last executing test programs: 1m33.647084758s ago: executing program 4 (id=585): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000000032000000680000008700033007000000a9a812479a59c0152a9710c8f9b0fec33c9f273564cf2f240e2f525c1803e3c47e757ea3adaf63a373579a989eee69ac35ec1a3480764cf24728dc0c184dad20cb782b9d9f10006d106e"], 0x0) 1m26.959010662s ago: executing program 4 (id=585): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000000032000000680000008700033007000000a9a812479a59c0152a9710c8f9b0fec33c9f273564cf2f240e2f525c1803e3c47e757ea3adaf63a373579a989eee69ac35ec1a3480764cf24728dc0c184dad20cb782b9d9f10006d106e"], 0x0) 1m12.91638072s ago: executing program 4 (id=585): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000000032000000680000008700033007000000a9a812479a59c0152a9710c8f9b0fec33c9f273564cf2f240e2f525c1803e3c47e757ea3adaf63a373579a989eee69ac35ec1a3480764cf24728dc0c184dad20cb782b9d9f10006d106e"], 0x0) 1m8.634572534s ago: executing program 1 (id=1214): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8900000000865b0b90435ebfff61b97c89d21dba24d8354381e2ad1b36e48a6228d2ad9f46c6d3b8b6ac3a4b34804db8a6eaf506220052014b5025e5af7b6c", @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRESDEC=r0, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000420900010073797a30"], 0xc4}}, 0x4008800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106fc020000000800000000c1a3720f6fca000000000000", @ANYRES32=r7, @ANYBLOB="10005e80040001000800020000000000"], 0x2c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={@local, 0x1, 0x0, 0xb0, 0x0, [{@local}, {@private}, {@loopback}, {@multicast1}, {@empty}, {@broadcast}, {@private}, {@multicast1}, {@broadcast}, {@multicast2}, {@private}]}}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r13, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a5f33c442b196f57b03a478472eee8", @ANYRES16=r8, @ANYBLOB="20002abd7000fbdbdf25110000000600120107000000"], 0x1c}, 0x1, 0x0, 0x0, 0xba2c9de3bc49c0ac}, 0x8080) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000b2189681fc86e70306054f1a86efa8f64d0e6ef18a0b4143b03c571b6fe1cb8aafc1a18dff3aa1213dce350f2a299032eb620b37ab0de106fdc65607f3c128a5291e8be8692abc94ab420f20af6ee627207ef80f5cb71a56206d19e1e70e442dae94d2dc1f63bb52696a924976d01f86fb859da96f8ac83af0f9e36091699db7c6504bcd43894a1cce0df06d803ff0", @ANYRES16=r14, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x100, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xfb, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2]}, @lsrr={0x83, 0x13, 0x81, [@dev={0xac, 0x14, 0x14, 0x43}, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendfile(r11, r11, 0x0, 0x8) syz_emit_ethernet(0x97, &(0x7f0000000940)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200613afffe8000000000000000000000000000bbff020000000000de3e000000000000018c0090780000653900000000000000034dd9c4207f9e673418147dfd7bc05a66301034167c2e84c8576617ef623c02b044c35f69777999df561f9211a73e49135951d48cbcd063e1b08e0ab1faa4a905b785595163f4c6488e39f3194e12a2ab42"], 0x0) 1m8.310395042s ago: executing program 1 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x134, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b13c375}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffcb23}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20059005}, 0x4044081) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.372987048s ago: executing program 4 (id=585): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000000032000000680000008700033007000000a9a812479a59c0152a9710c8f9b0fec33c9f273564cf2f240e2f525c1803e3c47e757ea3adaf63a373579a989eee69ac35ec1a3480764cf24728dc0c184dad20cb782b9d9f10006d106e"], 0x0) 57.219554405s ago: executing program 1 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x134, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b13c375}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffcb23}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20059005}, 0x4044081) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.009164727s ago: executing program 1 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x134, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b13c375}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffcb23}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20059005}, 0x4044081) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.43834372s ago: executing program 4 (id=585): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000000032000000680000008700033007000000a9a812479a59c0152a9710c8f9b0fec33c9f273564cf2f240e2f525c1803e3c47e757ea3adaf63a373579a989eee69ac35ec1a3480764cf24728dc0c184dad20cb782b9d9f10006d106e"], 0x0) 19.038350564s ago: executing program 1 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x134, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b13c375}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffcb23}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20059005}, 0x4044081) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.042909408s ago: executing program 4 (id=585): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000000032000000680000008700033007000000a9a812479a59c0152a9710c8f9b0fec33c9f273564cf2f240e2f525c1803e3c47e757ea3adaf63a373579a989eee69ac35ec1a3480764cf24728dc0c184dad20cb782b9d9f10006d106e"], 0x0) 5.418086305s ago: executing program 3 (id=1625): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000280)="bd7e95c4603ff2b8fb2efab257b438111bffa6df63340be4b467464484882ba20cad3efc3ce0dd84a68ec8ba22a4b6d298de20c8066f7cc67732c4272da82665a2597dd0eda91dc9faf1ac7d0d0a729457d1c57d142903708712a69317138bf69f8ddeb107a15c83c5d2c5c62d7831b017756baf1d12", 0x76, 0xc0d0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) r5 = socket(0x25, 0x1, 0x0) close(r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) r7 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x82, 0xd, "66581ddb34253c0556c786"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) 5.078354227s ago: executing program 3 (id=1627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) unshare(0x40000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.336098948s ago: executing program 0 (id=1637): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x844, &(0x7f0000000200)={0x11, 0x16, 0x0, 0x1, 0x4b}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000002100)=""/4109, &(0x7f0000000040)=0x100d) 2.846273348s ago: executing program 0 (id=1638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xfff) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000), 0x8) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pimreg1\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r5 = socket(0x25, 0x1, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x34000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000064}, 0x40) 2.465284063s ago: executing program 1 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x134, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b13c375}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffcb23}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20059005}, 0x4044081) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.402145524s ago: executing program 0 (id=1640): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x6, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}], &(0x7f00000007c0)='GPL\x00', 0x6, 0xba, &(0x7f0000000800)=""/186, 0x40f00, 0x10, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x8, 0xfff, 0xf}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xd, 0x4}, {0x2, 0x4, 0x1, 0x4}, {0x2, 0x5, 0x6, 0x7}, {0x4, 0x5, 0x4, 0x5}, {0x4, 0x5, 0xc, 0x2}, {0x0, 0x2, 0x7, 0x2}, {0x0, 0x5, 0xf, 0x4}], 0x10, 0x180000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0a000000000000000000c3cb20606f1a15a50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500"/28], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd1d0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x0, 0x25dfdbff}, 0x18}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xd0, 0x18c, 0x148, 0xd0, 0x0, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x3, 0x7, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'rose0\x00', 'geneve1\x00'}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6d422c09179b9ff7dd915d564c901f14b840de1166f3c5f62794", 0x22) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x8, 0x3, 0x8, 0xffffffffffffffff, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x8b}, @jmp={0x5, 0x1, 0x7, 0x8, 0x5, 0x6, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0xe67, 0xa9, &(0x7f0000000240)=""/169, 0x41000, 0x41, '\x00', r0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x0, 0x340, 0xfffffffd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000540)=[r1, r2, r3, r4, r8, r11, r12], &(0x7f0000000580)=[{0x0, 0x4, 0x10, 0xb}, {0x0, 0x5, 0x0, 0x7}, {0x0, 0x4, 0xa, 0x2}, {0x4, 0x1, 0x5, 0x7}, {0x3, 0x5, 0x6, 0x6}, {0x2, 0x4, 0xf, 0x3}, {0x1, 0x4, 0x0, 0x7}], 0x10, 0x8}, 0x94) 1.398139621s ago: executing program 2 (id=1641): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000dc36000000000000000000001801000020786c2500000000002020207b1a0000f8ffffffb702000008000000b703000000000000850000006e0000009500000000000000bfbf645366a09aaf4ebd649f07de80d0d6ec25ddcdf50620bb64ecaab068dea44aa9b809ee66a0d2364468237e70e7d9a705f762561aa09ddf49dfab6eb3e05e258ebad2a6f74723869011e18525607f64726e942de4b9ca691c7327378df580fe353c681cb2fbf7fdbd42e2f37fe79929ec3664ceff222649ac4d7e14084c4031ef95ad2995b39a98def2fa402ec5c4aa773171e6f940bc8a8bba6005afe2a8b3cb696400"/252], &(0x7f0000000180)='GPL\x00'}, 0x94) 1.396052446s ago: executing program 3 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)=r2) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000400c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022ebee8bdfb5efc34e64bfed2c16e67a23c02e81ef442bf3ee"], 0xfdef) 1.266635232s ago: executing program 2 (id=1643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) 938.519982ms ago: executing program 2 (id=1644): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x24}}, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000f000a5f45db48359c2ec213d", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, &(0x7f0000000080)) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x30) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0xa) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 906.676355ms ago: executing program 2 (id=1645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) (async, rerun: 64) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000040)="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") (async, rerun: 64) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000240)='GPL\x00'}, 0x90) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000140)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c4}, 0x94) 555.115655ms ago: executing program 2 (id=1646): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000300)=0x9c3cc356e0b08a4a, 0x4) (async, rerun: 64) r1 = socket(0x2a, 0x2, 0xfffffffe) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x40800) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x84, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0xfff3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x32, 0x2, [@TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x800, 0x0, {0x7, 0x1, 0x2, 0x7, 0x5}, {0x1, 0x2, 0xfffe, 0x3, 0x607, 0xd2}, 0x0, 0x6, 0x7}}]}]}}]}, 0x84}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 394.584211ms ago: executing program 0 (id=1647): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x3c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x8, [0x1, 0xf, 0xc, 0xa, 0x3, 0xf, 0x6, 0x10, 0xe, 0x0, 0xb, 0x3, 0x7, 0x0, 0x0, 0xb], 0x1, [0x79, 0x1, 0xd07, 0xfffd, 0xffff, 0x8, 0x5, 0x9, 0x2, 0xc5a, 0x81, 0x6, 0xb, 0x10, 0xd65, 0x4], [0x1, 0x3, 0x1b, 0x3, 0x6, 0x8001, 0x5, 0x1, 0x6, 0x0, 0x9, 0x92c4, 0x7, 0x1, 0x0, 0x7]}}}}]}, 0x88}}, 0x0) 392.619313ms ago: executing program 2 (id=1648): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x24001}, 0x10) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x50, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) (async) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x1, 0x2001, 0x0) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="8f81decaeb501a20037582b6392ecea3", 0x10}, {&(0x7f00000003c0)="24e529004dd25c427508cb351d130e5f0ae2ee9af9c845bf45814f48", 0x1c}], 0x2}, 0x80) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 391.498795ms ago: executing program 3 (id=1649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000feff0000000080400002000000000100080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004030000000000000000000000000000d6874a9c4d6340ef49d3ab978de1b8e9070cef2600788b4309516ee018652c358ead18bdb46b7f4d04b80a1a7f5e4cd6de121a5a0107e99e4abea064cc4b4065117125f3d4774a87e5db60d3e66efc0516bb5a779f6aa319ec870ab3f321835d143433d1c017c01f73d3e6772118c17b3636a6b10d99642a15cfb9c96ba0f9a47354a0e0189bd0bbd77858ae5c083142e4cb069742df54561bf6b9529cf0121979a7dd4e77758c1a8b"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x20, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x20, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) 251.312323ms ago: executing program 3 (id=1650): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000500)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) (async) bind$inet6(r10, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c80)={0x2e0, r7, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_OURS={0x1d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$]!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',#^-d\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']]\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x271}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',.,\\!