last executing test programs: 1m6.229397704s ago: executing program 4 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfbfffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000002c0)=""/85, &(0x7f0000000240)=0x55) sendmsg$inet6(r4, &(0x7f0000001540)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="24020000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0x800000ff], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@srh1={{0x90}, {0x3a, 0x0, 0x2, 0x7, 0x1ff, @empty, @empty, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x0, 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xa2b}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pimreg0\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x94, 0x6, 0x18}, 0x0, 0x1e0, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0xffffff00], 0x400, 0x30, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @mcast2, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}], 0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "9ac32256c4b2c915da9ff523b092f6f02cc1205293dad8e8df15a65f26b44519d01904d1f2fc2b47457d969f10a0d498747e05629e74839b197e9d5957b03e29"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 53.632917671s ago: executing program 4 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfbfffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000002c0)=""/85, &(0x7f0000000240)=0x55) sendmsg$inet6(r4, &(0x7f0000001540)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="24020000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0x800000ff], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@srh1={{0x90}, {0x3a, 0x0, 0x2, 0x7, 0x1ff, @empty, @empty, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x0, 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xa2b}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pimreg0\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x94, 0x6, 0x18}, 0x0, 0x1e0, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0xffffff00], 0x400, 0x30, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @mcast2, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}], 0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "9ac32256c4b2c915da9ff523b092f6f02cc1205293dad8e8df15a65f26b44519d01904d1f2fc2b47457d969f10a0d498747e05629e74839b197e9d5957b03e29"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 41.06444583s ago: executing program 4 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfbfffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000002c0)=""/85, &(0x7f0000000240)=0x55) sendmsg$inet6(r4, &(0x7f0000001540)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="24020000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0x800000ff], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@srh1={{0x90}, {0x3a, 0x0, 0x2, 0x7, 0x1ff, @empty, @empty, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x0, 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xa2b}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pimreg0\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x94, 0x6, 0x18}, 0x0, 0x1e0, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0xffffff00], 0x400, 0x30, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @mcast2, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}], 0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "9ac32256c4b2c915da9ff523b092f6f02cc1205293dad8e8df15a65f26b44519d01904d1f2fc2b47457d969f10a0d498747e05629e74839b197e9d5957b03e29"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 33.011046356s ago: executing program 4 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfbfffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000002c0)=""/85, &(0x7f0000000240)=0x55) sendmsg$inet6(r4, &(0x7f0000001540)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="24020000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0x800000ff], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@srh1={{0x90}, {0x3a, 0x0, 0x2, 0x7, 0x1ff, @empty, @empty, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x0, 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xa2b}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pimreg0\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x94, 0x6, 0x18}, 0x0, 0x1e0, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0xffffff00], 0x400, 0x30, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @mcast2, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}], 0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "9ac32256c4b2c915da9ff523b092f6f02cc1205293dad8e8df15a65f26b44519d01904d1f2fc2b47457d969f10a0d498747e05629e74839b197e9d5957b03e29"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 16.347972344s ago: executing program 4 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfbfffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000002c0)=""/85, &(0x7f0000000240)=0x55) sendmsg$inet6(r4, &(0x7f0000001540)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="24020000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0x800000ff], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@srh1={{0x90}, {0x3a, 0x0, 0x2, 0x7, 0x1ff, @empty, @empty, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x0, 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xa2b}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pimreg0\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x94, 0x6, 0x18}, 0x0, 0x1e0, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0xffffff00], 0x400, 0x30, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @mcast2, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}], 0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "9ac32256c4b2c915da9ff523b092f6f02cc1205293dad8e8df15a65f26b44519d01904d1f2fc2b47457d969f10a0d498747e05629e74839b197e9d5957b03e29"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 6.712908472s ago: executing program 3 (id=4475): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f00000000c0), 0x832f1f7d, 0x0, &(0x7f0000000000)=@abs, 0x2000c600) shutdown(r2, 0x2) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 6.117598391s ago: executing program 3 (id=4476): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "75a3d0", 0x8, 0x11, 0x1, @empty, @mcast2, {[], {0x4e20, 0x4e20, 0x8}}}}}}}, 0x42) 5.818063924s ago: executing program 3 (id=4480): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 5.437481139s ago: executing program 4 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfbfffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000002c0)=""/85, &(0x7f0000000240)=0x55) sendmsg$inet6(r4, &(0x7f0000001540)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="24020000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0x800000ff], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x1, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@srh1={{0x90}, {0x3a, 0x0, 0x2, 0x7, 0x1ff, @empty, @empty, @loopback, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x0, 0x24}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xa2b}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pimreg0\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x94, 0x6, 0x18}, 0x0, 0x1e0, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x6, 0xffffff00], 0x400, 0x30, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @mcast2, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}], 0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "9ac32256c4b2c915da9ff523b092f6f02cc1205293dad8e8df15a65f26b44519d01904d1f2fc2b47457d969f10a0d498747e05629e74839b197e9d5957b03e29"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 3.450837139s ago: executing program 0 (id=4482): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/72, 0x48}, 0x6}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r2, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x80010, 0xffffffffffffffff, 0x3aa9f000) 3.44802238s ago: executing program 3 (id=4485): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000), 0x10) read(r1, &(0x7f0000002500)=""/4103, 0x1007) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "b9fe997a1675ec25"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x6, 0x0, 0x0, 0x280, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000180)=0x8) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={r4, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000280)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) 2.464506263s ago: executing program 1 (id=4486): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x213, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xd7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc5}, 0x42000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069164a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_folio_dirty\x00', r0, 0x0, 0x4}, 0x18) 2.457913849s ago: executing program 0 (id=4487): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000140)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/220, 0xdc}], 0x3, &(0x7f00000003c0)=""/94, 0x5e}, 0xba8}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x112, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001e80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001d00)={0x18, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) listen(0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) close(0x3) close(r2) 2.311201922s ago: executing program 0 (id=4488): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="010000"], 0x3c}}, 0x0) 1.832284158s ago: executing program 1 (id=4490): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007c4f418773797a32"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.83070999s ago: executing program 3 (id=4491): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.562931327s ago: executing program 3 (id=4493): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c33a10", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="20003300d0000000080211000001080211000000505050505050004008"], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000ffffffffffffadd237ba88cd8100100086dd61cdda487c9c11000000000000ffffac1e100401ff0200000000000000000000000000014e234e24009078010000000000faffda877fc65e02fa3562785ec5566fd73fd74ecd49be2e2884a4700000000000003fd50e7eb26bb3028d745a29ed9c6871ef203bcbde37593539bf57d259b7e3331253205964fe43269d3ee2fef3e5be9453cee34d0b6c92eca4b3b868e9e7f057f3e99a797f5f530d9c5e3636ab22a794fca34b5ccc63a517c5f9baf3718bbede256d9f49b48b9437d1fb00"], 0xda) 1.55990669s ago: executing program 0 (id=4494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 1.483429448s ago: executing program 2 (id=4495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x2004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x8, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x3, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x890) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040011}, 0x48000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.449238862s ago: executing program 2 (id=4496): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x0, 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 1.214906643s ago: executing program 0 (id=4497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendfile(r3, r2, 0x0, 0xffefffff) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x87, 0x1a, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x4a, 0x8000, [0x401, 0x9, 0x0, 0x100, 0x0, 0x0, 0x9]}}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x3a, 0x51, "15a229eb6f47c95c05d11fb8d64e6d870bff186ff1a153bb4e2491ba72172857ec160a95ddcb5e8b624e9de6d01d8e34a1b27bc9a0e04b9408cb8a309bb1807a035ea49b5246bbaa314ec208c723e31a76"}, @generic={0xc, 0x34, "024eda6d074e8e7a0b9378caaada5c2afa7ec7da04d996d82d5c8ca6678aa04f6f4ecdaebf9e1ec82ca29692609560d022181320"}, @pad1]}, 0xe0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34}]}, &(0x7f0000002100)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) connect$can_bcm(r6, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5, 0x413, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x7, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 831.461191ms ago: executing program 1 (id=4498): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0x1c, 0x4, 0x1, 0x0, [{@multicast1}, {@loopback}, {@rand_addr=0x64010101}]}]}}}}}) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 649.627813ms ago: executing program 1 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)='J', 0x1}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000180)) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r10, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d00)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xeb}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 546.685359ms ago: executing program 2 (id=4500): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$ax25(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 387.357924ms ago: executing program 2 (id=4501): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x213, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xd7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc5}, 0x42000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_folio_dirty\x00', r0, 0x0, 0x4}, 0x18) 312.85846ms ago: executing program 2 (id=4502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r4, 0xde6bcce13c096341}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000180)="84b31ee703f6dada8e") r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1}}], 0x2, 0x220, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000001c0), &(0x7f0000000380)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) 246.531859ms ago: executing program 1 (id=4503): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 221.487234ms ago: executing program 0 (id=4504): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x4c040) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000400), 0x0}, 0x20) 59.55809ms ago: executing program 1 (id=4505): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8a7913e6f", 0x15}], 0x1, 0x0, 0x0, 0x4000001}, 0x840) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 0s ago: executing program 2 (id=4506): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3", 0xc5}], 0x1}, 0x40090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r1, 0xcd44a000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000500)="3e181d82cb06b48372cdfde23f0ff7d009ad00de54d02269fca71de69c18e57931b58e3597e717e18ded60e281916e2f000f2d0fdb963b05faf54e307d4702e654160eb32c795012077a4dba1a2735136c8aac44b7efbb5a17d952", 0x5b}, {&(0x7f0000000940)="d02743e8ff4e373c5484384910cda037d8c8e5abefcabfda9658f963962b8713b7bff2754ee36c2cf66aaf9ba37b2c11bba01ba095d8e9e2e9e64f8396e5b6", 0x3f}], 0x2}}], 0x2, 0x40d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): 587.567610][T18649] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 587.612198][T18651] lo speed is unknown, defaulting to 1000 [ 587.695931][T18655] netlink: 'syz.1.3439': attribute type 4 has an invalid length. [ 587.728118][ T5837] Bluetooth: hci0: command tx timeout [ 587.736355][T18651] lo speed is unknown, defaulting to 1000 [ 587.907415][T18668] xfrm1: entered allmulticast mode [ 587.953039][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3440'. [ 588.304190][T18675] netlink: 'syz.2.3441': attribute type 4 has an invalid length. [ 588.442765][T18548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.512514][T18684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3442'. [ 588.563952][T18684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3442'. [ 588.637474][T18684] x_tables: duplicate underflow at hook 2 [ 588.953683][T18695] lo speed is unknown, defaulting to 1000 [ 588.975172][T18696] lo speed is unknown, defaulting to 1000 [ 588.981297][T18695] lo speed is unknown, defaulting to 1000 [ 589.050304][T18548] veth0_vlan: entered