last executing test programs: 1m35.699837108s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x4c, 0x13, 0x507}, 0x4c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x42, 0xc2, &(0x7f0000000100)="1914625bd1b8e4f1e6ebbd36f4463a69571ee22e6c029681632328f5962dc17dc7c4b9191d8f11e26ae2bff5bb55c65e69f454d3a0974b9355aeb11f8b3d041a7a07", &(0x7f00000002c0)=""/194, 0x8, 0x0, 0x31, 0x60, &(0x7f0000000180)="34a922ce61a1f964f75e470dc36de8fc7f44be89663d9db92c9a24ade204ee68010e3d235e317d851d5cfda0c5c166bbea", &(0x7f00000001c0)="8276f0d311819227eb0abbc1ffc1c2ddd3094f49b1acf341a2826d7a850084ff451b0c21955e96edb1e5ac09acb8ed6ed0fd8ceef4e1d26c2bdcc4b32b6603a2b7bd868d49edb2252e19a8e0f2d8369a664bb3517a6f692d51ef08395bd3e433", 0x1, 0x0, 0xfffffe01}, 0x50) 1m20.887571575s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x4c, 0x13, 0x507}, 0x4c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x42, 0xc2, &(0x7f0000000100)="1914625bd1b8e4f1e6ebbd36f4463a69571ee22e6c029681632328f5962dc17dc7c4b9191d8f11e26ae2bff5bb55c65e69f454d3a0974b9355aeb11f8b3d041a7a07", &(0x7f00000002c0)=""/194, 0x8, 0x0, 0x31, 0x60, &(0x7f0000000180)="34a922ce61a1f964f75e470dc36de8fc7f44be89663d9db92c9a24ade204ee68010e3d235e317d851d5cfda0c5c166bbea", &(0x7f00000001c0)="8276f0d311819227eb0abbc1ffc1c2ddd3094f49b1acf341a2826d7a850084ff451b0c21955e96edb1e5ac09acb8ed6ed0fd8ceef4e1d26c2bdcc4b32b6603a2b7bd868d49edb2252e19a8e0f2d8369a664bb3517a6f692d51ef08395bd3e433", 0x1, 0x0, 0xfffffe01}, 0x50) 1m19.599040275s ago: executing program 0 (id=1021): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e2550e86f08fbe60d79245d7b246afa0a6653fd1cd09964329a530ce5f4a3464e7bbfdeae8db04297927933906dc0d2e3a8d62733cbfcef573741cb42680b65b07c3b22ea79959479119f6cee652190c6c54ea28914f0c4a53897609b9e2c122be30eca33bd802c0737833b937bf33e3b6c2072ef2caa40ccf31e1ea6b764b6818fbc4998f2ba9097d39fefc54b027901fc35ca482d8c7", 0x97, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='du']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400d051}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) sendfile(r2, r1, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 1m6.699071125s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x4c, 0x13, 0x507}, 0x4c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x42, 0xc2, &(0x7f0000000100)="1914625bd1b8e4f1e6ebbd36f4463a69571ee22e6c029681632328f5962dc17dc7c4b9191d8f11e26ae2bff5bb55c65e69f454d3a0974b9355aeb11f8b3d041a7a07", &(0x7f00000002c0)=""/194, 0x8, 0x0, 0x31, 0x60, &(0x7f0000000180)="34a922ce61a1f964f75e470dc36de8fc7f44be89663d9db92c9a24ade204ee68010e3d235e317d851d5cfda0c5c166bbea", &(0x7f00000001c0)="8276f0d311819227eb0abbc1ffc1c2ddd3094f49b1acf341a2826d7a850084ff451b0c21955e96edb1e5ac09acb8ed6ed0fd8ceef4e1d26c2bdcc4b32b6603a2b7bd868d49edb2252e19a8e0f2d8369a664bb3517a6f692d51ef08395bd3e433", 0x1, 0x0, 0xfffffe01}, 0x50) 1m5.008008006s ago: executing program 0 (id=1021): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e2550e86f08fbe60d79245d7b246afa0a6653fd1cd09964329a530ce5f4a3464e7bbfdeae8db04297927933906dc0d2e3a8d62733cbfcef573741cb42680b65b07c3b22ea79959479119f6cee652190c6c54ea28914f0c4a53897609b9e2c122be30eca33bd802c0737833b937bf33e3b6c2072ef2caa40ccf31e1ea6b764b6818fbc4998f2ba9097d39fefc54b027901fc35ca482d8c7", 0x97, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='du']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400d051}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) sendfile(r2, r1, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 1m5.000845671s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 53.752670847s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 52.855039858s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x4c, 0x13, 0x507}, 0x4c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x42, 0xc2, &(0x7f0000000100)="1914625bd1b8e4f1e6ebbd36f4463a69571ee22e6c029681632328f5962dc17dc7c4b9191d8f11e26ae2bff5bb55c65e69f454d3a0974b9355aeb11f8b3d041a7a07", &(0x7f00000002c0)=""/194, 0x8, 0x0, 0x31, 0x60, &(0x7f0000000180)="34a922ce61a1f964f75e470dc36de8fc7f44be89663d9db92c9a24ade204ee68010e3d235e317d851d5cfda0c5c166bbea", &(0x7f00000001c0)="8276f0d311819227eb0abbc1ffc1c2ddd3094f49b1acf341a2826d7a850084ff451b0c21955e96edb1e5ac09acb8ed6ed0fd8ceef4e1d26c2bdcc4b32b6603a2b7bd868d49edb2252e19a8e0f2d8369a664bb3517a6f692d51ef08395bd3e433", 0x1, 0x0, 0xfffffe01}, 0x50) 52.495140517s ago: executing program 0 (id=1021): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e2550e86f08fbe60d79245d7b246afa0a6653fd1cd09964329a530ce5f4a3464e7bbfdeae8db04297927933906dc0d2e3a8d62733cbfcef573741cb42680b65b07c3b22ea79959479119f6cee652190c6c54ea28914f0c4a53897609b9e2c122be30eca33bd802c0737833b937bf33e3b6c2072ef2caa40ccf31e1ea6b764b6818fbc4998f2ba9097d39fefc54b027901fc35ca482d8c7", 0x97, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='du']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400d051}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) sendfile(r2, r1, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 40.435757429s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 39.368125526s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x4c, 0x13, 0x507}, 0x4c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x42, 0xc2, &(0x7f0000000100)="1914625bd1b8e4f1e6ebbd36f4463a69571ee22e6c029681632328f5962dc17dc7c4b9191d8f11e26ae2bff5bb55c65e69f454d3a0974b9355aeb11f8b3d041a7a07", &(0x7f00000002c0)=""/194, 0x8, 0x0, 0x31, 0x60, &(0x7f0000000180)="34a922ce61a1f964f75e470dc36de8fc7f44be89663d9db92c9a24ade204ee68010e3d235e317d851d5cfda0c5c166bbea", &(0x7f00000001c0)="8276f0d311819227eb0abbc1ffc1c2ddd3094f49b1acf341a2826d7a850084ff451b0c21955e96edb1e5ac09acb8ed6ed0fd8ceef4e1d26c2bdcc4b32b6603a2b7bd868d49edb2252e19a8e0f2d8369a664bb3517a6f692d51ef08395bd3e433", 0x1, 0x0, 0xfffffe01}, 0x50) 38.622899935s ago: executing program 0 (id=1021): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e2550e86f08fbe60d79245d7b246afa0a6653fd1cd09964329a530ce5f4a3464e7bbfdeae8db04297927933906dc0d2e3a8d62733cbfcef573741cb42680b65b07c3b22ea79959479119f6cee652190c6c54ea28914f0c4a53897609b9e2c122be30eca33bd802c0737833b937bf33e3b6c2072ef2caa40ccf31e1ea6b764b6818fbc4998f2ba9097d39fefc54b027901fc35ca482d8c7", 0x97, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='du']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400d051}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) sendfile(r2, r1, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 27.416338428s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26.148963741s ago: executing program 0 (id=1021): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e2550e86f08fbe60d79245d7b246afa0a6653fd1cd09964329a530ce5f4a3464e7bbfdeae8db04297927933906dc0d2e3a8d62733cbfcef573741cb42680b65b07c3b22ea79959479119f6cee652190c6c54ea28914f0c4a53897609b9e2c122be30eca33bd802c0737833b937bf33e3b6c2072ef2caa40ccf31e1ea6b764b6818fbc4998f2ba9097d39fefc54b027901fc35ca482d8c7", 0x97, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='du']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400d051}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) sendfile(r2, r1, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 25.609524703s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x4c, 0x13, 0x507}, 0x4c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x42, 0xc2, &(0x7f0000000100)="1914625bd1b8e4f1e6ebbd36f4463a69571ee22e6c029681632328f5962dc17dc7c4b9191d8f11e26ae2bff5bb55c65e69f454d3a0974b9355aeb11f8b3d041a7a07", &(0x7f00000002c0)=""/194, 0x8, 0x0, 0x31, 0x60, &(0x7f0000000180)="34a922ce61a1f964f75e470dc36de8fc7f44be89663d9db92c9a24ade204ee68010e3d235e317d851d5cfda0c5c166bbea", &(0x7f00000001c0)="8276f0d311819227eb0abbc1ffc1c2ddd3094f49b1acf341a2826d7a850084ff451b0c21955e96edb1e5ac09acb8ed6ed0fd8ceef4e1d26c2bdcc4b32b6603a2b7bd868d49edb2252e19a8e0f2d8369a664bb3517a6f692d51ef08395bd3e433", 0x1, 0x0, 0xfffffe01}, 0x50) 14.456337436s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.777241155s ago: executing program 0 (id=1021): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e2550e86f08fbe60d79245d7b246afa0a6653fd1cd09964329a530ce5f4a3464e7bbfdeae8db04297927933906dc0d2e3a8d62733cbfcef573741cb42680b65b07c3b22ea79959479119f6cee652190c6c54ea28914f0c4a53897609b9e2c122be30eca33bd802c0737833b937bf33e3b6c2072ef2caa40ccf31e1ea6b764b6818fbc4998f2ba9097d39fefc54b027901fc35ca482d8c7", 0x97, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='du']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400d051}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) sendfile(r2, r1, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 3.27321126s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.890013646s ago: executing program 1 (id=1608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getpeername$qrtr(r0, &(0x7f0000000280), &(0x7f00000002c0)=0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000000)="5855713d07cb72d3a40b7c3f05b3fed2b4a8c5463f12bc08a92b10664f45b6442b", &(0x7f0000000080)=""/199, &(0x7f0000000180)="f5345198b37cdfaad2854229c614bbf22e1d13ac54a420c4930533158b3120e1830b6fdab69c75d3776d2549776af77c9f8a8e95a37f1d5cfd21e291619360fa06", &(0x7f0000000200)="266e9dea798d6ea5a3ea06971a298073ed69b3179129f448123c68e5d1146d09e7b08bef0540282e1c2ef1ff1bf50795c7", 0x1d3, r0, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.788457271s ago: executing program 1 (id=1610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e02380573bf22038dc6f82", 0x1d}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x8901, &(0x7f0000000040)={r6}) r9 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x29, 0x3, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r10, 0x0) 1.606341726s ago: executing program 1 (id=1611): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000040000000300000000000000", @ANYRES32=r8, @ANYBLOB="14001d801000008006000500ca00000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.348681352s ago: executing program 3 (id=1612): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000350000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x138}, 0x1, 0x1000000}, 0x0) 1.301686429s ago: executing program 1 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r1, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.301060482s ago: executing program 3 (id=1614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@multicast2}, {@in6=@local, 0x1, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x8, 0xffff, 0x9]}, &(0x7f0000000180)=0x44) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x31000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) 1.188320311s ago: executing program 3 (id=1615): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)='\x00', 0x1}}, 0x40805) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) 1.076426278s ago: executing program 3 (id=1616): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r2, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x4}}]}}}]}, 0x8c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xfffffc00, @loopback, 0x6}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xd13, 0x3ff, 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x0, 0x80, 0x1a, 0xffffffffffffffff, 0x3, '\x00', r4, r6, 0x4, 0x0, 0x0, 0xa, @void, @value, @void, @value}, 0x50) 241.950934ms ago: executing program 3 (id=1617): socket$netlink(0x10, 0x3, 0x8000000004) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010008", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf253d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010008", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf253d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) 225.249441ms ago: executing program 1 (id=1618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4]}}]}}]}, 0x8c}}, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x29, [0x4, 0x1, 0xff, 0xf, 0xf, 0x8], 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)=""/41}, &(0x7f0000000100)=0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r9, &(0x7f0000000480)='?', 0x590, 0x0, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x184, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x15) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r13, &(0x7f00000024c0)=[{&(0x7f00000000c0)='\r', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) r14 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r14, 0x10d, 0xb, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000100000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r12}, &(0x7f0000000300), &(0x7f0000001040)=r11}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6612}]}, 0x28}}, 0x0) 615.733µs ago: executing program 1 (id=1619): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r1 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 64) getsockopt$inet_int(r1, 0x10d, 0xca, &(0x7f00000002c0), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x9, 0x3, 0x2, 0x0, 0x4, 0xae1, 0x3, {0x0, @in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0xa, 0x4, 0x8, 0xbcc, 0x80}}, &(0x7f0000000040)=0xb0) (rerun: 64) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000580)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x1}, {0x0, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb7}]}}]}, 0x3c}}, 0x4000) 0s ago: executing program 3 (id=1620): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r0, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x8e5}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0xc}]}, 0xffffff10}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$phonet(r3, &(0x7f0000000100)={0x23, 0x6, 0x8d, 0x9}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.900823][T10452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.910402][T10452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.919813][T10452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.933213][T10452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.978243][T10692] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.064028][T10692] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.138336][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.161188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.220828][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.235694][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.250969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.271725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.296251][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.314133][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.412288][T10692] bridge_slave_1: left allmulticast mode [ 200.418529][T10692] bridge_slave_1: left promiscuous mode [ 200.425264][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.453449][T10692] bridge_slave_0: left allmulticast mode [ 200.462603][T10692] bridge_slave_0: left promiscuous mode [ 200.468777][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.762723][T10729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1301'. [ 200.915039][T10692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.933374][T10692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.945471][T10692] bond0 (unregistering): Released all slaves [ 200.967356][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.986694][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.998621][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.033541][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.042669][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 201.050731][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.319504][T10732] xfrm0 speed is unknown, defaulting to 1000 [ 201.539420][T10692] hsr_slave_0: left promiscuous mode [ 201.555493][T10692] hsr_slave_1: left promiscuous mode [ 201.561439][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.570551][T10692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.586243][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.593670][T10692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.637846][T10692] veth1_macvtap: left promiscuous mode [ 201.643434][T10692] veth0_macvtap: left promiscuous mode [ 201.650000][T10692] veth1_vlan: left promiscuous mode [ 201.655402][T10692] veth0_vlan: left promiscuous mode [ 201.840714][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.848775][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.858250][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.875924][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.889361][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.898183][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.097669][T10747] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 202.114455][T10747] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1304'. [ 202.155643][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 202.357434][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.367926][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.378217][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.386198][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.393965][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.401447][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.424436][T10692] team0 (unregistering): Port device team_slave_1 removed [ 202.433278][T10760] netlink: 'syz.1.1306': attribute type 10 has an invalid length. [ 202.501470][T10692] team0 (unregistering): Port device team_slave_0 removed [ 203.040626][T10743] xfrm0 speed is unknown, defaulting to 1000 [ 203.074515][T10752] xfrm0 speed is unknown, defaulting to 1000 [ 203.135775][ T5146] Bluetooth: hci0: command tx timeout [ 203.167937][T10732] chnl_net:caif_netlink_parms(): no params data found [ 203.392545][T10781] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1313'. [ 203.433042][T10743] chnl_net:caif_netlink_parms(): no params data found [ 203.573485][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.603584][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.616375][T10732] bridge_slave_0: entered allmulticast mode [ 203.626731][T10732] bridge_slave_0: entered promiscuous mode [ 203.656921][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.664054][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.675896][T10732] bridge_slave_1: entered allmulticast mode [ 203.682969][T10732] bridge_slave_1: entered promiscuous mode [ 203.770708][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.877410][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.895150][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 203.936099][ T5146] Bluetooth: hci1: command tx timeout [ 203.958497][T10816] Bluetooth: MGMT ver 1.23 [ 204.009771][T10692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.037486][T10752] chnl_net:caif_netlink_parms(): no params data found [ 204.049127][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.066193][T10743] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.073720][T10743] bridge_slave_0: entered allmulticast mode [ 204.093374][T10743] bridge_slave_0: entered promiscuous mode [ 204.110138][T10820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.163816][T10692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.176251][T10822] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 204.187803][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.195656][T10743] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.202982][T10743] bridge_slave_1: entered allmulticast mode [ 204.213170][T10743] bridge_slave_1: entered promiscuous mode [ 204.229261][T10732] team0: Port device team_slave_0 added [ 204.239456][T10732] team0: Port device team_slave_1 added [ 204.261470][T10692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.333716][T10743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.426085][T10692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.440006][T10743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.449839][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.461384][T10829] x_tables: duplicate underflow at hook 2 [ 204.466661][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.493854][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.504601][ T5839] Bluetooth: hci2: command tx timeout [ 204.512836][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.514725][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 204.525354][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.529224][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1322'. [ 204.562473][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.667546][T10743] team0: Port device team_slave_0 added [ 204.676660][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.683762][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.696706][T10752] bridge_slave_0: entered allmulticast mode [ 204.703321][T10752] bridge_slave_0: entered promiscuous mode [ 204.721159][T10743] team0: Port device team_slave_1 added [ 204.743685][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.751088][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.758386][T10752] bridge_slave_1: entered allmulticast mode [ 204.765043][T10752] bridge_slave_1: entered promiscuous mode [ 204.814654][T10732] hsr_slave_0: entered promiscuous mode [ 204.822605][T10732] hsr_slave_1: entered promiscuous mode [ 204.830840][T10743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.839296][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.865698][T10743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.902563][T10743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.909940][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.936239][T10743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.952286][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.987295][T10692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.013157][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.066436][T10692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.120744][T10752] team0: Port device team_slave_0 added [ 205.147068][T10692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.162736][T10743] hsr_slave_0: entered promiscuous mode [ 205.170716][T10743] hsr_slave_1: entered promiscuous mode [ 205.177109][T10743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.190916][T10743] Cannot create hsr debugfs directory [ 205.202111][T10752] team0: Port device team_slave_1 added [ 205.216471][ T5839] Bluetooth: hci0: command tx timeout [ 205.283979][T10692] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.320901][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.330395][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.356681][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.420452][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1326'. [ 205.431775][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.439380][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.466334][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.645109][T10752] hsr_slave_0: entered promiscuous mode [ 205.651493][T10752] hsr_slave_1: entered promiscuous mode [ 205.658271][T10752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.665962][T10752] Cannot create hsr debugfs directory [ 205.839938][T10692] bridge_slave_1: left allmulticast mode [ 205.847720][T10692] bridge_slave_1: left promiscuous mode [ 205.853749][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.863327][T10692] bridge_slave_0: left allmulticast mode [ 205.870208][T10692] bridge_slave_0: left promiscuous mode [ 205.888157][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.911588][T10692] bridge_slave_1: left allmulticast mode [ 205.923071][T10692] bridge_slave_1: left promiscuous mode [ 205.931365][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.949368][T10692] bridge_slave_0: left allmulticast mode [ 205.960137][T10692] bridge_slave_0: left promiscuous mode [ 205.968562][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.025898][ T5839] Bluetooth: hci1: command tx timeout [ 206.575777][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 206.690935][T10692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.701613][T10692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.711562][T10692] bond0 (unregistering): Released all slaves [ 206.831312][T10692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.841764][T10692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.853100][T10692] bond0 (unregistering): Released all slaves [ 206.995367][T10873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 207.015916][T10873] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.030086][T10873] gretap2: entered promiscuous mode [ 207.038460][T10873] gretap2: entered allmulticast mode [ 207.291839][T10882] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 207.300552][ T5839] Bluetooth: hci0: command tx timeout [ 207.438780][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 207.473281][T10889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1342'. [ 207.528855][T10692] hsr_slave_0: left promiscuous mode [ 207.543886][T10692] hsr_slave_1: left promiscuous mode [ 207.553440][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.568710][T10692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.581205][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.589154][T10692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.631727][T10692] hsr_slave_0: left promiscuous mode [ 207.639399][T10692] hsr_slave_1: left promiscuous mode [ 207.646563][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.654010][T10692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.662362][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.669948][T10692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.702366][T10692] veth1_macvtap: left promiscuous mode [ 207.708006][T10692] veth0_macvtap: left promiscuous mode [ 207.713559][T10692] veth1_vlan: left promiscuous mode [ 207.718980][T10692] veth0_vlan: left promiscuous mode [ 207.725070][T10692] veth1_macvtap: left promiscuous mode [ 207.730699][T10692] veth0_macvtap: left promiscuous mode [ 207.736520][T10692] veth1_vlan: left promiscuous mode [ 207.741828][T10692] veth0_vlan: left promiscuous mode [ 208.105864][ T5839] Bluetooth: hci1: command tx timeout [ 208.189311][T10692] team0 (unregistering): Port device team_slave_1 removed [ 208.224299][T10692] team0 (unregistering): Port device team_slave_0 removed [ 208.655842][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 208.849154][T10692] team0 (unregistering): Port device team_slave_1 removed [ 208.885233][T10692] team0 (unregistering): Port device team_slave_0 removed [ 209.277299][T10743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.301547][T10743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.332791][T10743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.351144][T10743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.376255][ T5839] Bluetooth: hci0: command tx timeout [ 209.568519][T10732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.597506][T10732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.634792][T10732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.713057][T10732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.741566][T10743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.777044][T10743] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.801053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.808218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.838096][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.845197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.851724][T10920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1350'. [ 210.054529][T10743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.066021][T10743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.188106][ T5839] Bluetooth: hci1: command tx timeout [ 210.260099][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.281031][T10752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.307086][T10752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.326621][T10752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.349801][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.367094][T10752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.379537][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.386706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.416771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.423903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.471453][T10743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.584110][T10940] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1356'. [ 210.598828][T10752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.624012][T10743] veth0_vlan: entered promiscuous mode [ 210.660301][T10752] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.688316][T10743] veth1_vlan: entered promiscuous mode [ 210.722036][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.729242][T10692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.746723][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.747175][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 210.753844][T10692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.794821][T10743] veth0_macvtap: entered promiscuous mode [ 210.855393][T10743] veth1_macvtap: entered promiscuous mode [ 210.890471][T10752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.924951][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.971476][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.005822][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.027240][T10743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.059733][T10743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.077100][T10743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.094442][T10743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.104216][T10743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.130855][T10743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.334126][T10752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.424627][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.427902][T10732] veth0_vlan: entered promiscuous mode [ 211.452912][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.478738][T10732] veth1_vlan: entered promiscuous mode [ 211.517096][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1361'. [ 211.555331][T10752] veth0_vlan: entered promiscuous mode [ 211.555746][T10692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.582091][T10692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.610580][T10732] veth0_macvtap: entered promiscuous mode [ 211.629231][T10732] veth1_macvtap: entered promiscuous mode [ 211.654380][T10752] veth1_vlan: entered promiscuous mode [ 211.693775][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.711761][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.723441][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.745529][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.758209][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.827756][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.857552][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.885060][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.915044][T10732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.930070][T10732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.953623][T10732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.963166][T10732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.015147][T10752] veth0_macvtap: entered promiscuous mode [ 212.041847][T10752] veth1_macvtap: entered promiscuous mode [ 212.093898][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 212.112216][T10752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.123859][T10752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.134422][T10752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.145950][T10752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.156253][T10752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.166882][T10752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.180706][T10752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.188248][T10993] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 212.216775][T10994] bond0: entered promiscuous mode [ 212.221868][T10994] bond5: entered promiscuous mode [ 212.227509][T10994] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 212.263470][T10752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.276392][T10752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.293778][T10752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.318635][T10998] dccp_invalid_packet: P.Data Offset(0) too small [ 212.325753][T10752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.332494][T10998] dccp_invalid_packet: P.Data Offset(0) too small [ 212.340430][T10752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.351914][T10998] dccp_invalid_packet: P.Data Offset(0) too small [ 212.352800][T10994] xt_CT: No such helper "pptp" [ 212.360097][T10998] dccp_invalid_packet: P.Data Offset(0) too small [ 212.381500][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.395536][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.405839][T10998] dccp_invalid_packet: P.Data Offset(0) too small [ 212.412512][T10998] dccp_invalid_packet: P.Data Offset(0) too small [ 212.456015][T10752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.464904][T10752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.485612][T10752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.512979][T10752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.574410][ T195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.630555][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.653356][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.725155][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.736251][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.807065][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.815025][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.823602][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 212.970923][ T195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.349745][T11016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1370'. [ 213.472182][ T195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.569253][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.580636][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.601270][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.623964][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.625291][ T195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.637477][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.649306][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.693016][T11017] xfrm0 speed is unknown, defaulting to 1000 [ 213.861588][ T195] bridge_slave_1: left allmulticast mode [ 213.873423][ T195] bridge_slave_1: left promiscuous mode [ 213.879835][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.897460][ T195] bridge_slave_0: left allmulticast mode [ 213.903157][ T195] bridge_slave_0: left promiscuous mode [ 213.904075][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.915388][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.919213][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.931737][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.947061][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.954694][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.962483][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.278799][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.293999][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.322481][ T195] bond0 (unregistering): Released all slaves [ 214.365076][T11027] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1373'. [ 214.405700][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 214.582218][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.583959][T11021] xfrm0 speed is unknown, defaulting to 1000 [ 214.591375][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.604597][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.612514][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.620203][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.628177][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.789412][T11017] chnl_net:caif_netlink_parms(): no params data found [ 214.812708][T11031] xfrm0 speed is unknown, defaulting to 1000 [ 214.853310][ T195] hsr_slave_0: left promiscuous mode [ 214.859496][ T195] hsr_slave_1: left promiscuous mode [ 214.866632][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.874054][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.899580][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.916245][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.932524][ T195] veth1_macvtap: left promiscuous mode [ 214.939772][ T195] veth0_macvtap: left promiscuous mode [ 214.955690][ T195] veth1_vlan: left promiscuous mode [ 214.962293][ T195] veth0_vlan: left promiscuous mode [ 215.450579][ T195] team0 (unregistering): Port device team_slave_1 removed [ 215.490810][ T195] team0 (unregistering): Port device team_slave_0 removed [ 215.706427][ T5839] Bluetooth: hci0: command tx timeout [ 216.027348][ T5839] Bluetooth: hci1: command tx timeout [ 216.113884][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.145970][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.168087][T11017] bridge_slave_0: entered allmulticast mode [ 216.200838][T11017] bridge_slave_0: entered promiscuous mode [ 216.202706][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 216.232018][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.245368][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.262995][T11017] bridge_slave_1: entered allmulticast mode [ 216.263669][T11075] netlink: 'syz.3.1384': attribute type 2 has an invalid length. [ 216.270599][T11017] bridge_slave_1: entered promiscuous mode [ 216.290546][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 216.308324][T11021] chnl_net:caif_netlink_parms(): no params data found [ 216.392498][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.444730][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.576292][T11017] team0: Port device team_slave_0 added [ 216.582372][T11031] chnl_net:caif_netlink_parms(): no params data found [ 216.605168][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.613572][T11092] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 216.616380][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.634527][T11021] bridge_slave_0: entered allmulticast mode [ 216.641276][T11021] bridge_slave_0: entered promiscuous mode [ 216.651647][T11017] team0: Port device team_slave_1 added [ 216.685216][ T195] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.701586][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.711408][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.721460][T11021] bridge_slave_1: entered allmulticast mode [ 216.729338][T11021] bridge_slave_1: entered promiscuous mode [ 216.737064][ T5839] Bluetooth: hci2: command tx timeout [ 216.804827][ T195] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.852739][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.856450][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 216.916707][ T195] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.933209][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.941238][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.991335][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.010752][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.047785][ T195] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.061102][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.068398][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.096115][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.178694][T11021] team0: Port device team_slave_0 added [ 217.202132][T11017] hsr_slave_0: entered promiscuous mode [ 217.211866][T11017] hsr_slave_1: entered promiscuous mode [ 217.237420][T11017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.255911][T11017] Cannot create hsr debugfs directory [ 217.261989][T11031] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.271906][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.279945][T11031] bridge_slave_0: entered allmulticast mode [ 217.287357][T11031] bridge_slave_0: entered promiscuous mode [ 217.298581][T11021] team0: Port device team_slave_1 added [ 217.322967][T11031] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.333098][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.341343][T11031] bridge_slave_1: entered allmulticast mode [ 217.349512][T11031] bridge_slave_1: entered promiscuous mode [ 217.415125][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.469780][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.479898][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.506917][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.524110][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.545575][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.552537][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.580157][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.639341][ T195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.664477][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 217.752305][T11031] team0: Port device team_slave_0 added [ 217.775813][ T5839] Bluetooth: hci0: command tx timeout [ 217.813770][ T195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.851000][T11021] hsr_slave_0: entered promiscuous mode [ 217.858086][T11021] hsr_slave_1: entered promiscuous mode [ 217.864249][T11021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.881790][T11021] Cannot create hsr debugfs directory [ 217.893703][T11031] team0: Port device team_slave_1 added [ 218.028678][ T195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.061457][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.075605][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.106134][ T5839] Bluetooth: hci1: command tx timeout [ 218.120477][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.147794][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.154791][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.196298][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.241901][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 218.252670][ T195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.280081][ T5886] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 218.296121][ T5886] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 218.386337][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 218.395127][T11031] hsr_slave_0: entered promiscuous mode [ 218.406645][T11031] hsr_slave_1: entered promiscuous mode [ 218.412939][T11031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.421858][T11031] Cannot create hsr debugfs directory [ 218.585217][T11143] xt_TCPMSS: Only works on TCP SYN packets [ 218.601852][T11142] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1401'. [ 218.647440][ T195] bridge_slave_1: left allmulticast mode [ 218.653139][ T195] bridge_slave_1: left promiscuous mode [ 218.665586][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.674757][ T195] bridge_slave_0: left allmulticast mode [ 218.681456][ T195] bridge_slave_0: left promiscuous mode [ 218.687980][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.698607][ T195] bridge_slave_1: left allmulticast mode [ 218.704336][ T195] bridge_slave_1: left promiscuous mode [ 218.710213][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.720775][ T195] bridge_slave_0: left allmulticast mode [ 218.727112][ T195] bridge_slave_0: left promiscuous mode [ 218.732845][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.760786][T11147] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 218.770222][T11147] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1403'. [ 218.779377][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 218.815570][ T5839] Bluetooth: hci2: command tx timeout [ 219.287001][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.305840][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.319962][ T195] bond0 (unregistering): Released all slaves [ 219.474011][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.485033][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.496605][ T195] bond0 (unregistering): Released all slaves [ 219.682247][T11152] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 219.693411][T11154] sctp: [Deprecated]: syz.3.1406 (pid 11154) Use of int in max_burst socket option deprecated. [ 219.693411][T11154] Use struct sctp_assoc_value instead [ 219.826818][T11159] bridge0: port 2(bond0) entered blocking state [ 219.834602][T11159] bridge0: port 2(bond0) entered disabled state [ 219.842271][T11159] bond0: entered allmulticast mode [ 219.849335][T11159] bond5: entered allmulticast mode [ 219.854599][T11159] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 