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x514}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "1881f958d3d90eb3209fedff454884d13b0657dbb75e38adb3c9ab2ccb1072f868268c9e3ad2c182d53573dcd8aa2d4acad65f70c15d4ee95b495919334bc824186a756b27f83876e57eb4f80e9f72ace0a957dc618d212d4cbdc1574f2ad85f24d683e87b249f7811a5df89e3a518b4d00efbb0f7b44b9c0a3121bbd9b0f0a779afb771a1c30f72c75bb01ea1deb846d133da1fcd10d782e93ff3492b04a6858fbbff9bf0e1"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xb000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x11}, 0x11) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELOBJ={0x11c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xbe, 0x8, "da668ec3f3542e79f140501492c5c274070063facc9aec8ad5ad47b083c38967ecbacb894085b89ee3710f6060658c0d6cc2be082c3aa114b17d0aa521641d26c998355164b7027e299f6f79096f489f3bbf09e0e9baec238c180e702e7471f71dcef27e3e44908b4fcc4598958b6a473e94a066ca17d6cde1a94eb6e07a44799bd96bd4cf65cdc486a0e6d4e468024b95f5ae2b01bd94453d06e502ed8c5f18a9bf47a76212ff7bb36a7abd943c752ea1df99c88a526524b9e1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2ec, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_USERDATA={0x12, 0xd, 0x1, 0x0, "c180b7b0f78eaa1653203503c534"}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_DESC={0x284, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b49}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x370b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb24}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xce}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x86e0abe}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "4b30a48bb4eccb815250b361c4903a4de5c2bc003cd0c28ddcfb0710459219dddaf84d2850bfdde9367f16be66565f55acf117c06f29c49e667f4eb823cf467fed93f6705a933991d7bb1e17e6ea80b01b7bbf56cc11a12d7a25baef1a47efec9a5c2173c3fcddaf68aedc7808577a3313dc7a7b69ff39ce1559ff0ed589bfd5a54af8bc258b170265e2a150ca5de9df97ce5a63423be92e8470edb3723c1c22cc97"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c0}, 0x1, 0x0, 0x0, 0x2018}, 0x8000) (async) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x40}, {0x6}]}, 0x10) (async) sendmsg$IPSET_CMD_GET_BYNAME(r13, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001380)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x28000000) 208.538165ms ago: executing program 0 (id=1651): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b0af8ff00000000cf510000001300000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 21.868588ms ago: executing program 0 (id=1652): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300060000002eaf2300000007a552a3cff7d1a08d846e721ec5de000050a7d2ebca06b89d9a626a3a0f488b687fb337e1a17db0869de62fb02f258db3904f5a80f04334aaa342929a2bad4ac15a555fca21d699f99d2d5fdbe9bf0ce93af4a7c3bd3353e8d275f6065808f6a78efc297bec510e43031bc72c148f1de41e9810f701428e5af1a3b74fb693d368a427505d3d62c85a1934d0c5ac4c5b818d51b6ca8bd05ce353cde1f6d7adb25b8699fbe6d13eb78b78253f88d20216fb543aee6c11818455aabb6c11", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES16=r1], 0x44}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x2, 0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000340)={@remote, @empty, @rand_addr=0x64010102}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 0s ago: executing program 3 (id=1653): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x2, 0x2}, 0xe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640), 0x40000000000033a, 0x34000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33}}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) setsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f0000000140)=0x62cf, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f00000000c0)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) kernel console output (not intermixed with test programs): interface [ 178.136772][ T13] bond0 (unregistering): Released all slaves [ 178.469744][ T9320] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 178.718748][ T9332] netlink: 64 bytes leftover after parsing attributes in process `syz.2.976'. [ 179.105451][ T9313] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 179.182924][ T9345] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.982'. [ 179.199343][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 179.793847][ T13] hsr_slave_0: left promiscuous mode [ 179.817506][ T13] hsr_slave_1: left promiscuous mode [ 179.838914][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.866684][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.924081][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 179.942566][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.956860][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.999905][ T13] veth1_macvtap: left promiscuous mode [ 180.005808][ T13] veth0_macvtap: left promiscuous mode [ 180.015684][ T13] veth1_vlan: left promiscuous mode [ 180.024471][ T13] veth0_vlan: left promiscuous mode [ 180.179418][ T51] Bluetooth: hci4: command tx timeout [ 180.333332][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 180.338144][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 180.605720][ T13] team0 (unregistering): Port device team_slave_1 removed [ 180.647744][ T13] team0 (unregistering): Port device team_slave_0 removed [ 181.074332][ T9369] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 181.085591][ T9369] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.095596][ T9369] gretap0: entered promiscuous mode [ 181.100986][ T9369] gretap0: entered allmulticast mode [ 181.116738][ T9371] tipc: Started in network mode [ 181.121803][ T9371] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711 [ 181.141336][ T9371] tipc: Enabling of bearer rejected, failed to enable media [ 181.194721][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 181.326071][ T9393] netlink: 'syz.2.997': attribute type 11 has an invalid length. [ 181.520466][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 181.599609][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.608168][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.615465][ T9310] bridge_slave_0: entered allmulticast mode [ 181.623781][ T9310] bridge_slave_0: entered promiscuous mode [ 181.634537][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.642599][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.650608][ T9310] bridge_slave_1: entered allmulticast mode [ 181.673204][ T9310] bridge_slave_1: entered promiscuous mode [ 181.735924][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.748529][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.790943][ T9310] team0: Port device team_slave_0 added [ 181.800710][ T9310] team0: Port device team_slave_1 added [ 181.836166][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.844053][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.872766][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.888107][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.895206][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.921948][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.980505][ T9310] hsr_slave_0: entered promiscuous mode [ 181.987116][ T9310] hsr_slave_1: entered promiscuous mode [ 181.993896][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.001698][ T9310] Cannot create hsr debugfs directory [ 182.258167][ T51] Bluetooth: hci4: command tx timeout [ 182.375730][ T9310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.387125][ T9310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.397085][ T9310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.410448][ T9310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.492259][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.520159][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.533360][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.540652][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.558769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.565948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.776897][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.032428][ T9310] veth0_vlan: entered promiscuous mode [ 183.045062][ T9310] veth1_vlan: entered promiscuous mode [ 183.078354][ T9310] veth0_macvtap: entered promiscuous mode [ 183.090103][ T9310] veth1_macvtap: entered promiscuous mode [ 183.113649][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.132714][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.145818][ T9310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.155692][ T9310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.165290][ T9310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.175360][ T9310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.242603][ T9013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.252471][ T9013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.279797][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.289147][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.977863][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.896322][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.906666][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.916053][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.926508][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.935756][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.425988][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.452763][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 186.487338][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.571674][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.611542][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.619671][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.627051][ T9435] bridge_slave_0: entered allmulticast mode [ 186.635508][ T9435] bridge_slave_0: entered promiscuous mode [ 186.644344][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.651897][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.662579][ T9435] bridge_slave_1: entered allmulticast mode [ 186.672102][ T9435] bridge_slave_1: entered promiscuous mode [ 186.715107][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.729302][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.795177][ T9435] team0: Port device team_slave_0 added [ 186.813369][ T9435] team0: Port device team_slave_1 added [ 186.864033][ T13] bridge_slave_1: left allmulticast mode [ 186.872515][ T13] bridge_slave_1: left promiscuous mode [ 186.882148][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.893569][ T13] bridge_slave_0: left allmulticast mode [ 186.899872][ T13] bridge_slave_0: left promiscuous mode [ 186.905860][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.227907][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.247504][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.258207][ T13] bond0 (unregistering): Released all slaves [ 187.272972][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.282926][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.312139][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.346837][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.354107][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.381995][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.460345][ T9435] hsr_slave_0: entered promiscuous mode [ 187.466904][ T9435] hsr_slave_1: entered promiscuous mode [ 187.473490][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.481432][ T9435] Cannot create hsr debugfs directory [ 187.779639][ T8558] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 187.945223][ T13] hsr_slave_0: left promiscuous mode [ 187.953275][ T13] hsr_slave_1: left promiscuous mode [ 187.961638][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.970871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.979388][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.986871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.012897][ T13] veth1_macvtap: left promiscuous mode [ 188.018641][ T51] Bluetooth: hci4: command tx timeout [ 188.020802][ T13] veth0_macvtap: left promiscuous mode [ 188.030153][ T13] veth1_vlan: left promiscuous mode [ 188.035485][ T13] veth0_vlan: left promiscuous mode [ 188.459219][ T13] team0 (unregistering): Port device team_slave_1 removed [ 188.499403][ T13] team0 (unregistering): Port device team_slave_0 removed [ 189.186581][ T9435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.196740][ T9435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.207345][ T9435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.219465][ T9435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.304365][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.327373][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.343385][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.350645][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.365601][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.372865][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.584045][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.822558][ T9435] veth0_vlan: entered promiscuous mode [ 189.834644][ T9435] veth1_vlan: entered promiscuous mode [ 189.861697][ T9435] veth0_macvtap: entered promiscuous mode [ 189.878257][ T9435] veth1_macvtap: entered promiscuous mode [ 189.900316][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.916092][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.931195][ T9435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.941491][ T9435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.950407][ T9435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.959385][ T9435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.024457][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.039876][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.066262][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.075371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.098411][ T51] Bluetooth: hci4: command tx timeout [ 191.791967][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.748429][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.756843][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.765065][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.775002][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.784634][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.254885][ T9465] chnl_net:caif_netlink_parms(): no params data found [ 193.321171][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.388946][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.404431][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.413324][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.421008][ T9465] bridge_slave_0: entered allmulticast mode [ 193.429172][ T9465] bridge_slave_0: entered promiscuous mode [ 193.437186][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.445636][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.454606][ T9465] bridge_slave_1: entered allmulticast mode [ 193.463227][ T9465] bridge_slave_1: entered promiscuous mode [ 193.483664][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.530263][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.543791][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.590601][ T9465] team0: Port device team_slave_0 added [ 193.603408][ T9465] team0: Port device team_slave_1 added [ 193.650952][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.658234][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.684742][ T9465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.704754][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.712164][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.740131][ T9465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.805463][ T9465] hsr_slave_0: entered promiscuous mode [ 193.812857][ T9465] hsr_slave_1: entered promiscuous mode [ 193.820209][ T9465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.827824][ T9465] Cannot create hsr debugfs directory [ 193.865458][ T37] bridge_slave_1: left allmulticast mode [ 193.871569][ T37] bridge_slave_1: left promiscuous mode [ 193.877317][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.886862][ T37] bridge_slave_0: left allmulticast mode [ 193.892818][ T37] bridge_slave_0: left promiscuous mode [ 193.898800][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.216801][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.228277][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.241162][ T37] bond0 (unregistering): Released all slaves [ 194.827489][ T51] Bluetooth: hci4: command tx timeout [ 194.845791][ T37] hsr_slave_0: left promiscuous mode [ 194.854461][ T37] hsr_slave_1: left promiscuous mode [ 194.861268][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.869786][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.878088][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.885571][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.905562][ T37] veth1_macvtap: left promiscuous mode [ 194.911329][ T37] veth0_macvtap: left promiscuous mode [ 194.916992][ T37] veth1_vlan: left promiscuous mode [ 194.922573][ T37] veth0_vlan: left promiscuous mode [ 195.343745][ T37] team0 (unregistering): Port device team_slave_1 removed [ 195.381333][ T37] team0 (unregistering): Port device team_slave_0 removed [ 195.787428][ T9465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.810173][ T9465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.821943][ T9465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.833712][ T9465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.961235][ T9465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.987397][ T9465] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.000759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.008355][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.023057][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.030382][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.256861][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.507377][ T9465] veth0_vlan: entered promiscuous mode [ 196.522443][ T9465] veth1_vlan: entered promiscuous mode [ 196.555106][ T9465] veth0_macvtap: entered promiscuous mode [ 196.565366][ T9465] veth1_macvtap: entered promiscuous mode [ 196.585946][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.604421][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.617811][ T9465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.627473][ T9465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.637763][ T9465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.649740][ T9465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.720578][ T9013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.732438][ T9013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.765712][ T9013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.775662][ T9013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.215644][ T8554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.304079][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.312946][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.322206][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.331460][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.341026][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.759480][ T8554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.849969][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 199.935263][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.943547][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.950951][ T9490] bridge_slave_0: entered allmulticast mode [ 199.958678][ T9490] bridge_slave_0: entered promiscuous mode [ 199.983619][ T8554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.999117][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.006292][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.013707][ T9490] bridge_slave_1: entered allmulticast mode [ 200.021780][ T9490] bridge_slave_1: entered promiscuous mode [ 200.066205][ T8554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.087772][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.101769][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.142947][ T9490] team0: Port device team_slave_0 added [ 200.153497][ T9490] team0: Port device team_slave_1 added [ 200.196120][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.203544][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.229827][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.251739][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.260506][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.288281][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.346912][ T9490] hsr_slave_0: entered promiscuous mode [ 200.353689][ T9490] hsr_slave_1: entered promiscuous mode [ 200.360295][ T9490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.367892][ T9490] Cannot create hsr debugfs directory [ 200.389694][ T8554] bridge_slave_1: left allmulticast mode [ 200.395421][ T8554] bridge_slave_1: left promiscuous mode [ 200.401495][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.412826][ T8554] bridge_slave_0: left allmulticast mode [ 200.418940][ T8554] bridge_slave_0: left promiscuous mode [ 200.424780][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.721014][ T8554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.733564][ T8554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.743808][ T8554] bond0 (unregistering): Released all slaves [ 201.239262][ T9501] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 201.381184][ T51] Bluetooth: hci4: command tx timeout [ 201.509644][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 201.734666][ T9526] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 201.760149][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.800280][ T9527] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 201.846346][ T8554] hsr_slave_0: left promiscuous mode [ 201.860265][ T8554] hsr_slave_1: left promiscuous mode [ 201.866430][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.888234][ T8554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.896503][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.908077][ T8554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.952808][ T8554] veth1_macvtap: left promiscuous mode [ 201.960982][ T8554] veth0_macvtap: left promiscuous mode [ 201.966717][ T8554] veth1_vlan: left promiscuous mode [ 201.974419][ T8554] veth0_vlan: left promiscuous mode [ 202.611655][ T8554] team0 (unregistering): Port device team_slave_1 removed [ 202.756124][ T8554] team0 (unregistering): Port device team_slave_0 removed [ 203.278659][ T9490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.313506][ T9490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.338695][ T9549] netlink: 'syz.2.1014': attribute type 11 has an invalid length. [ 203.346688][ T9549] netlink: 'syz.2.1014': attribute type 11 has an invalid length. [ 203.393588][ T9490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.420747][ T9549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1014'. [ 203.436039][ T9490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.458849][ T51] Bluetooth: hci4: command tx timeout [ 203.477402][ T9552] netlink: 'syz.0.1015': attribute type 6 has an invalid length. [ 203.516008][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 203.824070][ T9574] netlink: 'syz.0.1019': attribute type 10 has an invalid length. [ 203.834826][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.862661][ T9574] team0: Device hsr_slave_0 failed to register rx_handler [ 203.873968][ T9578] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.1020'. [ 204.001012][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.021477][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.028743][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.081024][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.088374][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.422765][ T9625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1025'. [ 204.434529][ T9625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1025'. [ 204.672606][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 204.797422][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 204.807484][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 205.133730][ T9648] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 205.171475][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 205.185074][ T9644] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1031'. [ 205.239774][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.331108][ T9657] nbd: must specify a device to reconfigure [ 205.527668][ T9670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.538159][ T51] Bluetooth: hci4: command tx timeout [ 205.784589][ T9640] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 205.974434][ T9490] veth0_vlan: entered promiscuous mode [ 206.045347][ T9490] veth1_vlan: entered promiscuous mode [ 206.154619][ T9490] veth0_macvtap: entered promiscuous mode [ 206.201356][ T9490] veth1_macvtap: entered promiscuous mode [ 206.288185][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.327569][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.386090][ T9490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.404815][ T9490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.428732][ T9490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.458045][ T9490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.761172][ T9616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.790583][ T9616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.880653][ T8407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.918043][ T8407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.947296][ T9730] __nla_validate_parse: 2 callbacks suppressed [ 206.947316][ T9730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1052'. [ 207.204317][ T9737] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 207.227153][ T9738] FAULT_INJECTION: forcing a failure. [ 207.227153][ T9738] name failslab, interval 1, probability 0, space 0, times 1 [ 207.276307][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.1.1054 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 207.276344][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.276357][ T9738] Call Trace: [ 207.276364][ T9738] [ 207.276374][ T9738] dump_stack_lvl+0x189/0x250 [ 207.276404][ T9738] ? __pfx____ratelimit+0x10/0x10 [ 207.276437][ T9738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.276461][ T9738] ? __pfx__printk+0x10/0x10 [ 207.276497][ T9738] ? __pfx___might_resched+0x10/0x10 [ 207.276521][ T9738] ? fs_reclaim_acquire+0x7d/0x100 [ 207.276556][ T9738] should_fail_ex+0x414/0x560 [ 207.276593][ T9738] should_failslab+0xa8/0x100 [ 207.276623][ T9738] __kmalloc_cache_noprof+0x70/0x3d0 [ 207.276648][ T9738] ? nf_tables_commit+0x79d/0x8700 [ 207.276682][ T9738] nf_tables_commit+0x79d/0x8700 [ 207.276726][ T9738] ? __lock_acquire+0xab9/0xd20 [ 207.276757][ T9738] ? __pfx_nf_tables_commit+0x10/0x10 [ 207.276784][ T9738] ? nft_pernet+0x23/0x240 [ 207.276821][ T9738] ? nft_pernet+0x23/0x240 [ 207.276849][ T9738] ? nft_pernet+0x23/0x240 [ 207.276875][ T9738] ? nft_pernet+0x23/0x240 [ 207.276910][ T9738] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 207.276947][ T9738] ? nft_trans_table_add+0x230/0x430 [ 207.276983][ T9738] ? nf_tables_newtable+0xd45/0x1890 [ 207.277035][ T9738] nfnetlink_rcv+0x1a4b/0x2520 [ 207.277105][ T9738] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 207.277163][ T9738] ? ref_tracker_free+0x63a/0x7d0 [ 207.277219][ T9738] ? __netlink_deliver_tap+0x807/0x850 [ 207.277256][ T9738] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.277280][ T9738] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.277312][ T9738] netlink_unicast+0x759/0x8e0 [ 207.277348][ T9738] netlink_sendmsg+0x805/0xb30 [ 207.277385][ T9738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.277416][ T9738] ? aa_sock_msg_perm+0x94/0x160 [ 207.277449][ T9738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.277467][ T9738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.277494][ T9738] __sock_sendmsg+0x219/0x270 [ 207.277519][ T9738] ____sys_sendmsg+0x505/0x830 [ 207.277553][ T9738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.277591][ T9738] ? import_iovec+0x74/0xa0 [ 207.277620][ T9738] ___sys_sendmsg+0x21f/0x2a0 [ 207.277651][ T9738] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.277722][ T9738] ? __fget_files+0x2a/0x420 [ 207.277749][ T9738] ? __fget_files+0x3a0/0x420 [ 207.277789][ T9738] __x64_sys_sendmsg+0x19b/0x260 [ 207.277820][ T9738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.277859][ T9738] ? __pfx_ksys_write+0x10/0x10 [ 207.277881][ T9738] ? rcu_is_watching+0x15/0xb0 [ 207.277912][ T9738] ? do_syscall_64+0xbe/0x3b0 [ 207.277934][ T9738] do_syscall_64+0xfa/0x3b0 [ 207.277952][ T9738] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.277983][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.278002][ T9738] ? clear_bhb_loop+0x60/0xb0 [ 207.278027][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.278047][ T9738] RIP: 0033:0x7fcf6698e929 [ 207.278066][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.278084][ T9738] RSP: 002b:00007fcf677bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.278105][ T9738] RAX: ffffffffffffffda RBX: 00007fcf66bb5fa0 RCX: 00007fcf6698e929 [ 207.278129][ T9738] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 207.278142][ T9738] RBP: 00007fcf677bc090 R08: 0000000000000000 R09: 0000000000000000 [ 207.278154][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.278166][ T9738] R13: 0000000000000000 R14: 00007fcf66bb5fa0 R15: 00007fff622d4968 [ 207.278201][ T9738] [ 207.340326][ T9740] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1055'. [ 207.939704][ T9750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1058'. [ 208.034377][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 208.073674][ T3529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.109580][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 208.135033][ T9757] xfrm1: entered promiscuous mode [ 208.180098][ T9757] xfrm1: entered allmulticast mode [ 208.283856][ T3529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.357360][ T3529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.665851][ T3529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.762147][ T3529] bridge_slave_1: left allmulticast mode [ 208.767848][ T3529] bridge_slave_1: left promiscuous mode [ 208.773784][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.784249][ T3529] bridge_slave_0: left allmulticast mode [ 208.790263][ T3529] bridge_slave_0: left promiscuous mode [ 208.796278][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.107025][ T3529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.159016][ T3529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.184314][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 209.190771][ T3529] bond0 (unregistering): Released all slaves [ 209.280974][ T9764] ip6tnl2: entered promiscuous mode [ 209.288011][ T9764] ip6tnl2: entered allmulticast mode [ 209.310996][ T9775] netlink: 'syz.3.1065': attribute type 33 has an invalid length. [ 209.341744][ T9775] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1065'. [ 209.342260][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 209.519946][ T9784] FAULT_INJECTION: forcing a failure. [ 209.519946][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 209.546544][ T9786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 209.559757][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.0.1067 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 209.559788][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.559801][ T9784] Call Trace: [ 209.559809][ T9784] [ 209.559819][ T9784] dump_stack_lvl+0x189/0x250 [ 209.559848][ T9784] ? __pfx____ratelimit+0x10/0x10 [ 209.559881][ T9784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.559905][ T9784] ? __pfx__printk+0x10/0x10 [ 209.559935][ T9784] ? __pfx___might_resched+0x10/0x10 [ 209.559961][ T9784] ? fs_reclaim_acquire+0x7d/0x100 [ 209.559997][ T9784] should_fail_ex+0x414/0x560 [ 209.560034][ T9784] should_failslab+0xa8/0x100 [ 209.560064][ T9784] __kmalloc_cache_noprof+0x70/0x3d0 [ 209.560089][ T9784] ? nft_trans_table_add+0x56/0x430 [ 209.560125][ T9784] nft_trans_table_add+0x56/0x430 [ 209.560163][ T9784] nf_tables_newtable+0xce3/0x1890 [ 209.560223][ T9784] nfnetlink_rcv+0x1132/0x2520 [ 209.560293][ T9784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.560345][ T9784] ? ref_tracker_free+0x63a/0x7d0 [ 209.560397][ T9784] ? __netlink_deliver_tap+0x807/0x850 [ 209.560431][ T9784] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.560453][ T9784] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.560481][ T9784] netlink_unicast+0x759/0x8e0 [ 209.560514][ T9784] netlink_sendmsg+0x805/0xb30 [ 209.560550][ T9784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.560577][ T9784] ? aa_sock_msg_perm+0x94/0x160 [ 209.560609][ T9784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.560626][ T9784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.560652][ T9784] __sock_sendmsg+0x219/0x270 [ 209.560676][ T9784] ____sys_sendmsg+0x505/0x830 [ 209.560708][ T9784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.560743][ T9784] ? import_iovec+0x74/0xa0 [ 209.560770][ T9784] ___sys_sendmsg+0x21f/0x2a0 [ 209.560799][ T9784] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.560869][ T9784] ? __fget_files+0x2a/0x420 [ 209.560897][ T9784] ? __fget_files+0x3a0/0x420 [ 209.560936][ T9784] __x64_sys_sendmsg+0x19b/0x260 [ 209.560967][ T9784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.561004][ T9784] ? __pfx_ksys_write+0x10/0x10 [ 209.561025][ T9784] ? rcu_is_watching+0x15/0xb0 [ 209.561054][ T9784] ? do_syscall_64+0xbe/0x3b0 [ 209.561077][ T9784] do_syscall_64+0xfa/0x3b0 [ 209.561095][ T9784] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.561125][ T9784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.561144][ T9784] ? clear_bhb_loop+0x60/0xb0 [ 209.561168][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.561202][ T9784] RIP: 0033:0x7fb25238e929 [ 209.561221][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.561239][ T9784] RSP: 002b:00007fb2531e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.561261][ T9784] RAX: ffffffffffffffda RBX: 00007fb2525b5fa0 RCX: 00007fb25238e929 [ 209.561275][ T9784] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 209.561288][ T9784] RBP: 00007fb2531e9090 R08: 0000000000000000 R09: 0000000000000000 [ 209.561300][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.561312][ T9784] R13: 0000000000000000 R14: 00007fb2525b5fa0 R15: 00007ffc2310f8a8 [ 209.561345][ T9784] [ 209.870702][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.259475][ T9786] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 210.271208][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.284515][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.337442][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.358263][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.413173][ T9781] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 210.449103][ T9803] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 210.627191][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 210.690482][ T9821] netlink: 'syz.2.1072': attribute type 20 has an invalid length. [ 210.865804][ T9827] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 211.057082][ T9836] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 211.822175][ T9866] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 211.940312][ T5850] Bluetooth: hci2: command 0x0401 tx timeout [ 212.039338][ T9877] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 212.057874][ T9866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.123832][ T9877] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 212.259299][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 212.318887][ T3529] hsr_slave_0: left promiscuous mode [ 212.326239][ T3529] hsr_slave_1: left promiscuous mode [ 212.340724][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.367723][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.397121][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.411049][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.418579][ T5855] Bluetooth: hci4: command tx timeout [ 212.428320][ T9891] __nla_validate_parse: 5 callbacks suppressed [ 212.428339][ T9891] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1093'. [ 212.466081][ T3529] veth1_macvtap: left promiscuous mode [ 212.475945][ T3529] veth0_macvtap: left promiscuous mode [ 212.482666][ T3529] veth1_vlan: left promiscuous mode [ 212.490485][ T3529] veth0_vlan: left promiscuous mode [ 213.177408][ T3529] team0 (unregistering): Port device team_slave_1 removed [ 213.218394][ T3529] team0 (unregistering): Port device team_slave_0 removed [ 213.623035][ T9889] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1093'. [ 213.660948][ T9908] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 213.953484][ T9926] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 213.995361][ T9926] xt_hashlimit: size too large, truncated to 1048576 [ 214.161090][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 214.222032][ T9929] : renamed from bridge_slave_0 (while UP) [ 214.338403][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 214.360027][ T9942] pim6reg: entered allmulticast mode [ 214.437059][ T9790] chnl_net:caif_netlink_parms(): no params data found [ 214.498105][ T5855] Bluetooth: hci4: command tx timeout [ 214.536735][ T9947] sit0: entered promiscuous mode [ 214.564690][ T9952] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1104'. [ 214.564799][ T9947] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 214.587732][ T9947] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1103'. [ 214.740557][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 214.922533][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.931559][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'. [ 214.948406][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.967632][ T9790] bridge_slave_0: entered allmulticast mode [ 214.977643][ T9790] bridge_slave_0: entered promiscuous mode [ 215.021117][ T9963] geneve2: entered promiscuous mode [ 215.054005][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.066357][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.078910][ T9790] bridge_slave_1: entered allmulticast mode [ 215.119997][ T9790] bridge_slave_1: entered promiscuous mode [ 215.200750][ T9972] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.253971][ T9790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.291339][ T9790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.317610][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 215.479014][ T9790] team0: Port device team_slave_0 added [ 215.492538][ T9790] team0: Port device team_slave_1 added [ 215.499645][ T9983] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 215.587658][ T9983] bond2: entered promiscuous mode [ 215.597011][ T9983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.718408][ T9993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.725520][ T9993] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 215.738384][ T9993] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 215.758659][ T9993] bond2: (slave wireguard0): making interface the new active one [ 215.766625][ T9993] wireguard0: entered promiscuous mode [ 215.774343][ T9993] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 215.783568][ T9998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1115'. [ 215.796472][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.804556][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.834471][ T9790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.879533][T10003] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 215.910294][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.919286][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.949182][ T9790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.097857][ T9790] hsr_slave_0: entered promiscuous mode [ 216.106186][ T9790] hsr_slave_1: entered promiscuous mode [ 216.115539][ T9790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.123565][ T9790] Cannot create hsr debugfs directory [ 216.349821][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.357116][T10010] bridge0: port 2(bridge_slave_1) entered listening state [ 216.364660][T10010] bridge0: port 1() entered blocking state [ 216.371782][T10010] bridge0: port 1() entered listening state [ 216.384842][T10010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.412334][T10010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.580261][ T5855] Bluetooth: hci4: command tx timeout [ 217.457519][T10049] netlink: 'syz.2.1127': attribute type 2 has an invalid length. [ 217.474773][T10049] __nla_validate_parse: 6 callbacks suppressed [ 217.474793][T10049] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1127'. [ 217.755800][T10063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.917488][ T9790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.932255][ T9790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.999791][ T9790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.012427][T10070] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1135'. [ 218.022757][T10070] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1135'. [ 218.034322][T10070] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1135'. [ 218.046126][ T9790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.093018][T10073] dvmrp0: entered allmulticast mode [ 218.344901][ T9790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.364178][T10087] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 218.375898][T10087] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1139'. [ 218.406630][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 218.420356][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 218.453150][ T9790] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.550529][T10089] ip6gre2: entered allmulticast mode [ 218.609670][T10091] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1141'. [ 218.626282][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.633678][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.665052][ T5855] Bluetooth: hci4: command tx timeout [ 218.672380][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.679614][ T9616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.149467][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1147'. [ 219.178885][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 219.333677][T10123] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 219.436314][T10123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.491359][T10123] bond3: (slave veth0_to_bond): making interface the new active one [ 219.531378][T10123] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 219.618281][T10126] vlan4: entered allmulticast mode [ 219.634348][T10126] veth1: entered allmulticast mode [ 219.655467][T10126] veth1: entered promiscuous mode [ 219.679933][T10126] veth1: left promiscuous mode [ 219.699604][T10126] bond3: (slave vlan4): Enslaving as an active interface with an up link [ 219.825300][ T9790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.098296][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.373079][T10171] netlink: 'syz.2.1165': attribute type 10 has an invalid length. [ 220.413188][T10171] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.452713][ T36] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 220.458539][T10171] bond0: (slave team0): Enslaving as an active interface with an up link [ 220.554502][ T9790] veth0_vlan: entered promiscuous mode [ 220.596859][ T9790] veth1_vlan: entered promiscuous mode [ 220.694688][ T9790] veth0_macvtap: entered promiscuous mode [ 220.733788][ T9790] veth1_macvtap: entered promiscuous mode [ 220.781778][T10183] SET target dimension over the limit! [ 220.790699][ T9790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.831833][ T9790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.832640][T10186] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 220.879418][ T9790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.910814][ T9790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.939883][ T9790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.953527][ T9790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.213562][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.252741][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.317359][T10204] siw: device registration error -23 [ 221.332736][ T8407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.351344][ T8407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.754550][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.971937][ T8407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.195194][ T8407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.337679][ T8407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.407447][ T8407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.504971][ T8407] bridge_slave_1: left allmulticast mode [ 222.512009][ T8407] bridge_slave_1: left promiscuous mode [ 222.517985][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.530310][ T8407] bridge_slave_0: left allmulticast mode [ 222.536008][ T8407] bridge_slave_0: left promiscuous mode [ 222.542056][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.900689][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.913276][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.925138][ T8407] bond0 (unregistering): Released all slaves [ 223.338509][T10241] __nla_validate_parse: 11 callbacks suppressed [ 223.338533][T10241] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1189'. [ 223.366469][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.434278][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 223.478161][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 223.504846][T10246] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1191'. [ 223.530452][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 223.615363][T10250] netlink: 'syz.1.1192': attribute type 3 has an invalid length. [ 223.628584][T10250] netlink: 'syz.1.1192': attribute type 3 has an invalid length. [ 223.648744][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 223.805796][ T8407] hsr_slave_0: left promiscuous mode [ 223.836695][ T8407] hsr_slave_1: left promiscuous mode [ 223.845439][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.853849][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.869196][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.887048][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.937322][ T8407] veth1_macvtap: left promiscuous mode [ 223.953164][ T8407] veth0_macvtap: left promiscuous mode [ 223.963728][ T8407] veth1_vlan: left promiscuous mode [ 223.971902][ T8407] veth0_vlan: left promiscuous mode [ 224.040869][T10274] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 224.196165][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.208672][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.220705][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.231504][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.242925][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.677211][ T8407] team0 (unregistering): Port device team_slave_1 removed [ 224.721901][ T8407] team0 (unregistering): Port device team_slave_0 removed [ 225.136445][T10277] tipc: MTU too low for tipc bearer [ 225.576776][T10300] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.744478][T10311] netlink: 'syz.0.1207': attribute type 15 has an invalid length. [ 225.777467][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1204'. [ 225.817329][T10311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1207'. [ 226.167040][T10329] netlink: 'syz.0.1212': attribute type 11 has an invalid length. [ 226.338301][ T5855] Bluetooth: hci4: command tx timeout [ 226.711741][T10275] chnl_net:caif_netlink_parms(): no params data found [ 227.023834][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.042505][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.060061][T10275] bridge_slave_0: entered allmulticast mode [ 227.079798][T10275] bridge_slave_0: entered promiscuous mode [ 227.100953][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.110729][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.128295][T10275] bridge_slave_1: entered allmulticast mode [ 227.136306][T10275] bridge_slave_1: entered promiscuous mode [ 