last executing test programs: 1m11.912486577s ago: executing program 4 (id=1030): r0 = socket(0xa, 0x3, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 1m4.542467896s ago: executing program 4 (id=1030): r0 = socket(0xa, 0x3, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 56.214636355s ago: executing program 4 (id=1030): r0 = socket(0xa, 0x3, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 46.224269973s ago: executing program 4 (id=1030): r0 = socket(0xa, 0x3, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 36.824848038s ago: executing program 4 (id=1030): r0 = socket(0xa, 0x3, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 34.617535647s ago: executing program 1 (id=1841): socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57, @void, @value}, 0x90) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf06}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2c, r10, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r15, @ANYBLOB="2a003300d000f8fffeffffffffff0802110000005050505050500040040400000200760604051900030000000600cd"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x40}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) 34.376476708s ago: executing program 1 (id=1844): unshare(0x20000400) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248241, 0x0) (async) unshare(0x10000800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) writev(r0, 0x0, 0x0) 34.275681305s ago: executing program 1 (id=1845): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x5, 0x0, &(0x7f0000000680)=[{0x2, 0x4, 0x0, 0x5}, {0x4, 0x3, 0x0, 0xc}, {0x5, 0x2, 0x4, 0x3}, {0x3, 0x1, 0x5, 0x8}, {0x1, 0x5, 0x3, 0xc}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r2, 0x2, 0x2, 0x0, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x21c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x701}, 0x14}}, 0x0) 32.796342262s ago: executing program 1 (id=1849): unshare(0x20000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000004ec0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x1200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 32.419590881s ago: executing program 1 (id=1853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) poll(&(0x7f0000001e80)=[{}, {}], 0x20000000000000c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x44, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xffbfffff}}, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000040000000500bd000800090002"], 0x2c}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000000)="cb2ac947c8fa386039cdc2e1d79f775511e56233fa7ba72dce076847fa73bb714d1a269d"}, 0x20) 24.524833672s ago: executing program 4 (id=1030): r0 = socket(0xa, 0x3, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4) 23.39161287s ago: executing program 1 (id=1853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) poll(&(0x7f0000001e80)=[{}, {}], 0x20000000000000c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x44, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xffbfffff}}, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000040000000500bd000800090002"], 0x2c}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000000)="cb2ac947c8fa386039cdc2e1d79f775511e56233fa7ba72dce076847fa73bb714d1a269d"}, 0x20) 21.892417235s ago: executing program 2 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) 21.449681773s ago: executing program 2 (id=1963): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000004c0)="87", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000140), 0x4) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f00000000c0)=0x7ff, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000004c0)="87", 0x1}], 0x1}}], 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) (async) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) (async) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000140), 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f00000000c0)=0x7ff, 0x4) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) (async) 20.916814041s ago: executing program 2 (id=1967): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (rerun: 32) close(0x3) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r2, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'vxcan1\x00', @random="8ceb41d8de1a"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 20.570953236s ago: executing program 2 (id=1969): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1954, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xfffffc00, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x2100, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000440), 0x4) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 17.492691365s ago: executing program 2 (id=1972): socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @dev, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) recvfrom$x25(r3, &(0x7f0000000040)=""/110, 0x6e, 0x0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000020000000000000000000000000000100001800c0002800509000000000000300003"], 0x58}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) r7 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x4e20, 0x6, 0x4e20, 0xef, 0x2, 0x20, 0xe0, 0x3b, r5, r7}, {0x6, 0x8, 0x5, 0xce, 0x8, 0x9, 0x3, 0x7}, {0x400, 0x9, 0xffff, 0x8001}, 0xfffffff8, 0x6e6bb2, 0x2, 0x1, 0x4}, {{@in6=@local, 0x4d6, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3505, 0x1, 0x1, 0x8, 0x3, 0x0, 0x6}}, 0xe8) 16.358278741s ago: executing program 0 (id=1977): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffa, 0x3}, 0x6) r3 = socket$inet(0x2, 0x4, 0xfffdffff) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@broadcast, @random="000000000400", @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x3, 0x3, 0x3c, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @empty, {[@noop, @ra={0x94, 0x4, 0x400}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4936, 0x0, 0x4e23, 0x4e21}, 0x3, 0x3}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000080)="1342d8c487316bb8449f97f1d41196882ce3002877e77aa0e64194d1aecead39c54563eb3465489c6628d7094353a0a1c225762bab1213b0629e848d98b844f95982e16f718636f51d1a473a0099587cd4fc1252062acf501f2acd2f7196d811bc6aefebb557ae69c0dc75c435dff660207b0664b8cc915d9f618defccfbbee2", 0x80}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="16d87a4cd8d7f21d29c43282ecf2bf840646d8f15f0afc8bdabbdaec0c9794759529b71531cf6efa437451f9fd1c11868d95f480abafb68b528662c2eef5c57f9a83a84589049f7aac029b64000a15075d88a95c217cbc4eb058dcc3bc0e3ef4914f7e76f7af693bae1b13e7d2552806dca887bd70f95675046b37a8866d4f84380d9f8f0d6f9cf74310", 0x8a}, {&(0x7f0000001480)="e40daf6eb32952235b3d014ae2e6d4ad319a8226b2b42beeeb05c72ee07581ddc07115b6d1af1aa3997c439418e07e31cc02dc80544e63c88c4f2f257361a5701bd018a3252422b8e5b5bd4dcf3751eed68ad381e3d2e6bc6269bf2ac6e1dd", 0x5f}, {&(0x7f0000001500)="d0286e5f1e62c9837f2ef4e835c1d887a3e10c9963938740b864c93207c91b7f793feb909c24e6ed69de8bd292820fc0f01bbbe43f6a17c95343114b3cf1955266a2241cc5cafd57fba5e9f2afea0b2610e6b71e561909d200be78c897ba86f5282d4008030914337fa178e66aacfd", 0x6f}, {&(0x7f0000000240)="634796f73460b3bc97008a952eddaf7f", 0x10}], 0x6) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) connect$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fe800000000000000000000006000000000000000000000000000000000000010000f50000000000"], 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) 16.35758685s ago: executing program 2 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000004100070100b4d40000000000010000100c0002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x280, 0x7, {{0x10, 0x4, 0x0, 0x3, 0x40, 0x65, 0x0, 0xb9, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x5, [{@multicast2, 0x85}]}, @generic={0x7, 0x3, "d3"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x4, "ca3b"}, {0x4, 0x4, "d815"}, {0x2, 0xc, "73f8d3e40144d6646e69"}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x4, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6aa6, 0x0, 0x0, 0x0, 0x48285bf3}], &(0x7f0000000240)='GPL\x00', 0x100, 0x70, &(0x7f0000000300)=""/112, 0x41000, 0x21, '\x00', r3, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x8, 0x3438}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r7, 0x1, 0x1, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0xc}, {0x5, 0x4, 0x4, 0x1}, {0x0, 0x3, 0x7, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r12) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r11, 0x400454cd, 0x30c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r14 = getpid() syz_open_procfs$namespace(r14, &(0x7f0000000840)='ns/user\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x60000000000000}) 16.134531066s ago: executing program 3 (id=1979): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000400000008000000feffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff00"/28], 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x341}, 0x1c) r1 = socket(0x10, 0x80003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1c0, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe91}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) 16.078116357s ago: executing program 0 (id=1980): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x2, 0x4a, 0xd9, 0x4, 0x91, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}], 0x1}, 0x1}], 0x1, 0x10000, &(0x7f00000002c0)={0x0, 0x3938700}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x40004) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000480), &(0x7f0000000500)=0x80) r2 = accept4$vsock_stream(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80400) shutdown(r2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000005c0), &(0x7f0000000600)=0x8) ioctl$FIOCLEX(r0, 0x5451) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) syz_emit_ethernet(0x22, &(0x7f0000000800)={@empty, @local, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "2a1cead14d6a16fc"}}}}, &(0x7f0000000840)={0xffffffc0, 0x3, [0xfe1, 0xfed, 0xb0a, 0x735]}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x8) recvmsg(r2, &(0x7f0000001f40)={&(0x7f0000000900)=@caif=@dbg, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/198, 0xc6}, {&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001b40)=""/101, 0x65}, {&(0x7f0000001bc0)=""/60, 0x3c}, {&(0x7f0000001c00)=""/233, 0xe9}, {&(0x7f0000001d00)=""/216, 0xd8}, {&(0x7f0000001e00)=""/167, 0xa7}], 0x8}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f80)) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000001fc0), &(0x7f0000002000)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002040), &(0x7f0000002080)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000020c0)=0x0, &(0x7f0000002100)=0x4) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000002140)={r5, 0x1, 0x6, @link_local}, 0x10) socket$netlink(0x10, 0x3, 0x13) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000002180)=0x7bf, 0x4) getpeername$packet(r0, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002200)=0x14) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000002240)={0x1, 'veth1\x00', {}, 0x4}) ppoll(&(0x7f0000002280)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f00000022c0), &(0x7f0000002300)={[0x9]}, 0x8) 15.770829317s ago: executing program 3 (id=1981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x680, 0x7, 0x7f, 0x0, 0x1, 0x3f, '\x00', r5, r6, 0x2, 0x3, 0x2, 0x400000000000003, @void, @value, @void, @value}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x1ff, 0x8}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r8}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x1, '\x00', r5, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRESHEX=r8, @ANYRES32=r2], 0x38}}, 0x800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x680, 0x7, 0x7f, 0x0, 0x1, 0x3f, '\x00', r5, r6, 0x2, 0x3, 0x2, 0x400000000000003, @void, @value, @void, @value}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x1ff, 0x8}, 0xc) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r8}, 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x1, '\x00', r5, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRESHEX=r8, @ANYRES32=r2], 0x38}}, 0x800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) 15.760548703s ago: executing program 0 (id=1982): r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e00e4000000000000000500180000000000"], 0x34}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e00e4000000000000000500180000000000"], 0x34}}, 0x0) (async) 15.704477909s ago: executing program 0 (id=1983): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}]}, 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) 15.195483804s ago: executing program 0 (id=1984): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r1, r0, 0x8, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x3}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x2}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a300000000014000780050015000400000008001240000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "b6804ff55ec335af", "fb15b28bf0bf37962cedefb53af9f3ef", "6953aa61", "1ab1b95445deb008"}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006"], 0x2c}}, 0x8000) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) tee(r1, r0, 0x8, 0x2) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x3}, &(0x7f0000000200)=0x10) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x2}, 0x8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a300000000014000780050015000400000008001240000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "b6804ff55ec335af", "fb15b28bf0bf37962cedefb53af9f3ef", "6953aa61", "1ab1b95445deb008"}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006"], 0x2c}}, 0x8000) (async) 15.115500869s ago: executing program 3 (id=1985): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000140a03000000000000000000020000000c0006400000000000"], 0x27c}}, 0xc010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="390000000314010000d4646de20000000900020073797a32000000000800410073697700140033003665616d300072000000000000000000"], 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8901, &(0x7f0000000040)={r4}) sendmsg$inet(r4, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000000)="90", 0x1}], 0x1}, 0x24004091) clock_gettime(0x7, &(0x7f0000000340)) syz_emit_ethernet(0x86, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x50, 0x3a, 0x0, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x1d, 0x2, 0x1, 0xfa, 0x0, [@loopback]}, @srh={0x3a, 0x4, 0x4, 0x2, 0x3, 0x0, 0x2a1, [@dev={0xfe, 0x80, '\x00', 0x41}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x32, 0x0, 0xe9, 0x0, 0x0, 0x5, 0x67}], @echo_reply={0x81, 0x0, 0x0, 0x1ff}}}}}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc00000001010104000000000000000007000009280004802400018005000200900000000500030001000000060004000507000005000300da0000000800084000000003880001800c00028005000100210000002c00018014000300fc01000000000000000000000000000114000400fe8000000000000000000000000000bb06000340000400002c0001801400030000000000000000000000ffffac1414bb14000400000000ed6a00000000000000000000000c00028005000100210000000c000280050001002f000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000004c0)={0x3f, "d8caccf4001071d66c155bdd71dc52a9c4b47841a49ba10800122c69bcafaa2abcf78cba7b368261cd17d076acd9901017641abe8e4567f086a593375808de1171cf0e3b925065d214119e421276f0addd81f4987f74a18ff76e563c2b6c9d55ffca4df6280c4059c5c23a440b40937aaa5c066b35150fb074cd4bf934e7ca87"}) 15.079127026s ago: executing program 0 (id=1986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0xe) sendto$inet6(r2, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9c2d}], 