last executing test programs: 1m44.725764067s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x44}}, 0x0) 1m31.49904818s ago: executing program 3 (id=535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 1m30.412657348s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x44}}, 0x0) 1m17.046728779s ago: executing program 3 (id=535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 1m15.799756007s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x44}}, 0x0) 1m5.090926083s ago: executing program 0 (id=1472): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x4000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="f7ffffff", 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r9, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000829bd7000fddbdf2514007932bd27b951c1ffffffffffffffff3030303a30303a31302e3000000000080003000300000008000b00380b000006001100020000000800150000000000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4040) 1m4.758780821s ago: executing program 0 (id=1475): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 1m4.335745343s ago: executing program 0 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300"], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r7, 0x8924, &(0x7f0000000000)) 1m3.864035058s ago: executing program 3 (id=535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 1m2.655092607s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x44}}, 0x0) 47.784471916s ago: executing program 3 (id=535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 46.024366941s ago: executing program 0 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300"], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r7, 0x8924, &(0x7f0000000000)) 45.517148942s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x44}}, 0x0) 31.689419643s ago: executing program 3 (id=535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 30.818716836s ago: executing program 0 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300"], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r7, 0x8924, &(0x7f0000000000)) 29.726607168s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x44}}, 0x0) 17.348117786s ago: executing program 1 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'U'}]}], {0x14}}, 0x84}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x7}, {0x0, 0x0, 0x0, 0x81}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r5, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000300)={0x7, [0x5, 0x21e0, 0x6, 0x5, 0x0, 0x1000, 0x3]}, &(0x7f0000000480)=0x12) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000380)=""/171, &(0x7f0000000280)=0xab) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) sendto$inet6(r1, &(0x7f0000000440)='0', 0x1, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000061120000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.093412298s ago: executing program 4 (id=1700): r0 = socket$packet(0x11, 0x3, 0x300) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x8, 0xed4, 0x3a4}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xc6b}, @device_b, @broadcast, @initial, {0x9, 0x6}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x22, @val={0x8c, 0x18, {0x929, "a6e30fd8980a", @long="eafae35a7ffd0df445e96922d063cb15"}}}, 0x38) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x4048000) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000002c0)) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x7, 0xd, 0x3, 0x27}]}, 0x10) (async) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="299b5429af691ef36c16ee00963df3f432dfbb1c1525d98d7707a0c5abad482bfa711b7ddb049e7fa7622a8e0c8c7cd4cac1df3f3a9784584186", 0x3a}, {&(0x7f00000003c0)="b0a5be8d145e9ce291b3e57e1d1473ce16c9a48b0cdf57201721e93ed0988893619d79869fb59ec4fe986014dabf32fe5411e745bb07697f8a44c82980e57dc9d0dc77c511a2e35a64a3bf92ae34386d32e0f783ec2d395055f3c605ad6a89b26738ed1b2df9fb9b262251f527bfd6ef7fc9d5b7a75c7689afb3f7b0ffe65c301279ba8b0016fa381b884fc93beb31aa809da6eea39887f26f4a49bf05fe0d0d03f5d98fa981", 0xa6}], 0x2, &(0x7f00000004c0)=[{0x28, 0x6, 0x26, "daab7f1cc19cf632136797d666ea7b308396d8b1e4"}], 0x28}, 0x2400c0c4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x80000000}, &(0x7f0000000580)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000005c0)={r5, @in6={{0xa, 0x4e23, 0x9, @private1, 0xf299}}, [0x8, 0x4, 0x4, 0x100, 0x5, 0x5, 0x8, 0xa3d9, 0x6, 0x3, 0xfff, 0xd, 0x2, 0x1, 0x361]}, &(0x7f00000006c0)=0x100) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00'}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd0, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r1) (async) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000b80)=0x1, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000d00)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)=@deltaction={0xb0, 0x31, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f0a}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000f40)={&(0x7f0000000e40), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x1a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001000)={0x1d8, r10, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 16.776106918s ago: executing program 4 (id=1701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a00)={0x4c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x45}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9010}, 0x91) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="550a00000000000079113000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xc4}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000600000008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000040) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000008c0)={r4, 0x9, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x20, 0x1, 0xff, 0xe, 0xc08, 0x1, 0x1, '\x00', 0x0, r13, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$TIPC_CMD_SET_LINK_TOL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="68001dea", @ANYRES16=r12, @ANYBLOB="01000000000000000000010000000000000007410000004c00180000000065746800"/98], 0x68}}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r11, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x580100}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf4, r14, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4eb9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000810}, 0x400c0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000000000000000000536e0755182d3a624e3f486ad137a0cfe0fdab9c11629df6f9d433106648144f82e408000000179b5dcfb1dcb280f1282531f33e4cca5c3e026d1b487e3d537cc680050a2745c634c428de44a2d801d7cc7400bbd4e7435131869b23fd9a05293b7793b23cdab59989ef60c0e5f837c9b1a9e25faf06d2e0b115cd7118e886edd85d71e011ff9b4685471e58eac1", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="0f0607eb40473af9ff27", @ANYRES16, @ANYBLOB], 0x48}}, 0x2008001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r11) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf25000000000009410000004c00180000000775647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d90d67bc0bc44c2085090aa3e9cb5ef1a00d59e492aefccd2b887bb4dd975d303a88462"], 0x68}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) 16.716052259s ago: executing program 4 (id=1702): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x4000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x4000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70) (async) 16.552526921s ago: executing program 4 (id=1703): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000100)={r5, r5, 0x0, 0xffffffffffffff88, 0x0, 0xc2, 0xff, 0x15be, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) socket$inet(0x2, 0x80000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 16.395902936s ago: executing program 1 (id=1704): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES8=r0], 