227.322177][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.359436][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.372917][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.382039][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.397101][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.412960][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.422165][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.516296][T10275] team0: Port device team_slave_0 added [ 227.531505][T10275] team0: Port device team_slave_1 added [ 227.663058][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.690420][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.720937][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 227.735249][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'. [ 227.761710][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.810931][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.828142][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.883560][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.088383][T10275] hsr_slave_0: entered promiscuous mode [ 228.099137][T10275] hsr_slave_1: entered promiscuous mode [ 228.107004][T10275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.115382][T10275] Cannot create hsr debugfs directory [ 228.428305][ T5855] Bluetooth: hci4: command tx timeout [ 228.800839][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.808881][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.459606][ T5855] Bluetooth: hci1: command tx timeout [ 229.544186][T10420] x_tables: duplicate underflow at hook 1 [ 229.645166][T10418] __nla_validate_parse: 2 callbacks suppressed [ 229.645187][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 229.890208][T10275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.917322][T10368] chnl_net:caif_netlink_parms(): no params data found [ 229.942140][T10275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.993780][T10275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.019464][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 230.031805][T10439] tc_dump_action: action bad kind [ 230.133671][T10275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.326532][T10463] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 230.335213][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.353815][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.363436][T10368] bridge_slave_0: entered allmulticast mode [ 230.371732][T10368] bridge_slave_0: entered promiscuous mode [ 230.417517][T10467] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 230.431296][T10464] bond3: (slave gretap2): making interface the new active one [ 230.439430][T10467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1249'. [ 230.451853][T10464] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 230.464820][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.476735][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.498053][ T5855] Bluetooth: hci4: command tx timeout [ 230.498889][T10368] bridge_slave_1: entered allmulticast mode [ 230.511923][T10368] bridge_slave_1: entered promiscuous mode [ 230.561471][T10467] dummy0: entered promiscuous mode [ 230.570637][T10467] bridge0: port 3(dummy0) entered blocking state [ 230.578390][T10467] bridge0: port 3(dummy0) entered disabled state [ 230.585002][T10467] dummy0: entered allmulticast mode [ 230.600737][T10467] bridge0: port 3(dummy0) entered blocking state [ 230.607276][T10467] bridge0: port 3(dummy0) entered listening state [ 230.698954][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.721802][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.804602][T10477] delete_channel: no stack [ 230.852737][T10368] team0: Port device team_slave_0 added [ 230.883825][T10368] team0: Port device team_slave_1 added [ 230.974387][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.985235][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.048556][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.074820][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.098040][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.148360][T10489] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1255'. [ 231.168094][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.530723][T10495] netlink: 'syz.3.1256': attribute type 2 has an invalid length. [ 231.538719][ T5855] Bluetooth: hci1: command tx timeout [ 231.570805][T10495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1256'. [ 231.591368][T10368] hsr_slave_0: entered promiscuous mode [ 231.604542][T10368] hsr_slave_1: entered promiscuous mode [ 231.612429][T10368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.643096][T10368] Cannot create hsr debugfs directory [ 231.652708][T10495] raw_sendmsg: syz.3.1256 forgot to set AF_INET. Fix it! [ 231.655110][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.869789][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.960979][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.968266][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.990638][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.997875][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.047742][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1260'. [ 232.068279][T10514] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1262'. [ 232.104052][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 232.155731][T10368] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.325843][T10516] veth0: entered promiscuous mode [ 232.365692][T10510] veth0: left promiscuous mode [ 232.454854][T10368] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.578243][ T5855] Bluetooth: hci4: command tx timeout [ 232.713067][T10368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.882991][T10368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.257864][T10368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.266678][T10562] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 233.313455][T10567] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 233.374933][T10562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.391874][T10562] bond4: (slave bond5): making interface the new active one [ 233.403746][T10562] bond4: (slave bond5): Enslaving as an active interface with an up link [ 233.412505][T10368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.424675][T10368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.484116][T10567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.520093][T10571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.527331][T10571] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 233.540905][T10571] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 233.580103][T10563] bond4: (slave gretap3): Enslaving as a backup interface with an up link [ 233.622712][T10368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.628207][ T5855] Bluetooth: hci1: command tx timeout [ 233.660397][T10579] gretap1: entered promiscuous mode [ 233.671001][T10579] bond4: (slave gretap1): making interface the new active one [ 233.679471][T10579] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 233.704401][T10571] macvlan3: entered promiscuous mode [ 233.714463][T10571] macvlan3: entered allmulticast mode [ 233.721278][T10571] bond4: entered promiscuous mode [ 233.728562][T10571] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 233.741257][T10571] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 233.754079][T10571] bond4: left promiscuous mode [ 233.771514][T10583] openvswitch: netlink: Multiple metadata blocks provided [ 233.801091][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.024001][T10558] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 234.041825][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 234.046541][T10368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.091710][T10595] IPVS: Unknown mcast interface: vcan0 [ 234.160832][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.219952][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.227203][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.262856][T10608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1279'. [ 234.287606][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.294897][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.356635][T10609] syzkaller1: entered promiscuous mode [ 234.362689][T10609] syzkaller1: entered allmulticast mode [ 234.635753][T10623] delete_channel: no stack [ 234.661783][T10368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.716345][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'. [ 234.789579][T10625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1282'. [ 234.855957][T10275] veth0_vlan: entered promiscuous mode [ 234.871295][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 234.900647][T10275] veth1_vlan: entered promiscuous mode [ 235.006341][T10275] veth0_macvtap: entered promiscuous mode [ 235.069049][T10275] veth1_macvtap: entered promiscuous mode [ 235.155234][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.251754][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.301834][T10275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.338418][T10275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.347837][T10275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.368039][T10275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.389326][T10651] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 235.553959][T10368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.592923][T10657] sctp: [Deprecated]: syz.2.1291 (pid 10657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.592923][T10657] Use struct sctp_sack_info instead [ 235.702071][ T5855] Bluetooth: hci1: command tx timeout [ 235.819243][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.827274][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.831384][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 235.846384][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 235.859696][T10368] veth0_vlan: entered promiscuous mode [ 235.914529][T10368] veth1_vlan: entered promiscuous mode [ 235.951328][ T9612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.965679][ T9612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.043155][T10368] veth0_macvtap: entered promiscuous mode [ 236.061372][T10368] veth1_macvtap: entered promiscuous mode [ 236.157696][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.202850][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.219250][T10368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.233279][T10368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.244887][T10368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.256282][T10368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.434678][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.447196][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.461207][T10690] netlink: 'syz.3.1299': attribute type 39 has an invalid length. [ 236.513869][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.689023][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.725058][ T9620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.745450][ T9620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.806604][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.012859][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.235265][ T12] bridge_slave_1: left allmulticast mode [ 237.241232][ T12] bridge_slave_1: left promiscuous mode [ 237.247018][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.257121][ T12] bridge_slave_0: left allmulticast mode [ 237.263261][ T12] bridge_slave_0: left promiscuous mode [ 237.278356][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.661453][T10695] netlink: 'syz.0.1300': attribute type 4 has an invalid length. [ 237.695660][T10695] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1300'. [ 238.120559][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.148798][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.173411][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.174029][ T12] bond0 (unregistering): Released all slaves [ 238.187857][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.195445][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.204526][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.213328][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.247338][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.262936][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.270099][T10704] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 238.277359][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.298486][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.310320][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.753496][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 238.930828][T10732] vlan3: entered allmulticast mode [ 238.948941][T10732] team0: entered allmulticast mode [ 238.976663][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 238.992679][T10732] team0: Device vlan3 is already an upper device of the team interface [ 238.997657][T10737] nbd: must specify a size in bytes for the device [ 239.422438][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 239.432409][T10751] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1318'. [ 239.442768][T10751] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1318'. [ 239.769986][T10766] x_tables: duplicate underflow at hook 4 [ 239.805436][T10765] team0: Mode changed to "loadbalance" [ 240.258558][ T5851] Bluetooth: hci1: command tx timeout [ 240.338254][ T5851] Bluetooth: hci4: command tx timeout [ 240.485690][T10776] syzkaller0: entered promiscuous mode [ 240.516726][T10776] syzkaller0: entered allmulticast mode [ 241.324829][T10711] chnl_net:caif_netlink_parms(): no params data found [ 241.439839][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 241.569575][ T12] hsr_slave_0: left promiscuous mode [ 241.585384][ T12] hsr_slave_1: left promiscuous mode [ 241.592732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.601362][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.612981][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.622329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.657390][T10822] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 241.664009][ T12] veth1_macvtap: left promiscuous mode [ 241.669972][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1337'. [ 241.671022][ T12] veth0_macvtap: left promiscuous mode [ 241.690920][ T12] veth1_vlan: left promiscuous mode [ 241.696590][ T12] veth0_vlan: left promiscuous mode [ 242.325788][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.342891][ T5851] Bluetooth: hci1: command tx timeout [ 242.387575][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.421020][ T5851] Bluetooth: hci4: command tx timeout [ 243.259511][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.264212][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 243.298648][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.307493][T10711] bridge_slave_0: entered allmulticast mode [ 243.326077][T10711] bridge_slave_0: entered promiscuous mode [ 243.440648][T10841] veth1_macvtap: left promiscuous mode [ 243.528792][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.552501][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.574347][T10711] bridge_slave_1: entered allmulticast mode [ 243.593986][T10711] bridge_slave_1: entered promiscuous mode [ 243.864527][T10711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.897042][T10711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.418853][ T5851] Bluetooth: hci1: command tx