0x2, 0x41, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge_slave_1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x84, 0x20, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r6, 0x0) write(r6, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'tunl0\x00', 0x200}) 14.927157574s ago: executing program 3 (id=1987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/147, 0x93, 0x0, &(0x7f0000000100)=""/71, 0x47}, &(0x7f00000001c0)=0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) 797.996371ms ago: executing program 32 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000004100070100b4d40000000000010000100c0002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x280, 0x7, {{0x10, 0x4, 0x0, 0x3, 0x40, 0x65, 0x0, 0xb9, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x5, [{@multicast2, 0x85}]}, @generic={0x7, 0x3, "d3"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x4, "ca3b"}, {0x4, 0x4, "d815"}, {0x2, 0xc, "73f8d3e40144d6646e69"}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x4, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6aa6, 0x0, 0x0, 0x0, 0x48285bf3}], &(0x7f0000000240)='GPL\x00', 0x100, 0x70, &(0x7f0000000300)=""/112, 0x41000, 0x21, '\x00', r3, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x8, 0x3438}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r7, 0x1, 0x1, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0xc}, {0x5, 0x4, 0x4, 0x1}, {0x0, 0x3, 0x7, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r12) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r11, 0x400454cd, 0x30c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r14 = getpid() syz_open_procfs$namespace(r14, &(0x7f0000000840)='ns/user\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x60000000000000}) 114.0182ms ago: executing program 3 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="025201137cd88fb98047bf487c45a2ed955b65d42621c6980c1822be7ac000fca065d07db4546048e96876435d69ba2a99e35be57ea3b0125ae00ade91e5509aa4b95c2034c1480e38eea6b8", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000140001800e0001006574683a7866726d30000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) 26.232222ms ago: executing program 33 (id=1986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0xe) sendto$inet6(r2, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9c2d}], 0x2, 0x41, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge_slave_1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x84, 0x20, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r6, 0x0) write(r6, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'tunl0\x00', 0x200}) 0s ago: executing program 3 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1}}], 0x2, 0x10001, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r9}, 0x38) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) kernel console output (not intermixed with test programs): M) 215*8kB (UME) 153*16kB (UME) 189*32kB (UME) 95*64kB (UME) 23*128kB (UME) 9*256kB (UME) 7*512kB (UM) 8*1024kB (UME) 3*2048kB (UM) 361*4096kB (UM) = 1518124kB [ 108.492598][ T8754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.505137][ T8754] Node 1 Normal: 254*4kB (UME) 74*8kB (UME) 47*16kB (UME) 226*32kB (UME) 100*64kB (UME) 35*128kB (UE) 19*256kB (UME) 7*512kB (UME) 7*1024kB (UME) 2*2048kB (U) 943*4096kB (UM) = 3902712kB [ 108.524904][ T8754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.534720][ T8754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.544129][ T8754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.554791][ T8754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.566567][ T8754] 40803 total pagecache pages [ 108.571309][ T8754] 0 pages in swap cache [ 108.575598][ T8754] Free swap = 124996kB [ 108.579765][ T8754] Total swap = 124996kB [ 108.584321][ T8754] 2097051 pages RAM [ 108.588149][ T8754] 0 pages HighMem/MovableOnly [ 108.592838][ T8754] 427651 pages reserved [ 108.597111][ T8754] 0 pages cma reserved [ 108.657816][ T8801] netlink: 'syz.2.908': attribute type 3 has an invalid length. [ 108.665804][ T8801] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 108.673553][ T8801] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.908'. [ 108.677312][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 108.715711][ T8806] ipip1: entered promiscuous mode [ 108.734535][ T5914] hid-generic 0005:16C0:FFF9.0002: item fetching failed at offset 0/1 [ 108.753748][ T5914] hid-generic 0005:16C0:FFF9.0002: probe with driver hid-generic failed with error -22 [ 108.910177][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.912'. [ 108.951487][ T8828] sctp: [Deprecated]: syz.2.914 (pid 8828) Use of int in max_burst socket option. [ 108.951487][ T8828] Use struct sctp_assoc_value instead [ 109.063707][ T8836] netlink: 11 bytes leftover after parsing attributes in process `syz.1.918'. [ 109.082212][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 109.092631][ T8835] netlink: 11 bytes leftover after parsing attributes in process `syz.1.918'. [ 109.103262][ T5914] IPVS: starting estimator thread 0... [ 109.190991][ T8848] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 109.203653][ T8841] IPVS: using max 18 ests per chain, 43200 per kthread [ 109.345303][ T8859] netlink: 76 bytes leftover after parsing attributes in process `syz.2.924'. [ 109.556432][ T8880] xt_hashlimit: max too large, truncated to 1048576 [ 110.153844][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 110.519674][ T8952] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.953'. [ 110.648183][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'. [ 111.181024][ T9005] dvmrp0: entered allmulticast mode [ 111.394161][ T9024] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 111.650816][ T9049] netlink: 'syz.4.987': attribute type 29 has an invalid length. [ 111.723226][ T9060] sctp: [Deprecated]: syz.4.987 (pid 9060) Use of int in maxseg socket option. [ 111.723226][ T9060] Use struct sctp_assoc_value instead [ 111.925198][ T9073] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 112.031657][ T9075] netlink: 'syz.0.995': attribute type 8 has an invalid length. [ 112.132721][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.165425][ T968] IPVS: starting estimator thread 0... [ 112.177490][ T9090] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 112.195639][ T9090] tipc: Enabled bearer , priority 10 [ 112.213203][ T9090] bridge_slave_1: left allmulticast mode [ 112.219512][ T9090] bridge_slave_1: left promiscuous mode [ 112.234916][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.256012][ T9090] bridge_slave_0: left allmulticast mode [ 112.266932][ T9091] IPVS: using max 18 ests per chain, 43200 per kthread [ 112.290133][ T9090] bridge_slave_0: left promiscuous mode [ 112.313696][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 112.324309][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.530902][ T9112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.583829][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 112.629804][ T9121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.650339][ T9120] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.756843][ T9127] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 113.126670][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 113.560254][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.674671][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.757860][ T9193] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 113.861753][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.981125][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.022752][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.033304][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.039223][ T9210] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.048746][ T9210] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.057198][ T9210] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.063994][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.065561][ T9210] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.075036][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.090775][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.098274][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.153458][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.162869][ T9210] vxlan0: entered promiscuous mode [ 114.170670][ T9210] vxlan0: entered allmulticast mode [ 114.279660][ T9206] lo speed is unknown, defaulting to 1000 [ 114.285871][ T35] bridge_slave_1: left allmulticast mode [ 114.291854][ T35] bridge_slave_1: left promiscuous mode [ 114.314738][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.330634][ T35] bridge_slave_0: left allmulticast mode [ 114.337962][ T35] bridge_slave_0: left promiscuous mode [ 114.344009][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.474167][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 114.794113][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.808342][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.820084][ T35] bond0 (unregistering): Released all slaves [ 114.915505][ T35] bond1 (unregistering): Released all slaves [ 114.959562][ T9244] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.987900][ T9244] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 115.001611][ T9244] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 115.023981][ T9244] geneve2: entered promiscuous mode [ 115.032094][ T9244] geneve2: entered allmulticast mode [ 115.052897][ T9244] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.062442][ T9244] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.075484][ T9244] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.130363][ T35] tipc: Disabling bearer [ 115.145761][ T35] tipc: Left network mode [ 115.188791][ T9260] tipc: Can't bind to reserved service type 2 [ 115.195183][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 115.576256][ T9206] chnl_net:caif_netlink_parms(): no params data found [ 115.818872][ T9297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.865731][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.873889][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.896982][ T9206] bridge_slave_0: entered allmulticast mode [ 115.916022][ T9206] bridge_slave_0: entered promiscuous mode [ 115.964870][ T35] hsr_slave_0: left promiscuous mode [ 115.970998][ T35] hsr_slave_1: left promiscuous mode [ 115.978350][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.003655][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.039533][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.057505][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.068894][ T9329] __nla_validate_parse: 14 callbacks suppressed [ 116.068912][ T9329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 116.096803][ T35] veth1_macvtap: left promiscuous mode [ 116.102648][ T35] veth0_macvtap: left promiscuous mode [ 116.117156][ T35] veth1_vlan: left promiscuous mode [ 116.123005][ T35] veth0_vlan: left promiscuous mode [ 116.153688][ T53] Bluetooth: hci0: command tx timeout [ 116.243523][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.561734][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 116.627930][ T35] team0 (unregistering): Port device team_slave_1 removed [ 116.670240][ T35] team0 (unregistering): Port device team_slave_0 removed [ 116.997621][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.005568][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.012815][ T9206] bridge_slave_1: entered allmulticast mode [ 117.021303][ T9206] bridge_slave_1: entered promiscuous mode [ 117.051337][ T9345] netlink: 'syz.0.1070': attribute type 5 has an invalid length. [ 117.183087][ T9206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.230648][ T9206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.241381][ T9357] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 117.273693][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 117.405697][ T9206] team0: Port device team_slave_0 added [ 117.444751][ T9206] team0: Port device team_slave_1 added [ 117.522489][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.532146][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.565991][ T9206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.588017][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.607111][ T9384] openvswitch: netlink: Invalid VLAN frame [ 117.609747][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.639473][ T9206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.676229][ T9384] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1085'. [ 117.736870][ T9206] hsr_slave_0: entered promiscuous mode [ 117.749374][ T9206] hsr_slave_1: entered promiscuous mode [ 117.761711][ T9390] Bluetooth: MGMT ver 1.23 [ 117.774571][ T9389] netlink: 'syz.1.1087': attribute type 3 has an invalid length. [ 117.829941][ T9389] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1087'. [ 118.012866][ T9409] netlink: 'syz.2.1086': attribute type 3 has an invalid length. [ 118.030581][ T9409] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1086'. [ 118.140614][ T9412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.233784][ T5839] Bluetooth: hci0: command tx timeout [ 118.283097][ T9412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.313499][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 118.400316][ T9412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.429186][ T9431] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 118.511496][ T9412] team0: Port device netdevsim0 removed [ 118.521070][ T9412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.688706][ T9412] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.728609][ T9412] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.767850][ T9412] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.807285][ T9412] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.839525][ T9206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.866616][ T9206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.910822][ T9206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.939385][ T9206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.966895][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 119.045947][ T9477] sctp: [Deprecated]: syz.3.1110 (pid 9477) Use of int in max_burst socket option deprecated. [ 119.045947][ T9477] Use struct sctp_assoc_value instead [ 119.146906][ T9206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.170094][ T9206] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.191352][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.198562][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.249842][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.257534][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.284990][ T9490] openvswitch: netlink: Flow key attribute not present in set flow. [ 119.299112][ T9487] IPVS: persistence engine module ip_vs_pe_À not found [ 119.353861][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.453975][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 119.637643][ T9523] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 119.646330][ T9523] netlink: 'syz.0.1121': attribute type 3 has an invalid length. [ 119.656864][ T9523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1121'. [ 119.667572][ T9523] NCSI netlink: No device for ifindex 0 [ 119.794459][ T9206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.820402][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'. [ 