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x100, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/318, @ANYRESHEX=r0, @ANYRES64=r2], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000600)={r3, 0x8, 0x6, 0x4bb}, &(0x7f0000000640)=0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="000010"]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 16.27292179s ago: executing program 1 (id=1705): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x1c, "049d826c4f603b9f4750a6ddf1274e4ff4eacae309f8d027d7098cb8"}, &(0x7f0000000380)=0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 16.062679618s ago: executing program 1 (id=1706): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080)="0ab390107f", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, 0x8) (async) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async, rerun: 64) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) sendto$inet(r3, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) (rerun: 32) 15.627670128s ago: executing program 1 (id=1707): r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/63, 0x3f, 0x20, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @remote, 0xde4a}}, 0x24) sendto$rxrpc(r0, &(0x7f0000000080)="db798b0fbd4f4c1fd03daf67f1d3", 0xe, 0x4001, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x24) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) recvfrom$rxrpc(r0, &(0x7f0000000180)=""/75, 0x4b, 0x101, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) (async) recvfrom$rxrpc(r0, &(0x7f0000000180)=""/75, 0x4b, 0x101, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x24) (async) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x24) recvfrom$rxrpc(r0, &(0x7f0000000280)=""/125, 0x7d, 0x2003, &(0x7f0000000300)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @remote, 0x4}}, 0x24) recvfrom$rxrpc(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000001340)=""/17, 0x11, 0x40000020, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001380), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001380), 0x8) recvmsg$unix(r3, &(0x7f00000027c0)={&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000001440)=""/30, 0x1e}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/42, 0x2a}, {&(0x7f0000002580)=""/180, 0xb4}, {&(0x7f0000002640)=""/43, 0x2b}], 0x7, &(0x7f0000002700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0xe}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) close(r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002a80)={'tunl0\x00', &(0x7f0000002a00)={'gretap0\x00', 0x0, 0x80, 0x80, 0xb, 0xb207, {{0x17, 0x4, 0x0, 0x3f, 0x5c, 0x68, 0x0, 0x0, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @broadcast, {[@rr={0x7, 0x13, 0x4, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x10, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0x7, [@local, @private=0xa010100, @loopback, @local, @remote]}, @rr={0x7, 0xb, 0x39, [@empty, @broadcast]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@bloom_filter={0x1e, 0x4fd, 0xfff, 0x3, 0x10000, 0x1, 0x81d5, '\x00', 0x0, r4, 0x5, 0x2, 0x0, 0x8, @void, @value, @value=r4}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@bloom_filter={0x1e, 0x4fd, 0xfff, 0x3, 0x10000, 0x1, 0x81d5, '\x00', 0x0, r4, 0x5, 0x2, 0x0, 0x8, @void, @value, @value=r4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002bc0)=@bpf_ext={0x1c, 0x12, &(0x7f0000002900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfdc, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x7, 0x0, 0x0, 0x9, 0x4f1733b46fb30657, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000029c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x22, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002ac0)={0x5, 0x90, 0x13, 0x3}, 0x10, 0x16590, r7, 0x0, &(0x7f0000002b80)=[r11, r10, r13, r7, r3], 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002bc0)=@bpf_ext={0x1c, 0x12, &(0x7f0000002900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfdc, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x7, 0x0, 0x0, 0x9, 0x4f1733b46fb30657, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000029c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x22, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002ac0)={0x5, 0x90, 0x13, 0x3}, 0x10, 0x16590, r7, 0x0, &(0x7f0000002b80)=[r11, r10, r13, r7, r3], 0x0, 0x10, 0x6, @void, @value}, 0x94) recvfrom$rxrpc(r2, &(0x7f0000002c80)=""/104, 0x68, 0x12040, &(0x7f0000002d00)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @loopback, 0x4d}}, 0x24) (async) recvfrom$rxrpc(r2, &(0x7f0000002c80)=""/104, 0x68, 0x12040, &(0x7f0000002d00)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @loopback, 0x4d}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000002d40)=""/36, 0x24, 0x10102, &(0x7f0000002d80)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x800}}, 0x24) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000002d40)=""/36, 0x24, 0x10102, &(0x7f0000002d80)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x800}}, 0x24) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), r8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x110, 0x5, &(0x7f0000002e00)=[0x1, 0x4], 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x64, r14, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xba}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x80000001}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x64}}, 0x4040) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000002f80)={0x0, 0x9}) recvfrom$rxrpc(r11, &(0x7f0000002fc0)=""/4096, 0x1000, 0x80000003, &(0x7f0000003fc0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010101}}, 0x24) write$tun(r6, &(0x7f0000004000)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "3a7e1c", 0x18c, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x87, 0x8, 0x2, 0x1, 0x0, [@mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}, @srh={0x3c, 0x14, 0x4, 0xa, 0x7, 0x60, 0xf84d, [@private2, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast2, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1f}]}, @fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x67}, @srh={0x0, 0xa, 0x4, 0x5, 0x42, 0x20, 0x5, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x0, 0xd, 0x3, 0x2, [@remote, @private1]}}}}}}}, 0x1c6) recvfrom$rxrpc(r3, &(0x7f0000004200)=""/172, 0xac, 0x41, &(0x7f00000042c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) sendmsg$NFT_BATCH(r6, &(0x7f0000004680)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004640)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0xca, 0xc, "f1ee3a93e0e93eb92f4088509e5d1cbd83aaab0f98236644b13ca6b6fa0a2d886b7226c939c9e3ef503da4de45ea0988f0c8590ad1eb33c22a09f9bc8e28ca6b05af08cb4c1908d5ad0e0dbd0b505e9b3376ae3b21c6d8824d1ed6376fbb1a89adc9359186451d39fec8212834b3a1a2703809efca90deab63fb58000caadf2b83662721037a6f928a890a2f22557d7e3f71d377495181398eb8e183fb007c19ac5ab7b219d3d4d7705bc9bf9a4f50b9e65905e4f36b0a072f85d947f6b28d3007260abe1b3f"}]}, @NFT_MSG_DELFLOWTABLE={0x174, 0x18, 0xa, 0x80, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000040) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000004680)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004640)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0xca, 0xc, "f1ee3a93e0e93eb92f4088509e5d1cbd83aaab0f98236644b13ca6b6fa0a2d886b7226c939c9e3ef503da4de45ea0988f0c8590ad1eb33c22a09f9bc8e28ca6b05af08cb4c1908d5ad0e0dbd0b505e9b3376ae3b21c6d8824d1ed6376fbb1a89adc9359186451d39fec8212834b3a1a2703809efca90deab63fb58000caadf2b83662721037a6f928a890a2f22557d7e3f71d377495181398eb8e183fb007c19ac5ab7b219d3d4d7705bc9bf9a4f50b9e65905e4f36b0a072f85d947f6b28d3007260abe1b3f"}]}, @NFT_MSG_DELFLOWTABLE={0x174, 0x18, 0xa, 