207.950293][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.988139][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.014207][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.041995][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.134432][ T801] veth1_macvtap: left promiscuous mode [ 208.151263][ T801] veth0_macvtap: left promiscuous mode [ 208.171807][ T801] veth1_vlan: left promiscuous mode [ 208.191914][ T801] veth0_vlan: left promiscuous mode [ 208.422222][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.440203][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.450180][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.458598][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.467785][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.561990][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 208.890437][ T801] team0 (unregistering): Port device team_slave_1 removed [ 208.934150][ T801] team0 (unregistering): Port device team_slave_0 removed [ 209.007496][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 209.349258][ T9573] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 209.361400][ T9573] batman_adv: batadv0: Adding interface: netdevsim0 [ 209.368998][ T9573] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.408874][ T9573] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 209.530642][ T9597] syzkaller0: entered promiscuous mode [ 209.536412][ T9597] syzkaller0: entered allmulticast mode [ 209.784949][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.577114][ T5167] Bluetooth: hci3: command tx timeout [ 211.279488][ T9594] lo speed is unknown, defaulting to 1000 [ 211.857173][ T5167] Bluetooth: hci1: command 0x0406 tx timeout [ 211.862679][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 212.006477][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 212.080763][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 212.398186][ T9667] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.530325][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 212.654980][ T5848] Bluetooth: hci3: command tx timeout [ 212.678387][ T9681] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 212.831153][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.852282][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.861270][ T9594] bridge_slave_0: entered allmulticast mode [ 212.869761][ T9594] bridge_slave_0: entered promiscuous mode [ 212.879086][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.886649][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.894261][ T9594] bridge_slave_1: entered allmulticast mode [ 212.906707][ T9594] bridge_slave_1: entered promiscuous mode [ 212.975621][ T9694] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 212.999102][ T9694] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 213.023016][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 213.089886][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.124450][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.189503][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 213.208206][ T9670] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.218885][ T9706] ip6t_REJECT: ECHOREPLY is not supported [ 213.238375][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 213.245297][ T9594] team0: Port device team_slave_0 added [ 213.272130][ T9594] team0: Port device team_slave_1 added [ 213.287408][ T9706] netlink: 'syz.4.1044': attribute type 2 has an invalid length. [ 213.363468][ T9710] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 213.371652][ T9710] batman_adv: batadv0: Interface activated: netdevsim0 [ 213.385839][ T9710] bond_slave_0: entered promiscuous mode [ 213.391720][ T9710] bond_slave_1: entered promiscuous mode [ 213.400474][ T9710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.438104][ T9710] bond2: left promiscuous mode [ 213.442940][ T9710] wireguard0: left promiscuous mode [ 213.452352][ T24] lo speed is unknown, defaulting to 1000 [ 213.602398][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.613712][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.652886][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 213.671029][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.697414][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.712760][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.743624][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.764458][ T9723] bridge_slave_0: invalid flags given to default FDB implementation [ 213.878182][ T9729] netlink: 'syz.0.1053': attribute type 2 has an invalid length. [ 213.951126][ T9731] macsec1: entered allmulticast mode [ 213.961907][ T9731] team0: entered allmulticast mode [ 213.967327][ T9731] team_slave_0: entered allmulticast mode [ 213.974981][ T9731] team_slave_1: entered allmulticast mode [ 213.984008][ T9731] team0: left allmulticast mode [ 213.990846][ T9731] team_slave_0: left allmulticast mode [ 213.999531][ T9731] team_slave_1: left allmulticast mode [ 214.058136][ T9594] hsr_slave_0: entered promiscuous mode [ 214.081012][ T9594] hsr_slave_1: entered promiscuous mode [ 214.088973][ T9594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.097399][ T9594] Cannot create hsr debugfs directory [ 214.108248][ T9737] tipc: Enabled bearer , priority 10 [ 214.130060][ T9737] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 214.171252][ T9742] delete_channel: no stack [ 214.188793][ T9737] bond4: entered promiscuous mode [ 214.193986][ T9737] bond4: entered allmulticast mode [ 214.201559][ T9737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.212820][ T9738] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 