119.835081][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'. [ 119.862300][ T9534] gretap0: entered promiscuous mode [ 119.889591][ T9534] batadv_slave_1: entered promiscuous mode [ 119.905411][ T9534] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 119.914242][ T9534] Cannot create hsr debugfs directory [ 119.990678][ T9541] can: request_module (can-proto-0) failed. [ 120.072758][ T9549] IPVS: length: 248 != 24 [ 120.087557][ T9544] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1126'. [ 120.264832][ T9206] veth0_vlan: entered promiscuous mode [ 120.283742][ T9206] veth1_vlan: entered promiscuous mode [ 120.313563][ T5839] Bluetooth: hci0: command tx timeout [ 120.322984][ T9206] veth0_macvtap: entered promiscuous mode [ 120.346759][ T9206] veth1_macvtap: entered promiscuous mode [ 120.382594][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.401138][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.411255][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 120.431476][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.452355][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.468930][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.480710][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.497186][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.507424][ T9569] netlink: 'syz.1.1133': attribute type 9 has an invalid length. [ 120.574982][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.595365][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.608151][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.630709][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.648522][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.664180][ T9206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.689865][ T9206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.699090][ T9206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.708172][ T9206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.823032][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.843976][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.888546][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.908633][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.115909][ T9598] __nla_validate_parse: 4 callbacks suppressed [ 121.115928][ T9598] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1144'. [ 121.131909][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 121.142288][ T9599] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1143'. [ 121.159216][ T9598] netlink: 'syz.1.1144': attribute type 10 has an invalid length. [ 121.177066][ T9598] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.185992][ T9598] bond0: (slave team0): Enslaving as an active interface with an up link [ 121.269866][ T9603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.301808][ T9610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 121.434107][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 121.450986][ T9616] lo speed is unknown, defaulting to 1000 [ 121.996328][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 122.175090][ T9649] netlink: 'syz.0.1157': attribute type 3 has an invalid length. [ 122.211951][ T9649] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1157'. [ 122.221935][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 122.232113][ T3497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.245638][ T9655] netlink: 'syz.0.1157': attribute type 3 has an invalid length. [ 122.263990][ T9655] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1157'. [ 122.473487][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 122.578276][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.600410][ T3497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.616365][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.625856][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.636450][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1164'. [ 122.649316][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.658474][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.666145][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.702013][ T9685] C: renamed from team_slave_0 (while UP) [ 122.722400][ T9685] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 122.730822][ T9685] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 122.846961][ T3497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.897491][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1172'. [ 122.956022][ T9699] team0 (unregistering): Port device C removed [ 122.970886][ T9699] team0 (unregistering): Port device team_slave_1 removed [ 123.016162][ T3497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.043210][ T9676] lo speed is unknown, defaulting to 1000 [ 123.227593][ T3497] bridge_slave_1: left allmulticast mode [ 123.250284][ T3497] bridge_slave_1: left promiscuous mode [ 123.273734][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.306562][ T3497] bridge_slave_0: left allmulticast mode [ 123.312262][ T3497] bridge_slave_0: left promiscuous mode [ 123.343851][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.525233][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.782933][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.795137][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.805714][ T3497] bond0 (unregistering): Released all slaves [ 123.829125][ T9725] sit0: entered promiscuous mode [ 123.842130][ T9725] vlan3: entered promiscuous mode [ 123.849519][ T9725] sit0: left promiscuous mode [ 124.236433][ T9752] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 124.470638][ T3497] hsr_slave_0: left promiscuous mode [ 124.479075][ T3497] hsr_slave_1: left promiscuous mode [ 124.494207][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.510442][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.529090][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.553490][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.561877][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.601588][ T3497] veth1_macvtap: left promiscuous mode [ 124.607921][ T3497] veth0_macvtap: left promiscuous mode [ 124.614858][ T3497] veth1_vlan: left promiscuous mode [ 124.620909][ T3497] veth0_vlan: left promiscuous mode [ 124.793651][ T5839] Bluetooth: hci0: command tx timeout [ 125.036684][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 125.075946][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 125.527111][ T9676] chnl_net:caif_netlink_parms(): no params data found [ 125.604043][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 125.670534][ T9806] vlan1: entered promiscuous mode [ 125.691966][ T9803] vlan1: left promiscuous mode [ 125.785036][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.792188][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.801594][ T9676] bridge_slave_0: entered allmulticast mode [ 125.809039][ T9676] bridge_slave_0: entered promiscuous mode [ 125.817068][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.824317][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.831527][ T9676] bridge_slave_1: entered allmulticast mode [ 125.839315][ T9676] bridge_slave_1: entered promiscuous mode [ 125.859240][ T9822] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 125.906554][ T5886] lo speed is unknown, defaulting to 1000 [ 125.989697][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.016893][ T9824] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 126.034163][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.048125][ T25] lo speed is unknown, defaulting to 1000 [ 126.061800][ T9822] Bluetooth: MGMT ver 1.23 [ 126.114868][ T9676] team0: Port device team_slave_0 added [ 126.136780][ T9676] team0: Port device team_slave_1 added [ 126.137573][ T9837] __nla_validate_parse: 12 callbacks suppressed [ 126.137589][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 126.217917][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.240827][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.268858][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.297412][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.307866][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.353459][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.377245][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'. [ 126.394939][ T9848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.447169][ T9860] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1213'. [ 126.470497][ T9860] openvswitch: netlink: VXLAN extension 101 out of range max 1 [ 126.490142][ T9848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.499815][ T9848] batadv_slave_1 (unregistering): left promiscuous mode [ 126.509138][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1212'. [ 126.603747][ T9676] hsr_slave_0: entered promiscuous mode [ 126.610319][ T9676] hsr_slave_1: entered promiscuous mode [ 126.622636][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 126.633532][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 126.709742][ T9871] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1216'. [ 126.830687][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 126.874776][ T5839] Bluetooth: hci0: command tx timeout [ 127.037151][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 127.077371][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.158921][ T9676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.182364][ T9676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.204444][ T9676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.221833][ T9676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.300039][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 127.348431][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 127.441499][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.499689][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.602499][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.609700][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.630086][ T9924] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 127.644754][ T9924] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 127.678232][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.686160][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.693652][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 128.118299][ T9948] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 128.156150][ T9948] netlink: 'syz.3.1241': attribute type 2 has an invalid length. [ 128.172322][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.182752][ T9948] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 128.353939][ T9964] netlink: 'syz.0.1246': attribute type 3 has an invalid length. [ 128.400471][ T9970] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 128.672458][ T9983] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 128.698819][ T9676] veth0_vlan: entered promiscuous mode [ 128.713526][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 128.726824][ T9676] veth1_vlan: entered promiscuous mode [ 128.794965][ T9676] veth0_macvtap: entered promiscuous mode [ 128.812737][ T9676] veth1_macvtap: entered promiscuous mode [ 128.861245][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.877851][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.888223][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.909310][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.925537][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.944702][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.958233][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.988419][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.023396][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.054702][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.095378][ T9676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.115171][T10019] netlink: 'syz.3.1262': attribute type 11 has an invalid length. [ 129.129266][ T9676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.140516][ T9676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.156604][ T9676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.264512][T10027] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 129.296459][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.312181][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.320328][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.352020][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.369104][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.639583][T10050] netlink: 'syz.0.1273': attribute type 3 has an invalid length. [ 129.764604][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 130.684734][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.703580][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.713618][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.732355][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.747199][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.754727][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.803462][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 131.307404][T10059] __nla_validate_parse: 16 callbacks suppressed [ 131.307423][T10059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1276'. [ 131.401121][ T1079] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.520267][ T1079] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.589231][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 131.603329][T10065] lo speed is unknown, defaulting to 1000 [ 131.743198][T10098] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 131.785885][T10098] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.833672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 131.970734][ T1079] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.044726][T10065] chnl_net:caif_netlink_parms(): no params data found [ 132.118771][ T1079] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.404638][ T1079] bridge_slave_1: left allmulticast mode [ 132.410332][ T1079] bridge_slave_1: left promiscuous mode [ 132.416776][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.428581][ T1079] bridge_slave_0: left allmulticast mode [ 132.435562][ T1079] bridge_slave_0: left promiscuous mode [ 132.443312][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.753865][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.765788][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.776746][ T1079] bond0 (unregistering): Released all slaves [ 132.789875][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.797732][ T5839] Bluetooth: hci0: command tx timeout [ 132.808573][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.816551][T10065] bridge_slave_0: entered allmulticast mode [ 132.823322][T10065] bridge_slave_0: entered promiscuous mode [ 132.832579][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.840292][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.848079][T10065] bridge_slave_1: entered allmulticast mode [ 132.855395][T10065] bridge_slave_1: entered promiscuous mode [ 132.866695][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1301'. [ 132.885889][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 132.960777][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967249][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.117242][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.138891][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.169634][T10169] netlink: 