219.861724][ T5839] Bluetooth: hci0: command tx timeout [ 219.881787][T11162] x_tables: duplicate underflow at hook 1 [ 219.973408][T11017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.983357][T11017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.052011][T11017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.114424][ T195] hsr_slave_0: left promiscuous mode [ 220.121953][ T195] hsr_slave_1: left promiscuous mode [ 220.129739][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.142859][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.151665][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.159943][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.173457][ T195] hsr_slave_0: left promiscuous mode [ 220.180565][ T195] hsr_slave_1: left promiscuous mode [ 220.186486][ T5839] Bluetooth: hci1: command tx timeout [ 220.186518][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.200023][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.208541][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.221368][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.273838][ T195] veth1_macvtap: left promiscuous mode [ 220.279559][ T195] veth0_macvtap: left promiscuous mode [ 220.285078][ T195] veth1_vlan: left promiscuous mode [ 220.290725][ T195] veth0_vlan: left promiscuous mode [ 220.297102][ T195] veth1_macvtap: left promiscuous mode [ 220.302670][ T195] veth0_macvtap: left promiscuous mode [ 220.308509][ T195] veth1_vlan: left promiscuous mode [ 220.313894][ T195] veth0_vlan: left promiscuous mode [ 220.451184][T11180] ax25_connect(): syz.3.1413 uses autobind, please contact jreuter@yaina.de [ 220.903581][ T195] team0 (unregistering): Port device team_slave_1 removed [ 220.905694][ T5839] Bluetooth: hci2: command tx timeout [ 220.941793][ T195] team0 (unregistering): Port device team_slave_0 removed [ 221.613512][ T195] team0 (unregistering): Port device team_slave_1 removed [ 221.653538][ T195] team0 (unregistering): Port device team_slave_0 removed [ 221.939932][ T5839] Bluetooth: hci0: command tx timeout [ 222.026013][T11017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.096240][T11170] sit0: left promiscuous mode [ 222.179830][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.187196][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.255753][ T5839] Bluetooth: hci1: command tx timeout [ 222.336816][T11170] wg0: left promiscuous mode [ 222.554132][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.587555][T11170] batadv_slave_1: left promiscuous mode [ 222.793819][T11170] gretap1: left promiscuous mode [ 222.813369][T11170] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.822785][T11170] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.835634][T11170] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.844527][T11170] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.854389][T11170] geneve3: left promiscuous mode [ 222.859496][T11170] geneve3: left allmulticast mode [ 222.871292][T11170] veth3: left allmulticast mode [ 222.880303][T11170] bridge4: left promiscuous mode [ 222.885268][T11170] bridge4: left allmulticast mode [ 222.896621][T11170] gretap2: left promiscuous mode [ 222.901616][T11170] gretap2: left allmulticast mode [ 222.976650][ T5839] Bluetooth: hci2: command tx timeout [ 223.159146][T11017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.307585][T11021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.320101][T11017] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.327637][T11204] tipc: Started in network mode [ 223.332560][T11204] tipc: Node identity , cluster identity 4711 [ 223.397386][T11021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.420518][T11021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.444378][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.451567][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.488514][T11021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.510147][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'. [ 223.520054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.527214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.552894][T11209] netlink: 'syz.1.1418': attribute type 7 has an invalid length. [ 223.781750][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.815079][T11031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.833452][T11031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.844044][T11031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.858928][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.870774][T11031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.898325][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.905510][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.936466][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.943669][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.022411][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.149622][T11017] veth0_vlan: entered promiscuous mode [ 224.179620][T11225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1423'. [ 224.211225][T11017] veth1_vlan: entered promiscuous mode [ 224.236461][T11031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.264286][T11031] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.313966][T11017] veth0_macvtap: entered promiscuous mode [ 224.355401][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.362594][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.383358][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 224.398986][T11017] veth1_macvtap: entered promiscuous mode [ 224.436737][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.443834][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.469453][T11017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.508618][T11017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.534083][T11017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.550109][T11017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.559879][T11017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.569703][T11017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.583264][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.853197][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.864188][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.894270][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 224.937918][T11251] netlink: 'syz.3.1429': attribute type 2 has an invalid length. [ 224.951501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.956426][T11251] netlink: 'syz.3.1429': attribute type 9 has an invalid length. [ 224.977903][T11251] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.1429'. [ 224.980511][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.027315][T11021] veth0_vlan: entered promiscuous mode [ 225.084813][T11021] veth1_vlan: entered promiscuous mode [ 225.192286][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.316547][T11021] veth0_macvtap: entered promiscuous mode [ 225.357825][T11021] veth1_macvtap: entered promiscuous mode [ 225.406063][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.435559][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.466304][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.484234][T11031] veth0_vlan: entered promiscuous mode [ 225.514454][T11280] xt_cgroup: invalid path, errno=-2 [ 225.550109][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.581601][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.606760][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.620168][T11031] veth1_vlan: entered promiscuous mode [ 225.643043][T11021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.653664][T11021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.664288][T11021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.674702][T11021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.794556][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.832234][T11031] veth0_macvtap: entered promiscuous mode [ 225.852283][T11031] veth1_macvtap: entered promiscuous mode [ 225.884234][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.895973][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.906604][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.917425][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.929496][T11031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.001139][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.016947][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.027760][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.037926][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.048415][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.059876][T11031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.077448][T11031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.086450][T11031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.095751][T11031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.104452][T11031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.125695][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.133528][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.192186][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.212977][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.221140][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.280002][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.295173][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.320398][T10692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.329587][T10692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.436472][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.566931][ T12] bridge_slave_1: left allmulticast mode [ 226.572587][ T12] bridge_slave_1: left promiscuous mode [ 226.584757][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.593426][ T12] bridge_slave_0: left allmulticast mode [ 226.600922][ T12] bridge_slave_0: left promiscuous mode [ 226.606982][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.903694][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 227.080253][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.091729][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.102494][ T12] bond0 (unregistering): Released all slaves [ 227.140699][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.150619][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.165863][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.179287][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.194780][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.208064][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.254574][T11296] xfrm0 speed is unknown, defaulting to 1000 [ 227.473051][ T12] hsr_slave_0: left promiscuous mode [ 227.482266][ T12] hsr_slave_1: left promiscuous mode [ 227.498040][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.513307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.526424][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.546327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.579761][ T12] veth1_macvtap: left promiscuous mode [ 227.585308][ T12] veth0_macvtap: left promiscuous mode [ 227.606476][ T12] veth1_vlan: left promiscuous mode [ 227.611801][ T12] veth0_vlan: left promiscuous mode [ 227.841018][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.850835][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.876322][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.884929][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.893446][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.905770][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.131049][ T12] team0 (unregistering): Port device team_slave_1 removed [ 228.177990][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.561048][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.570650][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.585794][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.599221][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.609842][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.632504][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.770521][T11296] chnl_net:caif_netlink_parms(): no params data found [ 228.825585][T11303] xfrm0 speed is unknown, defaulting to 1000 [ 228.867207][T11316] xfrm0 speed is unknown, defaulting to 1000 [ 228.993456][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 229.010421][T11329] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1446'. [ 229.027180][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 229.136125][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.143262][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.166326][T11296] bridge_slave_0: entered allmulticast mode [ 229.173610][T11296] bridge_slave_0: entered promiscuous mode [ 229.181614][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.189085][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.196516][T11296] bridge_slave_1: entered allmulticast mode [ 229.203469][T11296] bridge_slave_1: entered promiscuous mode [ 229.230380][T11335] IPv6: sit2: Disabled Multicast RS [ 229.250673][T11338] lo: entered allmulticast mode [ 229.285682][T11338] lo: left allmulticast mode [ 229.296121][ T5839] Bluetooth: hci0: command tx timeout [ 229.333564][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.405225][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.479327][T11316] chnl_net:caif_netlink_parms(): no params data found [ 229.514645][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 229.518311][T11296] team0: Port device team_slave_0 added [ 229.531675][T11296] team0: Port device team_slave_1 added [ 229.558352][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 229.655840][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.662936][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.690930][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.704173][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.711352][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.737809][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.791306][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 229.850892][ T3555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.869201][T11369] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 229.884892][T11303] chnl_net:caif_netlink_parms(): no params data found [ 229.922742][T11369] xfrm0 speed is unknown, defaulting to 1000 [ 229.939699][T11367] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 229.947953][ T5839] Bluetooth: hci1: command tx timeout [ 229.961593][T11367] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 229.983585][ T3555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.084583][T11296] hsr_slave_0: entered promiscuous mode [ 230.091729][T11296] hsr_slave_1: entered promiscuous mode [ 230.125127][ T3555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.141441][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.148800][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.156304][T11316] bridge_slave_0: entered allmulticast mode [ 230.163318][T11316] bridge_slave_0: entered promiscuous mode [ 230.203013][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.215693][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.222901][T11316] bridge_slave_1: entered allmulticast mode [ 230.230916][T11316] bridge_slave_1: entered promiscuous mode [ 230.262776][T11384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1459'. [ 230.283131][ T3555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.414231][T11316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.465702][T11316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.511203][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.522054][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.531407][T11303] bridge_slave_0: entered allmulticast mode [ 230.539834][T11303] bridge_slave_0: entered promiscuous mode [ 230.547557][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.554664][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.562034][T11303] bridge_slave_1: entered allmulticast mode [ 230.569143][T11303] bridge_slave_1: entered promiscuous mode [ 230.665603][T11316] team0: Port device team_slave_0 added [ 230.674278][T11303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.726247][T11316] team0: Port device team_slave_1 added [ 230.735804][ T5839] Bluetooth: hci2: command tx timeout [ 230.761469][T11303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.813659][ T3555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.836463][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'. [ 230.849893][T11401] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1464'. [ 230.859579][T11401] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1464'. [ 230.926595][T11400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.942629][T11188] hid-generic 0005:046D:0A0E.0002: item fetching failed at offset 0/1 [ 230.954715][T11188] hid-generic 0005:046D:0A0E.0002: probe with driver hid-generic failed with error -22 [ 230.957364][T11316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.972441][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.001608][T11316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.019024][T11410] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 231.041630][ T3555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.062293][T11303] team0: Port device team_slave_0 added [ 231.071911][T11303] team0: Port device team_slave_1 added [ 231.108319][T11316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.120457][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.146886][T11316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.214643][ T3555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.236887][T11303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.243864][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.270449][T11303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.286833][T11303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.299798][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.326664][T11303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.385875][ T5839] Bluetooth: hci0: command tx timeout [ 231.398146][ T3555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.433701][T11316] hsr_slave_0: entered promiscuous mode [ 231.439951][T11316] hsr_slave_1: entered promiscuous mode [ 231.446207][T11316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.453780][T11316] Cannot create hsr debugfs directory [ 231.529784][T11303] hsr_slave_0: entered promiscuous mode [ 231.541831][T11303] hsr_slave_1: entered promiscuous mode [ 231.549396][T11303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.557385][T11303] Cannot create hsr debugfs directory [ 231.623743][T11419] syzkaller0: entered promiscuous mode [ 231.630090][T11419] syzkaller0: entered allmulticast mode [ 231.800217][ T3555] bridge_slave_1: left allmulticast mode [ 231.806687][ T3555] bridge_slave_1: left promiscuous mode [ 231.812496][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.821069][ T3555] bridge_slave_0: left allmulticast mode [ 231.827212][ T3555] bridge_slave_0: left promiscuous mode [ 231.833299][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.842355][ T3555] bridge_slave_1: left allmulticast mode [ 231.848445][ T3555] bridge_slave_1: left promiscuous mode [ 231.854148][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.865064][ T3555] bridge_slave_0: left allmulticast mode [ 231.871114][ T3555] bridge_slave_0: left promiscuous mode [ 231.877074][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.025833][ T5839] Bluetooth: hci1: command tx timeout [ 232.403388][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.414211][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.430281][ T3555] bond0 (unregistering): Released all slaves [ 232.545319][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.556653][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.566670][ T3555] bond0 (unregistering): Released all slaves [ 232.828250][ T5839] Bluetooth: hci2: command tx timeout [ 233.455629][ T5839] Bluetooth: hci0: command tx timeout [ 234.106062][ T5839] Bluetooth: hci1: command tx timeout [ 234.352808][T11433] ax25_connect(): syz.1.1471 uses autobind, please contact jreuter@yaina.de [ 234.372970][T11433] ax25_connect(): syz.1.1471 uses autobind, please contact jreuter@yaina.de [ 234.416210][T11296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.438948][T11296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.508583][T11296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.557864][T11296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.642555][T11444] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 234.721079][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.755357][ T3555] hsr_slave_0: left promiscuous mode [ 234.761596][ T3555] hsr_slave_1: left promiscuous mode [ 234.768466][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.778460][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.787753][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.795270][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.809702][ T3555] hsr_slave_0: left promiscuous mode [ 234.818414][ T3555] hsr_slave_1: left promiscuous mode [ 234.824097][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.833545][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.844238][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.853080][T11447] netlink: del zone limit has 4 unknown bytes [ 234.854975][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.894677][ T3555] veth1_macvtap: left promiscuous mode [ 234.905533][ T5839] Bluetooth: hci2: command tx timeout [ 234.914476][ T3555] veth0_macvtap: left promiscuous mode [ 234.920267][ T3555] veth1_vlan: left promiscuous mode [ 234.925721][ T3555] veth0_vlan: left promiscuous mode [ 234.933111][ T3555] veth1_macvtap: left promiscuous mode [ 234.938813][ T3555] veth0_macvtap: left promiscuous mode [ 234.944350][ T3555] veth1_vlan: left promiscuous mode [ 234.949854][ T3555] veth0_vlan: left promiscuous mode [ 235.473520][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 235.514164][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 235.536443][ T5839] Bluetooth: hci0: command tx timeout [ 236.186672][ T5839] Bluetooth: hci1: command tx timeout [ 236.199815][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 236.238735][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 236.624448][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.644928][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.652085][T10692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.679483][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.686647][T10692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.754549][T11296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.778825][T11296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.849967][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 236.991272][ T5839] Bluetooth: hci2: command tx timeout [ 237.065176][T11316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.099428][T11316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.183902][T11316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.207089][T11316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.233993][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.249063][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1484'. [ 237.356435][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 237.382108][T11296] veth0_vlan: entered promiscuous mode [ 237.495125][T11479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1485'. [ 237.504648][T11296] veth1_vlan: entered promiscuous mode [ 237.573875][T11296] veth0_macvtap: entered promiscuous mode [ 237.588764][T11296] veth1_macvtap: entered promiscuous mode [ 237.609197][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1486'. [ 237.674763][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.712356][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.749130][T11316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.762135][T11303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.773837][T11296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.790127][T11296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.799196][T11296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.807941][T11296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.823908][T11303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.832936][T11303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.842743][T11303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.858303][T11316] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.878962][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.886111][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.915073][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.922233][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.972266][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.980525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.022393][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.043039][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.168029][T11303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.220956][T11303] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.243774][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.250943][T11353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.320235][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.327352][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.367951][T11497] openvswitch: netlink: IPv4 tunnel dst address is zero [ 238.382856][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1488'. [ 238.406636][T11316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.522520][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 238.538076][T11316] veth0_vlan: entered promiscuous mode [ 238.562261][T11316] veth1_vlan: entered promiscuous mode [ 238.577477][T11503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 238.590229][T11503] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.599417][T11503] gretap2: entered promiscuous mode [ 238.605195][T11503] gretap2: entered allmulticast mode [ 238.662261][T11316] veth0_macvtap: entered promiscuous mode [ 238.682849][T11316] veth1_macvtap: entered promiscuous mode [ 238.763233][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.786026][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.820172][T11316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.886269][ T3524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.922452][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.934970][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.947217][T11316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.957563][T11303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.976483][T11316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.985216][T11316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.994710][T11316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.003913][T11316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.140122][ T3524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.159184][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.179244][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.210474][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.221453][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.275462][T11303] veth0_vlan: entered promiscuous mode [ 239.293568][T11303] veth1_vlan: entered promiscuous mode [ 239.324253][T11303] veth0_macvtap: entered promiscuous mode [ 239.369018][T11303] veth1_macvtap: entered promiscuous mode [ 239.384993][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.405625][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.426045][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.439079][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.450201][T11303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.464203][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.475582][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.485404][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.500104][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.511943][T11303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.537631][ T3524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.552534][T11303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.561847][T11303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.571031][T11303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.579926][T11303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.654508][ T3524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.674154][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.688098][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.711401][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.727892][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.892505][T11524] netlink: 'syz.3.1494': attribute type 7 has an invalid length. [ 239.910149][T11524] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1494'. [ 239.929285][ T3524] bridge_slave_1: left allmulticast mode [ 239.935078][ T3524] bridge_slave_1: left promiscuous mode [ 239.950644][T11524] netlink: 'syz.3.1494': attribute type 62 has an invalid length. [ 239.962791][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.975032][ T3524] bridge_slave_0: left allmulticast mode [ 240.002124][ T3524] bridge_slave_0: left promiscuous mode [ 240.017508][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.208178][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.227311][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.236086][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.244392][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.253650][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.262719][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.662472][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.674506][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.684928][ T3524] bond0 (unregistering): Released all slaves [ 240.771536][T11531] xfrm0 speed is unknown, defaulting to 1000 [ 240.863598][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.875217][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.886169][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.895181][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.907536][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.914909][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.003576][T11534] xfrm0 speed is unknown, defaulting to 1000 [ 241.019023][ T3524] hsr_slave_0: left promiscuous mode [ 241.024706][ T3524] hsr_slave_1: left promiscuous mode [ 241.030575][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.040481][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.051313][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.059059][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.078059][ T3524] veth1_macvtap: left promiscuous mode [ 241.083557][ T3524] veth0_macvtap: left promiscuous mode [ 241.089349][ T3524] veth1_vlan: left promiscuous mode [ 241.094601][ T3524] veth0_vlan: left promiscuous mode [ 241.441643][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 241.481794][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 241.824440][T11539] netlink: 'syz.1.1495': attribute type 4 has an invalid length. [ 241.832738][T11542] netlink: 'syz.1.1495': attribute type 4 has an invalid length. [ 241.876239][T11544] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1495'. [ 242.068592][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.079386][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.093439][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.107891][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.116696][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 242.124329][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.233161][T11554] net veth1_virt_wifi : renamed from virt_wifi0 (while UP) [ 242.315682][T11546] xfrm0 speed is unknown, defaulting to 1000 [ 242.335771][ T5146] Bluetooth: hci0: command tx timeout [ 242.348519][T11531] chnl_net:caif_netlink_parms(): no params data found [ 242.425392][T11562] x_tables: duplicate underflow at hook 1 [ 242.518280][T11534] chnl_net:caif_netlink_parms(): no params data found [ 242.582921][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.603275][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.612284][T11531] bridge_slave_0: entered allmulticast mode [ 242.624450][T11531] bridge_slave_0: entered promiscuous mode [ 242.652119][T11574] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.660039][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 242.675782][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.692653][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.702973][T11531] bridge_slave_1: entered allmulticast mode [ 242.710741][T11531] bridge_slave_1: entered promiscuous mode [ 242.773703][ T3524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.834086][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.843887][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.858710][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.866086][T11534] bridge_slave_0: entered allmulticast mode [ 242.872679][T11534] bridge_slave_0: entered promiscuous mode [ 242.896261][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 242.905680][T11596] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1506'. [ 242.914862][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 242.927256][ T3524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.942972][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.959636][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.966990][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.974132][T11534] bridge_slave_1: entered allmulticast mode [ 242.980177][ T5839] Bluetooth: hci1: command tx timeout [ 242.990373][T11534] bridge_slave_1: entered promiscuous mode [ 243.038389][ T3524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.064428][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.088633][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.113343][T11531] team0: Port device team_slave_0 added [ 243.119551][T11546] chnl_net:caif_netlink_parms(): no params data found [ 243.147124][ T3524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.169415][T11531] team0: Port device team_slave_1 added [ 243.181642][T11534] team0: Port device team_slave_0 added [ 243.201567][T11534] team0: Port device team_slave_1 added [ 243.258774][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.266526][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.299791][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.311829][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.319751][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.345924][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.358491][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.365730][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.392864][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.424182][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.431480][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.457919][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.495322][T11531] hsr_slave_0: entered promiscuous mode [ 243.501830][T11531] hsr_slave_1: entered promiscuous mode [ 243.528403][T11546] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.542877][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.550062][T11546] bridge_slave_0: entered allmulticast mode [ 243.557566][T11546] bridge_slave_0: entered promiscuous mode [ 243.587396][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.594513][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.603351][T11546] bridge_slave_1: entered allmulticast mode [ 243.646779][T11546] bridge_slave_1: entered promiscuous mode [ 243.706977][T11534] hsr_slave_0: entered promiscuous mode [ 243.713320][T11534] hsr_slave_1: entered promiscuous mode [ 243.729275][T11534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.744084][T11534] Cannot create hsr debugfs directory [ 243.862611][ T3524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.892792][T11546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.994399][T11546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.088537][ T3524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.122183][T11625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1511'. [ 244.164990][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1513'. [ 244.175814][ T5839] Bluetooth: hci2: command tx timeout [ 244.188271][T11546] team0: Port device team_slave_0 added [ 244.226771][T11546] team0: Port device team_slave_1 added [ 244.297285][ T3524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.403875][T11546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.411145][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.440482][ T5839] Bluetooth: hci0: command tx timeout [ 244.450157][T11546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.513789][ T3524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.561692][T11546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.576786][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.603014][T11546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.713889][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 244.739815][T11546] hsr_slave_0: entered promiscuous mode [ 244.748149][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 244.761818][T11546] hsr_slave_1: entered promiscuous mode [ 244.769259][T11546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.777266][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1517'. [ 244.786409][T11546] Cannot create hsr debugfs directory [ 244.948400][ T3524] bridge_slave_1: left allmulticast mode [ 244.956763][ T3524] bridge_slave_1: left promiscuous mode [ 244.962840][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.994106][ T3524] bridge_slave_0: left allmulticast mode [ 245.012096][ T3524] bridge_slave_0: left promiscuous mode [ 245.018110][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.048003][ T3524] bridge_slave_1: left allmulticast mode [ 245.053698][ T3524] bridge_slave_1: left promiscuous mode [ 245.059567][ T5839] Bluetooth: hci1: command tx timeout [ 245.076627][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.098419][ T3524] bridge_slave_0: left allmulticast mode [ 245.104095][ T3524] bridge_slave_0: left promiscuous mode [ 245.112407][T11652] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 245.114324][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.665280][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.677237][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.693233][ T3524] bond0 (unregistering): Released all slaves [ 245.803848][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.814361][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.824468][ T3524] bond0 (unregistering): Released all slaves [ 245.844289][T11652] bridge0: port 3(team0) entered blocking state [ 245.856142][T11652] bridge0: port 3(team0) entered disabled state [ 245.862565][T11652] team0: entered allmulticast mode [ 245.869190][T11652] team0: entered promiscuous mode [ 245.972465][T11654] C: left promiscuous mode [ 245.984258][T11654] sit0: left promiscuous mode [ 246.024125][T11654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.052263][T11654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.275580][ T5839] Bluetooth: hci2: command tx timeout [ 246.505617][ T5839] Bluetooth: hci0: command tx timeout [ 246.514079][T11679] netlink: 'syz.1.1531': attribute type 8 has an invalid length. [ 246.553267][ T3524] hsr_slave_0: left promiscuous mode [ 246.559615][ T3524] hsr_slave_1: left promiscuous mode [ 246.565928][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.581321][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.592179][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.600048][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.614288][ T3524] hsr_slave_0: left promiscuous mode [ 246.620581][ T3524] hsr_slave_1: left promiscuous mode [ 246.632905][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.640792][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.649381][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.657120][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.691548][ T3524] veth1_macvtap: left promiscuous mode [ 246.697621][ T3524] veth0_macvtap: left promiscuous mode [ 246.703223][ T3524] veth1_vlan: left promiscuous mode [ 246.708769][ T3524] veth0_vlan: left promiscuous mode [ 246.714604][ T3524] veth1_macvtap: left promiscuous mode [ 246.720341][ T3524] veth0_macvtap: left promiscuous mode [ 246.726149][ T3524] veth1_vlan: left promiscuous mode [ 246.731559][ T3524] veth0_vlan: left promiscuous mode [ 247.137056][ T5839] Bluetooth: hci1: command tx timeout [ 247.265149][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 247.309410][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 247.980679][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 248.018813][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 248.337650][ T5839] Bluetooth: hci2: command tx timeout [ 248.578046][ T5839] Bluetooth: hci0: command tx timeout [ 248.681797][T11531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.708006][T11531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.728243][T11531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.748102][T11531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.998291][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.049108][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.058637][T11715] sctp: [Deprecated]: syz.3.1538 (pid 11715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.058637][T11715] Use struct sctp_sack_info instead [ 249.072607][T11354] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.082887][T11354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.113851][T11595] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.121031][T11595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.196519][T11531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.207388][T11531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.218517][ T5839] Bluetooth: hci1: command tx timeout [ 249.257783][T11717] dvmrp1: entered allmulticast mode [ 249.275075][T11534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.298852][T11534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.325066][T11534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.355095][T11534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.538564][T11546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.558556][T11546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.582202][T11546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.615900][T11546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.635295][T11734] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1543'. [ 249.673331][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.712590][T11737] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 249.743079][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1544'. [ 249.808123][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.858890][T11743] pim6reg: entered allmulticast mode [ 249.869739][T11531] veth0_vlan: entered promiscuous mode [ 249.910395][T11531] veth1_vlan: entered promiscuous mode [ 249.923869][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.957839][T11354] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.964977][T11354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.999992][T11531] veth0_macvtap: entered promiscuous mode [ 250.008776][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.015911][T11354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.040922][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.067285][T11531] veth1_macvtap: entered promiscuous mode [ 250.111009][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.150483][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.177066][T11531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.186185][T11531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.194873][T11531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.204033][T11531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.216483][T11546] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.245474][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.252605][T11595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.274701][T11595] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.281875][T11595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.401504][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.418169][ T5839] Bluetooth: hci2: command tx timeout [ 250.433445][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.488656][T11356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.502561][T11356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.541859][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.629808][T11534] veth0_vlan: entered promiscuous mode [ 250.684112][T11546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.692609][T11534] veth1_vlan: entered promiscuous mode [ 250.728582][T11534] veth0_macvtap: entered promiscuous mode [ 250.748468][T11534] veth1_macvtap: entered promiscuous mode [ 250.782361][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.794374][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.810923][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.828079][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.854220][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.870763][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.887019][T11534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.905586][T11534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.914309][T11534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.925672][T11534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.026905][T11595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.052053][T11595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.107961][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.122156][T11546] veth0_vlan: entered promiscuous mode [ 251.137183][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.173558][T11546] veth1_vlan: entered promiscuous mode [ 251.242729][T11546] veth0_macvtap: entered promiscuous mode [ 251.259162][T11546] veth1_macvtap: entered promiscuous mode [ 251.311861][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.336531][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.365691][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.381207][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.397177][T11546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.407845][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.419888][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.431128][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.442058][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.486925][T11546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.556387][T11546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.565199][T11546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.574105][T11546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.586527][T11546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.760640][ T3555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.811357][T11793] netlink: 'syz.1.1557': attribute type 29 has an invalid length. [ 251.840023][T11796] netlink: 'syz.1.1557': attribute type 29 has an invalid length. [ 251.993917][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.021193][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.048957][T11356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.056973][T11356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.525119][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.535342][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.543695][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.552742][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.560708][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.568044][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.611814][T11811] xfrm0 speed is unknown, defaulting to 1000 [ 252.793907][ T3555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.833198][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 252.843429][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 252.862967][T11811] chnl_net:caif_netlink_parms(): no params data found [ 252.976818][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.984129][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.991543][T11811] bridge_slave_0: entered allmulticast mode [ 252.998824][T11811] bridge_slave_0: entered promiscuous mode [ 253.007450][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.014697][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.022076][T11811] bridge_slave_1: entered allmulticast mode [ 253.030019][T11811] bridge_slave_1: entered promiscuous mode [ 253.065847][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.104569][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.112892][ T3555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.114309][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.133252][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.142055][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.150698][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 253.158097][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.172231][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.223944][ T3555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.242326][T11811] team0: Port device team_slave_0 added [ 253.251730][T11811] team0: Port device team_slave_1 added [ 253.276950][T11825] xfrm0 speed is unknown, defaulting to 1000 [ 253.278130][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.290148][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.316553][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.348923][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.357100][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.383703][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.442965][T11811] hsr_slave_0: entered promiscuous mode [ 253.450541][T11811] hsr_slave_1: entered promiscuous mode [ 253.456797][T11811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.464363][T11811] Cannot create hsr debugfs directory [ 253.528930][ T3555] bridge_slave_1: left allmulticast mode [ 253.534718][ T3555] bridge_slave_1: left promiscuous mode [ 253.542953][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.552795][ T3555] bridge_slave_0: left allmulticast mode [ 253.559016][ T3555] bridge_slave_0: left promiscuous mode [ 253.564739][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.892813][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.903366][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.913227][ T3555] bond0 (unregistering): Released all slaves [ 254.060207][T11825] chnl_net:caif_netlink_parms(): no params data found [ 254.166833][T11834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1561'. [ 254.182849][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 254.263649][T11836] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1562'. [ 254.303021][ T3555] hsr_slave_0: left promiscuous mode [ 254.314665][ T3555] hsr_slave_1: left promiscuous mode [ 254.320923][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.329361][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.338103][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.345811][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.372620][ T3555] veth1_macvtap: left promiscuous mode [ 254.378571][ T3555] veth0_macvtap: left promiscuous mode [ 254.384266][ T3555] veth1_vlan: left promiscuous mode [ 254.389858][ T3555] veth0_vlan: left promiscuous mode [ 254.496656][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.513843][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.522484][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.538788][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.552477][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.561800][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.670079][ T5146] Bluetooth: hci0: command tx timeout [ 254.851585][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 254.892892][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 255.215824][ T5146] Bluetooth: hci1: command tx timeout [ 255.361340][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.386591][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.393899][T11825] bridge_slave_0: entered allmulticast mode [ 255.402219][T11825] bridge_slave_0: entered promiscuous mode [ 255.475338][T11839] xfrm0 speed is unknown, defaulting to 1000 [ 255.485758][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.497987][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.512553][T11825] bridge_slave_1: entered allmulticast mode [ 255.550147][T11825] bridge_slave_1: entered promiscuous mode [ 255.672823][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.710007][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.734936][T11861] No such timeout policy "syz0" [ 255.869776][T11825] team0: Port device team_slave_0 added [ 255.886052][T11825] team0: Port device team_slave_1 added [ 255.938572][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.008372][ T3555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.023871][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.031713][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.057825][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.075015][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.082085][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.109937][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.153973][ T3555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.222949][T11811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.272984][ T3555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.290547][T11811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.312083][T11811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.345589][T11811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.412911][ T3555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.430584][T11825] hsr_slave_0: entered promiscuous mode [ 256.438810][T11825] hsr_slave_1: entered promiscuous mode [ 256.445009][T11839] chnl_net:caif_netlink_parms(): no params data found [ 256.671178][ T5839] Bluetooth: hci2: command tx timeout [ 256.683312][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.690977][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.698323][T11839] bridge_slave_0: entered allmulticast mode [ 256.705334][T11839] bridge_slave_0: entered promiscuous mode [ 256.736103][ T5839] Bluetooth: hci0: command tx timeout [ 256.743593][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.751757][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.759030][T11839] bridge_slave_1: entered allmulticast mode [ 256.765743][T11839] bridge_slave_1: entered promiscuous mode [ 256.808363][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.872300][ T3555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.897440][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.973245][ T3555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.003386][T11839] team0: Port device team_slave_0 added [ 257.014064][T11839] team0: Port device team_slave_1 added [ 257.070744][ T3555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.088469][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.095600][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.124223][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.161910][ T3555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.175210][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.182403][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.209214][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.267333][T11811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.296339][ T5839] Bluetooth: hci1: command tx timeout [ 257.363633][T11839] hsr_slave_0: entered promiscuous mode [ 257.390263][T11839] hsr_slave_1: entered promiscuous mode [ 257.396930][T11839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.404523][T11839] Cannot create hsr debugfs directory [ 257.424673][T11811] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.527950][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1581'. [ 257.544043][T11600] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.551262][T11600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.573781][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.580953][T11354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.678538][ T3555] bridge_slave_1: left allmulticast mode [ 257.690252][ T3555] bridge_slave_1: left promiscuous mode [ 257.701978][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.713557][ T3555] bridge_slave_0: left allmulticast mode [ 257.731500][ T3555] bridge_slave_0: left promiscuous mode [ 257.737821][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.750592][ T3555] bridge_slave_1: left allmulticast mode [ 257.765522][ T3555] bridge_slave_1: left promiscuous mode [ 257.771192][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.783344][ T3555] bridge_slave_0: left allmulticast mode [ 257.794611][ T3555] bridge_slave_0: left promiscuous mode [ 257.800630][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.924046][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1584'. [ 257.962409][T11927] x_tables: duplicate underflow at hook 1 [ 258.387856][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.398623][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.408910][ T3555] bond0 (unregistering): Released all slaves [ 258.529409][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.542634][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.552839][ T3555] bond0 (unregistering): Released all slaves [ 258.722844][T11932] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.745722][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 258.815722][ T5146] Bluetooth: hci0: command tx timeout [ 258.888594][T11941] delete_channel: no stack [ 258.944146][T11942] bridge0: port 1(gretap0) entered disabled state [ 259.178673][T11949] tipc: Enabling of bearer rejected, failed to enable media [ 259.193324][T11953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.307244][T11954] xt_CT: No such helper "snmp" [ 259.311191][T11811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.340466][T11958] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 259.350977][T11958] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 259.375808][ T5146] Bluetooth: hci1: command tx timeout [ 259.459079][ T3555] hsr_slave_0: left promiscuous mode [ 259.468421][ T3555] hsr_slave_1: left promiscuous mode [ 259.474333][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.483136][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.491648][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.499191][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.510210][ T3555] hsr_slave_0: left promiscuous mode [ 259.516293][ T3555] hsr_slave_1: left promiscuous mode [ 259.521988][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.529561][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.537955][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.545391][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.581406][T11964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1594'. [ 