promiscuous mode [ 589.099859][T18548] veth1_vlan: entered promiscuous mode [ 589.288480][T18548] veth0_macvtap: entered promiscuous mode [ 589.300626][T18548] veth1_macvtap: entered promiscuous mode [ 589.366586][T18548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.455957][T18548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.510039][T18548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.558392][T18548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.597732][T18548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.606471][T18548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.769364][T18696] lo speed is unknown, defaulting to 1000 [ 590.342330][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.396572][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.678198][T18449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.717496][T18449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.780297][T18695] lo speed is unknown, defaulting to 1000 [ 590.860411][T18720] netlink: 'syz.1.3450': attribute type 27 has an invalid length. [ 591.068308][T18696] lo speed is unknown, defaulting to 1000 [ 591.076680][T18704] Set syz1 is full, maxelem 65536 reached [ 591.959337][T18447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.073677][T18447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.195598][T18447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.319658][T18447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.460059][T18447] bridge_slave_1: left allmulticast mode [ 592.465755][T18447] bridge_slave_1: left promiscuous mode [ 592.471680][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.481037][T18447] bridge_slave_0: left allmulticast mode [ 592.486720][T18447] bridge_slave_0: left promiscuous mode [ 592.493077][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.817952][T18741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3453'. [ 592.824055][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'. [ 592.827102][T18741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3453'. [ 592.836262][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'. [ 592.872269][T18741] x_tables: duplicate underflow at hook 2 [ 593.204454][T18447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.236119][T18447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.253924][T18447] bond0 (unregistering): Released all slaves [ 593.254721][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.269638][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.278131][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.286551][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.294160][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 593.301593][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.439147][T18750] lo speed is unknown, defaulting to 1000 [ 593.584899][T18750] lo speed is unknown, defaulting to 1000 [ 594.312147][T18760] wg1: left promiscuous mode [ 594.316907][T18760] wg1: left allmulticast mode [ 594.324802][T18760] veth0_vlan: left allmulticast mode [ 594.333288][T18760] veth5: left promiscuous mode [ 594.340545][T18760] veth5: left allmulticast mode [ 594.346130][T18760] vlan2: left promiscuous mode [ 594.351888][T18760] syzkaller0: left promiscuous mode [ 594.357118][T18760] syzkaller0: left allmulticast mode [ 594.363007][T18760] vlan3: left promiscuous mode [ 594.369709][T18760] vlan6: left promiscuous mode [ 594.374936][T18760] vlan7: left promiscuous mode [ 594.380079][T18760] vlan8: left promiscuous mode [ 594.385565][T18760] vlan9: left promiscuous mode [ 594.395434][T18760] vlan10: left promiscuous mode [ 594.401950][T18760] vlan11: left promiscuous mode [ 594.407276][T18760] vlan12: left promiscuous mode [ 594.413662][T18760] gretap2: left promiscuous mode [ 594.458906][T18750] lo speed is unknown, defaulting to 1000 [ 594.519255][T18777] lo speed is unknown, defaulting to 1000 [ 594.526146][T18777] lo speed is unknown, defaulting to 1000 [ 594.674413][T18777] lo speed is unknown, defaulting to 1000 [ 594.792221][T18266] IPVS: starting estimator thread 0... [ 594.898113][T18783] IPVS: using max 21 ests per chain, 50400 per kthread [ 595.005246][T18447] hsr_slave_0: left promiscuous mode [ 595.011706][T18447] hsr_slave_1: left promiscuous mode [ 595.017840][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.025397][T18447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.033364][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.041519][T18447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.083192][T18447] veth1_macvtap: left promiscuous mode [ 595.088921][T18447] veth0_macvtap: left promiscuous mode [ 595.094738][T18447] veth1_vlan: left promiscuous mode [ 595.100315][T18447] veth0_vlan: left promiscuous mode [ 595.328062][ T5837] Bluetooth: hci0: command tx timeout [ 595.635552][T18447] team0 (unregistering): Port device team_slave_1 removed [ 595.685289][T18447] team0 (unregistering): Port device team_slave_0 removed [ 596.380426][T18794] lo speed is unknown, defaulting to 1000 [ 596.407091][T18794] lo speed is unknown, defaulting to 1000 [ 596.472399][T18791] lo speed is unknown, defaulting to 1000 [ 596.511142][T18794] lo speed is unknown, defaulting to 1000 [ 596.551355][T18791] lo speed is unknown, defaulting to 1000 [ 596.777511][T18750] chnl_net:caif_netlink_parms(): no params data found [ 596.873154][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 596.882347][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 597.065927][T18813] netlink: 'syz.2.3468': attribute type 1 has an invalid length. [ 597.168072][T18813] 8021q: adding VLAN 0 to HW filter on device bond22 [ 597.175446][T18791] lo speed is unknown, defaulting to 1000 [ 597.184093][T18750] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.193726][T18750] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.208790][T18750] bridge_slave_0: entered allmulticast mode [ 597.218839][T18750] bridge_slave_0: entered promiscuous mode [ 597.227106][T18750] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.234771][T18750] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.243318][T18750] bridge_slave_1: entered allmulticast mode [ 597.250673][T18750] bridge_slave_1: entered promiscuous mode [ 597.265579][T18817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3470'. [ 597.298659][T18818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3469'. [ 597.327440][T18818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3469'. [ 597.347798][T18818] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3469'. [ 597.366386][T18821] x_tables: duplicate underflow at hook 2 [ 597.387097][T18750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.408022][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 597.451757][T18750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.597478][T18750] team0: Port device team_slave_0 added [ 597.669353][T18750] team0: Port device team_slave_1 added [ 597.790938][T18833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.827938][T18750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.834921][T18750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.897722][T18750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.911094][T18750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.918457][T18750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.948262][T18750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.273814][T18843] lo speed is unknown, defaulting to 1000 [ 598.610606][T18843] lo speed is unknown, defaulting to 1000 [ 598.671051][T18839] lo speed is unknown, defaulting to 1000 [ 598.687776][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3479'. [ 598.702237][T18750] hsr_slave_0: entered promiscuous mode [ 598.722512][T18750] hsr_slave_1: entered promiscuous mode [ 599.333214][T18839] lo speed is unknown, defaulting to 1000 [ 599.488202][ T9043] Bluetooth: hci0: command 0x041b tx timeout [ 599.501375][T18843] lo speed is unknown, defaulting to 1000 [ 599.517483][T18839] lo speed is unknown, defaulting to 1000 [ 599.549698][T18859] siw: device registration error -23 [ 599.748355][T18868] netlink: 'syz.2.3482': attribute type 1 has an invalid length. [ 599.766605][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3482'. [ 600.113615][T18878] Bluetooth: MGMT ver 1.23 [ 600.268649][T18878] tipc: Enabling of bearer rejected, failed to enable media [ 600.737931][T18447] IPVS: stop unused estimator thread 0... [ 600.774362][T18750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.856669][T18750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.923264][T18750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.925573][T18902] netlink: 'syz.2.3492': attribute type 10 has an invalid length. [ 600.951232][T18750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.040564][T18905] netlink: 'syz.3.3491': attribute type 27 has an invalid length. [ 601.204389][T18750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.254334][T18750] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.326419][T18917] x_tables: duplicate underflow at hook 2 [ 601.492421][T18915] IPv6: NLM_F_REPLACE set, but no existing node found! [ 601.504664][T18449] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.511851][T18449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.573422][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.580609][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.667938][T18921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3498'. [ 601.671860][T18750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.708025][T18921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3498'. [ 601.892032][T18924] netlink: 'syz.2.3501': attribute type 4 has an invalid length. [ 601.903745][T18929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3500'. [ 602.261816][T18945] netlink: 'syz.3.3504': attribute type 10 has an invalid length. [ 602.449762][T18937] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.508637][T18937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.559747][T18940] lo speed is unknown, defaulting to 1000 [ 602.576703][ T6917] lo speed is unknown, defaulting to 1000 [ 602.593723][T18750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.623421][ T6917] lo speed is unknown, defaulting to 1000 [ 602.750085][T18940] lo speed is unknown, defaulting to 1000 [ 602.777426][T18951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3505'. [ 602.867445][T18954] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 602.939101][T18956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3507'. [ 603.304172][T18940] lo speed is unknown, defaulting to 1000 [ 603.514279][T18750] veth0_vlan: entered promiscuous mode [ 603.524905][T18750] veth1_vlan: entered promiscuous mode [ 603.657442][T18750] veth0_macvtap: entered promiscuous mode [ 603.667098][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'. [ 603.711684][T18750] veth1_macvtap: entered promiscuous mode [ 603.747413][T18975] bridge4: entered promiscuous mode [ 603.753864][T18975] bridge4: entered allmulticast mode [ 603.774059][T18750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.799175][T18973] netlink: 'syz.3.3509': attribute type 4 has an invalid length. [ 603.954393][T18750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.006676][T18750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.037404][T18991] netlink: 'syz.2.3515': attribute type 10 has an invalid length. [ 604.051596][T18750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.079955][T18750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.148501][T18750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.282574][T18997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3514'. [ 604.471961][T18994] syzkaller0: entered promiscuous mode [ 604.477734][T18994] syzkaller0: entered allmulticast mode [ 604.661890][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3528'. [ 604.788699][T19009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3518'. [ 604.875749][T19015] netlink: 'syz.0.3520': attribute type 10 has an invalid length. [ 605.575934][ T9043] Bluetooth: hci4: command 0x0405 tx timeout [ 607.201745][T19008] bridge4: left promiscuous mode [ 607.206716][T19008] bridge4: left allmulticast mode [ 607.373310][T19022] lo: left promiscuous mode [ 607.400704][T19022] tunl0: left promiscuous mode [ 607.409532][T19022] gre0: left promiscuous mode [ 607.425155][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3523'. [ 607.426384][T19022] gretap0: left promiscuous mode [ 607.452491][T19022] erspan0: left promiscuous mode [ 607.462130][T19022] ip_vti0: left promiscuous mode [ 607.468956][T19022] ip6_vti0: left promiscuous mode [ 607.477000][T19022] sit0: left promiscuous mode [ 607.486929][T19031] xt_TCPMSS: Only works on TCP SYN packets [ 607.490917][T19022] ip6tnl0: left promiscuous mode [ 607.509347][T19022] ip6gre0: left promiscuous mode [ 607.517514][T19022] syz_tun: left promiscuous mode [ 607.537148][T19022] ip6gretap0: left promiscuous mode [ 607.545057][T19022] team0: left promiscuous mode [ 607.552227][T19022] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.561630][T19022] dummy0: left promiscuous mode [ 607.578706][T19022] nlmon0: left promiscuous mode [ 607.588634][T19022] caif0: left promiscuous mode [ 607.593427][T19022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.632677][T16520] lo speed is unknown, defaulting to 1000 [ 607.728478][T19031] lo speed is unknown, defaulting to 1000 [ 607.729243][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.735565][T19031] lo speed is unknown, defaulting to 1000 [ 607.799302][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.922830][T19031] lo speed is unknown, defaulting to 1000 [ 607.936832][T19036] siw: device registration error -23 [ 607.964252][T19039] netlink: 'syz.1.3525': attribute type 10 has an invalid length. [ 608.137001][T18447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.153894][T18447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.406221][T19051] netlink: 'syz.0.3529': attribute type 4 has an invalid length. [ 608.434267][T18266] lo speed is unknown, defaulting to 1000 [ 608.456818][T18266] lo speed is unknown, defaulting to 1000 [ 608.529532][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3531'. [ 608.586368][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3531'. [ 608.972250][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.079400][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.143889][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.239208][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.350417][ T53] bridge_slave_1: left allmulticast mode [ 609.356105][ T53] bridge_slave_1: left promiscuous mode [ 609.362202][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.375682][ T53] bridge_slave_0: left allmulticast mode [ 609.381800][ T53] bridge_slave_0: left promiscuous mode [ 609.387466][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.842874][T19066] netlink: 'syz.1.3533': attribute type 10 has an invalid length. [ 610.119501][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.158732][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.200546][ T53] bond0 (unregistering): Released all slaves [ 610.377899][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 610.397159][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 610.406091][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 610.418041][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 610.432198][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 610.444683][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 610.557320][T19089] netlink: 'syz.2.3541': attribute type 10 has an invalid length. [ 610.613300][T19083] lo