'syz.3.1309': attribute type 21 has an invalid length. [ 133.177750][T10169] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.243091][T10065] team0: Port device team_slave_0 added [ 133.266275][T10065] team0: Port device team_slave_1 added [ 133.329380][T10176] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 133.359698][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.367987][T10176] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.1311'. [ 133.377706][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.404108][T10176] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 133.418530][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.444215][ T1079] hsr_slave_0: left promiscuous mode [ 133.454366][ T1079] hsr_slave_1: left promiscuous mode [ 133.475398][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.482843][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.520223][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.533199][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.563781][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.581856][ T1079] veth1_macvtap: left promiscuous mode [ 133.589017][ T1079] veth0_macvtap: left promiscuous mode [ 133.597694][ T1079] veth1_vlan: left promiscuous mode [ 133.603167][ T1079] veth0_vlan: left promiscuous mode [ 133.923609][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 133.994601][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 134.035256][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 134.392463][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.399840][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.426115][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.443802][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1317'. [ 134.452783][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1317'. [ 134.623112][T10199] bond2: entered promiscuous mode [ 134.632080][T10199] bond2: entered allmulticast mode [ 134.638191][T10199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.656164][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1318'. [ 134.678729][T10065] hsr_slave_0: entered promiscuous mode [ 134.727724][T10065] hsr_slave_1: entered promiscuous mode [ 134.874036][ T5839] Bluetooth: hci0: command tx timeout [ 134.953492][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 134.968893][T10225] netlink: 'syz.3.1323': attribute type 10 has an invalid length. [ 134.977318][T10224] dccp_invalid_packet: pskb_may_pull failed [ 135.375540][T10065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.387822][T10065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.443286][T10065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.462052][T10065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.566414][T10065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.588894][T10243] netlink: 'syz.2.1331': attribute type 50 has an invalid length. [ 135.614956][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 135.648422][T10065] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.682873][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.690073][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.727201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.734385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.929771][T10065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.003505][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 136.097296][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 136.120780][T10260] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 136.198482][T10065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.241261][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1341'. [ 136.338418][T10285] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1343'. [ 136.362781][T10285] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.1343'. [ 136.626347][T10065] veth0_vlan: entered promiscuous mode [ 136.647916][T10065] veth1_vlan: entered promiscuous mode [ 136.663314][T10305] vlan3: entered promiscuous mode [ 136.671704][T10305] dummy0: entered promiscuous mode [ 136.678312][T10305] team0: Port device vlan3 added [ 136.717222][T10065] veth0_macvtap: entered promiscuous mode [ 136.740993][T10065] veth1_macvtap: entered promiscuous mode [ 136.769326][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.792338][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.803293][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.813953][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.829684][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.840720][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.852204][T10065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.870458][T10065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.882981][T10065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.901151][T10065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.913259][T10065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.927461][T10065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.953876][ T5839] Bluetooth: hci0: command tx timeout [ 136.973636][T10065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.991545][T10065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.033444][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 137.166053][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.195699][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.253835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.261669][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.313868][T10339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 137.356417][T10341] ip6t_REJECT: ECHOREPLY is not supported [ 137.518169][T10346] lo speed is unknown, defaulting to 1000 [ 137.808143][T10371] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 137.840355][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1368'. [ 137.861086][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 137.872829][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 138.008956][T10381] netlink: 'syz.3.1371': attribute type 9 has an invalid length. [ 138.073600][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 138.242925][T10400] xt_connbytes: Forcing CT accounting to be enabled [ 138.527208][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.654792][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1380'. [ 138.679038][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 138.722163][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 138.734202][T10414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1380'. [ 139.019666][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.325265][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.334778][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.344505][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.345124][T10440] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 139.379845][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.391791][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.401843][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.483095][T10438] lo speed is unknown, defaulting to 1000 [ 139.688857][T10438] chnl_net:caif_netlink_parms(): no params data found [ 139.771415][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.872999][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.909220][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.917531][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.926168][T10438] bridge_slave_0: entered allmulticast mode [ 139.933502][T10438] bridge_slave_0: entered promiscuous mode [ 139.942360][T10438] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.950338][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.957577][T10438] bridge_slave_1: entered allmulticast mode [ 139.964817][T10438] bridge_slave_1: entered promiscuous mode [ 139.990868][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.010405][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.048663][ T51] bridge_slave_1: left allmulticast mode [ 140.054793][ T51] bridge_slave_1: left promiscuous mode [ 140.060572][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.069618][ T51] bridge_slave_0: left allmulticast mode [ 140.075623][ T51] bridge_slave_0: left promiscuous mode [ 140.081396][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.401674][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.412622][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.423288][ T51] bond0 (unregistering): Released all slaves [ 140.438846][T10438] team0: Port device team_slave_0 added [ 140.455825][T10438] team0: Port device team_slave_1 added [ 140.512993][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.533473][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.561005][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.616373][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.623836][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.684301][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.767744][T10496] xt_CT: No such helper "netbios-ns" [ 140.819542][T10504] netlink: 'syz.2.1401': attribute type 25 has an invalid length. [ 140.969211][T10438] hsr_slave_0: entered promiscuous mode [ 140.981818][T10438] hsr_slave_1: entered promiscuous mode [ 140.988538][T10438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.996447][T10438] Cannot create hsr debugfs directory [ 141.006294][ T51] hsr_slave_0: left promiscuous mode [ 141.012471][ T51] hsr_slave_1: left promiscuous mode [ 141.018708][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.026590][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.041487][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.056914][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.109431][ T51] veth1_macvtap: left promiscuous mode [ 141.138756][ T51] veth0_macvtap: left promiscuous mode [ 141.163257][ T51] veth1_vlan: left promiscuous mode [ 141.183263][ T51] veth0_vlan: left promiscuous mode [ 141.513843][ T53] Bluetooth: hci0: command tx timeout [ 141.566537][ T51] team0 (unregistering): Port device team_slave_1 removed [ 141.604043][ T51] team0 (unregistering): Port device team_slave_0 removed [ 142.379308][T10562] __nla_validate_parse: 11 callbacks suppressed [ 142.379327][T10562] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1416'. [ 142.407626][T10562] netlink: 'syz.3.1416': attribute type 7 has an invalid length. [ 142.408281][T10564] netlink: 'syz.1.1417': attribute type 9 has an invalid length. [ 142.442273][T10564] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1417'. [ 142.464674][T10562] Êü: entered promiscuous mode [ 142.482182][T10565] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 142.497676][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1418'. [ 142.508457][T10565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.517162][T10564] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 142.644687][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.709024][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.726921][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.751027][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.764475][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.783086][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.797023][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 142.806562][T10584] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.939910][T10438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.979108][T10438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.998834][T10438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.032829][T10438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.070558][T10602] xt_TCPMSS: Only works on TCP SYN packets [ 143.095670][T10604] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 143.168910][T10611] sctp: [Deprecated]: syz.3.1430 (pid 10611) Use of int in max_burst socket option deprecated. [ 143.168910][T10611] Use struct sctp_assoc_value instead [ 143.249500][T10438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.267979][T10438] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.301440][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.308613][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.348123][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.355303][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.568483][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.595129][ T53] Bluetooth: hci0: command tx timeout [ 143.941898][T10438] veth0_vlan: entered promiscuous mode [ 143.955563][T10438] veth1_vlan: entered promiscuous mode [ 143.979641][T10438] veth0_macvtap: entered promiscuous mode [ 143.989097][T10438] veth1_macvtap: entered promiscuous mode [ 144.008770][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.019390][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.023436][T10693] netlink: 'syz.1.1444': attribute type 11 has an invalid length. [ 144.029815][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.047767][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.057993][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.068613][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.080156][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.091251][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.101779][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.112695][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.186791][T10438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.198302][T10438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.207550][T10438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.225694][T10438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.237492][T10700] xt_ecn: cannot match TCP bits for non-tcp packets [ 144.500549][ T2315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.527569][ T2315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.596983][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.607716][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.716114][T10724] ip6t_srh: unknown srh invflags A757 [ 144.788383][T10732] netlink: 'syz.2.1458': attribute type 21 has an invalid length. [ 144.808706][T10732] netlink: 'syz.2.1458': attribute type 4 has an invalid length. [ 144.822545][T10732] netlink: 'syz.2.1458': attribute type 5 has an invalid length. [ 144.839579][T10737] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 144.849412][T10737] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 144.927135][T10744] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 144.944793][T10743] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:65535 [ 145.116745][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.148296][T10763] Cannot find del_set index 3 as target [ 145.158127][T10755] Cannot find del_set index 3 as target [ 145.316585][T10773] sctp: [Deprecated]: syz.0.1469 (pid 10773) Use of int in max_burst socket option. [ 145.316585][T10773] Use struct sctp_assoc_value instead [ 145.507622][T10785] netlink: 'syz.1.1473': attribute type 8 has an invalid length. [ 145.520062][T10785] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 145.888263][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.535227][T10813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.552292][T10812] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.739939][T10824] vxcan1: left allmulticast mode [ 146.762714][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.771650][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.773305][T10824] bond1: left allmulticast mode [ 146.785629][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.802305][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.833719][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.843568][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.901160][T10837] dvmrp0: entered allmulticast mode [ 146.942458][T10835] tipc: Bearer : already 2 bearers with priority 10 [ 146.952834][T10835] tipc: Bearer : trying with adjusted priority [ 146.966254][T10835] tipc: Enabled bearer , priority 9 [ 146.987404][T10829] lo speed is unknown, defaulting to 1000 [ 147.024242][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.238575][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.266230][T10866] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 147.281648][T10866] netlink: 'syz.3.1498': attribute type 2 has an invalid length. [ 147.286063][T10829] chnl_net:caif_netlink_parms(): no params data found [ 147.290122][T10866] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 147.350984][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.450847][T10829] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.459101][T10829] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.467447][T10829] bridge_slave_0: entered allmulticast mode [ 147.467947][T10878] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 147.474842][T10829] bridge_slave_0: entered promiscuous mode [ 147.500774][T10879] __nla_validate_parse: 76 callbacks suppressed [ 147.500791][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 147.537987][T10829] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.546414][T10829] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.561851][T10829] bridge_slave_1: entered allmulticast mode [ 147.575809][T10829] bridge_slave_1: entered promiscuous mode [ 147.619374][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 147.642947][T10829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.662781][T10829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.684112][ T35] bridge_slave_1: left allmulticast mode [ 147.690098][ T35] bridge_slave_1: left promiscuous mode [ 147.700929][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.718445][ T35] bridge_slave_0: left allmulticast mode [ 147.724848][ T35] bridge_slave_0: left promiscuous mode [ 147.730711][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.985425][T10891] xt_nfacct: accounting object `syz0' does not exists [ 148.092231][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.108403][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.119217][ T35] bond0 (unregistering): Released all slaves [ 148.288706][T10829] team0: Port device team_slave_0 added [ 148.298135][T10898] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 148.362993][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 148.363004][T10829] team0: Port device team_slave_1 added [ 148.409442][T10829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.423505][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.473240][T10829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.510591][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 148.523788][T10829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.530982][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.585192][T10829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.640746][ T35] hsr_slave_0: left promiscuous mode [ 148.649980][ T35] hsr_slave_1: left promiscuous mode [ 148.662227][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.677436][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.688723][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.697045][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.723101][ T35] veth1_macvtap: left promiscuous mode [ 148.729545][ T35] veth0_macvtap: left promiscuous mode [ 148.736046][ T35] veth1_vlan: left promiscuous mode [ 148.742332][ T35] veth0_vlan: left promiscuous mode [ 148.969010][ T5839] Bluetooth: hci0: command tx timeout [ 149.204072][ T35] team0 (unregistering): Port device team_slave_1 removed [ 149.242309][ T35] team0 (unregistering): Port device team_slave_0 removed [ 149.587582][T10922] netlink: 'syz.3.1511': attribute type 18 has an invalid length. [ 149.620346][T10938] vlan4: entered promiscuous mode [ 149.749593][T10829] hsr_slave_0: entered promiscuous mode [ 149.770953][T10829] hsr_slave_1: entered promiscuous mode [ 149.948326][T10956] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 149.975392][T10956] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1521'. [ 149.993261][T10956] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 150.010424][T10960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1523'. [ 150.157145][T10969] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 150.184011][T10969] bond0: (slave bond_slave_0): Releasing backup interface [ 150.271314][T10968] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 150.292718][T10968] team0: Device hsr_slave_0 failed to register rx_handler [ 150.371306][T10982] xt_NFQUEUE: number of total queues is 0 [ 150.502013][T10993] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1532'. [ 150.519363][T10991] dvmrp1: entered allmulticast mode [ 150.645038][T11000] Cannot find del_set index 3 as target [ 150.681738][T10829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.708476][T10829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.725265][T11000] x_tables: duplicate entry at hook 2 [ 150.745322][T10829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.770278][T10829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.926348][T10829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.978274][T10829] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.998912][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.006125][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.029627][T11007] netlink: 'syz.2.1536': attribute type 21 has an invalid length. [ 151.038013][T11007] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.046941][ T5839] Bluetooth: hci0: command tx timeout [ 151.098199][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.105322][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.217741][T11012] vxcan0: tx drop: invalid da for name 0x0000000400000000 [ 151.302548][T11012] netlink: 'syz.2.1538': attribute type 9 has an invalid length. [ 151.323711][T11012] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1538'. [ 151.426547][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.661471][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 151.786826][T11046] netlink: 'syz.3.1546': attribute type 3 has an invalid length. [ 151.801883][T10829] veth0_vlan: entered promiscuous mode [ 151.819412][T11046] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.845710][T10829] veth1_vlan: entered promiscuous mode [ 151.900566][T10829] veth0_macvtap: entered promiscuous mode [ 151.914394][T10829] veth1_macvtap: entered promiscuous mode [ 151.953154][T11057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'. [ 151.958127][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.985780][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.001753][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.013117][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.038873][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.062195][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.074142][T10829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.091530][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.131968][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.166963][T10829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.194905][T11079] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.212383][T10829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.224718][T10829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.238368][T10829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.253504][T10829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.337494][T11084] rdma_rxe: rxe_newlink: failed to add wlan1 [ 152.351516][T11083] wlan1 speed is unknown, defaulting to 1000 [ 152.379401][T11083] wlan1 speed is unknown, defaulting to 1000 [ 152.395659][T11083] wlan1 speed is unknown, defaulting to 1000 [ 152.399598][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.401692][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.430308][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.443584][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.504529][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.519855][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.674233][T11083] infiniband syz1: set down [ 152.681158][T11083] infiniband syz1: added wlan1 [ 152.700487][ T5914] wlan1 speed is unknown, defaulting to 1000 [ 152.775530][T11083] RDS/IB: syz1: added [ 152.789894][T11083] smc: adding ib device syz1 with port count 1 [ 152.813954][T11083] smc: ib device syz1 port 1 has pnetid [ 152.822869][ T5914] wlan1 speed is unknown, defaulting to 1000 [ 152.848276][T11083] wlan1 speed is unknown, defaulting to 1000 [ 152.861781][T11098] bond0: option updelay: invalid value (18446744073709551615) [ 152.870547][T11098] bond0: option updelay: allowed values 0 - 2147483647 [ 153.062628][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 153.089982][T11109] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1563'. [ 153.197657][T11083] wlan1 speed is unknown, defaulting to 1000 [ 153.352529][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 153.372281][T11121] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1566'. [ 153.424461][T11125] netlink: 'syz.2.1569': attribute type 3 has an invalid length. [ 153.450145][T11083] wlan1 speed is unknown, defaulting to 1000 [ 153.452258][T11125] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1569'. [ 153.473083][T11128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.519884][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 153.534507][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 153.563659][T11131] netlink: 'syz.1.1571': attribute type 15 has an invalid length. [ 153.613307][T11134] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1573'. [ 153.696755][T11083] wlan1 speed is unknown, defaulting to 1000 [ 153.816871][T11145] netlink: 'syz.1.1574': attribute type 4 has an invalid length. [ 153.854049][T11139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 153.876387][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1576'. [ 153.909167][T11083] wlan1 speed is unknown, defaulting to 1000 [ 153.935555][T11148] netlink: 149060 bytes leftover after parsing attributes in process `syz.0.1576'. [ 153.958903][T11148] openvswitch: netlink: Key type 29 is not supported [ 154.167845][ T2315] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.991009][T11180] openvswitch: netlink: Unknown key attributes 2 [ 155.050322][ T35] wlan1: Trigger new scan to find an IBSS to join [ 155.203831][T11192] Êü: entered promiscuous mode [ 155.304940][T11195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.312496][T11195] IPv6: NLM_F_CREATE should be set when creating new route [ 155.319803][T11195] IPv6: NLM_F_CREATE should be set when creating new route [ 155.334289][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.363567][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.401555][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.420335][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.432652][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.448019][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.489070][ T2315] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.626785][T11199] lo speed is unknown, defaulting to 1000 [ 155.716888][ T2315] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.738098][T11199] wlan1 speed is unknown, defaulting to 1000 [ 155.750210][T11213] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 155.759174][T11214] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 155.843970][ T2315] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.117327][T11237] netlink: 'syz.3.1602': attribute type 4 has an invalid length. [ 156.133698][ T2315] bridge_slave_1: left allmulticast mode [ 156.139686][ T2315] bridge_slave_1: left promiscuous mode [ 156.145700][ T2315] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.188707][ T2315] bridge_slave_0: left allmulticast mode [ 156.195031][ T2315] bridge_slave_0: left promiscuous mode [ 156.200832][ T2315] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.518726][ T2315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.530371][ T2315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.543557][ T2315] bond0 (unregistering): Released all slaves [ 156.562789][T11242] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 156.588413][T11243] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 156.623966][T11246] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 156.656991][T11246] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 156.682040][T11246] bond3: (slave xfrm1): making interface the new active one [ 156.697033][T11246] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 157.085404][T11199] chnl_net:caif_netlink_parms(): no params data found [ 157.147636][T11278] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 157.358240][T11292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.382096][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.411296][T11199] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.436868][T11199] bridge_slave_0: entered allmulticast mode [ 157.455052][T11199] bridge_slave_0: entered promiscuous mode [ 157.476602][ T2315] hsr_slave_0: left promiscuous mode [ 157.483528][ T2315] hsr_slave_1: left promiscuous mode [ 157.491205][ T2315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.503793][ T2315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.520482][ T2315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.524222][ T53] Bluetooth: hci0: command tx timeout [ 157.530140][ T2315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.567910][ T2315] veth1_macvtap: left promiscuous mode [ 157.575981][ T2315] veth0_macvtap: left promiscuous mode [ 157.581553][ T2315] veth1_vlan: left promiscuous mode [ 157.587711][ T2315] veth0_vlan: left promiscuous mode [ 158.034211][ T2315] team0 (unregistering): Port device team_slave_1 removed [ 158.067291][ T2315] team0 (unregistering): Port device team_slave_0 removed [ 158.406426][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.414054][T11199] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.421198][T11199] bridge_slave_1: entered allmulticast mode [ 158.431391][T11199] bridge_slave_1: entered promiscuous mode [ 158.461988][T11305] __nla_validate_parse: 8 callbacks suppressed [ 158.462002][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 158.511040][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.534887][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.724487][T11336] ªªªªªª: renamed from vlan0 (while UP) [ 158.740484][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'. [ 158.752860][T11334] netlink: 'syz.0.1631': attribute type 1 has an invalid length. [ 158.758484][T11199] team0: Port device team_slave_0 added [ 158.792665][T11199] team0: Port device team_slave_1 added [ 158.914182][T11344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1635'. [ 158.944087][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.950035][T11348] netlink: 