0x80, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000040) bind$rxrpc(r5, &(0x7f00000046c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @mcast1, 0x5}}, 0x24) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x7c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x7c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) 15.575122664s ago: executing program 1 (id=1708): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15.516832427s ago: executing program 4 (id=1709): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x24c, 0x31, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59e7}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x44, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2400000}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x180000}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe656}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x24c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 15.470907942s ago: executing program 3 (id=535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 15.428192787s ago: executing program 0 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300"], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r7, 0x8924, &(0x7f0000000000)) 15.427997872s ago: executing program 4 (id=1710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000400)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) 218.720762ms ago: executing program 32 (id=1708): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 33 (id=1710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000400)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) kernel console output (not intermixed with test programs): 86][ T5988] hsr_slave_1: left promiscuous mode [ 253.912843][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.921500][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.938128][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.954162][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.964014][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.973530][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.982978][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.994741][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.000927][ T5988] veth1_macvtap: left promiscuous mode [ 254.007878][ T5988] veth0_macvtap: left promiscuous mode [ 254.014077][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.020277][ T5988] veth1_vlan: left promiscuous mode [ 254.026647][ T5988] veth0_vlan: left promiscuous mode [ 254.479252][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 254.520040][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 255.099748][ T5836] Bluetooth: hci2: command tx timeout [ 255.355119][T10329] chnl_net:caif_netlink_parms(): no params data found [ 255.762005][ T5983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.850807][ T5983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.897882][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.899156][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.907653][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.922772][T10329] bridge_slave_0: entered allmulticast mode [ 255.936197][T10329] bridge_slave_0: entered promiscuous mode [ 256.062510][ T5836] Bluetooth: hci4: command tx timeout [ 256.083277][ T5983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.174776][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.208062][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.238184][T10400] ip6t_srh: unknown srh match flags 4001 [ 256.248115][T10329] bridge_slave_1: entered allmulticast mode [ 256.264866][T10329] bridge_slave_1: entered promiscuous mode [ 256.417980][ T5983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.540033][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.565250][T10348] chnl_net:caif_netlink_parms(): no params data found [ 256.614860][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.855502][T10329] team0: Port device team_slave_0 added [ 256.905394][T10329] team0: Port device team_slave_1 added [ 257.054113][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.062661][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.089974][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.105646][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.123509][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.161354][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.185912][ T5836] Bluetooth: hci2: command tx timeout [ 257.260397][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.271724][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.280500][T10348] bridge_slave_0: entered allmulticast mode [ 257.288599][T10348] bridge_slave_0: entered promiscuous mode [ 257.339088][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.346318][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.375376][T10348] bridge_slave_1: entered allmulticast mode [ 257.411354][T10348] bridge_slave_1: entered promiscuous mode [ 257.470307][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 257.500859][T10436] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 257.512535][T10436] netlink: 'syz.1.1231': attribute type 2 has an invalid length. [ 257.520576][T10436] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 257.529245][T10436] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1231'. [ 257.541712][T10329] hsr_slave_0: entered promiscuous mode [ 257.548418][T10329] hsr_slave_1: entered promiscuous mode [ 257.556909][T10329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.564948][T10329] Cannot create hsr debugfs directory [ 257.625159][ T5983] bridge_slave_1: left allmulticast mode [ 257.645549][ T5983] bridge_slave_1: left promiscuous mode [ 257.660070][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.679369][ T5983] bridge_slave_0: left allmulticast mode [ 257.685347][ T5983] bridge_slave_0: left promiscuous mode [ 257.719918][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.141904][ T5836] Bluetooth: hci4: command tx timeout [ 258.156549][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.167986][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.178680][ T5983] bond0 (unregistering): Released all slaves [ 258.194377][T10438] tipc: Started in network mode [ 258.199617][T10438] tipc: Node identity 2e1deeaf361c, cluster identity 4711 [ 258.207002][T10438] tipc: Enabled bearer , priority 0 [ 258.231161][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.258685][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.343663][T10439] syzkaller0: entered promiscuous mode [ 258.372593][T10439] syzkaller0: entered allmulticast mode [ 258.407202][T10446] tipc: Resetting bearer [ 258.418067][T10452] netem: change failed [ 258.423671][T10453] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1232'. [ 258.477763][T10437] tipc: Resetting bearer [ 258.507693][T10437] tipc: Disabling bearer [ 258.570715][T10348] team0: Port device team_slave_0 added [ 258.708659][T10348] team0: Port device team_slave_1 added [ 258.753068][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1240'. [ 258.808538][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.816133][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.865676][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.933528][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.960454][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.998348][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.051670][ T5983] hsr_slave_0: left promiscuous mode [ 259.062068][ T5983] hsr_slave_1: left promiscuous mode [ 259.069037][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.078001][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.091776][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.099768][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.126770][ T5983] veth1_macvtap: left promiscuous mode [ 259.139780][ T5983] veth0_macvtap: left promiscuous mode [ 259.150000][ T5983] veth1_vlan: left promiscuous mode [ 259.162132][ T5983] veth0_vlan: left promiscuous mode [ 259.190114][T10480] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.264645][ T5836] Bluetooth: hci2: command tx timeout [ 259.663207][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 259.705534][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 260.130762][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 260.221996][ T5836] Bluetooth: hci4: command tx timeout [ 260.340011][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1246'. [ 260.418295][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1247'. [ 260.428664][T10348] hsr_slave_0: entered promiscuous mode [ 260.456397][T10348] hsr_slave_1: entered promiscuous mode [ 260.465020][T10348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.465267][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1247'. [ 260.474046][T10348] Cannot create hsr debugfs directory [ 261.024530][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.259695][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1255'. [ 261.284500][T10524] xt_hashlimit: size too large, truncated to 1048576 [ 261.346195][ T5836] Bluetooth: hci2: command tx timeout [ 261.374271][T10528] C: renamed from lo (while UP) [ 261.409472][T10528] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.650571][T10329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.691927][T10329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.778232][T10545] nbd: must specify an index to disconnect [ 261.821308][T10329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.878054][T10329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.300056][ T5836] Bluetooth: hci4: command tx timeout [ 262.323993][T10329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.390296][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 262.478683][T10329] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.555711][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.562991][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.672215][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.679460][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.719742][T10348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.746212][T10348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.770558][T10580] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 262.779251][T10580] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1271'. [ 262.824294][T10578] tipc: Resetting bearer [ 262.836425][T10348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.860679][ T5919] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.911866][T10348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.056041][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 263.077716][T10587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'. [ 263.221205][ T5837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.336713][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.471728][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.509265][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.516482][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.561997][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.569357][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.599358][T10613] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 263.816741][T10329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.928248][T10621] __nla_validate_parse: 5 callbacks suppressed [ 263.928270][T10621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1282'. [ 263.997104][T10329] veth0_vlan: entered promiscuous mode [ 264.044844][T10329] veth1_vlan: entered promiscuous mode [ 264.164274][T10329] veth0_macvtap: entered promiscuous mode [ 264.205891][T10329] veth1_macvtap: entered promiscuous mode [ 264.258663][T10329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.291680][T10329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.308410][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.326609][T10329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.336942][T10329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.376585][T10329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.399090][T10329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.613400][T10643] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1288'. [ 264.635750][T10348] veth0_vlan: entered promiscuous mode [ 264.643947][T10643] sctp: [Deprecated]: syz.1.1288 (pid 10643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.643947][T10643] Use struct sctp_sack_info instead [ 264.690504][T10647] netlink: 'syz.0.1290': attribute type 39 has an invalid length. [ 264.837006][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.851426][T10348] veth1_vlan: entered promiscuous mode [ 264.865680][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.955121][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.980451][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.062597][T10348] veth0_macvtap: entered promiscuous mode [ 265.118171][T10348] veth1_macvtap: entered promiscuous mode [ 265.186191][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.203606][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.266032][T10348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.298383][T10348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.332039][T10348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.369747][T10348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.947326][ T5981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.985733][T10692] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 266.046853][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.080170][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.103145][ T5981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.194189][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.203719][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.306389][ T5981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.365783][ T5981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.551802][ T5981] bridge_slave_1: left allmulticast mode [ 266.557612][ T5981] bridge_slave_1: left promiscuous mode [ 266.564490][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.576551][ T5981] bridge_slave_0: left allmulticast mode [ 266.582663][ T5981] bridge_slave_0: left promiscuous mode [ 266.588646][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.117349][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.133744][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.149173][ T5981] bond0 (unregistering): Released all slaves [ 267.180581][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.190004][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.202164][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.225707][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.243276][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.443507][ T5981] hsr_slave_0: left promiscuous mode [ 267.450355][ T5981] hsr_slave_1: left promiscuous mode [ 267.456487][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.464302][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.475369][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.483633][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.509980][ T5981] veth1_macvtap: left promiscuous mode [ 267.515678][ T5981] veth0_macvtap: left promiscuous mode [ 267.521740][ T5981] veth1_vlan: left promiscuous mode [ 267.527178][ T5981] veth0_vlan: left promiscuous mode [ 268.057862][T10719] set match dimension is over the limit! [ 