speed is unknown, defaulting to 1000 [ 610.620326][T19083] lo speed is unknown, defaulting to 1000 [ 610.937036][T19099] netlink: 'syz.3.3543': attribute type 4 has an invalid length. [ 610.937198][T19083] lo speed is unknown, defaulting to 1000 [ 610.958945][T19101] lo speed is unknown, defaulting to 1000 [ 610.965695][T19101] lo speed is unknown, defaulting to 1000 [ 611.218570][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 611.227714][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 611.270816][T19101] lo speed is unknown, defaulting to 1000 [ 611.383343][ T6911] lo speed is unknown, defaulting to 1000 [ 611.458722][T19109] lo speed is unknown, defaulting to 1000 [ 611.643014][T19109] lo speed is unknown, defaulting to 1000 [ 612.001618][ T53] hsr_slave_0: left promiscuous mode [ 612.031939][ T53] hsr_slave_1: left promiscuous mode [ 612.040309][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.058033][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.076215][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.089936][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.149375][ T53] veth1_macvtap: left promiscuous mode [ 612.154935][ T53] veth0_macvtap: left promiscuous mode [ 612.160757][ T53] veth1_vlan: left promiscuous mode [ 612.166113][ T53] veth0_vlan: left promiscuous mode [ 612.532631][ T5837] Bluetooth: hci0: command tx timeout [ 612.679969][ T53] team0 (unregistering): Port device team_slave_1 removed [ 612.729398][ T53] team0 (unregistering): Port device team_slave_0 removed [ 613.307795][T19109] lo speed is unknown, defaulting to 1000 [ 613.423962][T19139] lo speed is unknown, defaulting to 1000 [ 613.430317][T19083] chnl_net:caif_netlink_parms(): no params data found [ 613.505996][T19139] lo speed is unknown, defaulting to 1000 [ 613.933355][T19083] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.018048][T19083] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.025290][T19083] bridge_slave_0: entered allmulticast mode [ 614.042382][T19083] bridge_slave_0: entered promiscuous mode [ 614.050037][T19139] lo speed is unknown, defaulting to 1000 [ 614.050898][T19083] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.063377][T19083] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.071449][T19083] bridge_slave_1: entered allmulticast mode [ 614.078774][T19083] bridge_slave_1: entered promiscuous mode [ 614.182802][T19083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.265103][T19083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.339966][T19083] team0: Port device team_slave_0 added [ 614.359458][T19083] team0: Port device team_slave_1 added [ 614.435670][T19083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.445583][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.472127][T19083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.489605][T19083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.496710][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.524080][T19083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.607858][ T5837] Bluetooth: hci0: command tx timeout [ 614.741510][T19174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 614.752737][T19174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 615.002247][T19083] hsr_slave_0: entered promiscuous mode [ 615.008722][T19083] hsr_slave_1: entered promiscuous mode [ 615.165362][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 615.363702][T19193] netlink: 'syz.2.3573': attribute type 1 has an invalid length. [ 615.382390][T19176] lo speed is unknown, defaulting to 1000 [ 615.481010][T19193] 8021q: adding VLAN 0 to HW filter on device bond23 [ 615.537993][T19176] lo speed is unknown, defaulting to 1000 [ 615.942193][T19204] IPv6: NLM_F_REPLACE set, but no existing node found! [ 616.063311][T19176] lo speed is unknown, defaulting to 1000 [ 616.226546][T19217] netlink: 'syz.2.3582': attribute type 10 has an invalid length. [ 616.688805][ T5837] Bluetooth: hci0: command tx timeout [ 616.843181][T19226] lo speed is unknown, defaulting to 1000 [ 616.850746][T19226] lo speed is unknown, defaulting to 1000 [ 616.937746][T19083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 616.960974][T19226] lo speed is unknown, defaulting to 1000 [ 616.997163][T19083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.009111][T19083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.023405][T19083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 617.665828][T19083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.682201][T19083] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.715752][T19083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.726287][T19083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.750659][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.757797][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.841635][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.848798][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.194290][T19249] lo speed is unknown, defaulting to 1000 [ 618.269585][T19249] lo speed is unknown, defaulting to 1000 [ 618.382845][T19083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.698601][T19273] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 618.773166][ T5837] Bluetooth: hci0: command tx timeout [ 618.941309][T19285] netlink: 'syz.2.3606': attribute type 1 has an invalid length. [ 618.971824][T19285] 8021q: adding VLAN 0 to HW filter on device bond24 [ 619.064374][T19249] lo speed is unknown, defaulting to 1000 [ 619.088775][T19291] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 619.153505][T19083] veth0_vlan: entered promiscuous mode [ 619.193550][T19083] veth1_vlan: entered promiscuous mode [ 619.270674][T19083] veth0_macvtap: entered promiscuous mode [ 619.289211][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 619.317076][T19083] veth1_macvtap: entered promiscuous mode [ 619.378860][T19083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.408164][T19306] xt_TCPMSS: Only works on TCP SYN packets [ 619.470412][T19083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.612975][T19083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.622973][T19083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.631875][T19083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.641006][T19083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.660551][T19306] lo speed is unknown, defaulting to 1000 [ 619.702793][T19306] lo speed is unknown, defaulting to 1000 [ 619.873498][T19323] netlink: 'syz.2.3618': attribute type 10 has an invalid length. [ 620.259540][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.277690][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.386970][T19306] lo speed is unknown, defaulting to 1000 [ 620.498060][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.530322][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.528192][T19344] netlink: 'syz.1.3623': attribute type 10 has an invalid length. [ 622.086325][T19334] Set syz1 is full, maxelem 65536 reached [ 622.302109][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.377510][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.449053][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.539036][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.614468][ T11] bridge_slave_1: left allmulticast mode [ 622.620626][ T11] bridge_slave_1: left promiscuous mode [ 622.626354][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.635618][ T11] bridge_slave_0: left allmulticast mode [ 622.641685][ T11] bridge_slave_0: left promiscuous mode [ 622.647368][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.198809][T19362] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 623.232793][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.257434][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.279670][ T11] bond0 (unregistering): Released all slaves [ 623.552610][T19376] netlink: 'syz.2.3635': attribute type 10 has an invalid length. [ 623.960511][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.972299][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.981891][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.990923][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.000759][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 624.011974][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.176688][T19390] lo speed is unknown, defaulting to 1000 [ 624.198345][T19390] lo speed is unknown, defaulting to 1000 [ 624.343229][ T11] hsr_slave_0: left promiscuous mode [ 624.359796][ T11] hsr_slave_1: left promiscuous mode [ 624.372418][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.407849][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.438317][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.453620][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.561960][ T11] veth1_macvtap: left promiscuous mode [ 624.567523][ T11] veth0_macvtap: left promiscuous mode [ 624.587913][ T11] veth1_vlan: left promiscuous mode [ 624.594286][ T11] veth0_vlan: left promiscuous mode [ 624.640544][T19415] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 625.026816][T19426] netlink: 'syz.2.3650': attribute type 10 has an invalid length. [ 625.775978][ T11] team0 (unregistering): Port device team_slave_1 removed [ 625.908046][ T11] team0 (unregistering): Port device team_slave_0 removed [ 626.050498][ T9043] Bluetooth: hci0: command tx timeout [ 626.478326][T19390] lo speed is unknown, defaulting to 1000 [ 626.689981][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 626.714734][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 626.819660][T19454] netlink: 'syz.2.3658': attribute type 10 has an invalid length. [ 626.829028][T19454] hsr0: entered promiscuous mode [ 626.835528][T19454] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 626.849449][T19454] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 626.870717][T19454] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 626.918237][T19390] chnl_net:caif_netlink_parms(): no params data found [ 626.945434][T19456] ipt_rpfilter: unknown options [ 627.203907][T19390] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.217937][T19390] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.225200][T19390] bridge_slave_0: entered allmulticast mode [ 627.236468][T19390] bridge_slave_0: entered promiscuous mode [ 627.262548][T19390] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.289746][T19390] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.309493][T19390] bridge_slave_1: entered allmulticast mode [ 627.339605][T19390] bridge_slave_1: entered promiscuous mode [ 627.365555][T19460] lo speed is unknown, defaulting to 1000 [ 627.489119][T19460] lo speed is unknown, defaulting to 1000 [ 627.497292][T19390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.558912][T19390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.772173][T19390] team0: Port device team_slave_0 added [ 627.865148][T19390] team0: Port device team_slave_1 added [ 628.025137][T19484] netlink: 'syz.3.3669': attribute type 4 has an invalid length. [ 628.034757][T19484] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3669'. [ 628.055354][T19487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3670'. [ 628.093324][T19390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.109996][T19460] lo speed is unknown, defaulting to 1000 [ 628.128730][ T9043] Bluetooth: hci0: command tx timeout [ 628.138850][T19390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.260622][T19390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.386981][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3676'. [ 628.396233][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3676'. [ 628.421525][T19390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.428690][T19390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.454899][T19390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.467387][T19506] x_tables: duplicate underflow at hook 2 [ 628.473819][T19504] IPv6: NLM_F_REPLACE set, but no existing node found! [ 628.554262][T19508] ipt_rpfilter: unknown options [ 628.610803][T19390] hsr_slave_0: entered promiscuous mode [ 628.620411][T19390] hsr_slave_1: entered promiscuous mode [ 629.599555][T19522] netlink: 'syz.2.3681': attribute type 4 has an invalid length. [ 629.613831][T19524] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 629.970952][T19538] netlink: 'syz.0.3686': attribute type 10 has an invalid length. [ 630.054624][T19540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3687'. [ 630.076259][T19390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.096320][T19390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.118863][T19540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3687'. [ 630.140641][T19541] IPv6: NLM_F_REPLACE set, but no existing node found! [ 630.158788][T19390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 630.168033][T19541] x_tables: duplicate underflow at hook 2 [ 630.184847][T19390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.198657][T19543] netlink: 'syz.0.3688': attribute type 10 has an invalid length. [ 630.207848][ T9043] Bluetooth: hci0: command tx timeout [ 630.399879][T19549] ipt_rpfilter: unknown options [ 630.589230][T19390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.644603][T19390] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.697817][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.704982][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.804459][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.811625][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.331548][T19557] lo speed is unknown, defaulting to 1000 [ 631.351591][T19390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.390293][T19557] lo speed is unknown, defaulting to 1000 [ 631.730434][T19390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.760137][T19557] lo speed is unknown, defaulting to 1000 [ 631.769027][T19571] siw: device registration error -23 [ 631.831684][T19590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3704'. [ 631.847938][T19590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3704'. [ 632.061622][T19390] veth0_vlan: entered promiscuous mode [ 632.073435][T19390] veth1_vlan: entered promiscuous mode [ 632.105226][T19390] veth0_macvtap: entered promiscuous mode [ 632.116555][T19390] veth1_macvtap: entered promiscuous mode [ 632.154027][T19390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.189215][T19390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.259674][T19390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.288400][ T9043] Bluetooth: hci0: command tx timeout [ 632.297708][T19390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.307688][T19390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.316801][T19390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.441077][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'. [ 632.469636][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'. [ 632.537337][T19615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3711'. [ 632.546621][T19615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3711'. [ 632.593614][T19615] IPv6: NLM_F_REPLACE set, but no existing node found! [ 632.604296][T19615] x_tables: duplicate underflow at hook 2 [ 632.904764][T19617] netlink: 'syz.0.3722': attribute type 10 has an invalid length. [ 632.952167][T18447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.971379][T18447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.266632][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.281490][T19632] siw: device registration error -23 [ 633.305161][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.519420][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 