'syz.1.1633': attribute type 9 has an invalid length. [ 158.951050][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.993646][T11344] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1635'. [ 159.002625][T11344] netlink: 'syz.0.1635': attribute type 5 has an invalid length. [ 159.004599][T11348] netlink: 69272 bytes leftover after parsing attributes in process `syz.1.1633'. [ 159.032132][T11344] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1635'. [ 159.063768][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.104500][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.116008][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.175093][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.347921][T11199] hsr_slave_0: entered promiscuous mode [ 159.358786][T11199] hsr_slave_1: entered promiscuous mode [ 159.471205][T11381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1647'. [ 159.544689][T11382] ebtables: ebtables: counters copy to user failed while replacing table [ 159.623515][ T53] Bluetooth: hci0: command tx timeout [ 159.630658][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1647'. [ 159.904553][T11399] netlink: 'syz.3.1649': attribute type 4 has an invalid length. [ 159.994795][ T1079] wlan1: Trigger new scan to find an IBSS to join [ 160.280059][T11430] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 160.341330][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1658'. [ 160.364343][T11434] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 160.396482][T11199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.419401][T11436] netlink: 'syz.0.1659': attribute type 9 has an invalid length. [ 160.443975][T11199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.470614][T11199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.478487][T11436] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1659'. [ 160.518283][T11199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.563702][T11438] netlink: 'syz.0.1659': attribute type 9 has an invalid length. [ 160.779166][T11199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.805096][T11199] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.815748][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.822892][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.881231][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.888407][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.938301][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.979423][T11199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.156013][T11481] lo speed is unknown, defaulting to 1000 [ 161.202846][T11481] lo speed is unknown, defaulting to 1000 [ 161.234409][T11485] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 161.410087][T11199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.484077][T11499] can: request_module (can-proto-0) failed. [ 161.525609][T11507] can: request_module (can-proto-0) failed. [ 161.622954][T11517] netlink: 'syz.0.1681': attribute type 33 has an invalid length. [ 161.677857][ T53] Bluetooth: hci0: command tx timeout [ 161.751940][T11523] macvtap0: entered promiscuous mode [ 161.777569][T11523] macvtap0: left promiscuous mode [ 162.007933][T11199] veth0_vlan: entered promiscuous mode [ 162.054570][T11199] veth1_vlan: entered promiscuous mode [ 162.188873][T11199] veth0_macvtap: entered promiscuous mode [ 162.201739][T11199] veth1_macvtap: entered promiscuous mode [ 162.246038][T11563] block nbd0: not configured, cannot reconfigure [ 162.271717][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.288490][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.316112][T11563] netlink: 'syz.0.1694': attribute type 4 has an invalid length. [ 162.318124][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.358274][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.385818][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.405645][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.434988][T11199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.447947][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.463830][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.480340][T11199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.515003][T11199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.530176][T11199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.539736][T11199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.548651][T11199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.721818][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.761816][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.806356][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.832900][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.942413][T11608] gretap0: Device is already in use. [ 163.359721][T11627] pim6reg1: entered promiscuous mode [ 163.383482][T11627] pim6reg1: entered allmulticast mode [ 163.801765][T11640] __nla_validate_parse: 12 callbacks suppressed [ 163.801784][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 163.899802][T11646] netlink: 'syz.3.1718': attribute type 3 has an invalid length. [ 163.994994][ T11] wlan0: Trigger new scan to find an IBSS to join [ 164.018996][T11649] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 164.176292][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.207102][T11655] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 164.474500][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.628150][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.676129][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.748472][ T11] bridge_slave_1: left allmulticast mode [ 164.754257][ T11] bridge_slave_1: left promiscuous mode [ 164.759913][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.768188][ T11] bridge_slave_0: left allmulticast mode [ 164.774302][ T11] bridge_slave_0: left promiscuous mode [ 164.781033][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.219325][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.238668][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.253052][ T11] bond0 (unregistering): Released all slaves [ 165.267469][T11673] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1726'. [ 165.276051][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.283630][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 165.304812][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.312552][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.324520][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.332892][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.340526][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.465444][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 165.513119][T11688] lo speed is unknown, defaulting to 1000 [ 165.520586][T11688] wlan1 speed is unknown, defaulting to 1000 [ 165.687472][T11709] netlink: 'syz.0.1733': attribute type 7 has an invalid length. [ 165.708458][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1733'. [ 165.894891][T11723] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 165.921392][T11723] netlink: 9260 bytes leftover after parsing attributes in process `syz.1.1736'. [ 165.942648][T11723] netlink: 'syz.1.1736': attribute type 2 has an invalid length. [ 165.950671][T11723] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 166.011570][ T11] hsr_slave_0: left promiscuous mode [ 166.021003][ T11] hsr_slave_1: left promiscuous mode [ 166.047454][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.055231][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.063671][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.071098][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.093149][ T11] veth1_macvtap: left promiscuous mode [ 166.098833][ T11] veth0_macvtap: left promiscuous mode [ 166.104700][ T11] veth1_vlan: left promiscuous mode [ 166.109998][ T11] veth0_vlan: left promiscuous mode [ 166.572299][ T11] team0 (unregistering): Port device team_slave_1 removed [ 166.612387][ T11] team0 (unregistering): Port device team_slave_0 removed [ 166.954826][ T51] wlan0: Trigger new scan to find an IBSS to join [ 167.106954][T11688] chnl_net:caif_netlink_parms(): no params data found [ 167.336141][T11688] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.359115][T11688] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.364075][ T5839] Bluetooth: hci0: command tx timeout [ 167.385684][T11688] bridge_slave_0: entered allmulticast mode [ 167.417786][T11688] bridge_slave_0: entered promiscuous mode [ 167.451887][T11688] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.484330][T11688] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.511518][T11688] bridge_slave_1: entered allmulticast mode [ 167.522709][T11688] bridge_slave_1: entered promiscuous mode [ 167.669084][T11688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.671988][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 167.704314][T11688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.756273][T11807] netlink: 'syz.0.1753': attribute type 3 has an invalid length. [ 167.834163][T11688] team0: Port device team_slave_0 added [ 167.846444][T11792] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1753'. [ 167.865961][T11688] team0: Port device team_slave_1 added [ 167.893643][T11812] v: renamed from veth1_virt_wifi (while UP) [ 167.960283][T11688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.979073][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.039352][T11825] x_tables: duplicate underflow at hook 3 [ 168.045317][T11688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.070543][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 168.086614][T11688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.110136][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.126442][T11831] netlink: 'syz.0.1762': attribute type 3 has an invalid length. [ 168.152240][T11831] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1762'. [ 168.179156][T11688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.232920][T11688] hsr_slave_0: entered promiscuous mode [ 168.243778][T11688] hsr_slave_1: entered promiscuous mode [ 169.433731][ T5839] Bluetooth: hci0: command tx timeout [ 169.995943][ T12] wlan0: Trigger new scan to find an IBSS to join [ 170.057625][T11853] openvswitch: Êü: Dropping previously announced user features [ 170.075638][T11859] __nla_validate_parse: 1 callbacks suppressed [ 170.075657][T11859] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1771'. [ 170.126064][T11862] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 170.435148][T11887] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 170.442927][T11887] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1779'. [ 170.496466][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 170.516368][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1781'. [ 170.527928][T11890] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1780'. [ 170.555475][T11688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.574214][T11688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.599181][T11688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.620093][T11688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.666400][T11909] geneve0: mtu less than device minimum [ 170.782798][T11688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.826691][T11688] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.847002][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.854169][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.875271][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.882457][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.897688][ T2315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.938109][T11922] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 170.966597][T11922] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 171.013467][T11922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.257245][T11688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.514579][ T5839] Bluetooth: hci0: command tx timeout [ 171.586204][T11968] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 171.622009][T11968] netlink: 9324 bytes leftover after parsing attributes in process `syz.2.1796'. [ 171.641813][T11968] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 171.660683][T11968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1796'. [ 171.669776][T11688] veth0_vlan: entered promiscuous mode [ 171.692879][T11973] netlink: 'syz.0.1797': attribute type 10 has an invalid length. [ 171.728363][T11688] veth1_vlan: entered promiscuous mode [ 171.800182][T11688] veth0_macvtap: entered promiscuous mode [ 171.820377][T11688] veth1_macvtap: entered promiscuous mode [ 171.877956][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.900331][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.911443][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.933090][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.949998][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.960684][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.972389][T11688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.981294][T11979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 171.997808][T11986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 172.017971][T11985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.067782][T11688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.070423][T11991] netlink: 'syz.0.1802': attribute type 142 has an invalid length. [ 172.104050][T11688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.115273][T11688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.130465][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1802'. [ 172.184425][T11688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.193175][T11688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.213607][T11688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.222331][T11688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.468217][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.476686][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.487913][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.495883][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.942284][T12045] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 173.360387][T12069] netlink: 'syz.3.1820': attribute type 10 has an invalid length. [ 173.652887][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.118157][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.481660][T12096] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 174.493942][T12098] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 174.557749][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.633681][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.646019][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.654093][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.662358][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.674480][T12104] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 174.683035][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.694265][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.710715][T12104] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.719189][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 174.728629][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.761117][T12104] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 