268.333826][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 268.394346][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.404568][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.415394][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.424452][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 268.432578][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.442303][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.068475][T10732] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1312'. [ 269.081565][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 269.211862][T10733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.348716][ T5847] Bluetooth: hci2: command tx timeout [ 269.513453][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 269.627225][T10703] chnl_net:caif_netlink_parms(): no params data found [ 269.967865][ T5981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.982501][T10766] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1322'. [ 270.111211][ T5981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.151315][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 270.342708][ T5981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.406263][T10703] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.417382][T10703] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.425922][T10703] bridge_slave_0: entered allmulticast mode [ 270.446810][T10703] bridge_slave_0: entered promiscuous mode [ 270.505897][ T5981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.549089][ T5847] Bluetooth: hci4: command tx timeout [ 270.560861][T10703] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.568159][T10703] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.639107][T10703] bridge_slave_1: entered allmulticast mode [ 270.646576][T10703] bridge_slave_1: entered promiscuous mode [ 270.692321][T10726] chnl_net:caif_netlink_parms(): no params data found [ 270.808544][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 270.830288][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 270.943249][T10703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.965948][T10703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.140551][T10803] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1333'. [ 271.232799][T10703] team0: Port device team_slave_0 added [ 271.310700][T10821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 271.387318][T10703] team0: Port device team_slave_1 added [ 271.429516][ T5847] Bluetooth: hci2: command tx timeout [ 271.449895][T10726] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.480485][T10726] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.504699][T10726] bridge_slave_0: entered allmulticast mode [ 271.532935][T10726] bridge_slave_0: entered promiscuous mode [ 271.610635][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 271.626802][T10726] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.637053][T10726] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.646978][T10726] bridge_slave_1: entered allmulticast mode [ 271.665866][T10726] bridge_slave_1: entered promiscuous mode [ 271.749365][ T5981] bridge_slave_1: left allmulticast mode [ 271.755872][ T5981] bridge_slave_1: left promiscuous mode [ 271.762449][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.780007][ T5981] bridge_slave_0: left allmulticast mode [ 271.786101][ T5981] bridge_slave_0: left promiscuous mode [ 271.797716][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.206775][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.222900][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.227298][T10842] netlink: 'syz.1.1344': attribute type 4 has an invalid length. [ 272.242041][ T5981] bond0 (unregistering): Released all slaves [ 272.257984][T10835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 272.294764][T10703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.305744][T10703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.339132][T10703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.357519][T10703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.365073][T10703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.399111][T10703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.486025][T10726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.536103][T10726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.619051][ T5847] Bluetooth: hci4: command tx timeout [ 272.647027][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'. [ 272.727458][T10845] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 272.818584][T10853] bond3 (unregistering): Released all slaves [ 272.974085][T10726] team0: Port device team_slave_0 added [ 273.023642][T10726] team0: Port device team_slave_1 added [ 273.176065][T10703] hsr_slave_0: entered promiscuous mode [ 273.184107][T10703] hsr_slave_1: entered promiscuous mode [ 273.191312][T10703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.199377][T10703] Cannot create hsr debugfs directory [ 273.251709][T10726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.266976][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.294479][T10726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.326204][ T5981] hsr_slave_0: left promiscuous mode [ 273.334331][ T5981] hsr_slave_1: left promiscuous mode [ 273.341072][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 273.360708][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.372208][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.391407][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.403396][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.425215][ T5981] veth1_macvtap: left promiscuous mode [ 273.431239][ T5981] veth0_macvtap: left promiscuous mode [ 273.437055][ T5981] veth1_vlan: left promiscuous mode [ 273.442683][ T5981] veth0_vlan: left promiscuous mode [ 273.499526][ T5836] Bluetooth: hci2: command tx timeout [ 274.000770][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 274.042544][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 274.445195][T10869] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 274.462040][T10726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.474310][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.506437][T10726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.594230][T10884] __nla_validate_parse: 2 callbacks suppressed [ 274.594250][T10884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1355'. [ 274.699017][ T5836] Bluetooth: hci4: command tx timeout [ 274.822677][T10726] hsr_slave_0: entered promiscuous mode [ 274.839895][T10726] hsr_slave_1: entered promiscuous mode [ 274.856766][T10726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.889898][T10726] Cannot create hsr debugfs directory [ 275.475083][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 275.485828][T10920] netlink: 'syz.1.1365': attribute type 32 has an invalid length. [ 275.579993][ T5836] Bluetooth: hci2: command tx timeout [ 275.665223][T10922] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 275.846522][T10929] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1369'. [ 275.882514][T10929] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 275.911669][T10929] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1369'. [ 275.950402][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1369'. [ 276.045702][T10703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.087631][T10703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.174527][T10703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.231329][T10703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.337294][T10948] bridge0: port 3(batadv0) entered blocking state [ 276.358316][T10948] bridge0: port 3(batadv0) entered disabled state [ 