259.598681][ T3555] veth1_macvtap: left promiscuous mode [ 259.604257][ T3555] veth0_macvtap: left promiscuous mode [ 259.610214][ T3555] veth1_vlan: left promiscuous mode [ 259.616122][ T3555] veth0_vlan: left promiscuous mode [ 259.622332][ T3555] veth1_macvtap: left promiscuous mode [ 259.628106][ T3555] veth0_macvtap: left promiscuous mode [ 259.633725][ T3555] veth1_vlan: left promiscuous mode [ 259.639065][ T3555] veth0_vlan: left promiscuous mode [ 260.112924][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 260.155349][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 260.827285][ T5146] Bluetooth: hci2: command 0x041b tx timeout [ 260.881296][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 260.897474][ T5146] Bluetooth: hci0: command tx timeout [ 260.924047][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 261.459892][ T5146] Bluetooth: hci1: command tx timeout [ 261.572771][T11811] veth0_vlan: entered promiscuous mode [ 261.633739][T11811] veth1_vlan: entered promiscuous mode [ 261.702659][T11811] veth0_macvtap: entered promiscuous mode [ 261.734955][T11811] veth1_macvtap: entered promiscuous mode [ 261.859118][T11811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.884714][T11811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.908181][T11811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.929371][T11811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.942416][T11811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.951464][T11811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.976473][T11839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.992649][T11839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.087418][T11839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.159064][T11839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.236383][T11825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.247645][T11825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.251106][T11593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.263642][T11593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.290571][T11825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.300643][T11825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.334740][T11594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.355412][T11594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.506796][T11839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.602104][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.620947][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.628131][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.653176][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.660345][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.679274][T12005] netlink: 'syz.1.1604': attribute type 142 has an invalid length. [ 262.702360][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.764511][T11825] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.792386][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.799554][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.841288][T11839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.858312][T11839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.895870][ T5146] Bluetooth: hci2: command 0x041b tx timeout [ 262.924927][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.932123][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.035398][T11600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.168676][T11600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.205120][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.278113][T11600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.383785][T11600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.428663][T11825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.478985][T11825] veth0_vlan: entered promiscuous mode [ 263.514448][T11839] veth0_vlan: entered promiscuous mode [ 263.521716][T11825] veth1_vlan: entered promiscuous mode [ 263.541092][T11839] veth1_vlan: entered promiscuous mode [ 263.573235][T11825] veth0_macvtap: entered promiscuous mode [ 263.589807][T11825] veth1_macvtap: entered promiscuous mode [ 263.612377][T11839] veth0_macvtap: entered promiscuous mode [ 263.631410][T11839] veth1_macvtap: entered promiscuous mode [ 263.648433][T11825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.661114][T11825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.672513][T11825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.683648][T11600] bridge_slave_1: left allmulticast mode [ 263.690942][T11600] bridge_slave_1: left promiscuous mode [ 263.697239][T11600] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.706510][T11600] bridge_slave_0: left allmulticast mode [ 263.712152][T11600] bridge_slave_0: left promiscuous mode [ 263.718481][T11600] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.993501][T11600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.004992][T11600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.014859][T11600] bond0 (unregistering): Released all slaves [ 264.030880][T11825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.041574][T11825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.052776][T11825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.063482][T11825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.072685][T11825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.081904][T11825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.091305][T11825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.153776][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.164890][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.175992][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.186923][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.198602][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.228087][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.241896][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.271813][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.291111][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.300853][T12034] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1608'. [ 264.326526][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.377056][T11839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.394443][T11839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.423887][T11839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.438526][T11839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.649097][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.658520][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.666581][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.675051][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.686042][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.702590][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.822981][T12043] xfrm0 speed is unknown, defaulting to 1000 [ 264.832888][T11594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.860114][T11594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.904050][T11600] hsr_slave_0: left promiscuous mode [ 264.912789][T11600] hsr_slave_1: left promiscuous mode [ 264.920771][T11600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.931816][T11600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.946783][T11600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.954691][T11600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.976892][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 264.983127][T11600] veth1_macvtap: left promiscuous mode [ 264.988891][T11600] veth0_macvtap: left promiscuous mode [ 264.996726][T11600] veth1_vlan: left promiscuous mode [ 265.002098][T11600] veth0_vlan: left promiscuous mode [ 265.434638][T11600] team0 (unregistering): Port device team_slave_1 removed [ 265.476768][T11600] team0 (unregistering): Port device team_slave_0 removed [ 265.971762][T11593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.005599][T11593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.166382][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.174256][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.240750][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 266.248307][T12043] chnl_net:caif_netlink_parms(): no params data found [ 266.342158][T12074] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] PREEMPT SMP KASAN PTI [ 266.354782][T12074] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 266.364314][T12074] CPU: 1 UID: 0 PID: 12074 Comm: syz.1.1619 Not tainted 6.14.0-rc1-syzkaller-00091-gcb827db50a88 #0 [ 266.375056][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 266.385097][T12074] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3270 [ 266.391072][T12074] Code: 80 3c 2c 00 74 08 48 89 df e8 c3 2e 85 f6 48 89 5c 24 30 48 8b 1b 48 85 db 0f 84 2d 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 98 2e 85 f6 48 8b 44 24 28 4c 8d [ 266.410924][T12074] RSP: 0018:ffffc90003aa6e80 EFLAGS: 00010206 [ 266.416980][T12074] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff888031025a00 [ 266.424939][T12074] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 266.432895][T12074] RBP: ffffc90003aa7310 R08: ffffffff89cd8d12 R09: 1ffff1100d4d118b [ 266.440851][T12074] R10: dffffc0000000000 R11: ffffed100d4d118c R12: 1ffff1100d4d122b [ 266.448809][T12074] R13: dffffc0000000000 R14: ffff88806a688c00 R15: ffff8880578b0010 [ 266.456764][T12074] FS: 00007f1cde8996c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 266.465680][T12074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.472247][T12074] CR2: 000040000000e000 CR3: 000000006575c000 CR4: 00000000003526f0 [ 266.480204][T12074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.488157][T12074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.496111][T12074] Call Trace: [ 266.499376][T12074] [ 266.502292][T12074] ? __die_body+0x5f/0xb0 [ 266.506614][T12074] ? die_addr+0xb0/0xe0 [ 266.510754][T12074] ? exc_general_protection+0x3dd/0x5d0 [ 266.516293][T12074] ? asm_exc_general_protection+0x26/0x30 [ 266.522005][T12074] ? sock_diag_save_cookie+0x42/0xd0 [ 266.527273][T12074] ? smc_diag_dump_proto+0x6d9/0x3270 [ 266.532632][T12074] ? __lock_acquire+0x1397/0x2100 [ 266.537660][T12074] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 266.543280][T12074] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 266.548811][T12074] ? __phys_addr+0xba/0x170 [ 266.553305][T12074] ? __kasan_kmalloc_large+0x8a/0xa0 [ 266.558593][T12074] ? rcu_is_watching+0x15/0xb0 [ 266.563350][T12074] ? rcu_is_watching+0x15/0xb0 [ 266.568098][T12074] ? trace_kmalloc+0x1f/0xd0 [ 266.572677][T12074] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 266.579250][T12074] ? __build_skb_around+0x245/0x3d0 [ 266.584439][T12074] ? __alloc_skb+0x28f/0x440 [ 266.589019][T12074] ? __pfx___alloc_skb+0x10/0x10 [ 266.593945][T12074] smc_diag_dump+0x59/0xa0 [ 266.598359][T12074] netlink_dump+0x64d/0xe10 [ 266.602856][T12074] ? __pfx_netlink_dump+0x10/0x10 [ 266.607875][T12074] __netlink_dump_start+0x5a2/0x790 [ 266.613066][T12074] smc_diag_handler_dump+0x1ab/0x250 [ 266.618339][T12074] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 266.624136][T12074] ? __pfx_smc_diag_dump+0x10/0x10 [ 266.629232][T12074] ? sock_diag_lock_handler+0x19/0x280 [ 266.634682][T12074] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 266.640474][T12074] sock_diag_rcv_msg+0x3dc/0x5f0 [ 266.645401][T12074] netlink_rcv_skb+0x1e3/0x430 [ 266.650161][T12074] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 266.655602][T12074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.660880][T12074] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.666059][T12074] netlink_unicast+0x7f6/0x990 [ 266.670816][T12074] ? __pfx_netlink_unicast+0x10/0x10 [ 266.676090][T12074] ? __virt_addr_valid+0x45f/0x530 [ 266.681190][T12074] ? __phys_addr_symbol+0x2f/0x70 [ 266.686203][T12074] ? __check_object_size+0x47a/0x730 [ 266.691478][T12074] netlink_sendmsg+0x8e4/0xcb0 [ 266.696231][T12074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.701498][T12074] ? aa_sock_msg_perm+0x91/0x160 [ 266.706427][T12074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.711693][T12074] __sock_sendmsg+0x221/0x270 [ 266.716357][T12074] ____sys_sendmsg+0x52a/0x7e0 [ 266.721108][T12074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.726383][T12074] ? __fget_files+0x2a/0x410 [ 266.730963][T12074] ? __fget_files+0x2a/0x410 [ 266.735540][T12074] __sys_sendmsg+0x269/0x350 [ 266.740114][T12074] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.745223][T12074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.751536][T12074] ? do_syscall_64+0x100/0x230 [ 266.756290][T12074] ? do_syscall_64+0xb6/0x230 [ 266.760956][T12074] do_syscall_64+0xf3/0x230 [ 266.765448][T12074] ? clear_bhb_loop+0x35/0x90 [ 266.770117][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.775998][T12074] RIP: 0033:0x7f1cdd98cde9 [ 266.780406][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.800004][T12074] RSP: 002b:00007f1cde899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.808408][T12074] RAX: ffffffffffffffda RBX: 00007f1cddba6080 RCX: 00007f1cdd98cde9 [ 266.816366][T12074] RDX: 0000000000000600 RSI: 0000400000000540 RDI: 000000000000009c [ 266.824320][T12074] RBP: 00007f1cdda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.832274][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.840227][T12074] R13: 0000000000000000 R14: 00007f1cddba6080 R15: 00007ffe5e6c9998 [ 266.848188][T12074] [ 266.851190][T12074] Modules linked in: [ 266.856312][T12074] ---[ end trace 0000000000000000 ]--- [ 266.861769][T12074] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3270 [ 266.868131][T12074] Code: 80 3c 2c 00 74 08 48 89 df e8 c3 2e 85 f6 48 89 5c 24 30 48 8b 1b 48 85 db 0f 84 2d 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 98 2e 85 f6 48 8b 44 24 28 4c 8d [ 266.887788][T12074] RSP: 0018:ffffc90003aa6e80 EFLAGS: 00010206 [ 266.893848][T12074] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff888031025a00 [ 266.901937][T12074] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 266.909929][T12074] RBP: ffffc90003aa7310 R08: ffffffff89cd8d12 R09: 1ffff1100d4d118b [ 266.917919][T12074] R10: dffffc0000000000 R11: ffffed100d4d118c R12: 1ffff1100d4d122b [ 266.925992][T12074] R13: dffffc0000000000 R14: ffff88806a688c00 R15: ffff8880578b0010 [ 266.933951][T12074] FS: 00007f1cde8996c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 266.942887][T12074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.949489][T12074] CR2: 000040000000e000 CR3: 000000006575c000 CR4: 00000000003526f0 [ 266.957549][T12074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.965539][T12074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.973509][T12074] Kernel panic - not syncing: Fatal exception [ 266.979797][T12074] Kernel Offset: disabled [ 266.984105][T12074] Rebooting in 86400 seconds..