174.769003][T12104] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.893559][T12100] lo speed is unknown, defaulting to 1000 [ 174.900317][T12100] wlan1 speed is unknown, defaulting to 1000 [ 174.943719][ T51] bridge_slave_1: left allmulticast mode [ 174.949462][ T51] bridge_slave_1: left promiscuous mode [ 174.963692][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.010993][ T51] bridge_slave_0: left allmulticast mode [ 175.029950][ T51] bridge_slave_0: left promiscuous mode [ 175.038616][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.112213][T12132] __nla_validate_parse: 10 callbacks suppressed [ 175.112233][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1837'. [ 175.241091][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 175.412826][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.424394][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.436395][ T51] bond0 (unregistering): Released all slaves [ 175.495338][T12123] lo speed is unknown, defaulting to 1000 [ 175.519120][T12121] lo speed is unknown, defaulting to 1000 [ 175.559170][T12123] wlan1 speed is unknown, defaulting to 1000 [ 175.656769][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 175.657252][T12145] netem: change failed [ 175.810277][T12121] wlan1 speed is unknown, defaulting to 1000 [ 175.878913][T12152] x_tables: duplicate entry at hook 1 [ 175.924102][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 176.062875][T12100] chnl_net:caif_netlink_parms(): no params data found [ 176.290946][ T51] hsr_slave_0: left promiscuous mode [ 176.314605][ T51] hsr_slave_1: left promiscuous mode [ 176.345676][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.353114][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.401715][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.419557][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.478705][ T51] veth1_macvtap: left promiscuous mode [ 176.494575][ T51] veth0_macvtap: left promiscuous mode [ 176.513564][ T51] veth1_vlan: left promiscuous mode [ 176.517772][T12185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1848'. [ 176.518874][ T51] veth0_vlan: left promiscuous mode [ 176.794377][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 176.803512][ T5152] Bluetooth: hci0: command tx timeout [ 177.086881][ T51] team0 (unregistering): Port device team_slave_1 removed [ 177.124519][ T51] team0 (unregistering): Port device team_slave_0 removed [ 177.743561][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 177.763065][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.790491][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.825438][T12100] bridge_slave_0: entered allmulticast mode [ 177.856685][T12100] bridge_slave_0: entered promiscuous mode [ 177.867168][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.879796][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.887139][T12100] bridge_slave_1: entered allmulticast mode [ 177.894363][T12100] bridge_slave_1: entered promiscuous mode [ 177.993825][T12100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.068441][T12100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.131721][T12100] team0: Port device team_slave_0 added [ 178.147405][T12100] team0: Port device team_slave_1 added [ 178.249283][ T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.292731][T12100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.301983][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.333768][T12100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.361334][T12100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.370937][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.410515][T12100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.435110][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.442685][T12203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.450087][T12203] IPv6: NLM_F_CREATE should be set when creating new route [ 178.457389][T12203] IPv6: NLM_F_CREATE should be set when creating new route [ 178.467024][ C0] Unknown status report in ack skb [ 178.467514][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.481728][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.491448][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.500999][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.510442][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.561062][ T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.592154][T12218] macvtap0: entered promiscuous mode [ 178.600734][T12218] macvtap0: left promiscuous mode [ 178.628953][ T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.684659][T12213] lo speed is unknown, defaulting to 1000 [ 178.698524][T12100] hsr_slave_0: entered promiscuous mode [ 178.712978][T12100] hsr_slave_1: entered promiscuous mode [ 178.741340][T12213] wlan1 speed is unknown, defaulting to 1000 [ 178.756135][ T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.851763][T12232] ax25_connect(): syz.3.1863 uses autobind, please contact jreuter@yaina.de [ 178.877341][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 178.883589][ T53] Bluetooth: hci0: command tx timeout [ 179.238904][T12254] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 179.338658][ T51] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 179.385295][ T51] erspan0 (unregistering): left promiscuous mode [ 179.438542][ T51] gretap0 (unregistering): left promiscuous mode [ 179.480074][ T51] dvmrp0 (unregistering): left allmulticast mode [ 179.500811][ T51] dvmrp1 (unregistering): left allmulticast mode [ 179.679465][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.693452][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.705278][ T51] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 179.715879][ T51] bond0 (unregistering): (slave team0): Releasing backup interface [ 179.727045][ T51] bond0 (unregistering): Released all slaves [ 179.828089][ T51] bond1 (unregistering): Released all slaves [ 179.930248][ T51] bond2 (unregistering): Released all slaves [ 179.942839][ T51] bond3 (unregistering): Released all slaves [ 179.973567][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.094484][ T51] Êü: left promiscuous mode [ 180.149775][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1873'. [ 180.188390][ T51] tipc: Disabling bearer [ 180.207342][ T51] tipc: Disabling bearer [ 180.234430][ T51] tipc: Disabling bearer [ 180.244668][T12282] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 180.248598][T12284] netlink: 'syz.3.1877': attribute type 142 has an invalid length. [ 180.257888][ T51] tipc: Left network mode [ 180.262176][T12284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1877'. [ 180.473480][T12290] netlink: 'syz.3.1877': attribute type 142 has an invalid length. [ 180.553691][ T53] Bluetooth: hci3: command tx timeout [ 180.660568][T12298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.702347][T12300] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 180.703812][T12301] netlink: 'syz.2.1881': attribute type 32 has an invalid length. [ 180.743206][T12213] chnl_net:caif_netlink_parms(): no params data found [ 180.760610][T12302] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 180.856034][T12298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.875781][T12312] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 180.883792][T12312] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 180.954077][ T53] Bluetooth: hci0: command tx timeout [ 181.000002][T12298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.020706][T12100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.051639][T12320] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1884'. [ 181.096377][T12298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.133759][T12100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.149734][T12100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.203681][T12100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.261958][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.269213][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.289555][T12213] bridge_slave_0: entered allmulticast mode [ 181.299160][T12213] bridge_slave_0: entered promiscuous mode [ 181.318384][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.330762][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.339277][T12213] bridge_slave_1: entered allmulticast mode [ 181.343728][T12331] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 181.347073][T12213] bridge_slave_1: entered promiscuous mode [ 181.362214][T12331] netlink: 9260 bytes leftover after parsing attributes in process `syz.0.1889'. [ 181.378899][T12331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1889'. [ 181.388717][T12331] netlink: 'syz.0.1889': attribute type 2 has an invalid length. [ 181.404631][T12331] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 181.511823][T12298] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.572388][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.610676][T12298] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.627849][T12346] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1892'. [ 181.642799][T12346] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 181.682563][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.702199][T12298] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.721172][ T51] batadv_slave_1: left promiscuous mode [ 181.748014][ T51] hsr_slave_0: left promiscuous mode [ 181.761093][ T51] hsr_slave_1: left promiscuous mode [ 181.789279][ T51] veth0_macvtap: left promiscuous mode [ 181.795261][ T51] veth1_vlan: left promiscuous mode [ 181.800523][ T51] @ÿ: left promiscuous mode [ 182.151741][ T51] team0 (unregistering): Port device team_slave_1 removed [ 182.182445][ T51] team0 (unregistering): Port device team_slave_0 removed [ 182.506419][T12298] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.519195][T12355] pim6reg1: entered promiscuous mode [ 182.524805][T12355] pim6reg1: entered allmulticast mode [ 182.633481][ T53] Bluetooth: hci3: command 0x041b tx timeout [ 182.672493][T12213] team0: Port device team_slave_0 added [ 182.708217][T12213] team0: Port device team_slave_1 added [ 182.803180][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.822195][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.853920][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.884874][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.891842][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.942176][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.983110][T12100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.002400][ T51] IPVS: stop unused estimator thread 0... [ 183.023912][T12213] hsr_slave_0: entered promiscuous mode [ 183.034126][ T5152] Bluetooth: hci0: command tx timeout [ 183.039970][T12213] hsr_slave_1: entered promiscuous mode [ 183.051324][T12213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.059423][T12213] Cannot create hsr debugfs directory [ 183.136295][T12100] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.188206][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.195343][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.263211][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.270428][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.581426][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 183.677200][T12100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.693009][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1913'. [ 183.705205][T12420] wlan1: mtu less than device minimum [ 183.757757][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1914'. [ 183.823782][T12213] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.842169][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 183.844591][T12213] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.897539][T12213] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.946923][T12213] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.969361][T12427] openvswitch: netlink: Missing valid actions attribute. [ 183.988280][T12427] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.117877][T12448] sctp: [Deprecated]: syz.0.1919 (pid 12448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.117877][T12448] Use struct sctp_sack_info instead [ 184.221111][T12100] veth0_vlan: entered promiscuous mode [ 184.266211][T12213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.289345][T12100] veth1_vlan: entered promiscuous mode [ 184.340989][T12213] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.369887][T12100] veth0_macvtap: entered promiscuous mode [ 184.383029][T12100] veth1_macvtap: entered promiscuous mode [ 184.448282][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.455494][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.511277][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.523859][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.536520][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.547263][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.558585][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.570005][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.581732][T12100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.610237][T12468] bond3: entered promiscuous mode [ 184.616557][T12468] bond3: entered allmulticast mode [ 184.622024][T12468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.718574][ T5846] Bluetooth: hci3: command 0x041b tx timeout [ 184.841810][T12468] bond3 (unregistering): Released all slaves [ 184.865159][T12100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.876293][T12100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.890785][T12100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.910880][T12477] netdevsim netdevsim0: Direct firmware load for . [ 184.910880][T12477] failed with error -2 [ 184.936895][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.944069][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.945200][T12477] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 184.945200][T12477] [ 184.963149][T12100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.978324][T12100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.988893][T12100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.004204][T12100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.159848][ T2315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.174005][ T2315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.220767][ T2315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.230343][ T2315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.388319][T12213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.461243][T12213] veth0_vlan: entered promiscuous mode [ 185.487750][T12213] veth1_vlan: entered promiscuous mode [ 185.524271][T12511] __nla_validate_parse: 3 callbacks suppressed [ 185.524289][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 185.570043][T12213] veth0_macvtap: entered promiscuous mode [ 185.586840][T12213] veth1_macvtap: entered promiscuous mode [ 185.612144][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.637947][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.640154][T12516] netlink: 9392 bytes leftover after parsing attributes in process `syz.3.1940'. [ 185.658603][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.666406][T12516] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 