214.263299][ T9738] bond5: entered promiscuous mode [ 214.268735][ T9738] bond5: entered allmulticast mode [ 214.274418][ T9738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.506723][ T9749] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1060'. [ 214.617342][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 214.735157][ T5848] Bluetooth: hci3: command tx timeout [ 214.979151][ T13] wlan1: Trigger new scan to find an IBSS to join [ 215.156316][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 215.191827][ T9778] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1071'. [ 215.314160][ T9594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.336153][ T9594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.381066][ T9594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.396258][ T9594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.422183][ T9783] lo speed is unknown, defaulting to 1000 [ 215.883429][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.998927][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.031195][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.038568][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.083991][ T9821] netlink: 'syz.1.1080': attribute type 8 has an invalid length. [ 216.126686][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.133993][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.225270][ T9825] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 216.301603][ T9825] batman_adv: batadv0: Removing interface: team0 [ 216.305836][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 216.317689][ T9829] netlink: 'syz.1.1083': attribute type 5 has an invalid length. [ 216.325684][ T9829] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1083'. [ 216.327095][ T9825] bond0: (slave bond_slave_0): Releasing backup interface [ 216.347966][ T9825] bond0: (slave bond_slave_1): Releasing backup interface [ 216.366964][ T9830] netlink: 'syz.4.1081': attribute type 10 has an invalid length. [ 216.385690][ T9825] team0: Port device team_slave_0 removed [ 216.401394][ T9825] team0: Port device team_slave_1 removed [ 216.409107][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.419222][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.428443][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.436644][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.476711][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.485627][ T9829] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 216.494592][ T9829] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 216.506331][ T9829] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 216.515703][ T9829] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 216.524607][ T9829] geneve2: entered promiscuous mode [ 216.530841][ T9829] geneve2: entered allmulticast mode [ 216.550721][ T9830] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 216.567172][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.583621][ T9830] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.815465][ T5848] Bluetooth: hci3: command tx timeout [ 217.237486][ T9854] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 217.280639][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.296418][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.483991][ T9594] veth0_vlan: entered promiscuous mode [ 217.546094][ T9594] veth1_vlan: entered promiscuous mode [ 217.612900][ T9866] xt_cgroup: path and classid specified [ 217.630089][ T9594] veth0_macvtap: entered promiscuous mode [ 217.673248][ T9594] veth1_macvtap: entered promiscuous mode [ 217.737778][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.778516][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.811035][ T9594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.823478][ T9594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.837577][ T9594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.849301][ T9594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.040184][ T9880] __nla_validate_parse: 4 callbacks suppressed [ 218.040205][ T9880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1102'. [ 218.153926][ T9886] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.1103'. [ 218.168302][ T9886] net_ratelimit: 6 callbacks suppressed [ 218.168322][ T9886] netlink: zone id is out of range [ 218.181195][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.184880][ T9886] netlink: zone id is out of range [ 218.211029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.211888][ T9886] netlink: zone id is out of range [ 218.246180][ T9886] netlink: zone id is out of range [ 218.254562][ T9886] netlink: zone id is out of range [ 218.275998][ T9886] netlink: zone id is out of range [ 218.281184][ T9886] netlink: zone id is out of range [ 218.293688][ T9886] netlink: zone id is out of range [ 218.316479][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.324987][ T9886] netlink: zone id is out of range [ 218.326846][ T9886] netlink: zone id is out of range [ 218.334708][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.649009][ T9906] lo speed is unknown, defaulting to 1000 [ 218.791409][ T9923] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.886578][ T9927] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 218.963287][ T9928] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 219.122901][ T9928] bond2: (slave bridge2): making interface the new active one [ 219.132045][ T9928] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 219.351726][ T4534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.519848][ T4534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.763077][ T4534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.847371][ T4534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.969437][ T4534] bridge_slave_1: left allmulticast mode [ 219.979139][ T4534] bridge_slave_1: left promiscuous mode [ 219.985813][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.997057][ T4534] bridge_slave_0: left allmulticast mode [ 220.002735][ T4534] bridge_slave_0: left promiscuous mode [ 220.011064][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.027186][ T12] wlan1: Trigger new scan to find an IBSS to join [ 220.358400][ T4534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.369596][ T4534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.380941][ T4534] bond0 (unregistering): Released all slaves [ 220.716557][ T9954] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 220.724550][ T9954] netlink: 'syz.4.1118': attribute type 11 has an invalid length. [ 220.735128][ T9954] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1118'. [ 220.840489][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1118'. [ 220.858712][ T9962] netlink: 'syz.0.1120': attribute type 33 has an invalid length. [ 220.878439][ T9962] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1120'. [ 220.901099][ T9949] macvtap1: entered promiscuous mode [ 220.914771][ T9949] vlan0: entered promiscuous mode [ 220.920555][ T9949] macvtap1: entered allmulticast mode [ 220.940749][ T9949] vlan0: entered allmulticast mode [ 220.942235][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 220.954751][ T9949] veth0_vlan: entered allmulticast mode [ 220.963864][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 220.977062][ T9966] netlink: 'syz.1.1121': attribute type 5 has an invalid length. [ 220.985830][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 220.998763][ T801] wlan1: Creating new IBSS network, BSSID 56:1b:aa:03:de:ac [ 221.020521][ T9949] vlan0: left allmulticast mode [ 221.033932][ T9949] veth0_vlan: left allmulticast mode [ 221.047252][ T9949] vlan0: left promiscuous mode [ 221.133168][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.153702][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.163775][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.176871][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.186469][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.320863][ T9966] geneve3: entered promiscuous mode [ 221.327085][ T9966] geneve3: entered allmulticast mode [ 221.479695][ T9976] syzkaller1: entered promiscuous mode [ 221.488692][ T9976] syzkaller1: entered allmulticast mode [ 221.760909][ T9970] lo speed is unknown, defaulting to 1000 [ 221.826506][ T4534] hsr_slave_0: left promiscuous mode [ 221.843921][ T4534] hsr_slave_1: left promiscuous mode [ 221.866620][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.881988][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.894908][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 221.905572][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.924352][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.993000][ T4534] veth1_macvtap: left promiscuous mode [ 222.010150][ T4534] veth0_macvtap: left promiscuous mode [ 222.021591][ T4534] veth1_vlan: left promiscuous mode [ 222.031271][ T4534] veth0_vlan: left promiscuous mode [ 222.653170][ T4534] team0 (unregistering): Port device team_slave_1 removed [ 222.693389][ T4534] team0 (unregistering): Port device team_slave_0 removed [ 223.100982][ T9988] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 223.101531][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1130'. [ 223.124866][T10000] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1131'. [ 223.215086][ T5848] Bluetooth: hci3: command tx timeout [ 223.461520][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 223.524459][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 223.614295][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1136'. [ 223.667608][T10030] netlink: 'syz.2.1136': attribute type 7 has an invalid length. [ 223.677551][T10030] netlink: 'syz.2.1136': attribute type 8 has an invalid length. [ 223.693540][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 223.808845][T10034] xt_policy: too many policy elements [ 223.833944][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.841559][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.849576][ T9970] bridge_slave_0: entered allmulticast mode [ 223.874843][ T9970] bridge_slave_0: entered promiscuous mode [ 223.884234][T10016] lo speed is unknown, defaulting to 1000 [ 223.926187][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.933497][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.959886][ T9970] bridge_slave_1: entered allmulticast mode [ 223.977723][ T9970] bridge_slave_1: entered promiscuous mode [ 224.193166][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.239345][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.480757][T10059] netlink: 'syz.2.1145': attribute type 12 has an invalid length. [ 224.528471][ T9970] team0: Port device team_slave_0 added [ 224.586320][ T9970] team0: Port device team_slave_1 added [ 224.643242][T10070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1148'. [ 224.719241][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.729103][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.732412][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1148'. [ 224.776928][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.823221][T10075] net_ratelimit: 226 callbacks suppressed [ 224.823242][T10075] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 