276.371177][T10948] batadv0: entered allmulticast mode [ 276.378638][T10948] batadv0: entered promiscuous mode [ 276.779532][ T5836] Bluetooth: hci4: command tx timeout [ 276.879451][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 276.889255][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 276.953988][T10703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.239774][T10960] infiniband syz0: set down [ 277.244737][T10960] infiniband syz0: added ipvlan1 [ 277.260511][T10703] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.293016][T10960] RDS/IB: syz0: added [ 277.298697][T10960] smc: adding ib device syz0 with port count 1 [ 277.323532][T10960] smc: ib device syz0 port 1 has pnetid [ 277.452588][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.459814][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.477992][T10985] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1384'. [ 277.500769][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.508063][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.667850][T10991] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 277.744244][T10726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.796781][T10726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.853482][T10726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.910003][T10726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.060033][T11004] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1389'. [ 278.264040][T10726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.332839][T10726] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.400123][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.407501][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.447041][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.454606][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.608344][T10703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.772771][T10703] veth0_vlan: entered promiscuous mode [ 278.822757][T10703] veth1_vlan: entered promiscuous mode [ 278.950232][T10703] veth0_macvtap: entered promiscuous mode [ 278.977295][T10703] veth1_macvtap: entered promiscuous mode [ 279.038232][T10703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.093823][T10703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.143415][T10703] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.163583][T10703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.175019][T10703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.187377][T10703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.219257][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1395'. [ 279.238250][T11025] netlink: 'syz.4.1395': attribute type 7 has an invalid length. [ 279.258998][T11025] netlink: 'syz.4.1395': attribute type 8 has an invalid length. [ 279.276128][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 279.321548][T11025] erspan0: entered promiscuous mode [ 279.328158][T11025] gretap0: entered promiscuous mode [ 279.337097][T11025] erspan0: left promiscuous mode [ 279.344012][T11025] gretap0: left promiscuous mode [ 279.374215][T10726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.475786][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.522997][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.625081][T10726] veth0_vlan: entered promiscuous mode [ 279.657209][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.676367][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.732712][T10726] veth1_vlan: entered promiscuous mode [ 279.879624][T10726] veth0_macvtap: entered promiscuous mode [ 279.893477][T10726] veth1_macvtap: entered promiscuous mode [ 280.070463][T10726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.104357][T10726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.214164][T10726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.235155][T10726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.259637][T10726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.268766][T10726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.454923][ T5981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.564815][ T5981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.686256][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.698438][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.748395][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.757141][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.833407][ T5981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.936139][ T5981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.085830][ T5981] bridge_slave_1: left allmulticast mode [ 281.097590][ T5981] bridge_slave_1: left promiscuous mode [ 281.105229][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.116267][ T5981] bridge_slave_0: left allmulticast mode [ 281.122381][ T5981] bridge_slave_0: left promiscuous mode [ 281.128184][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.526758][T11051] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 281.707948][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.729592][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.746095][ T5981] bond0 (unregistering): Released all slaves [ 281.903377][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.913866][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.922621][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.933417][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.941671][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.413066][ T5981] hsr_slave_0: left promiscuous mode [ 282.425893][ T5981] hsr_slave_1: left promiscuous mode [ 282.441164][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.449331][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.457841][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.465717][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.487732][ T5981] veth1_macvtap: left promiscuous mode [ 282.493493][ T5981] veth0_macvtap: left promiscuous mode [ 282.499850][ T5981] veth1_vlan: left promiscuous mode [ 282.505280][ T5981] veth0_vlan: left promiscuous mode [ 282.818269][T11069] netlink: 'syz.0.1407': attribute type 58 has an invalid length. [ 282.828463][T11069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1407'. [ 282.963674][T11075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 283.166512][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.176318][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.192673][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.208948][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.216899][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.428656][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 283.474433][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 283.888568][T11070] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1408'. [ 283.983014][ T5836] Bluetooth: hci2: command tx timeout [ 284.238496][T11089] IPv6: NLM_F_REPLACE set, but no existing node found! [ 284.416243][T11098] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 284.566141][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1414'. [ 284.638550][T11054] chnl_net:caif_netlink_parms(): no params data found [ 284.684687][T11104] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 284.713424][T11104] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 284.734525][ T30] audit: type=1800 audit(1748492286.862:2): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1417" name="memory.events" dev="tmpfs" ino=2203 res=0 errno=0 [ 284.773503][ T5981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.814428][T11112] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1417'. [ 284.853459][ T30] audit: type=1804 