timeout [ 244.434867][T10709] chnl_net:caif_netlink_parms(): no params data found [ 244.501472][ T5851] Bluetooth: hci4: command tx timeout [ 244.505003][T10711] team0: Port device team_slave_0 added [ 244.550812][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 244.551256][T10711] team0: Port device team_slave_1 added [ 244.699928][T10711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.718026][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.802275][T10711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.837479][T10711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.851383][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.884610][T10711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.064765][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 245.076413][T10893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1349'. [ 245.240393][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 245.258448][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1349'. [ 245.324705][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.347158][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.355262][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.362989][T10709] bridge_slave_0: entered allmulticast mode [ 245.370868][T10709] bridge_slave_0: entered promiscuous mode [ 245.417435][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.453585][T10711] hsr_slave_0: entered promiscuous mode [ 245.460946][T10711] hsr_slave_1: entered promiscuous mode [ 245.467232][T10711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.474944][T10711] Cannot create hsr debugfs directory [ 245.481075][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.489200][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.496526][T10709] bridge_slave_1: entered allmulticast mode [ 245.504859][T10709] bridge_slave_1: entered promiscuous mode [ 245.513410][T10906] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 245.581283][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.740786][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.834826][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.913677][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.007687][T10920] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 246.095254][T10709] team0: Port device team_slave_0 added [ 246.128630][T10709] team0: Port device team_slave_1 added [ 246.276654][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.285749][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.315924][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.358708][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.367259][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.396418][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.492869][ T12] batadv_slave_1: left allmulticast mode [ 246.498206][ T5851] Bluetooth: hci1: command tx timeout [ 246.505058][ T12] batadv_slave_1: left promiscuous mode [ 246.511099][ T12] bridge0: port 3(batadv_slave_1) entered disabled state [ 246.522483][ T12] bridge_slave_1: left allmulticast mode [ 246.528523][ T12] bridge_slave_1: left promiscuous mode [ 246.534449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.545162][ T12] : left allmulticast mode [ 246.551038][ T12] : left promiscuous mode [ 246.556238][ T12] bridge0: port 1() entered disabled state [ 246.572437][ T12] bridge_slave_1: left allmulticast mode [ 246.578214][ T5851] Bluetooth: hci4: command tx timeout [ 246.585278][ T12] bridge_slave_1: left promiscuous mode [ 246.592794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.603796][ T12] bridge_slave_0: left allmulticast mode [ 246.610598][ T12] bridge_slave_0: left promiscuous mode [ 246.616525][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.846578][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1359'. [ 246.981320][ C0] bridge0: port 1() entered learning state [ 246.988648][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 247.047108][ T12] dvmrp0 (unregistering): left allmulticast mode [ 247.252071][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.264011][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.277349][ T12] bond0 (unregistering): Released all slaves [ 247.295003][ T12] bond1 (unregistering): Released all slaves [ 247.397819][ T12] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 247.406433][ T12] wireguard0: left promiscuous mode [ 247.413901][ T12] bond2 (unregistering): Released all slaves [ 247.737791][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.751611][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.763647][ T12] bond0 (unregistering): Released all slaves [ 248.013354][T10709] hsr_slave_0: entered promiscuous mode [ 248.021269][T10709] hsr_slave_1: entered promiscuous mode [ 248.027582][T10709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.035285][T10709] Cannot create hsr debugfs directory [ 248.042101][ T12] tipc: Left network mode [ 248.072000][T10940] netlink: 'syz.2.1363': attribute type 4 has an invalid length. [ 248.072000][T10941] netlink: 'syz.2.1363': attribute type 4 has an invalid length. [ 248.351711][T10946] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1364'. [ 248.523221][T10944] syzkaller1: entered promiscuous mode [ 248.535269][T10944] syzkaller1: entered allmulticast mode [ 248.658082][ T5851] Bluetooth: hci4: command tx timeout [ 248.774260][T10949] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1365'. [ 248.962447][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 249.224126][T10711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.333159][T10711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.356378][T10711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.377276][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 249.383488][T10711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.413721][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 249.470631][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 249.514005][T10972] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1372'. [ 250.090389][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.172563][T10711] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.244307][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.251640][ T9620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.262500][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.269759][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.408512][ T12] hsr_slave_0: left promiscuous mode [ 250.428259][ T12] hsr_slave_1: left promiscuous mode [ 250.491921][ T12] hsr_slave_0: left promiscuous mode [ 250.501794][ T12] hsr_slave_1: left promiscuous mode [ 250.503641][T11008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1380'. [ 250.510815][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.527766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.537365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.545699][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.602057][ T12] veth1_vlan: left promiscuous mode [ 250.607587][ T12] veth0_vlan: left promiscuous mode [ 250.617788][ T12] veth1_macvtap: left promiscuous mode [ 250.627034][ T12] veth0_macvtap: left promiscuous mode [ 250.635383][ T12] veth1_vlan: left promiscuous mode [ 250.642089][ T12] veth0_vlan: left promiscuous mode [ 250.802372][T11014] xt_hashlimit: size too large, truncated to 1048576 [ 250.924195][T11017] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1383'. [ 251.380870][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.433495][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.184732][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.227042][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.658835][T11017] : renamed from bridge_slave_0 (while UP) [ 252.813551][T10709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.837701][T10709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.879426][T10709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.934376][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 252.978319][T10709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.004527][T11028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1385'. [ 253.015461][T11028] nbd: must specify at least one socket [ 253.360459][T11049] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.387135][T10709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.480289][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.503581][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.510952][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.574493][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.581684][T11060] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1391'. [ 253.582842][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.619377][T11060] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 253.726623][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.936596][T11074] tipc: Enabling of bearer rejected, failed to enable media [ 253.970267][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 254.059435][ T12] IPVS: stop unused estimator thread 0... [ 254.556989][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.677408][T11107] batman_adv: batadv0: Adding interface: geneve1 [ 254.700947][T11107] batman_adv: batadv0: The MTU of interface geneve1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.731205][T11107] batman_adv: batadv0: Interface activated: geneve1 [ 254.747164][T11112] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 254.775254][T11112] team0: Device hsr_slave_0 failed to register rx_handler [ 254.887687][T11114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1405'. [ 254.907006][T11114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1405'. [ 254.959338][T10709] veth0_vlan: entered promiscuous mode [ 255.017113][T10709] veth1_vlan: entered promiscuous mode [ 255.093572][T10711] veth0_vlan: entered promiscuous mode [ 255.119404][T10711] veth1_vlan: entered promiscuous mode [ 255.186613][T10711] veth0_macvtap: entered promiscuous mode [ 255.227654][T10711] veth1_macvtap: entered promiscuous mode [ 255.257657][T10709] veth0_macvtap: entered promiscuous mode [ 255.269693][T10709] veth1_macvtap: entered promiscuous mode [ 255.332006][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.373190][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.399497][T10709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.411101][T10709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.424570][T11126] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1411'. [ 255.427525][T10709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.445884][T10709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.469977][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.497541][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.575166][T10711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.599093][T10711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.623413][T10711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.643379][T10711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.856876][ T9612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.883168][ T9612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.959091][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.008378][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.055902][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.105091][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.162444][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.171891][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.325983][T11142] netlink: 'syz.2.1416': attribute type 4 has an invalid length. [ 256.894333][ T8407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.131320][ T8407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.274093][ T8407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.458292][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1424'. [ 257.744342][ T8407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.825159][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.839066][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.850021][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.861857][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.872830][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.717224][T11189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1425'. [ 259.225169][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.235690][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.251100][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.259735][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.269845][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.941157][ T5855] Bluetooth: hci1: command tx timeout [ 260.344692][ T8407] bridge_slave_1: left allmulticast mode [ 260.359113][ T8407] bridge_slave_1: left promiscuous mode [ 260.375877][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.413634][T11231] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 260.433264][ T8407] bridge_slave_0: left allmulticast mode [ 260.439455][ T8407] bridge_slave_0: left promiscuous mode [ 260.443671][T11235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1431'. [ 260.535296][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.638554][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1432'. [ 260.976704][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.990516][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.001218][ T8407] bond0 (unregistering): Released all slaves [ 261.016841][T11228] veth0: entered promiscuous mode [ 261.031899][T11240] veth0: entered promiscuous mode [ 261.059294][ C0] bridge0: port 3(dummy0) entered learning state [ 261.077414][T11232] veth0: left promiscuous mode [ 261.086722][T11239] veth0: left promiscuous mode [ 261.300083][ T5855] Bluetooth: hci4: command tx timeout [ 262.018289][ T5855] Bluetooth: hci1: command tx timeout [ 262.154477][T11180] chnl_net:caif_netlink_parms(): no params data found [ 262.705310][T11293] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1448'. [ 262.807228][T11295] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1448'. [ 263.082480][ T8407] hsr_slave_0: left promiscuous mode [ 263.091820][ T8407] hsr_slave_1: left promiscuous mode [ 263.099301][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.106782][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.121730][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.126121][T11314] netlink: 'syz.3.1454': attribute type 2 has an invalid length. [ 263.130399][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.163263][ T8407] veth1_macvtap: left promiscuous mode [ 263.170372][ T8407] veth0_macvtap: left promiscuous mode [ 263.176314][ T8407] veth1_vlan: left promiscuous mode [ 263.198198][ T8407] veth0_vlan: left promiscuous mode [ 263.378063][ T5855] Bluetooth: hci4: command tx timeout [ 263.668139][ T8407] team0 (unregistering): Port device team_slave_1 removed [ 263.717493][ T8407] team0 (unregistering): Port device team_slave_0 removed [ 264.101070][ T5855] Bluetooth: hci1: command tx timeout [ 264.122084][T11305] vlan2: entered promiscuous mode [ 264.127396][T11305] vlan2: entered allmulticast mode [ 264.133597][T11305] hsr_slave_1: entered allmulticast mode [ 264.140754][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.148332][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.155637][T11180] bridge_slave_0: entered allmulticast mode [ 264.163886][T11180] bridge_slave_0: entered promiscuous mode [ 264.177200][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.185776][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.197456][T11180] bridge_slave_1: entered allmulticast mode [ 264.206326][T11180] bridge_slave_1: entered promiscuous mode [ 264.241335][T11312] dvmrp0: entered allmulticast mode [ 264.452642][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.493766][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.710181][T11180] team0: Port device team_slave_0 added [ 264.754821][T11180] team0: Port device team_slave_1 added [ 264.884454][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.905966][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.945919][T11350] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1464'. [ 264.955491][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 264.966243][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1464'. [ 264.975752][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.020264][T11208] chnl_net:caif_netlink_parms(): no params data found [ 265.032670][T11352] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1465'. [ 265.049788][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.057087][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.086120][T11353] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1465'. [ 265.112406][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.163746][T11357] netlink: 207412 bytes leftover after parsing attributes in process `syz.3.1466'. [ 265.257391][T11356] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 265.462235][ T5855] Bluetooth: hci4: command tx timeout [ 265.535165][T11180] hsr_slave_0: entered promiscuous mode [ 265.593010][T11180] hsr_slave_1: entered promiscuous mode [ 265.616666][T11180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.644875][T11180] Cannot create hsr debugfs directory [ 265.757538][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 265.824826][ T8407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.946544][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.956599][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.965632][T11208] bridge_slave_0: entered allmulticast mode [ 265.975496][T11208] bridge_slave_0: entered promiscuous mode [ 266.025256][ T8407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.082505][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.098168][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.111382][T11208] bridge_slave_1: entered allmulticast mode [ 266.119972][T11208] bridge_slave_1: entered promiscuous mode [ 266.154476][ T8407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.179874][ T5855] Bluetooth: hci1: command tx timeout [ 266.277822][ T8407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.333988][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.334068][T11421] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 266.372537][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.404872][T11413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1483'. [ 266.521400][T11208] team0: Port device team_slave_0 added [ 266.570477][T11208] team0: Port device team_slave_1 added [ 266.649281][ T8407] bridge_slave_1: left allmulticast mode [ 266.655015][ T8407] bridge_slave_1: left promiscuous mode [ 266.669748][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.686220][ T8407] bridge_slave_0: left allmulticast mode [ 266.694041][ T8407] bridge_slave_0: left promiscuous mode [ 266.704555][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.091489][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.104684][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.115015][ T8407] bond0 (unregistering): Released all slaves [ 267.242020][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.249307][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.277219][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.291823][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.299031][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.325278][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.473257][T11437] bridge4: entered promiscuous mode [ 267.479954][T11437] bridge4: entered allmulticast mode [ 267.516877][T11439] bond3: entered promiscuous mode [ 267.524402][T11439] bond3: entered allmulticast mode [ 267.534320][T11439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.541482][ T5855] Bluetooth: hci4: command tx timeout [ 267.675847][T11450] tipc: Enabling of bearer rejected, failed to enable media [ 267.717413][T11208] hsr_slave_0: entered promiscuous mode [ 267.740111][T11208] hsr_slave_1: entered promiscuous mode [ 267.757744][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.773644][T11208] Cannot create hsr debugfs directory [ 268.575452][ T8407] hsr_slave_0: left promiscuous mode [ 268.586410][ T8407] hsr_slave_1: left promiscuous mode [ 268.592933][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.601222][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.612815][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.632202][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.665109][ T8407] veth1_macvtap: left promiscuous mode [ 268.671100][ T8407] veth0_macvtap: left promiscuous mode [ 268.676934][ T8407] veth1_vlan: left promiscuous mode [ 268.683734][ T8407] veth0_vlan: left promiscuous mode [ 269.317125][ T8407] team0 (unregistering): Port device team_slave_1 removed [ 269.361547][ T8407] team0 (unregistering): Port device team_slave_0 removed [ 269.964349][T11180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.995068][T11180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.095883][T11180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.152411][T11180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.205621][T11499] netlink: 'syz.0.1511': attribute type 39 has an invalid length. [ 270.636050][T11521] netlink: 'syz.2.1518': attribute type 5 has an invalid length. [ 270.788789][T11180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.796768][T11531] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1521'. [ 270.893513][T11534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.565765][T11180] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.591863][T11208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.626327][T11544] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 272.627316][T11208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.715722][T11544] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.742875][T11208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.776454][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.783903][ T8407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.797228][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.804500][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.827306][T11550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1525'. [ 272.848171][T11208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.866293][T11550] ip6tnl0: entered promiscuous mode [ 272.871802][T11550] ip6tnl0: entered allmulticast mode [ 272.921089][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 272.942832][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 273.016791][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 273.369281][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1529'. [ 273.379703][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1529'. [ 273.487314][T11569] x_tables: unsorted underflow at hook 1 [ 273.497702][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.500767][T11569] xt_l2tp: invalid flags combination: c [ 273.630884][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.664244][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.671637][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.746551][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.753822][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.803640][T11180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.852222][T11595] netlink: 'syz.2.1534': attribute type 6 has an invalid length. [ 273.884842][T11595] netlink: 'syz.2.1534': attribute type 6 has an invalid length. [ 273.935737][T11596] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1534'. [ 273.963212][T11596] 0ªX¹¦D: renamed from gretap0 [ 273.974083][T11596] 0ªX¹¦D: left promiscuous mode [ 273.981903][T11596] 0ªX¹¦D: entered allmulticast mode [ 273.993715][T11596] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 274.018616][T11599] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 274.027152][T11598] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 274.087259][T11180] veth0_vlan: entered promiscuous mode [ 274.117649][T11180] veth1_vlan: entered promiscuous mode [ 274.187400][T11180] veth0_macvtap: entered promiscuous mode [ 274.205990][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1537'. [ 274.213263][T11603] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 274.232449][T11180] veth1_macvtap: entered promiscuous mode [ 274.361298][T11603] 8021q: adding VLAN 0 to HW filter on device bond8 [ 274.454226][T11619] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1540'. [ 274.472015][T11180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.535063][T11603] macvlan3: entered promiscuous mode [ 274.570679][T11603] macvlan3: entered allmulticast mode [ 274.591882][T11603] bond8: entered promiscuous mode [ 274.600117][T11603] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 274.633702][T11603] bond8: left promiscuous mode [ 274.702352][T11180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.786281][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.815802][T11180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.848478][T11180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.860950][T11180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.877044][T11180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.064747][T11643] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 275.202900][ T9620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.240524][ T9620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.305423][T11647] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 275.329070][ T9620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.336999][ T9620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.609380][T11208] veth0_vlan: entered promiscuous mode [ 275.625708][T11208] veth1_vlan: entered promiscuous mode [ 275.671231][T11208] veth0_macvtap: entered promiscuous mode [ 275.685558][T11208] veth1_macvtap: entered promiscuous mode [ 275.714796][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.755922][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.843671][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.885024][T11208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.908020][T11208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.926755][T11208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.936162][T11208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.042671][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.213183][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.238440][ T9620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.246341][ T9620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.277736][ T9620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.286388][ T9620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.379382][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.500332][ T12] bridge_slave_1: left allmulticast mode [ 276.506070][ T12] bridge_slave_1: left promiscuous mode [ 276.512422][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.522398][ T12] bridge_slave_0: left allmulticast mode [ 276.528351][ T12] bridge_slave_0: left promiscuous mode [ 276.534244][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.058040][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.065783][ C0] bridge0: topology change detected, propagating [ 277.073587][ C0] bridge0: port 1() entered forwarding state [ 277.079810][ C0] bridge0: topology change detected, propagating [ 277.146542][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.182509][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.197535][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.213026][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.223839][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.224185][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.254233][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.265021][ T12] bond0 (unregistering): Released all slaves [ 278.156023][ T12] hsr_slave_0: left promiscuous mode [ 278.162163][ T12] hsr_slave_1: left promiscuous mode [ 278.175737][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.183501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.193189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.200916][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.221566][ T12] veth1_macvtap: left promiscuous mode [ 278.228080][ T12] veth0_macvtap: left promiscuous mode [ 278.235325][ T12] veth1_vlan: left promiscuous mode [ 278.240829][ T12] veth0_vlan: left promiscuous mode [ 279.081389][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.091879][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.103354][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.113263][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.130597][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.302360][ T5851] Bluetooth: hci1: command tx timeout [ 279.382170][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.426700][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.013935][T11679] chnl_net:caif_netlink_parms(): no params data found [ 280.239149][T11719] __nla_validate_parse: 1 callbacks suppressed [ 280.239171][T11719] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1564'. [ 280.459293][T11731] veth1_macvtap: entered promiscuous mode [ 280.532749][T11730] veth1_macvtap: left promiscuous mode [ 280.543524][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.566143][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.578290][T11679] bridge_slave_0: entered allmulticast mode [ 280.597033][T11679] bridge_slave_0: entered promiscuous mode [ 280.624403][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.642523][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.659737][T11679] bridge_slave_1: entered allmulticast mode [ 280.691507][T11679] bridge_slave_1: entered promiscuous mode [ 280.695353][T11741] netlink: 'syz.0.1567': attribute type 10 has an invalid length. [ 280.848785][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.890302][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.022959][T11749] vlan3: entered promiscuous mode [ 281.038439][T11749] bridge0: entered promiscuous mode [ 281.051779][T11749] vlan3: entered allmulticast mode [ 281.072872][T11749] bridge0: entered allmulticast mode [ 281.103804][T11679] team0: Port device team_slave_0 added [ 281.155552][T11679] team0: Port device team_slave_1 added [ 281.219257][ T5851] Bluetooth: hci4: command tx timeout [ 281.275140][T11762] x_tables: duplicate underflow at hook 1 [ 281.323467][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.340934][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.373778][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.387765][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 281.396886][ T5851] Bluetooth: hci1: command tx timeout [ 281.428603][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.441359][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 281.467708][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.475956][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.487337][T11765] netlink: 