224.910869][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.918278][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.946800][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.201750][ T9970] hsr_slave_0: entered promiscuous mode [ 225.214269][ T9970] hsr_slave_1: entered promiscuous mode [ 225.230240][ T9970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.250363][ T9970] Cannot create hsr debugfs directory [ 225.263042][T10083] tipc: Started in network mode [ 225.273269][T10083] tipc: Node identity 080211000001, cluster identity 4711 [ 225.281022][T10083] tipc: Enabled bearer , priority 0 [ 225.302014][ T5848] Bluetooth: hci3: command tx timeout [ 225.324417][T10081] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 225.333697][T10081] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 225.351984][T10081] tipc: Resetting bearer [ 225.437634][ T4086] tipc: Resetting bearer [ 225.485854][T10082] tipc: Resetting bearer [ 225.656934][T10085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.986233][T10103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.068008][T10106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.256335][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 226.299807][T10112] netlink: 'syz.2.1161': attribute type 2 has an invalid length. [ 226.354774][ T5937] tipc: Node number set to 134418688 [ 226.471912][ T9970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.502337][ T9970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.530787][ T9970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.565182][ T9970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.573985][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 226.618180][T10119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.628279][T10119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.639930][T10119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.649847][T10119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.660501][T10119] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 226.667791][T10119] batman_adv: batadv0: Removing interface: netdevsim0 [ 226.980248][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.032478][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.068667][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.075918][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.170790][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.178063][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.230100][T10151] netlink: 'syz.4.1171': attribute type 16 has an invalid length. [ 227.250684][T10151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1171'. [ 227.377498][ T5848] Bluetooth: hci3: command tx timeout [ 227.776707][T10182] netlink: 'syz.2.1179': attribute type 4 has an invalid length. [ 227.877695][T10186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.939134][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.032600][ T9970] veth0_vlan: entered promiscuous mode [ 228.072373][T10190] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 228.072779][T10191] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 228.089241][T10193] xt_TCPMSS: Only works on TCP SYN packets [ 228.127633][ T9970] veth1_vlan: entered promiscuous mode [ 228.162539][T10195] __nla_validate_parse: 2 callbacks suppressed [ 228.162558][T10195] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1184'. [ 228.179028][T10195] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1184'. [ 228.251902][ T9970] veth0_macvtap: entered promiscuous mode [ 228.281612][ T9970] veth1_macvtap: entered promiscuous mode [ 228.329793][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.351431][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.382903][ T9970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.405020][ T9970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.414443][ T9970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.423770][ T9970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.644907][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.652789][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.834081][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.862074][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.415953][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.426703][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.432652][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 229.439533][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.444577][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 229.451889][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.475348][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.475867][T10233] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.492850][T10233] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.502166][T10233] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.510933][T10233] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.572564][T10230] lo speed is unknown, defaulting to 1000 [ 229.682085][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 229.696062][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 229.978197][T10247] tipc: Enabled bearer , priority 0 [ 230.001203][T10247] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 230.009587][T10247] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 230.119059][T10247] tipc: Resetting bearer [ 230.178503][T10230] chnl_net:caif_netlink_parms(): no params data found [ 230.428940][ T4086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.683378][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.692685][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.700553][T10230] bridge_slave_0: entered allmulticast mode [ 230.708898][T10230] bridge_slave_0: entered promiscuous mode [ 230.719702][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.727330][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.734525][T10230] bridge_slave_1: entered allmulticast mode [ 230.742360][T10230] bridge_slave_1: entered promiscuous mode [ 230.776874][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.790139][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.826420][ T4086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.857560][T10230] team0: Port device team_slave_0 added [ 230.866685][T10230] team0: Port device team_slave_1 added [ 230.900369][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.908185][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.934384][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.946496][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.953494][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.980815][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.035660][T10230] hsr_slave_0: entered promiscuous mode [ 231.042368][T10230] hsr_slave_1: entered promiscuous mode [ 231.048594][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.057117][T10230] Cannot create hsr debugfs directory [ 231.077211][ T4086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.159754][ T4086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.267541][T10230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.323258][ T4086] bridge_slave_1: left allmulticast mode [ 231.329627][ T4086] bridge_slave_1: left promiscuous mode [ 231.337341][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.346725][ T4086] bridge_slave_0: left allmulticast mode [ 231.352389][ T4086] bridge_slave_0: left promiscuous mode [ 231.358798][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.535461][ T5862] Bluetooth: hci3: command tx timeout [ 231.681360][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.693606][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.704436][ T4086] bond0 (unregistering): Released all slaves [ 231.878248][T10230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.985476][T10286] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 232.151032][T10291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1210'. [ 232.167946][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 232.187804][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1210'. [ 232.240110][T10230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.344400][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.356236][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.364597][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.379820][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.389093][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.479039][T10301] syzkaller1: entered promiscuous mode [ 232.493351][T10301] syzkaller1: entered allmulticast mode [ 232.689764][T10293] lo speed is unknown, defaulting to 1000 [ 232.942926][T10230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.981886][ T4086] hsr_slave_0: left promiscuous mode [ 232.988326][ T4086] hsr_slave_1: left promiscuous mode [ 232.994519][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.006298][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.016017][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.024002][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.052877][ T4086] veth1_macvtap: left promiscuous mode [ 233.059608][ T4086] veth0_macvtap: left promiscuous mode [ 233.070074][ T4086] veth1_vlan: left promiscuous mode [ 233.076232][ T4086] veth0_vlan: left promiscuous mode [ 233.625087][ T5862] Bluetooth: hci3: command tx timeout [ 233.632456][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 233.687149][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 233.919629][T10324] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 234.182718][T10230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.193174][T10316] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1216'. [ 234.224064][T10230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.257806][T10230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.416748][ T5862] Bluetooth: hci4: command tx timeout [ 234.677272][T10351] netem: incorrect ge model size [ 234.683274][T10351] netem: change failed [ 234.766631][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1223'. [ 234.779412][T10358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1223'. [ 234.841027][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.877416][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.920352][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.927631][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.980609][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.987861][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.007065][T10293] chnl_net:caif_netlink_parms(): no params data found [ 235.026752][T10365] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 235.073910][T10367] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1226'. [ 235.083865][T10367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1226'. [ 235.257836][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.273338][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.281452][T10293] bridge_slave_0: entered allmulticast mode [ 235.294177][T10293] bridge_slave_0: entered promiscuous mode [ 235.322682][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.330208][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.337998][T10293] bridge_slave_1: entered allmulticast mode [ 235.346570][T10293] bridge_slave_1: entered promiscuous mode [ 