185.674980][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.702205][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.719517][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.730194][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.741241][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.757026][T12213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.848188][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.867179][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 185.883365][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.893211][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.923846][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.934944][T12213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.995417][ T2934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.016071][T12213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.028163][T12213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.037327][T12213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.046191][T12213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.089443][ T2934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.158048][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.166907][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.188010][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.200029][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.220684][ T2934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.233562][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 186.233876][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 186.490185][ T2934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.638018][ T2934] bridge_slave_1: left allmulticast mode [ 186.645050][ T2934] bridge_slave_1: left promiscuous mode [ 186.650748][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.666705][ T2934] bridge_slave_0: left allmulticast mode [ 186.672378][ T2934] bridge_slave_0: left promiscuous mode [ 186.682053][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.956543][T12528] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.974219][T12528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1943'. [ 187.155889][T12534] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1945'. [ 187.270076][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.279081][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.314310][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.343758][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.356125][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.363663][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.376683][T12550] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 187.404045][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.428389][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.435671][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.444520][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.452047][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.461653][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.464333][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.479118][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.498380][ T2934] bond0 (unregistering): Released all slaves [ 187.500530][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.512098][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.526586][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.534442][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.545603][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.553217][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.610474][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.628102][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.651306][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.661639][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.675710][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.688396][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.703454][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.705293][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.731333][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.732600][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.759992][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.760133][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1951'. [ 187.773075][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.785667][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.796724][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.803204][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.811649][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.818632][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.827017][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.836094][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.843592][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.851092][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.858698][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.868950][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.876717][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.884599][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.891617][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.908889][T12544] lo speed is unknown, defaulting to 1000 [ 187.917000][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.926587][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.963768][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.971836][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.981263][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.993699][T12544] wlan1 speed is unknown, defaulting to 1000 [ 188.011925][T12555] lo speed is unknown, defaulting to 1000 [ 188.038365][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.075557][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.078367][T12574] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1955'. [ 188.092382][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.103658][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.125492][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.144816][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.152556][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.171146][T12551] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.322559][T12555] wlan1 speed is unknown, defaulting to 1000 [ 189.167631][T12544] chnl_net:caif_netlink_parms(): no params data found [ 189.435282][ T5152] Bluetooth: hci0: command tx timeout [ 189.913686][ T5152] Bluetooth: hci3: command tx timeout [ 190.103207][ T2934] hsr_slave_0: left promiscuous mode [ 190.126630][ T2934] hsr_slave_1: left promiscuous mode [ 190.143629][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.160261][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.176086][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.192583][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.264027][ T2934] veth1_macvtap: left promiscuous mode [ 190.286463][ T2934] veth0_macvtap: left promiscuous mode [ 190.304803][ T2934] veth1_vlan: left promiscuous mode [ 190.322609][ T2934] veth0_vlan: left promiscuous mode [ 190.765873][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 191.515038][ T5152] Bluetooth: hci0: command tx timeout [ 191.688630][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 191.784936][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 192.000641][ T5152] Bluetooth: hci3: command tx timeout [ 192.933494][T12544] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.940830][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.956353][T12544] bridge_slave_0: entered allmulticast mode [ 193.047297][T12544] bridge_slave_0: entered promiscuous mode [ 193.071732][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.092869][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.116313][T12544] bridge_slave_1: entered allmulticast mode [ 193.136628][T12544] bridge_slave_1: entered promiscuous mode [ 193.265782][ T1079] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.281614][T12648] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 193.315966][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.333727][T12648] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.1972'. [ 193.385731][T12648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1972'. [ 193.419203][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.479042][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 193.536307][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 193.593942][ T5152] Bluetooth: hci0: command tx timeout [ 193.719918][T12555] chnl_net:caif_netlink_parms(): no params data found [ 193.792302][T12544] team0: Port device team_slave_0 added [ 193.847199][T12544] team0: Port device team_slave_1 added [ 194.046436][T12666] netlink: 'syz.2.1978': attribute type 2 has an invalid length. [ 194.074371][ T5152] Bluetooth: hci3: command tx timeout [ 194.412228][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424833][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.446538][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.613744][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.629075][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.651385][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.734901][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.756639][T12692] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 194.786512][T12692] netlink: 9388 bytes leftover after parsing attributes in process `syz.0.1983'. [ 194.850611][ T2934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.870123][T12666] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 194.915839][T12666] wlan1: mtu less than device minimum [ 194.921300][T12666] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 194.928781][T12678] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1981'. [ 195.128158][T12688] netlink: 3850 bytes leftover after parsing attributes in process `syz.3.1981'. [ 195.142250][T12697] openvswitch: netlink: Unknown key attributes 2 [ 195.152853][T12699] openvswitch: netlink: Unknown key attributes 2 [ 195.673828][ T5152] Bluetooth: hci0: command tx timeout [ 196.153984][ T5152] Bluetooth: hci3: command tx timeout [ 202.903345][ C0] sched: DL replenish lagged too much [ 209.106784][ T2934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.964804][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.974675][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.984474][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.992390][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.003933][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.012258][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.904283][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.916821][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.926137][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.934499][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.944060][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.952580][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.073603][ T5152] Bluetooth: hci5: command tx timeout [ 213.033522][ T5152] Bluetooth: hci1: command tx timeout [ 214.160249][ T5152] Bluetooth: hci5: command tx timeout [ 215.113526][ T5152] Bluetooth: hci1: command tx timeout [ 216.233518][ T5152] Bluetooth: hci5: command tx timeout [ 216.770442][ T2934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.018526][T12555] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.032761][T12555] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.040177][T12555] bridge_slave_0: entered allmulticast mode [ 217.057046][T12555] bridge_slave_0: entered promiscuous mode [ 217.111386][ T6882] INFO: trying to register non-static key. [ 217.117216][ T6882] The code is fine but needs lockdep annotation, or maybe [ 217.124323][ T6882] you didn't initialize this object before use? [ 217.130559][ T6882] turning off the locking correctness validator. [ 217.136890][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: kbnepd bnep0 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 217.147746][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.157810][ T6882] Call Trace: [ 217.161093][ T6882] [ 217.164040][ T6882] dump_stack_lvl+0x241/0x360 [ 217.168751][ T6882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.173967][ T6882] ? __pfx__printk+0x10/0x10 [ 217.178573][ T6882] ? __is_module_percpu_address+0x213/0x370 [ 217.184484][ T6882] ? __is_kernel_percpu_address+0x115/0x250 [ 217.190392][ T6882] assign_lock_key+0x241/0x280 [ 217.195172][ T6882] ? __pfx_assign_lock_key+0x10/0x10 [ 217.200468][ T6882] ? __lock_acquire+0x1384/0x2050 [ 217.205513][ T6882] register_lock_class+0x1cf/0x980 [ 217.210641][ T6882] ? __pfx_register_lock_class+0x10/0x10 [ 217.216292][ T6882] ? mark_lock+0x9a/0x360 [ 217.220641][ T6882] __lock_acquire+0xf0/0x2050 [ 217.225350][ T6882] lock_acquire+0x1ed/0x550 [ 217.229870][ T6882] ? pm_runtime_set_memalloc_noio+0x13d/0x260 [ 217.235956][ T6882] ? __pfx_lock_acquire+0x10/0x10 [ 217.241008][ T6882] ? mark_lock+0x9a/0x360 [ 217.245349][ T6882] _raw_spin_lock_irq+0xd3/0x120 [ 217.250298][ T6882] ? pm_runtime_set_memalloc_noio+0x13d/0x260 [ 217.256375][ T6882] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 217.261934][ T6882] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.267153][ T6882] ? lockdep_hardirqs_on+0x99/0x150 [ 217.272449][ T6882] pm_runtime_set_memalloc_noio+0x13d/0x260 [ 217.278357][ T6882] netdev_unregister_kobject+0x178/0x250 [ 217.284011][ T6882] unregister_netdevice_many_notify+0x1851/0x1da0 [ 217.290446][ T6882] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.297223][ T6882] ? do_raw_spin_unlock+0x13c/0x8b0 [ 217.302437][ T6882] ? __mutex_lock+0x52a/0xd70 [ 217.307128][ T6882] unregister_netdevice_queue+0x303/0x370 [ 217.312863][ T6882] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.319114][ T6882] ? down_write+0x18c/0x220 [ 217.323630][ T6882] ? __pfx_down_write+0x10/0x10 [ 217.328496][ T6882] unregister_netdev+0x1c/0x30 [ 217.333279][ T6882] bnep_session+0x2e0e/0x3000 [ 217.337987][ T6882] ? __pfx_bnep_session+0x10/0x10 [ 217.343020][ T6882] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 217.348924][ T6882] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.355293][ T6882] ? __pfx_woken_wake_function+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 217.360956][ T6882] ? __kthread_parkme+0x169/0x1d0 [ 217.366006][ T6882] ? __pfx_bnep_session+0x10/0x10 [ 217.371042][ T6882] kthread+0x2f0/0x390 [ 217.375120][ T6882] ? __pfx_bnep_session+0x10/0x10 [ 217.380164][ T6882] ? __pfx_kthread+0x10/0x10 [ 217.384767][ T6882] ret_from_fork+0x4b/0x80 [ 217.389201][ T6882] ? __pfx_kthread+0x10/0x10 [ 217.393799][ T6882] ret_from_fork_asm+0x1a/0x30 [ 217.398582][ T6882] [ 217.402649][ T5152] Bluetooth: hci1: command tx timeout [ 217.896380][ T2934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.991193][ T2934] bridge_slave_1: left allmulticast mode [ 217.999640][ T2934] bridge_slave_1: left promiscuous mode [ 218.007378][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.018558][ T2934] bridge_slave_0: left allmulticast mode [ 218.026460][ T2934] bridge_slave_0: left promiscuous mode [ 218.032141][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.326198][ T5152] Bluetooth: hci5: command tx timeout [ 222.561676][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.587415][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.599886][ T2934] bond0 (unregistering): Released all slaves