633.537838][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 633.929881][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.187052][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.280302][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.354220][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.451226][ T53] bridge_slave_1: left allmulticast mode [ 634.456922][ T53] bridge_slave_1: left promiscuous mode [ 634.472976][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.488614][ T53] bridge_slave_0: left allmulticast mode [ 634.494722][ T53] bridge_slave_0: left promiscuous mode [ 634.506168][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.119159][T19653] siw: device registration error -23 [ 635.548482][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.593886][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.626909][ T53] bond0 (unregistering): Released all slaves [ 635.686969][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.695935][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.714947][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 635.728480][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 635.751537][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 635.777798][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 635.798070][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.023240][T19670] lo speed is unknown, defaulting to 1000 [ 636.035040][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 636.040828][T19670] lo speed is unknown, defaulting to 1000 [ 636.231852][T19670] lo speed is unknown, defaulting to 1000 [ 636.565679][ T53] hsr_slave_0: left promiscuous mode [ 636.587813][ T53] hsr_slave_1: left promiscuous mode [ 636.605445][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.627898][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.658746][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.666220][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.793894][ T53] veth1_macvtap: left promiscuous mode [ 636.822581][ T53] veth0_macvtap: left promiscuous mode [ 636.858313][ T53] veth1_vlan: left promiscuous mode [ 636.890856][ T53] veth0_vlan: left promiscuous mode [ 637.911876][ T5837] Bluetooth: hci0: command tx timeout [ 638.250064][ T53] team0 (unregistering): Port device team_slave_1 removed [ 638.309798][ T53] team0 (unregistering): Port device team_slave_0 removed [ 639.282378][T19695] lo speed is unknown, defaulting to 1000 [ 639.290283][T19695] lo speed is unknown, defaulting to 1000 [ 639.385747][T19695] lo speed is unknown, defaulting to 1000 [ 639.573030][T19667] Set syz1 is full, maxelem 65536 reached [ 639.685837][T19670] chnl_net:caif_netlink_parms(): no params data found [ 639.737392][T19716] siw: device registration error -23 [ 639.899072][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.916503][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.938582][T19670] bridge_slave_0: entered allmulticast mode [ 639.960303][T19670] bridge_slave_0: entered promiscuous mode [ 639.967852][ T5837] Bluetooth: hci0: command tx timeout [ 639.995992][T19670] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.004498][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.020146][T19670] bridge_slave_1: entered allmulticast mode [ 640.037853][T19670] bridge_slave_1: entered promiscuous mode [ 640.110637][T19670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.130934][T19670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.203331][T19670] team0: Port device team_slave_0 added [ 640.223425][T19670] team0: Port device team_slave_1 added [ 640.356246][T19670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.363434][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.421828][T19670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.451940][T19670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.459115][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.527351][T19670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.663069][T19670] hsr_slave_0: entered promiscuous mode [ 640.670556][T19670] hsr_slave_1: entered promiscuous mode [ 640.690389][T19741] __nla_validate_parse: 1 callbacks suppressed [ 640.690405][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 640.707720][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 641.003052][T19749] netlink: 'syz.1.3754': attribute type 4 has an invalid length. [ 641.147305][T19753] netlink: 'syz.0.3756': attribute type 10 has an invalid length. [ 641.591272][T19670] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 641.607822][T19670] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 641.636593][T19670] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 641.668869][T19670] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 641.815202][T19770] siw: device registration error -23 [ 641.881637][T19670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.946283][T19670] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.977857][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.985076][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.000741][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.007926][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.057919][ T5837] Bluetooth: hci0: command tx timeout [ 642.094414][T19670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.143610][T19670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.176720][T19776] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 642.243776][T19781] siw: device registration error -23 [ 642.472284][T19670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.759250][T19805] netlink: 'syz.2.3774': attribute type 10 has an invalid length. [ 643.299363][T19670] veth0_vlan: entered promiscuous mode [ 643.646935][T19670] veth1_vlan: entered promiscuous mode [ 643.770926][T19670] veth0_macvtap: entered promiscuous mode [ 643.809512][T19670] veth1_macvtap: entered promiscuous mode [ 643.816555][T19838] lo speed is unknown, defaulting to 1000 [ 643.838423][T19670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.850834][T19838] lo speed is unknown, defaulting to 1000 [ 643.865155][T19670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.899451][T19670] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.908839][T19670] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.973843][T19843] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 644.014373][T19670] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.024048][T19670] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.130595][ T5837] Bluetooth: hci0: command tx timeout [ 644.192813][T19838] lo speed is unknown, defaulting to 1000 [ 644.210144][T19847] siw: device registration error -23 [ 644.216886][T19831] rdma_rxe: rxe_newlink: failed to add lo [ 644.301421][T19852] siw: device registration error -23 [ 644.355254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.376759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.475595][T19854] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 644.579329][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.589228][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.301281][T19878] block nbd3: not configured, cannot reconfigure [ 645.472970][T19883] lo speed is unknown, defaulting to 1000 [ 645.480280][T19883] lo speed is unknown, defaulting to 1000 [ 645.597336][T19883] lo speed is unknown, defaulting to 1000 [ 645.942649][T18447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.020854][T18447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.093738][T18447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.150241][T18447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.251603][T18447] bridge_slave_1: left allmulticast mode [ 646.257287][T18447] bridge_slave_1: left promiscuous mode [ 646.263325][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.272870][T18447] bridge_slave_0: left allmulticast mode [ 646.279291][T18447] bridge_slave_0: left promiscuous mode [ 646.284983][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.658351][T18447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.669553][T18447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.680189][T18447] bond0 (unregistering): Released all slaves [ 646.830904][T19895] netlink: 'syz.2.3805': attribute type 10 has an invalid length. [ 646.947494][T19898] netlink: 'syz.3.3804': attribute type 10 has an invalid length. [ 647.048545][T19904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3806'. [ 647.830689][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.844964][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.854040][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.863040][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.872022][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 647.882872][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.962885][T19927] lo speed is unknown, defaulting to 1000 [ 648.030866][T19940] netlink: 'syz.2.3821': attribute type 10 has an invalid length. [ 648.069687][T19927] lo speed is unknown, defaulting to 1000 [ 648.081814][T19933] lo speed is unknown, defaulting to 1000 [ 648.387906][T18447] hsr_slave_0: left promiscuous mode [ 648.416976][T18447] hsr_slave_1: left promiscuous mode [ 648.433156][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.457614][T18447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.491446][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.528130][T18447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.682266][T18447] veth1_macvtap: left promiscuous mode [ 648.699530][T18447] veth0_macvtap: left promiscuous mode [ 648.717379][T18447] veth1_vlan: left promiscuous mode [ 648.732773][T18447] veth0_vlan: left promiscuous mode [ 648.908495][T19976] ipt_rpfilter: unknown options [ 649.799235][T18447] team0 (unregistering): Port device team_slave_1 removed [ 649.901089][T18447] team0 (unregistering): Port device team_slave_0 removed [ 649.977697][ T9043] Bluetooth: hci0: command tx timeout [ 650.746819][T19933] lo speed is unknown, defaulting to 1000 [ 650.746846][T19927] lo speed is unknown, defaulting to 1000 [ 651.069359][T19933] lo speed is unknown, defaulting to 1000 [ 651.086974][T19960] siw: device registration error -23 [ 651.098506][T20003] lo speed is unknown, defaulting to 1000 [ 651.105202][T19995] lo speed is unknown, defaulting to 1000 [ 651.118614][T19995] lo speed is unknown, defaulting to 1000 [ 651.280393][T19933] chnl_net:caif_netlink_parms(): no params data found [ 651.350870][T19995] lo speed is unknown, defaulting to 1000 [ 651.373788][T20003] lo speed is unknown, defaulting to 1000 [ 651.453524][T19933] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.460908][T19933] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.468592][T19933] bridge_slave_0: entered allmulticast mode [ 651.489232][T19933] bridge_slave_0: entered promiscuous mode [ 651.517912][T19933] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.531955][T19933] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.568152][T19933] bridge_slave_1: entered allmulticast mode [ 651.575333][T19933] bridge_slave_1: entered promiscuous mode [ 651.628573][T20003] lo speed is unknown, defaulting to 1000 [ 651.631569][T19933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.663502][T19933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.720535][T19933] team0: Port device team_slave_0 added [ 651.731780][T19933] team0: Port device team_slave_1 added [ 651.821556][T20018] 8021q: adding VLAN 0 to HW filter on device bond25 [ 651.861091][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3844'. [ 651.872628][T19933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.881150][T19933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.907960][T19933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.920367][T19933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.927328][T19933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.953664][T19933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.984373][T20018] vlan13: entered promiscuous mode [ 651.989937][T20018] bond25: entered promiscuous mode [ 652.073419][ T9043] Bluetooth: hci0: command tx timeout [ 652.119676][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 652.129072][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 652.352387][T19933] hsr_slave_0: entered promiscuous mode [ 652.378283][T19933] hsr_slave_1: entered promiscuous mode [ 653.016621][T20040] netlink: 'syz.1.3852': attribute type 4 has an invalid length. [ 653.035870][T20046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3854'. [ 653.058266][T20046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3854'. [ 653.070151][T20047] siw: device registration error -23 [ 653.077804][T20046] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3854'. [ 653.107148][T20046] IPv6: NLM_F_REPLACE set, but no existing node found! [ 653.386175][T19933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.408560][T19933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.430471][T19933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.460592][T19933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 653.590908][T19933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.642747][T19933] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.770476][T18451] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.777633][T18451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.789130][T20064] netlink: 'syz.3.3861': attribute type 10 has an invalid length. [ 653.820505][T18451] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.827649][T18451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.964338][T20066] netlink: 'syz.2.3862': attribute type 10 has an invalid length. [ 654.130138][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 654.135927][ T9043] Bluetooth: hci0: command tx timeout [ 654.176272][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 654.355805][T20086] netlink: 'syz.3.3867': attribute type 10 has an invalid length. [ 654.412696][T19933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.421225][T20088] netlink: 'syz.1.3870': attribute type 64 has an invalid length. [ 654.791379][T19933] veth0_vlan: entered promiscuous mode [ 654.804515][T19933] veth1_vlan: entered promiscuous mode [ 654.846421][T20101] siw: device registration error -23 [ 654.854408][T19933] veth0_macvtap: entered promiscuous mode [ 654.881403][T19933] veth1_macvtap: entered promiscuous mode [ 654.917192][T19933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.931504][T19933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.974228][T19933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.984222][T19933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.993436][T19933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.003035][T19933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.304586][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.318020][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.383516][T20114] netlink: 'syz.2.3876': attribute type 10 has an invalid length. [ 655.563643][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.584983][T20118] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 655.635498][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.926309][T20129] netlink: 'syz.1.3879': attribute type 4 has an invalid length. [ 657.028192][T20151] netlink: 'syz.1.3887': attribute type 10 has an invalid length. [ 657.070405][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3888'. [ 657.396527][ T452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.818500][ T452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.939869][ T452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.069731][ T452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.122336][T20109] Set syz1 is full, maxelem 65536 reached [ 658.218177][ T452] bridge_slave_1: left allmulticast mode [ 658.223867][ T452] bridge_slave_1: left promiscuous mode [ 658.229799][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.239193][ T452] bridge_slave_0: left allmulticast mode [ 658.244876][ T452] bridge_slave_0: left promiscuous mode [ 658.250904][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.628282][T20163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.846713][ T452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.885817][ T452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.908725][ T452] bond0 (unregistering): Released all slaves [ 659.008093][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.048301][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.056205][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.085482][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.093667][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 659.103801][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.502232][T20174] lo speed is unknown, defaulting to 1000 [ 659.542477][T20174] lo speed is unknown, defaulting to 1000 [ 659.733665][ T452] hsr_slave_0: left promiscuous mode [ 659.750876][ T452] hsr_slave_1: left promiscuous mode [ 659.764757][ T452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.780276][ T452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.796006][ T452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.812691][ T452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.880654][ T452] veth1_macvtap: left promiscuous mode [ 659.886341][ T452] veth0_macvtap: left promiscuous mode [ 659.892611][ T452] veth1_vlan: left promiscuous mode [ 659.898248][ T452] veth0_vlan: left promiscuous mode [ 660.089100][T20201] netlink: 'syz.2.3902': attribute type 10 has an invalid length. [ 660.834453][ T452] team0 (unregistering): Port device team_slave_1 removed [ 660.880744][ T452] team0 (unregistering): Port device team_slave_0 removed [ 661.168047][ T9043] Bluetooth: hci0: command tx timeout [ 661.499710][T20174] lo speed is unknown, defaulting to 1000 [ 662.099224][T20174] chnl_net:caif_netlink_parms(): no params data found [ 662.237449][T20237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3913'. [ 662.304259][T20174] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.324701][T20174] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.342828][T20174] bridge_slave_0: entered allmulticast mode [ 662.362727][T20174] bridge_slave_0: entered promiscuous mode [ 662.465621][T20174] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.473551][T20174] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.480908][T20174] bridge_slave_1: entered allmulticast mode [ 662.497789][T20174] bridge_slave_1: entered promiscuous mode [ 662.640373][T20174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.668538][T20174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.827494][T20174] team0: Port device team_slave_0 added [ 662.840811][T20174] team0: Port device team_slave_1 added [ 662.851397][T20264] Illegal XDP return value 4291629056 on prog (id 1550) dev N/A, expect packet loss! [ 662.936764][T20174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.959625][T20174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.017670][T20174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.032728][T20174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.039979][T20174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.066567][T20174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.149579][T20271] netlink: 'syz.2.3923': attribute type 4 has an invalid length. [ 663.250033][ T9043] Bluetooth: hci0: command tx timeout [ 663.278683][T20174] hsr_slave_0: entered promiscuous mode [ 663.285022][T20174] hsr_slave_1: entered promiscuous mode [ 663.863855][T20292] ipt_rpfilter: unknown options [ 664.409375][T20314] siw: device registration error -23 [ 664.452035][T20174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 664.470702][T20174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 664.500433][T20174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 664.520486][T20174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 664.791247][T20174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.835977][T20174] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.869983][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.877100][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.894659][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.901786][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.020840][T20174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.033543][T20174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.329195][ T9043] Bluetooth: hci0: command tx timeout [ 665.552045][T20174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.760433][T20354] smc: net device bond0 erased user defined pnetid SYZ2 [ 666.195333][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3956'. [ 666.235638][T20174] veth0_vlan: entered promiscuous mode [ 666.258209][T20174] veth1_vlan: entered promiscuous mode [ 666.293432][T20174] veth0_macvtap: entered promiscuous mode [ 666.303678][T20174] veth1_macvtap: entered promiscuous mode [ 666.322968][T20174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.365399][T20174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.385519][T20174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.394465][T20174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.404747][T20174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.413897][T20174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.487613][T20377] netlink: 'syz.1.3958': attribute type 4 has an invalid length. [ 666.634037][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.644305][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.797309][T20382] siw: device registration error -23 [ 666.813960][T18447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.822048][T18447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.430669][T20283] Set syz1 is full, maxelem 65536 reached [ 668.135098][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.500623][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.573075][T20395] lo speed is unknown, defaulting to 1000 [ 668.594857][T20395] lo speed is unknown, defaulting to 1000 [ 668.732663][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.857202][T20360] Set syz1 is full, maxelem 65536 reached [ 668.921071][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.083337][ T12] bridge_slave_1: left allmulticast mode [ 669.096346][ T12] bridge_slave_1: left promiscuous mode [ 669.102547][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.113086][ T12] bridge_slave_0: left allmulticast mode [ 669.119390][ T12] bridge_slave_0: left promiscuous mode [ 669.125200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.544279][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.556127][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.566356][ T12] bond0 (unregistering): Released all slaves [ 669.588275][T20395] lo speed is unknown, defaulting to 1000 [ 670.067058][T20411] tap0: tun_chr_ioctl cmd 1074025677 [ 670.076041][T20411] tap0: linktype set to 1 [ 670.457110][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 670.466633][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 670.478264][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 670.488156][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 670.495795][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 670.504108][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 670.546352][T20428] lo speed is unknown, defaulting to 1000 [ 670.581521][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 670.613072][T20428] lo speed is unknown, defaulting to 1000 [ 670.679741][T20439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3982'. [ 670.780999][ T12] hsr_slave_0: left promiscuous mode [ 670.788027][ T12] hsr_slave_1: left promiscuous mode [ 670.794026][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.801768][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.815518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.824606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.888899][ T12] veth1_macvtap: left promiscuous mode [ 670.894541][ T12] veth0_macvtap: left promiscuous mode [ 670.900479][ T12] veth1_vlan: left promiscuous mode [ 670.905818][ T12] veth0_vlan: left promiscuous mode [ 671.473820][ T12] team0 (unregistering): Port device team_slave_1 removed [ 671.534694][ T12] team0 (unregistering): Port device team_slave_0 removed [ 672.037809][T20428] lo speed is unknown, defaulting to 1000 [ 672.608679][ T5837] Bluetooth: hci0: command tx timeout [ 672.622684][T20428] chnl_net:caif_netlink_parms(): no params data found [ 673.000602][T20504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4002'. [ 673.011482][T20504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4002'. [ 673.137870][T20428] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.145406][T20428] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.153027][T20428] bridge_slave_0: entered allmulticast mode [ 673.160424][T20428] bridge_slave_0: entered promiscuous mode [ 673.168107][T20504] IPv6: NLM_F_REPLACE set, but no existing node found! [ 673.184222][T20428] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.193309][T20428] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.208737][T20428] bridge_slave_1: entered allmulticast mode [ 673.217340][T20428] bridge_slave_1: entered promiscuous mode [ 673.483421][T20428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.498195][T20428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.788796][T20428] team0: Port device team_slave_0 added [ 673.805982][T20428] team0: Port device team_slave_1 added [ 674.073131][T20428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.087014][T20428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.117753][T20428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.170031][T20428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.177013][T20428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.245252][T20428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.362342][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'. [ 674.414219][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4018'. [ 674.536217][T20545] 8021q: adding VLAN 0 to HW filter on device bond26 [ 674.582135][T20428] hsr_slave_0: entered promiscuous mode [ 674.593757][T20428] hsr_slave_1: entered promiscuous mode [ 674.636051][T20552] vlan14: entered promiscuous mode [ 674.641667][T20552] bond26: entered promiscuous mode [ 674.687776][ T5837] Bluetooth: hci0: command tx timeout [ 675.166284][T20567] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 675.681468][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4029'. [ 675.700411][T20577] tap0: tun_chr_ioctl cmd 1074025677 [ 675.705893][T20577] tap0: linktype set to 805 [ 676.278200][T20428] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 676.315592][T20428] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 676.396083][T20428] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 676.428807][T20428] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 676.768755][ T5837] Bluetooth: hci0: command tx timeout [ 676.893225][T20428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.937066][T20428] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.010871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.018034][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.059576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.066718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.153721][T20615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4043'. [ 677.480243][T20519] Set syz1 is full, maxelem 65536 reached [ 677.522973][T20428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.560515][T20629] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 677.813006][T20641] lo speed is unknown, defaulting to 1000 [ 677.849041][T20641] lo speed is unknown, defaulting to 1000 [ 677.876411][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4052'. [ 677.885848][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4052'. [ 677.906247][T20647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 678.004442][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4053'. [ 678.039514][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4053'. [ 678.079846][T20658] IPv6: NLM_F_REPLACE set, but no existing node found! [ 678.144960][T20652] x_tables: duplicate underflow at hook 2 [ 678.159755][T20661] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 678.278154][T20428] veth0_vlan: entered promiscuous mode [ 678.302515][T20665] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4059'. [ 678.333157][T20428] veth1_vlan: entered promiscuous mode [ 678.429466][T20428] veth0_macvtap: entered promiscuous mode [ 678.479241][T20428] veth1_macvtap: entered promiscuous mode [ 678.533586][T20428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.575472][T20641] lo speed is unknown, defaulting to 1000 [ 678.579179][T20428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.621042][T20428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.651660][T20428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.672784][T20428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.691644][T20428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.755500][T20672] lo speed is unknown, defaulting to 1000 [ 678.797466][T20672] lo speed is unknown, defaulting to 1000 [ 678.850791][ T5837] Bluetooth: hci0: command tx timeout [ 679.248894][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.256940][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.336828][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 679.347280][T20681] netlink: 'syz.2.4065': attribute type 13 has an invalid length. [ 679.439600][T20672] lo speed is unknown, defaulting to 1000 [ 679.466521][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.474661][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.903928][T20693] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4070'. [ 679.983596][T20694] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 679.995931][T20698] sctp: [Deprecated]: syz.2.4071 (pid 20698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.995931][T20698] Use struct sctp_sack_info instead [ 680.362584][T20712] lo speed is unknown, defaulting to 1000 [ 680.370165][T20712] lo speed is unknown, defaulting to 1000 [ 680.483609][T20712] lo speed is unknown, defaulting to 1000 [ 681.486062][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.559341][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.612734][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.686286][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.782938][ T53] bridge_slave_1: left allmulticast mode [ 681.789001][ T53] bridge_slave_1: left promiscuous mode [ 681.794795][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.804002][ T53] bridge_slave_0: left allmulticast mode [ 681.810081][ T53] bridge_slave_0: left promiscuous mode [ 681.815819][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.210936][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.222872][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.233897][ T53] bond0 (unregistering): Released all slaves [ 682.914261][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 682.967005][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 682.980222][ T53] hsr_slave_0: left promiscuous mode [ 682.995857][ T53] hsr_slave_1: left promiscuous mode [ 683.013731][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.029233][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.038252][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.048728][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.056735][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.065315][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.073207][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.082111][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.090230][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 683.098005][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.150919][ T53] veth1_macvtap: left promiscuous mode [ 683.156709][ T53] veth0_macvtap: left promiscuous mode [ 683.162886][ T53] veth1_vlan: left promiscuous mode [ 683.168729][ T53] veth0_vlan: left promiscuous mode [ 683.767131][ T53] team0 (unregistering): Port device team_slave_1 removed [ 683.827764][ T53] team0 (unregistering): Port device team_slave_0 removed [ 684.544374][T20760] lo speed is unknown, defaulting to 1000 [ 684.551152][T20760] lo speed is unknown, defaulting to 1000 [ 684.644714][T20760] lo speed is unknown, defaulting to 1000 [ 684.688152][T20744] lo speed is unknown, defaulting to 1000 [ 684.694955][T20744] lo speed is unknown, defaulting to 1000 [ 685.039824][T20744] lo speed is unknown, defaulting to 1000 [ 685.187621][ T5837] Bluetooth: hci0: command tx timeout [ 685.214424][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4098'. [ 685.320094][T20781] lo speed is unknown, defaulting to 1000 [ 685.326926][T20781] lo speed is unknown, defaulting to 1000 [ 685.468093][T20781] lo speed is unknown, defaulting to 1000 [ 685.633629][T20744] chnl_net:caif_netlink_parms(): no params data found [ 686.298043][T20744] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.320090][T20744] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.344145][T20744] bridge_slave_0: entered allmulticast mode [ 686.368163][T20744] bridge_slave_0: entered promiscuous mode [ 686.393156][T20744] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.409113][T20744] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.429757][T20744] bridge_slave_1: entered allmulticast mode [ 686.440218][T20744] bridge_slave_1: entered promiscuous mode [ 686.500345][T20744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.522090][T20815] lo speed is unknown, defaulting to 1000 [ 686.579599][T20744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.766926][T20815] lo speed is unknown, defaulting to 1000 [ 686.785685][T20744] team0: Port device team_slave_0 added [ 686.818257][T20744] team0: Port device team_slave_1 added [ 686.955297][T20744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.967653][T20744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.008122][T20744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.219066][T20744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.257144][ T5837] Bluetooth: hci0: command tx timeout [ 687.267269][T20744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.297848][T20744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.395957][T20744] hsr_slave_0: entered promiscuous mode [ 687.403089][T20744] hsr_slave_1: entered promiscuous mode [ 687.429809][T20815] lo speed is unknown, defaulting to 1000 [ 688.064813][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'. [ 688.643843][T20867] lo speed is unknown, defaulting to 1000 [ 688.650956][T20867] lo speed is unknown, defaulting to 1000 [ 688.776556][T20867] lo speed is unknown, defaulting to 1000 [ 689.180739][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4132'. [ 689.328149][ T5837] Bluetooth: hci0: command tx timeout [ 689.746809][T20744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 689.781984][T20744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 689.817985][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4135'. [ 689.840509][T20893] 8021q: adding VLAN 0 to HW filter on device bond27 [ 689.867932][T20744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 689.880834][T20893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4135'. [ 689.908145][T20893] vlan15: entered promiscuous mode [ 689.913314][T20893] bond27: entered promiscuous mode [ 689.919457][T20744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 690.164728][T20744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.184735][T20909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4139'. [ 690.216891][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4138'. [ 690.234669][T20908] xt_bpf: check failed: parse error [ 690.240988][T20909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4139'. [ 690.269850][T20744] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.304708][T20909] IPv6: NLM_F_REPLACE set, but no existing node found! [ 690.350356][T20915] x_tables: duplicate underflow at hook 2 [ 690.401831][T18447] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.408967][T18447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.439213][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.446349][T18447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.502268][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 690.511530][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 690.523932][T20924] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 690.793056][T20744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.925642][T20937] netlink: 566 bytes leftover after parsing attributes in process `syz.1.4152'. [ 691.122360][T20744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.407824][ T9043] Bluetooth: hci0: command tx timeout [ 691.478886][T20961] IPv6: NLM_F_REPLACE set, but no existing node found! [ 691.489656][T20961] x_tables: duplicate underflow at hook 2 [ 691.905765][T20744] veth0_vlan: entered promiscuous mode [ 691.959274][T20744] veth1_vlan: entered promiscuous mode [ 692.024480][T20744] veth0_macvtap: entered promiscuous mode [ 692.062339][T20744] veth1_macvtap: entered promiscuous mode [ 692.099692][T20744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.132494][T20744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.166823][T20744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.198115][T20744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.217668][T20744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.237300][T20744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.281419][T20988] netlink: 'syz.1.4167': attribute type 4 has an invalid length. [ 692.669615][T18451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.693407][T18451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.783090][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.792495][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.323152][T21024] __nla_validate_parse: 2 callbacks suppressed [ 693.323174][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 693.340146][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4180'. [ 693.572340][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.795359][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.877285][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.110517][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.327815][ T1094] bridge_slave_1: left allmulticast mode [ 694.333548][ T1094] bridge_slave_1: left promiscuous mode [ 694.339429][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.349327][ T1094] bridge_slave_0: left allmulticast mode [ 694.355002][ T1094] bridge_slave_0: left promiscuous mode [ 694.360825][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.743674][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.754926][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.766168][ T1094] bond0 (unregistering): Released all slaves [ 695.226844][ T1094] hsr_slave_0: left promiscuous mode [ 695.238741][ T1094] hsr_slave_1: left promiscuous mode [ 695.268901][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.276560][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.305018][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.333150][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.470995][ T1094] veth1_macvtap: left promiscuous mode [ 695.482221][ T1094] veth0_macvtap: left promiscuous mode [ 695.493559][ T1094] veth1_vlan: left promiscuous mode [ 695.505910][ T1094] veth0_vlan: left promiscuous mode [ 695.633592][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.644894][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 695.653206][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 695.669140][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 695.676998][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 695.685887][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.381466][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 696.466748][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 696.965963][T21036] lo speed is unknown, defaulting to 1000 [ 697.095085][T21036] lo speed is unknown, defaulting to 1000 [ 697.235975][T21052] lo speed is unknown, defaulting to 1000 [ 697.450914][T21052] lo speed is unknown, defaulting to 1000 [ 697.458387][T21036] lo speed is unknown, defaulting to 1000 [ 697.699362][T21052] lo speed is unknown, defaulting to 1000 [ 697.739031][ T9043] Bluetooth: hci0: command tx timeout [ 697.772492][T21088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4199'. [ 697.875068][T21092] lo speed is unknown, defaulting to 1000 [ 697.910717][T21092] lo speed is unknown, defaulting to 1000 [ 698.009469][T21092] lo speed is unknown, defaulting to 1000 [ 698.210900][T21052] chnl_net:caif_netlink_parms(): no params data found [ 698.461255][T21052] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.478374][T21052] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.485662][T21052] bridge_slave_0: entered allmulticast mode [ 698.492903][T21052] bridge_slave_0: entered promiscuous mode [ 698.501969][T21052] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.509346][T21052] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.516537][T21052] bridge_slave_1: entered allmulticast mode [ 698.523706][T21052] bridge_slave_1: entered promiscuous mode [ 698.723552][T21052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.020262][T21052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.270083][T21052] team0: Port device team_slave_0 added [ 699.326943][T21052] team0: Port device team_slave_1 added [ 699.520059][T21118] lo speed is unknown, defaulting to 1000 [ 699.665595][T21052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.703349][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.808602][ T9043] Bluetooth: hci0: command tx timeout [ 699.826516][T21052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.877514][T21118] lo speed is unknown, defaulting to 1000 [ 699.886058][T21052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.894242][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.946251][T21052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.174314][T21120] netlink: 'syz.3.4207': attribute type 11 has an invalid length. [ 700.226124][T21120] netlink: 'syz.3.4207': attribute type 5 has an invalid length. [ 700.299032][T21052] hsr_slave_0: entered promiscuous mode [ 700.315523][T21052] hsr_slave_1: entered promiscuous mode [ 700.443443][T21118] lo speed is unknown, defaulting to 1000 [ 701.108151][T21052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 701.129772][T21052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 701.158710][T21052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 701.187744][T21052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 701.369412][T21180] netlink: 'syz.3.4227': attribute type 10 has an invalid length. [ 701.506629][T21183] lo speed is unknown, defaulting to 1000 [ 701.515352][T21183] lo speed is unknown, defaulting to 1000 [ 701.690406][T21183] lo speed is unknown, defaulting to 1000 [ 701.746071][T21052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.765837][T21052] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.821491][T18447] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.828669][T18447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.870946][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.878142][T18447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.894978][ T9043] Bluetooth: hci0: command tx timeout [ 702.455957][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 702.465023][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 702.652327][T21052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.794518][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 703.070224][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 703.088710][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 703.450265][T21052] veth0_vlan: entered promiscuous mode [ 703.470371][T21052] veth1_vlan: entered promiscuous mode [ 703.525264][T21052] veth0_macvtap: entered promiscuous mode [ 703.553710][T21052] veth1_macvtap: entered promiscuous mode [ 703.604467][T21052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.640173][T21052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.671011][T21052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.680220][T21052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.692213][T21052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.701145][T21052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.713034][T21250] netlink: 'syz.2.4249': attribute type 4 has an invalid length. [ 703.727475][T21250] netlink: 'syz.2.4249': attribute type 4 has an invalid length. [ 703.967742][ T9043] Bluetooth: hci0: command tx timeout [ 704.066695][T21255] lo speed is unknown, defaulting to 1000 [ 704.088074][T21255] lo speed is unknown, defaulting to 1000 [ 704.375315][T21269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4256'. [ 704.443093][T21255] lo speed is unknown, defaulting to 1000 [ 704.495826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.518665][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.248294][T21283] macvlan1: entered promiscuous mode [ 705.277338][T21283] macvlan1: left promiscuous mode [ 705.318155][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.346568][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.622977][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4264'. [ 705.632081][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4264'. [ 706.024422][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.151029][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.217149][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.277201][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.401578][ T1094] bridge_slave_1: left allmulticast mode [ 706.407350][ T1094] bridge_slave_1: left promiscuous mode [ 706.413267][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.423175][ T1094] bridge_slave_0: left allmulticast mode [ 706.429481][ T1094] bridge_slave_0: left promiscuous mode [ 706.435257][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.827496][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.840310][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.851993][ T1094] bond0 (unregistering): Released all slaves [ 707.178893][ T1094] hsr_slave_0: left promiscuous mode [ 707.188525][ T1094] hsr_slave_1: left promiscuous mode [ 707.194391][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.201921][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.211989][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.219543][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.262186][ T1094] veth1_macvtap: left promiscuous mode [ 707.268019][ T1094] veth0_macvtap: left promiscuous mode [ 707.273653][ T1094] veth1_vlan: left promiscuous mode [ 707.283157][ T1094] veth0_vlan: left promiscuous mode [ 708.134318][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.146115][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.162003][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.170867][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.176414][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 708.178847][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 708.193662][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.251775][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 708.914153][T21328] lo speed is unknown, defaulting to 1000 [ 708.989237][T21328] lo speed is unknown, defaulting to 1000 [ 709.122708][T21328] lo speed is unknown, defaulting to 1000 [ 709.252578][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 709.280080][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 709.396881][T21357] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 709.416649][T21328] chnl_net:caif_netlink_parms(): no params data found [ 709.546677][T21328] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.554255][T21328] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.566610][T21328] bridge_slave_0: entered allmulticast mode [ 709.578101][T21328] bridge_slave_0: entered promiscuous mode [ 709.585997][T21328] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.593564][T21328] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.600938][T21328] bridge_slave_1: entered allmulticast mode [ 709.608196][T21328] bridge_slave_1: entered promiscuous mode [ 709.659878][T21328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.686242][T21328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.734854][T21328] team0: Port device team_slave_0 added [ 709.759578][T21328] team0: Port device team_slave_1 added [ 709.832441][T21328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.839690][T21328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.865990][T21328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.885073][T21328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.892783][T21328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.919847][T21328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.052211][T21328] hsr_slave_0: entered promiscuous mode [ 710.098341][T21328] hsr_slave_1: entered promiscuous mode [ 710.287761][ T9043] Bluetooth: hci0: command tx timeout [ 710.434999][T21388] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 710.469544][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 710.684529][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 710.697556][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 710.774197][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 710.785969][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 710.913522][T21328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 710.925737][T21328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 710.936737][T21328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 710.961107][T21328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 711.039306][T21328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.059956][T21328] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.073809][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.080949][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.102816][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.109942][T18447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.414136][T21328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.696309][T21328] veth0_vlan: entered promiscuous mode [ 711.711389][T21328] veth1_vlan: entered promiscuous mode [ 711.735935][T21328] veth0_macvtap: entered promiscuous mode [ 711.761812][T21328] veth1_macvtap: entered promiscuous mode [ 711.791406][T21328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.803456][T21328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.826466][T21328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.847803][T21328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.859355][T21328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.868322][T21328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.105692][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.169744][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.343743][T21445] batadv_slave_1: entered promiscuous mode [ 712.364848][T18449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.368267][ T9043] Bluetooth: hci0: command tx timeout [ 712.398166][T21447] syzkaller1: entered promiscuous mode [ 712.403674][T21447] syzkaller1: entered allmulticast mode [ 712.418081][T18449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.570101][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 712.581945][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 712.888184][T21461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4314'. [ 713.261330][T21472] netlink: 'syz.0.4317': attribute type 9 has an invalid length. [ 713.278584][T21472] netlink: 'syz.0.4317': attribute type 7 has an invalid length. [ 713.299226][T21472] netlink: 'syz.0.4317': attribute type 8 has an invalid length. [ 714.320705][T18449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.514837][T18449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.587321][T18449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.658277][T18449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.754031][T18449] bridge_slave_1: left allmulticast mode [ 715.759954][T18449] bridge_slave_1: left promiscuous mode [ 715.765704][T18449] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.775170][T18449] bridge_slave_0: left allmulticast mode [ 715.781440][T18449] bridge_slave_0: left promiscuous mode [ 715.787179][T18449] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.520624][T18449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.520649][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.540740][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.548416][T18449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.558122][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.560281][T18449] bond0 (unregistering): Released all slaves [ 716.572420][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.585426][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 716.616310][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.674504][T21509] __nla_validate_parse: 2 callbacks suppressed [ 716.674527][T21509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4331'. [ 716.696032][T21506] lo speed is unknown, defaulting to 1000 [ 716.716343][T21506] lo speed is unknown, defaulting to 1000 [ 716.801439][T21511] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4333'. [ 716.996995][T21506] lo speed is unknown, defaulting to 1000 [ 717.196941][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4337'. [ 717.563521][T18449] hsr_slave_0: left promiscuous mode [ 717.578394][T18449] hsr_slave_1: left promiscuous mode [ 717.588641][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.598212][T18449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.606299][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.614022][T18449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.663571][T21553] ipt_rpfilter: unknown options [ 717.688634][T18449] veth1_macvtap: left promiscuous mode [ 717.707868][T18449] veth0_macvtap: left promiscuous mode [ 717.713527][T18449] veth1_vlan: left promiscuous mode [ 717.737866][T18449] veth0_vlan: left promiscuous mode [ 718.630315][T21568] netlink: 'syz.2.4342': attribute type 4 has an invalid length. [ 718.659210][T18449] team0 (unregistering): Port device team_slave_1 removed [ 718.687849][ T5837] Bluetooth: hci0: command tx timeout [ 718.706901][T18449] team0 (unregistering): Port device team_slave_0 removed [ 719.590235][T21506] chnl_net:caif_netlink_parms(): no params data found [ 719.608389][T21580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4346'. [ 719.658677][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4345'. [ 719.820705][T21594] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 720.093435][T21602] netlink: 'syz.1.4353': attribute type 11 has an invalid length. [ 720.107275][T21602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4353'. [ 720.157390][T21506] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.165189][T21605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4354'. [ 720.174623][T21506] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.195298][T21607] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 720.198593][T21506] bridge_slave_0: entered allmulticast mode [ 720.218412][T21506] bridge_slave_0: entered promiscuous mode [ 720.244151][T21506] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.257685][T21506] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.264853][T21506] bridge_slave_1: entered allmulticast mode [ 720.289536][T21506] bridge_slave_1: entered promiscuous mode [ 720.409771][T21506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.464687][T21506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.641312][T21506] team0: Port device team_slave_0 added [ 720.660420][T21506] team0: Port device team_slave_1 added [ 720.767983][ T5837] Bluetooth: hci0: command tx timeout [ 720.787839][T21506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.805235][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.854681][T21506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.869697][T21506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.877664][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.964075][T21506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.304868][T21641] netlink: 'syz.1.4366': attribute type 1 has an invalid length. [ 721.378392][T21506] hsr_slave_0: entered promiscuous mode [ 721.407009][T21506] hsr_slave_1: entered promiscuous mode [ 721.461405][T21641] 8021q: adding VLAN 0 to HW filter on device bond11 [ 721.612275][T21648] 8021q: adding VLAN 0 to HW filter on device bond28 [ 721.624199][T21648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4369'. [ 721.640302][T21648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4369'. [ 721.664974][T21648] vlan16: entered promiscuous mode [ 721.670399][T21648] bond28: entered promiscuous mode [ 721.724053][T21650] dccp_v6_rcv: dropped packet with invalid checksum [ 721.803381][T21654] netlink: 'syz.2.4371': attribute type 10 has an invalid length. [ 722.097387][T21665] lo speed is unknown, defaulting to 1000 [ 722.130107][T21665] lo speed is unknown, defaulting to 1000 [ 722.278491][T21672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4378'. [ 722.296141][T21672] netlink: 'syz.2.4378': attribute type 1 has an invalid length. [ 722.304228][T21672] netlink: 'syz.2.4378': attribute type 2 has an invalid length. [ 722.312376][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4378'. [ 722.340673][T21506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 722.379069][T21506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 722.431800][T21506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 722.451520][T21665] lo speed is unknown, defaulting to 1000 [ 722.466974][T21506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 722.591927][T21682] netlink: 'syz.2.4383': attribute type 4 has an invalid length. [ 722.602731][T21682] netlink: 'syz.2.4383': attribute type 4 has an invalid length. [ 722.693954][T21506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.757349][T21506] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.848044][ T5837] Bluetooth: hci0: command tx timeout [ 722.900922][T18449] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.908096][T18449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.920533][T18449] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.927781][T18449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.037308][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'. [ 723.081054][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4387'. [ 723.129064][T21698] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4387'. [ 723.291643][T21704] tipc: Enabled bearer , priority 0 [ 723.452463][T21700] tipc: Resetting bearer [ 724.933917][ T5837] Bluetooth: hci0: command tx timeout [ 725.652238][T21700] tipc: Disabling bearer [ 725.678739][T21718] tipc: Resetting bearer [ 725.694888][T21719] tipc: Enabling of bearer rejected, already enabled [ 725.764572][T21727] ªªªªªªo]Uü.ž: renamed from lo (while UP) [ 725.860695][T21731] 8021q: adding VLAN 0 to HW filter on device bond29 [ 725.908833][T21731] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 725.917203][T21731] bond29: (slave batadv12): Enslaving as an active interface with an up link [ 725.929316][T21731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4397'. [ 725.999069][T21506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.100574][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'. [ 726.297560][T21736] syzkaller0: entered promiscuous mode [ 726.313661][T21736] syzkaller0: entered allmulticast mode [ 727.569079][T21777] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4407'. [ 729.120126][T21506] veth0_vlan: entered promiscuous mode [ 729.150390][T21506] veth1_vlan: entered promiscuous mode [ 729.198017][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'. [ 729.221164][T21506] veth0_macvtap: entered promiscuous mode [ 729.232193][T21506] veth1_macvtap: entered promiscuous mode [ 729.251303][T21506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.262555][T21506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.274162][T21506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.281157][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'. [ 729.284201][T21506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.303326][T21506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.315234][T21506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.817311][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.825784][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.019909][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4415'. [ 730.032947][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.066057][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.441905][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4418'. [ 730.468278][T21813] ipt_rpfilter: unknown options [ 730.912902][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.170017][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.514378][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.685592][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.773133][ T12] bridge_slave_1: left allmulticast mode [ 731.779118][ T12] bridge_slave_1: left promiscuous mode [ 731.786134][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.795016][ T12] bridge_slave_0: left allmulticast mode [ 731.801041][ T12] bridge_slave_0: left promiscuous mode [ 731.806746][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.163794][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.175246][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.187407][ T12] bond0 (unregistering): Released all slaves [ 732.562506][ T12] hsr_slave_0: left promiscuous mode [ 732.568599][ T12] hsr_slave_1: left promiscuous mode [ 732.574406][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.582079][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.590108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.597554][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.639499][ T12] veth1_macvtap: left promiscuous mode [ 732.645037][ T12] veth0_macvtap: left promiscuous mode [ 732.650916][ T12] veth1_vlan: left promiscuous mode [ 732.656222][ T12] veth0_vlan: left promiscuous mode [ 732.868598][T21830] ipt_REJECT: TCP_RESET invalid for non-tcp [ 732.939100][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4426'. [ 733.386761][ T9043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 733.400045][ T9043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 733.409246][ T9043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 733.417266][ T9043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 733.426086][ T9043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 733.434938][ T9043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.927848][ T12] team0 (unregistering): Port device team_slave_1 removed [ 734.030998][ T12] team0 (unregistering): Port device team_slave_0 removed [ 735.144883][T21844] lo speed is unknown, defaulting to 1000 [ 735.152619][T21844] lo speed is unknown, defaulting to 1000 [ 735.416944][T21844] lo speed is unknown, defaulting to 1000 [ 735.568630][ T5837] Bluetooth: hci0: command tx timeout [ 735.708392][T21871] ipt_rpfilter: unknown options [ 735.755708][T21870] netlink: 'syz.2.4437': attribute type 1 has an invalid length. [ 735.786792][T21870] 8021q: adding VLAN 0 to HW filter on device bond30 [ 735.876953][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 736.029953][T21844] chnl_net:caif_netlink_parms(): no params data found [ 736.255519][T21838] Set syz1 is full, maxelem 65536 reached [ 736.259320][T21844] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.303751][T21844] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.324066][T21844] bridge_slave_0: entered allmulticast mode [ 736.341335][T21844] bridge_slave_0: entered promiscuous mode [ 736.359739][T21844] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.381807][T21844] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.403246][T21844] bridge_slave_1: entered allmulticast mode [ 736.420534][T21844] bridge_slave_1: entered promiscuous mode [ 736.476103][T21844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.501901][T21844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.605253][T21844] team0: Port device team_slave_0 added [ 736.614695][T21844] team0: Port device team_slave_1 added [ 736.684054][T21844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.706521][T21844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.732926][T21844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.745301][T21844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.752863][T21844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.791330][T21844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.882160][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'. [ 736.916635][T21905] bond31: entered promiscuous mode [ 736.922238][T21905] 8021q: adding VLAN 0 to HW filter on device bond31 [ 737.163683][T21844] hsr_slave_0: entered promiscuous mode [ 737.187350][T21844] hsr_slave_1: entered promiscuous mode [ 737.334501][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4448'. [ 737.343612][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4448'. [ 737.647853][ T9043] Bluetooth: hci0: command tx timeout [ 737.704928][T21923] 8021q: adding VLAN 0 to HW filter on device bond15 [ 737.744158][T21923] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 737.757316][T21923] bond15: (slave batadv2): Enslaving as an active interface with an up link [ 737.800541][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4451'. [ 737.961675][T21844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.026830][T21844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 738.050762][T21844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 738.070106][T21844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 738.199293][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 738.246209][T21844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.325318][T21844] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.359201][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.366347][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.386102][T21942] IPv6: NLM_F_REPLACE set, but no existing node found! [ 738.395346][T21942] x_tables: duplicate underflow at hook 2 [ 738.399774][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.408239][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.476194][T21945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4460'. [ 738.577686][T21949] netlink: 'syz.1.4459': attribute type 1 has an invalid length. [ 738.621315][T21949] 8021q: adding VLAN 0 to HW filter on device bond12 [ 739.099819][T21844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.266166][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'. [ 739.290067][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'. [ 739.639080][T21984] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.4469'. [ 739.657001][T21984] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.4469'. [ 739.737867][ T9043] Bluetooth: hci0: command tx timeout [ 739.744927][T21844] veth0_vlan: entered promiscuous mode [ 739.802374][T21844] veth1_vlan: entered promiscuous mode [ 739.904585][T21989] netlink: zone id is out of range [ 739.916148][T21844] veth0_macvtap: entered promiscuous mode [ 739.922337][T21989] netlink: zone id is out of range [ 739.928519][T21989] netlink: zone id is out of range [ 739.934102][T21989] netlink: zone id is out of range [ 739.953070][T21989] netlink: set zone limit has 8 unknown bytes [ 740.046169][T21844] veth1_macvtap: entered promiscuous mode [ 740.087908][T21844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.157196][T21844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.189936][T21844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.218114][T21844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.241013][T21844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.264312][T21844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.304872][T21999] lo speed is unknown, defaulting to 1000 [ 740.414734][T21999] lo speed is unknown, defaulting to 1000 [ 740.619147][T21999] lo speed is unknown, defaulting to 1000 [ 740.759805][T18449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.768707][T18449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.060623][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.076977][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.673030][T18447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.822813][T18447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.937948][T18447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.242889][T18447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.482846][T18447] bridge_slave_1: left allmulticast mode [ 742.488852][T18447] bridge_slave_1: left promiscuous mode [ 742.494553][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.503653][T18447] bridge_slave_0: left allmulticast mode [ 742.509953][T18447] bridge_slave_0: left promiscuous mode [ 742.515684][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.897883][T18447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.909970][T18447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.920701][T18447] bond0 (unregistering): Released all slaves [ 743.219902][T18447] hsr_slave_0: left promiscuous mode [ 743.226823][T18447] hsr_slave_1: left promiscuous mode [ 743.242229][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.249929][T18447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.257861][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.265298][T18447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.305795][T18447] veth1_macvtap: left promiscuous mode [ 743.311622][T18447] veth0_macvtap: left promiscuous mode [ 743.317235][T18447] veth1_vlan: left promiscuous mode [ 743.322625][T18447] veth0_vlan: left promiscuous mode [ 743.739959][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 743.751051][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 744.055132][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.066526][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.087153][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.105878][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.118575][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 744.126008][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.208846][T18447] team0 (unregistering): Port device team_slave_1 removed [ 744.288921][T18447] team0 (unregistering): Port device team_slave_0 removed [ 744.709242][T22061] netlink: 'syz.0.4488': attribute type 1 has an invalid length. [ 744.846651][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4488'. [ 745.051167][T22061] bond11: entered promiscuous mode [ 745.056466][T22061] bond11: entered allmulticast mode [ 745.077727][T22063] batadv4: entered allmulticast mode [ 745.129540][T22063] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 745.172779][T22063] bond11: (slave batadv4): making interface the new active one [ 745.187933][T22063] batadv4: entered promiscuous mode [ 745.201364][T22063] bond11: (slave batadv4): Enslaving as an active interface with an up link [ 745.234036][T22064] bond11: left promiscuous mode [ 745.252176][T22064] batadv4: left promiscuous mode [ 745.262309][T22064] bond11: left allmulticast mode [ 745.268660][T22064] 8021q: adding VLAN 0 to HW filter on device bond11 [ 745.350876][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4492'. [ 745.360100][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4492'. [ 745.371130][T22049] lo speed is unknown, defaulting to 1000 [ 745.378291][T22049] lo speed is unknown, defaulting to 1000 [ 745.379257][T22074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4490'. [ 745.579315][T22080] lo speed is unknown, defaulting to 1000 [ 745.735290][T22049] lo speed is unknown, defaulting to 1000 [ 745.736631][T22080] lo speed is unknown, defaulting to 1000 [ 745.884849][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 745.894209][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 746.109432][T22080] lo speed is unknown, defaulting to 1000 [ 746.208252][ T9043] Bluetooth: hci0: command tx timeout [ 746.217951][T22049] chnl_net:caif_netlink_parms(): no params data found [ 746.542061][T22049] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.584929][T22099] siw: device registration error -23 [ 746.590508][T22049] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.590714][T22049] bridge_slave_0: entered allmulticast mode [ 746.618155][T22049] bridge_slave_0: entered promiscuous mode [ 746.642605][T22049] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.667828][T22049] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.677029][T22049] bridge_slave_1: entered allmulticast mode [ 746.696499][T22049] bridge_slave_1: entered promiscuous mode [ 746.802062][T22049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.823105][T22049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.964071][T22049] team0: Port device team_slave_0 added [ 746.997837][T22119] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000197: 0000 [#1] PREEMPT SMP KASAN PTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 747.010461][T22119] KASAN: null-ptr-deref in range [0x0000000000000cb8-0x0000000000000cbf] [ 747.018895][T22119] CPU: 1 UID: 0 PID: 22119 Comm: syz.0.4504 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 747.029672][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 747.039744][T22119] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 747.045567][T22127] netlink: 'syz.1.4505': attribute type 4 has an invalid length. [ 747.046174][T22119] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 747.073490][T22119] RSP: 0018:ffffc9000483fbc0 EFLAGS: 00010203 [ 747.079556][T22119] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: 0000000000080000 [ 747.087520][T22119] RDX: ffffc9000bc21000 RSI: 00000000000000d5 RDI: 00000000000000d6 [ 747.095527][T22119] RBP: ffffc9000483fcd8 R08: ffffffff9455284f R09: 1ffffffff28aa509 [ 747.103500][T22119] R10: dffffc0000000000 R11: fffffbfff28aa50a R12: dffffc0000000000 [ 747.111507][T22119] R13: 0000000000000000 R14: ffff88805f283c80 R15: 1ffff92000907f80 [ 747.119483][T22119] FS: 00007fb4c88256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 747.128410][T22119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.134985][T22119] CR2: 00007fb4c8804d58 CR3: 000000004a598000 CR4: 00000000003526f0 [ 747.142962][T22119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.150944][T22119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.159439][T22119] Call Trace: [ 747.162712][T22119] [ 747.165643][T22119] ? __die_body+0x5f/0xb0 [ 747.169984][T22119] ? die_addr+0xb0/0xe0 [ 747.174142][T22119] ? exc_general_protection+0x3dd/0x5d0 [ 747.179700][T22119] ? asm_exc_general_protection+0x26/0x30 [ 747.185432][T22119] ? bpf_map_offload_map_alloc+0x19a/0x910 [ 747.191260][T22119] ? __pfx_bpf_map_offload_map_alloc+0x10/0x10 [ 747.197412][T22119] ? __pfx___might_resched+0x10/0x10 [ 747.202721][T22119] ? __might_fault+0xaa/0x120 [ 747.207396][T22119] ? __pfx_lock_release+0x10/0x10 [ 747.212435][T22119] ? array_map_alloc_check+0x287/0x350 [ 747.217907][T22119] map_create+0x946/0x11c0 [ 747.222338][T22119] __sys_bpf+0x6d3/0x820 [ 747.226589][T22119] ? __pfx___sys_bpf+0x10/0x10 [ 747.231411][T22119] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.237403][T22119] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.243737][T22119] ? do_syscall_64+0x100/0x230 [ 747.248505][T22119] __x64_sys_bpf+0x7c/0x90 [ 747.252926][T22119] do_syscall_64+0xf3/0x230 [ 747.257443][T22119] ? clear_bhb_loop+0x35/0x90 [ 747.262142][T22119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.268045][T22119] RIP: 0033:0x7fb4c798d169 [ 747.272458][T22119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.292062][T22119] RSP: 002b:00007fb4c8825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 747.300476][T22119] RAX: ffffffffffffffda RBX: 00007fb4c7ba5fa0 RCX: 00007fb4c798d169 [ 747.308450][T22119] RDX: 0000000000000048 RSI: 0000400000000340 RDI: 0000000000000000 [ 747.316420][T22119] RBP: 00007fb4c7a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 747.324407][T22119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.332376][T22119] R13: 0000000000000000 R14: 00007fb4c7ba5fa0 R15: 00007fff180dc568 [ 747.340349][T22119] [ 747.343363][T22119] Modules linked in: [ 747.353319][T22119] ---[ end trace 0000000000000000 ]--- [ 747.368463][T22129] netlink: 'syz.1.4505': attribute type 4 has an invalid length. [ 747.379690][T22119] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 747.386144][T22119] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 747.417666][T22119] RSP: 0018:ffffc9000483fbc0 EFLAGS: 00010203 [ 747.427369][T22119] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: 0000000000080000 [ 747.445428][T22119] RDX: ffffc9000bc21000 RSI: 00000000000000d5 RDI: 00000000000000d6 [ 747.453566][T22119] RBP: ffffc9000483fcd8 R08: ffffffff9455284f R09: 1ffffffff28aa509 [ 747.558954][T22119] R10: dffffc0000000000 R11: fffffbfff28aa50a R12: dffffc0000000000 [ 747.577787][T22119] R13: 0000000000000000 R14: ffff88805f283c80 R15: 1ffff92000907f80 [ 747.607625][T22119] FS: 00007fb4c88256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 747.627870][T22119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.634567][T22119] CR2: 00007fbc9b775f98 CR3: 000000004a598000 CR4: 00000000003526f0 [ 747.657592][T22119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.665678][T22119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.674182][T22119] Kernel panic - not syncing: Fatal exception [ 747.680603][T22119] Kernel Offset: disabled [ 747.684922][T22119] Rebooting in 86400 seconds..