235.398556][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.431805][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.526879][T10293] team0: Port device team_slave_0 added [ 235.548054][T10293] team0: Port device team_slave_1 added [ 235.647433][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.654442][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.667622][T10382] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 235.705421][ T5862] Bluetooth: hci3: command tx timeout [ 235.719939][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.742050][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.749659][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.780949][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.829085][T10385] kthread_run failed with err -4 [ 235.928515][T10293] hsr_slave_0: entered promiscuous mode [ 235.955649][T10293] hsr_slave_1: entered promiscuous mode [ 235.966328][T10293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.979054][T10293] Cannot create hsr debugfs directory [ 235.991746][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.049461][T10394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.380712][T10230] veth0_vlan: entered promiscuous mode [ 236.497937][ T5862] Bluetooth: hci4: command tx timeout [ 236.612565][T10230] veth1_vlan: entered promiscuous mode [ 236.769959][T10230] veth0_macvtap: entered promiscuous mode [ 236.783701][T10230] veth1_macvtap: entered promiscuous mode [ 236.854932][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.890895][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.938513][T10230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.978623][T10230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.988583][T10230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.001325][T10230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.326276][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 237.343094][T10416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'. [ 237.431652][T10416] geneve4: entered promiscuous mode [ 237.437220][T10416] geneve4: entered allmulticast mode [ 237.534303][T10293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.670477][T10293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.696926][T10293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.711079][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.741224][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.775311][ T5862] Bluetooth: hci3: command tx timeout [ 237.790173][T10293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.868717][ T4534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.885090][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.146360][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.180603][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.197262][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 238.210825][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.218211][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.574867][ T5862] Bluetooth: hci4: command tx timeout [ 238.759022][ T801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.808482][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.815752][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.855505][T10446] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1248'. [ 238.925502][ T801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.088654][ T801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.101306][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.116810][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.125580][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.142169][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.155882][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.232150][ T801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.363061][T10455] lo speed is unknown, defaulting to 1000 [ 239.922720][ T801] bridge_slave_1: left allmulticast mode [ 239.956786][ T801] bridge_slave_1: left promiscuous mode [ 239.972912][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.989931][T10483] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 240.016227][T10483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1258'. [ 240.036672][ T801] bridge_slave_0: left allmulticast mode [ 240.042386][ T801] bridge_slave_0: left promiscuous mode [ 240.044718][T10483] nbd: illegal input index 1048576 [ 240.081358][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.185686][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 240.195229][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1258'. [ 240.610203][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.624141][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.639188][ T801] bond0 (unregistering): Released all slaves [ 240.655659][ T5848] Bluetooth: hci4: command tx timeout [ 240.783246][T10486] lo speed is unknown, defaulting to 1000 [ 240.913164][T10492] netlink: 'syz.4.1259': attribute type 2 has an invalid length. [ 241.025432][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.215136][ T5848] Bluetooth: hci3: command tx timeout [ 241.240956][T10500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1262'. [ 241.259556][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 241.269413][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 241.480440][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 241.685989][T10455] chnl_net:caif_netlink_parms(): no params data found [ 241.719745][ T801] hsr_slave_0: left promiscuous mode [ 241.797531][ T801] hsr_slave_1: left promiscuous mode [ 