'syz.3.1574': attribute type 14 has an invalid length. [ 281.516278][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.517745][T11765] netlink: 'syz.3.1574': attribute type 13 has an invalid length. [ 281.535931][T11768] veth0: entered promiscuous mode [ 281.558901][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.640974][T11767] veth0: left promiscuous mode [ 281.705396][T11679] hsr_slave_0: entered promiscuous mode [ 281.719562][T11679] hsr_slave_1: entered promiscuous mode [ 281.726051][T11679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.748932][T11679] Cannot create hsr debugfs directory [ 281.788767][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.806992][T11775] block nbd0: Unsupported socket: shutdown callout must be supported. [ 281.975042][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.182181][T11790] netlink: 'syz.2.1580': attribute type 64 has an invalid length. [ 282.242372][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 282.546420][T11708] chnl_net:caif_netlink_parms(): no params data found [ 282.603597][ T12] bridge_slave_1: left allmulticast mode [ 282.622928][ T12] bridge_slave_1: left promiscuous mode [ 282.638552][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.679646][ T12] bridge_slave_0: left allmulticast mode [ 282.685377][ T12] bridge_slave_0: left promiscuous mode [ 282.710755][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.895228][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 283.124564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.136910][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.150163][ T12] bond0 (unregistering): Released all slaves [ 283.196860][T11814] eql: entered promiscuous mode [ 283.202042][T11814] eql: entered allmulticast mode [ 283.301140][ T5851] Bluetooth: hci4: command tx timeout [ 283.458099][ T5851] Bluetooth: hci1: command tx timeout [ 283.744375][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.771506][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.792901][T11844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1593'. [ 283.799632][T11708] bridge_slave_0: entered allmulticast mode [ 283.843085][T11708] bridge_slave_0: entered promiscuous mode [ 283.846149][T11846] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1593'. [ 283.947663][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.951518][T11848] netlink: 'syz.0.1594': attribute type 28 has an invalid length. [ 283.957203][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.964476][T11848] netlink: 'syz.0.1594': attribute type 3 has an invalid length. [ 283.974760][T11708] bridge_slave_1: entered allmulticast mode [ 283.977984][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1594'. [ 283.986761][T11708] bridge_slave_1: entered promiscuous mode [ 284.060402][T11850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.190704][ T8549] IPVS: starting estimator thread 0... [ 284.208236][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.286207][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.296035][T11853] IPVS: using max 25 ests per chain, 60000 per kthread [ 284.454426][T11708] team0: Port device team_slave_0 added [ 284.569588][T11862] netlink: 'syz.0.1599': attribute type 19 has an invalid length. [ 284.582782][T11708] team0: Port device team_slave_1 added [ 284.785343][T11679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.850763][T11679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.885746][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.897181][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.931402][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.001495][T11679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.027865][T11679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.059288][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.066566][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.094840][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.183591][ T12] hsr_slave_0: left promiscuous mode [ 285.195910][ T12] hsr_slave_1: left promiscuous mode [ 285.206982][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.219103][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.236821][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.247459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.303720][ T12] veth1_macvtap: left promiscuous mode [ 285.310039][ T12] veth0_macvtap: left promiscuous mode [ 285.316076][ T12] veth1_vlan: left promiscuous mode [ 285.334428][ T12] veth0_vlan: left promiscuous mode [ 285.380156][ T5851] Bluetooth: hci4: command tx timeout [ 285.538184][ T5851] Bluetooth: hci1: command tx timeout [ 285.892085][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.936310][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.816974][T11708] hsr_slave_0: entered promiscuous mode [ 286.829700][T11708] hsr_slave_1: entered promiscuous mode [ 286.849599][T11708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.875776][T11708] Cannot create hsr debugfs directory [ 286.984739][T11901] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1609'. [ 287.033461][T11901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1609'. [ 287.460524][ T5851] Bluetooth: hci4: command tx timeout [ 288.565114][T11679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.588268][T11937] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1617'. [ 288.630616][T11679] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.682387][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.689671][ T9616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.702782][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.710025][ T9616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.858803][T11946] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1618'. [ 288.870339][T11941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.881976][T11948] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1620'. [ 288.896166][T11941] bond0: (slave bond4): Enslaving as an active interface with an up link [ 288.989161][T11950] unknown channel width for channel at 909000KHz? [ 289.007007][T11950] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 289.074140][T11952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 289.082588][T11950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.295173][T11958] xt_policy: too many policy elements [ 289.363282][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 289.438728][T11708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.481353][T11708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.537753][T11708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.567350][T11965] C: renamed from lo (while UP) [ 289.633522][T11708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.742690][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.778520][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 290.051685][T11981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.116406][T11988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.126214][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'. [ 290.131233][T11679] veth0_vlan: entered promiscuous mode [ 290.565329][T11679] veth1_vlan: entered promiscuous mode [ 290.624684][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.702889][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.716433][T11679] veth0_macvtap: entered promiscuous mode [ 290.758830][T11679] veth1_macvtap: entered promiscuous mode [ 290.803120][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.810415][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.836329][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.843708][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.005255][T11679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.062562][T11679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.102412][T11679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.131719][T11679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.138880][ C0] bridge0: port 3(dummy0) entered forwarding state [ 291.147064][ C0] bridge0: topology change detected, propagating [ 291.184388][T11679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.193961][T11679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.217530][T12004] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1634'. [ 291.230530][T11708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.543879][ T9620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.572550][ T9620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.584825][T12018] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 291.912133][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.920946][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.003043][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.463531][ T1312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.668531][ T1312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.812202][ T1312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.901707][T11708] veth0_vlan: entered promiscuous mode [ 292.932902][T11708] veth1_vlan: entered promiscuous mode [ 292.992175][ T1312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.013664][T11708] veth0_macvtap: entered promiscuous mode [ 293.025206][T11708] veth1_macvtap: entered promiscuous mode [ 293.055836][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.074719][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.102845][T11708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.111955][T11708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.120898][T11708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.133099][T11708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.212482][ T1312] bridge_slave_1: left allmulticast mode [ 293.219124][ T1312] bridge_slave_1: left promiscuous mode [ 293.225933][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.236210][ T1312] bridge_slave_0: left allmulticast mode [ 293.242335][ T1312] bridge_slave_0: left promiscuous mode [ 293.248346][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.959455][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.980918][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.999174][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.023663][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.041850][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.054179][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.065160][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.090664][ T1312] bond0 (unregistering): Released all slaves [ 294.233147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.257762][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.440719][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1648'. [ 294.514446][ T8407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.537091][ T8407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.779325][T11866] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 294.791463][T11866] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 294.799916][T11866] CPU: 0 UID: 0 PID: 11866 Comm: kbnepd bnep0 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 294.812208][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.822306][T11866] RIP: 0010:klist_del+0x49/0x110 [ 294.827300][T11866] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 8a be f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 db 8a be f6 4d 8b 7e 58 4c 89 f7 e8 2f 5b [ 294.847041][T11866] RSP: 0018:ffffc90003d8f708 EFLAGS: 00010202 [ 294.853132][T11866] RAX: 000000000000000b RBX: ffff8880413fb860 RCX: ffff88802bfc1e00 [ 294.861120][T11866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 294.869115][T11866] RBP: ffffc90003d8f830 R08: ffff888057167d23 R09: 1ffff1100ae2cfa4 [ 294.877261][T11866] R10: dffffc0000000000 R11: ffffed100ae2cfa5 R12: dffffc0000000000 [ 294.885282][T11866] R13: 1ffff1100827f70c R14: 0000000000000000 R15: ffff88807b8de768 [ 294.893289][T11866] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 294.902550][T11866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.909238][T11866] CR2: 00007f2d9fb7f2d8 CR3: 000000006a5aa000 CR4: 00000000003526f0 [ 294.917248][T11866] Call Trace: [ 294.920558][T11866] [ 294.923530][T11866] device_del+0x280/0x8e0 [ 294.927903][T11866] ? _raw_spin_unlock_irq+0x2e/0x50 [ 294.933151][T11866] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 294.939257][T11866] ? __pfx_device_del+0x10/0x10 [ 294.944159][T11866] ? netdev_unregister_kobject+0x344/0x450 [ 294.950008][T11866] unregister_netdevice_many_notify+0x1d52/0x2320 [ 294.956481][T11866] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 294.963390][T11866] ? rcu_is_watching+0x15/0xb0 [ 294.968272][T11866] ? trace_contention_end+0x39/0x120 [ 294.973674][T11866] ? __mutex_lock+0x330/0xe80 [ 294.978377][T11866] ? __lock_acquire+0xab9/0xd20 [ 294.983954][T11866] ? __lock_acquire+0xab9/0xd20 [ 294.989003][T11866] unregister_netdevice_queue+0x33c/0x380 [ 294.995649][T11866] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 295.002353][T11866] ? rtnl_net_dev_lock+0x36/0x2f0 [ 295.007508][T11866] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 295.012735][T11866] unregister_netdev+0x1f/0x60 [ 295.017522][T11866] bnep_session+0x294d/0x2b40 [ 295.022222][T11866] ? trace_sched_exit_tp+0x38/0x120 [ 295.027446][T11866] ? __lock_acquire+0xab9/0xd20 [ 295.032332][T11866] ? __pfx_bnep_session+0x10/0x10 [ 295.037469][T11866] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 295.043381][T11866] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.049735][T11866] ? __pfx_woken_wake_function+0x10/0x10 [ 295.055450][T11866] ? __kthread_parkme+0x7b/0x200 [ 295.060436][T11866] ? __kthread_parkme+0x1a1/0x200 [ 295.065505][T11866] kthread+0x70e/0x8a0 [ 295.069609][T11866] ? __pfx_bnep_session+0x10/0x10 [ 295.074696][T11866] ? __pfx_kthread+0x10/0x10 [ 295.079323][T11866] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.084558][T11866] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.089926][T11866] ? __pfx_kthread+0x10/0x10 [ 295.095089][T11866] ret_from_fork+0x3fc/0x770 [ 295.099772][T11866] ? __pfx_ret_from_fork+0x10/0x10 [ 295.104999][T11866] ? __switch_to_asm+0x39/0x70 [ 295.110538][T11866] ? __switch_to_asm+0x33/0x70 [ 295.115414][T11866] ? __pfx_kthread+0x10/0x10 [ 295.120128][T11866] ret_from_fork_asm+0x1a/0x30 [ 295.124948][T11866] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.128097][T11866] Modules linked in: [ 295.134448][T11866] ---[ end trace 0000000000000000 ]--- [ 295.142951][T11866] RIP: 0010:klist_del+0x49/0x110 [ 295.158034][T11866] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 8a be f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 db 8a be f6 4d 8b 7e 58 4c 89 f7 e8 2f 5b [ 295.180058][T11866] RSP: 0018:ffffc90003d8f708 EFLAGS: 00010202 [ 295.186192][T11866] RAX: 000000000000000b RBX: ffff8880413fb860 RCX: ffff88802bfc1e00 [ 295.194400][T11866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 295.202659][T11866] RBP: ffffc90003d8f830 R08: ffff888057167d23 R09: 1ffff1100ae2cfa4 [ 295.211471][T11866] R10: dffffc0000000000 R11: ffffed100ae2cfa5 R12: dffffc0000000000 [ 295.220161][T11866] R13: 1ffff1100827f70c R14: 0000000000000000 R15: ffff88807b8de768 [ 295.228217][T11866] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 295.237190][T11866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.243988][T11866] CR2: 00007f2d9fb7f2d8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 295.252165][T11866] Kernel panic - not syncing: Fatal exception [ 295.258538][T11866] Kernel Offset: disabled [ 295.262872][T11866] Rebooting in 86400 seconds..