241.819210][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.831289][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.847012][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.863033][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.942366][ T801] veth1_macvtap: left promiscuous mode [ 241.948375][ T801] veth0_macvtap: left promiscuous mode [ 241.954120][ T801] veth1_vlan: left promiscuous mode [ 241.975724][ T801] veth0_vlan: left promiscuous mode [ 242.463870][ T801] team0 (unregistering): Port device team_slave_1 removed [ 242.506291][ T801] team0 (unregistering): Port device team_slave_0 removed [ 242.944231][T10293] veth0_vlan: entered promiscuous mode [ 243.016360][T10293] veth1_vlan: entered promiscuous mode [ 243.129207][T10520] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 243.149509][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 243.295773][ T5848] Bluetooth: hci3: command tx timeout [ 243.321060][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.332468][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.340461][T10455] bridge_slave_0: entered allmulticast mode [ 243.350945][T10455] bridge_slave_0: entered promiscuous mode [ 243.367582][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.381910][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.389532][T10455] bridge_slave_1: entered allmulticast mode [ 243.410817][T10455] bridge_slave_1: entered promiscuous mode [ 243.553504][T10530] ip6gre2: entered allmulticast mode [ 243.571651][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.599703][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.707162][T10455] team0: Port device team_slave_0 added [ 243.733023][T10293] veth0_macvtap: entered promiscuous mode [ 243.751717][T10455] team0: Port device team_slave_1 added [ 243.830322][T10293] veth1_macvtap: entered promiscuous mode [ 243.955066][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.964035][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.991322][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.008161][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.016436][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.043550][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.077539][T10546] tap0: tun_chr_ioctl cmd 1074025677 [ 244.083321][T10546] tap0: linktype set to 65534 [ 244.186730][T10293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.209655][T10455] hsr_slave_0: entered promiscuous mode [ 244.218483][T10455] hsr_slave_1: entered promiscuous mode [ 244.226098][T10455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.234258][T10455] Cannot create hsr debugfs directory [ 244.251983][T10293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.314528][T10293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.327626][T10293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.338549][T10293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.347482][T10293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.692553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.714520][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.785176][T10567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.827774][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.846329][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.856793][T10567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.092696][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 245.134362][T10582] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 245.168372][T10455] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.194320][T10455] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.207409][T10455] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.247664][T10455] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.326978][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.375035][ T5848] Bluetooth: hci3: command tx timeout [ 245.466622][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.588798][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.651298][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.690653][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.714254][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.739887][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.747101][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.791661][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.798813][ T801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.833233][ T13] bridge_slave_1: left allmulticast mode [ 245.839249][ T13] bridge_slave_1: left promiscuous mode [ 245.846053][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.855886][ T13] bridge_slave_0: left allmulticast mode [ 245.861559][ T13] bridge_slave_0: left promiscuous mode [ 245.867603][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.207815][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.218874][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.230170][ T13] bond0 (unregistering): Released all slaves [ 246.534593][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.602458][T10455] veth0_vlan: entered promiscuous mode [ 246.624323][T10455] veth1_vlan: entered promiscuous mode [ 246.703570][T10455] veth0_macvtap: entered promiscuous mode [ 246.723121][ T13] hsr_slave_0: left promiscuous mode [ 246.731125][ T13] hsr_slave_1: left promiscuous mode [ 246.739175][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.747617][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.755910][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.763332][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.783407][ T13] veth1_macvtap: left promiscuous mode [ 246.789234][ T13] veth0_macvtap: left promiscuous mode [ 246.797231][ T13] veth1_vlan: left promiscuous mode [ 246.802649][ T13] veth0_vlan: left promiscuous mode [ 246.935796][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 247.130849][T10624] openvswitch: netlink: Missing key (keys=40, expected=100) [ 247.262262][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1291'. [ 247.455010][ T5848] Bluetooth: hci3: command tx timeout [ 247.534675][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.543812][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.552339][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.562751][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.571874][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.594003][T10633] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1294'. [ 247.857353][ T13] team0 (unregistering): Port device team_slave_1 removed [ 247.908186][ T13] team0 (unregistering): Port device team_slave_0 removed [ 248.193105][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 248.203821][ T64] ------------[ cut here ]------------ [ 248.209571][ T64] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 248.217580][ T64] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 248.231413][ T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:4 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 248.231442][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.231455][ T64] Workqueue: events_unbound cfg80211_wiphy_work [ 248.231485][ T64] Call Trace: [ 248.231493][ T64] [ 248.231504][ T64] dump_stack_lvl+0x189/0x250 [ 248.231536][ T64] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.231561][ T64] ? __pfx__printk+0x10/0x10 [ 248.231605][ T64] ubsan_epilogue+0xa/0x40 [ 248.231631][ T64] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 248.231664][ T64] ieee80211_request_ibss_scan+0x600/0x8b0 [ 248.231715][ T64] ieee80211_ibss_work+0xd85/0x1060 [ 248.231744][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.231777][ T64] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 248.231805][ T64] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.231835][ T64] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 248.231871][ T64] ? skb_dequeue+0x10e/0x150 [ 248.231889][ T64] ? ieee80211_iface_work+0xcdb/0xfe0 [ 248.231912][ T64] ? ieee80211_iface_work+0xf39/0xfe0 [ 248.231935][ T64] ? rcu_is_watching+0x15/0xb0 [ 248.231965][ T64] cfg80211_wiphy_work+0x2dc/0x460 [ 248.231999][ T64] ? process_scheduled_works+0x9ef/0x17b0 [ 248.232027][ T64] process_scheduled_works+0xae1/0x17b0 [ 248.232089][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.232136][ T64] worker_thread+0x8a0/0xda0 [ 248.232197][ T64] kthread+0x70e/0x8a0 [ 248.232229][ T64] ? __pfx_worker_thread+0x10/0x10 [ 248.232252][ T64] ? __pfx_kthread+0x10/0x10 [ 248.232282][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.232318][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.232345][ T64] ? __pfx_kthread+0x10/0x10 [ 248.232374][ T64] ret_from_fork+0x3fc/0x770 [ 248.232401][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 248.232431][ T64] ? __switch_to_asm+0x39/0x70 [ 248.232454][ T64] ? __switch_to_asm+0x33/0x70 [ 248.232478][ T64] ? __pfx_kthread+0x10/0x10 [ 248.232507][ T64] ret_from_fork_asm+0x1a/0x30 [ 248.232555][ T64] [ 248.232562][ T64] ---[ end trace ]--- [ 248.446924][ T64] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 248.454166][ T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:4 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 248.466243][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.476317][ T64] Workqueue: events_unbound cfg80211_wiphy_work [ 248.482581][ T64] Call Trace: [ 248.485872][ T64] [ 248.488811][ T64] dump_stack_lvl+0x99/0x250 [ 248.493419][ T64] ? __asan_memcpy+0x40/0x70 [ 248.498079][ T64] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.503342][ T64] ? __pfx__printk+0x10/0x10 [ 248.507971][ T64] panic+0x2db/0x790 [ 248.511888][ T64] ? __pfx_panic+0x10/0x10 [ 248.516313][ T64] ? _printk+0xcf/0x120 [ 248.520493][ T64] ? __pfx__printk+0x10/0x10 [ 248.525109][ T64] check_panic_on_warn+0x89/0xb0 [ 248.530067][ T64] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 248.535812][ T64] ieee80211_request_ibss_scan+0x600/0x8b0 [ 248.541652][ T64] ieee80211_ibss_work+0xd85/0x1060 [ 248.546866][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.552167][ T64] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 248.558085][ T64] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.564426][ T64] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 248.570080][ T64] ? skb_dequeue+0x10e/0x150 [ 248.574684][ T64] ? ieee80211_iface_work+0xcdb/0xfe0 [ 248.580079][ T64] ? ieee80211_iface_work+0xf39/0xfe0 [ 248.585469][ T64] ? rcu_is_watching+0x15/0xb0 [ 248.590250][ T64] cfg80211_wiphy_work+0x2dc/0x460 [ 248.595378][ T64] ? process_scheduled_works+0x9ef/0x17b0 [ 248.601115][ T64] process_scheduled_works+0xae1/0x17b0 [ 248.606720][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.612728][ T64] worker_thread+0x8a0/0xda0 [ 248.617358][ T64] kthread+0x70e/0x8a0 [ 248.621619][ T64] ? __pfx_worker_thread+0x10/0x10 [ 248.626749][ T64] ? __pfx_kthread+0x10/0x10 [ 248.631356][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.636575][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.641788][ T64] ? __pfx_kthread+0x10/0x10 [ 248.646395][ T64] ret_from_fork+0x3fc/0x770 [ 248.651002][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 248.656138][ T64] ? __switch_to_asm+0x39/0x70 [ 248.660918][ T64] ? __switch_to_asm+0x33/0x70 [ 248.665698][ T64] ? __pfx_kthread+0x10/0x10 [ 248.670309][ T64] ret_from_fork_asm+0x1a/0x30 [ 248.675106][ T64] [ 248.678504][ T64] Kernel Offset: disabled [ 248.682882][ T64] Rebooting in 86400 seconds..