audit(1748492286.982:3): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1417" name="/newroot/430/memory.events" dev="tmpfs" ino=2203 res=1 errno=0 [ 284.918742][ T5981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.091063][ T5981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.218885][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.229116][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.236403][T11054] bridge_slave_0: entered allmulticast mode [ 285.245633][T11054] bridge_slave_0: entered promiscuous mode [ 285.260957][ T5836] Bluetooth: hci4: command tx timeout [ 285.277398][ T5981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.301345][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.315536][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.323335][T11054] bridge_slave_1: entered allmulticast mode [ 285.346731][T11054] bridge_slave_1: entered promiscuous mode [ 285.423882][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.446144][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.463455][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 285.567339][T11054] team0: Port device team_slave_0 added [ 285.577951][T11054] team0: Port device team_slave_1 added [ 285.663864][T11140] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1424'. [ 285.701997][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.709073][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.740659][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.755408][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.764307][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.791586][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.821634][T11078] chnl_net:caif_netlink_parms(): no params data found [ 285.852995][ T5981] bridge_slave_1: left allmulticast mode [ 285.859817][ T5981] bridge_slave_1: left promiscuous mode [ 285.865623][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.875466][ T5981] bridge_slave_0: left allmulticast mode [ 285.881691][ T5981] bridge_slave_0: left promiscuous mode [ 285.887486][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.059000][ T5836] Bluetooth: hci2: command tx timeout [ 286.342543][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.354630][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.365831][ T5981] bond0 (unregistering): Released all slaves [ 286.464596][ T5836] Bluetooth: hci0: command tx timeout [ 286.576299][T11054] hsr_slave_0: entered promiscuous mode [ 286.585645][T11054] hsr_slave_1: entered promiscuous mode [ 286.592372][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.601286][T11054] Cannot create hsr debugfs directory [ 286.619100][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.035077][T11078] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.047693][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.056805][T11078] bridge_slave_0: entered allmulticast mode [ 287.069810][T11078] bridge_slave_0: entered promiscuous mode [ 287.126713][T11078] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.174262][T11078] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.194443][T11078] bridge_slave_1: entered allmulticast mode [ 287.211673][T11078] bridge_slave_1: entered promiscuous mode [ 287.230088][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 287.349045][ T5836] Bluetooth: hci4: command tx timeout [ 287.450753][T11078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.501848][ T5981] hsr_slave_0: left promiscuous mode [ 287.508132][ T5981] hsr_slave_1: left promiscuous mode [ 287.518352][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.527732][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.538948][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.546488][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.571106][ T5981] veth1_macvtap: left promiscuous mode [ 287.577420][ T5981] veth0_macvtap: left promiscuous mode [ 287.585558][ T5981] veth1_vlan: left promiscuous mode [ 287.591321][ T5981] veth0_vlan: left promiscuous mode [ 288.063153][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 288.102268][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 288.149012][ T5836] Bluetooth: hci2: command tx timeout [ 288.534046][T11078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.755108][T11078] team0: Port device team_slave_0 added [ 288.798157][T11206] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 288.810410][T11078] team0: Port device team_slave_1 added [ 288.903411][T11078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.924091][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.967008][T11078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.995983][T11216] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1443'. [ 289.001726][T11078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.024766][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.051435][T11078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.214435][T11078] hsr_slave_0: entered promiscuous mode [ 289.235531][T11078] hsr_slave_1: entered promiscuous mode [ 289.243546][T11078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.264865][T11078] Cannot create hsr debugfs directory [ 289.428299][T11227] batadv0: entered allmulticast mode [ 289.429287][ T5836] Bluetooth: hci4: command tx timeout [ 289.468096][T11226] batadv0: left allmulticast mode [ 289.635966][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1451'. [ 289.704240][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 289.745206][T11054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.771530][T11054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.811060][T11054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.828453][T11054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.078007][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.087091][T11078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.101986][T11078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.117322][T11078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.130615][T11078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.159643][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.189417][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.196832][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.220006][ T5836] Bluetooth: hci2: command tx timeout [ 290.248754][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.256074][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.447877][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.482055][T11253] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.593713][T11078] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.615151][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.622403][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.697510][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.704868][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.717418][T11263] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1461'. [ 290.762252][T11263] 0·: renamed from hsr_slave_1 [ 290.822868][T11263] 0·: entered allmulticast mode [ 290.828489][T11263] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 291.047287][T11273] tipc: Cannot configure node identity twice [ 291.150517][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.245600][T11277] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 291.334630][T11054] veth0_vlan: entered promiscuous mode [ 291.387097][T11054] veth1_vlan: entered promiscuous mode [ 291.428102][T11078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.462480][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 291.475256][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 291.493586][T11054] veth0_macvtap: entered promiscuous mode [ 291.505819][ T5836] Bluetooth: hci4: command tx timeout [ 291.532298][T11054] veth1_macvtap: entered promiscuous mode [ 291.574600][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.612430][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.646405][T11078] veth0_vlan: entered promiscuous mode [ 291.690537][T11054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.699803][T11054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.708649][T11054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.721863][T11054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.750463][T11078] veth1_vlan: entered promiscuous mode [ 291.895510][T11078] veth0_macvtap: entered promiscuous mode [ 291.976977][T11078] veth1_macvtap: entered promiscuous mode [ 291.990903][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.021120][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.043110][T11299] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1469'. [ 292.060027][T11299] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1469'. [ 292.163739][T11078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.183281][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.200820][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.210112][T11304] netlink: 'syz.4.1471': attribute type 2 has an invalid length. [ 292.274970][T11078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.341508][T11078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.353721][T11078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.367320][T11078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.378708][T11078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.676142][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.698678][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.787018][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.804353][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.913776][ T5988] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.934715][ T5988] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.138112][ T5988] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.163012][ T5988] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.271317][ T5988] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.290369][ T5988] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.407068][ T5988] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.440771][ T5988] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.512277][T11336] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 293.811233][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.841473][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.879018][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.887424][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.896372][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.162969][ T5988] bond2 (unregistering): (slave gretap1): Releasing active interface [ 294.962015][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.984093][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.992337][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.003394][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.013356][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.116313][ T5988] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 295.129774][ T5988] bond0 (unregistering): Released all slaves [ 295.145374][ T5988] bond1 (unregistering): Released all slaves [ 295.160456][ T5988] bond2 (unregistering): Released all slaves [ 295.174266][ T5988] bond3 (unregistering): Released all slaves [ 295.322383][ T5988] tipc: Disabling bearer [ 295.337214][ T5988] tipc: Left network mode [ 295.372365][ T5988] IPVS: stopping backup sync thread 10119 ... [ 295.901459][T11345] chnl_net:caif_netlink_parms(): no params data found [ 295.982258][ T5847] Bluetooth: hci0: command tx timeout [ 296.129865][ T5988] hsr_slave_0: left promiscuous mode [ 296.136678][ T5988] hsr_slave_1: left promiscuous mode [ 296.165027][ T5988] veth1_macvtap: left promiscuous mode [ 296.170835][ T5988] veth0_macvtap: left promiscuous mode [ 296.176710][ T5988] veth1_vlan: left promiscuous mode [ 296.246056][T11360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.436598][ T5988] pimreg3 (unregistering): left allmulticast mode [ 296.476310][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.486392][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.495161][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.504944][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.513945][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.624340][ T5998] smc: removing ib device syz0 [ 297.100411][ T5836] Bluetooth: hci2: command tx timeout [ 297.404713][T11345] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.421318][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.453319][T11345] bridge_slave_0: entered allmulticast mode [ 297.462745][T11345] bridge_slave_0: entered promiscuous mode [ 297.578921][T11345] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.598662][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.618704][T11345] bridge_slave_1: entered allmulticast mode [ 297.637508][T11345] bridge_slave_1: entered promiscuous mode [ 297.880783][T11380] netlink: 'syz.1.1490': attribute type 11 has an invalid length. [ 297.888665][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1490'. [ 298.044345][T11385] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 298.052625][T11385] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1492'. [ 298.063840][T11385] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 298.068349][ T5836] Bluetooth: hci0: command tx timeout [ 298.072208][T11385] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 298.180479][T11345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.184694][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1493'. [ 298.215301][T11345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.551669][T11345] team0: Port device team_slave_0 added [ 298.568339][ T5836] Bluetooth: hci4: command tx timeout [ 298.572518][T11345] team0: Port device team_slave_1 added [ 298.658384][T11396] @ÿ: renamed from bond_slave_0 [ 298.681345][T11397] mac80211_hwsim hwsim40 ÿ: renamed from wlan1 [ 298.701336][T11337] chnl_net:caif_netlink_parms(): no params data found [ 298.995068][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 299.004497][T11408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.023906][T11402] bond2: entered promiscuous mode [ 299.046903][T11402] bond2: entered allmulticast mode [ 299.057763][T11402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.179169][ T5836] Bluetooth: hci2: command tx timeout [ 299.291436][T11402] bond2 (unregistering): Released all slaves [ 299.412274][T11345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.420041][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.458984][T11345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.477321][T11345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.484733][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.511486][T11345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.523343][T11407] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 299.658644][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.672066][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.683509][T11337] bridge_slave_0: entered allmulticast mode [ 299.693674][T11337] bridge_slave_0: entered promiscuous mode [ 299.703038][T11337] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.710586][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.717853][T11337] bridge_slave_1: entered allmulticast mode [ 299.726319][T11337] bridge_slave_1: entered promiscuous mode [ 299.832821][T11422] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1503'. [ 299.862627][T11345] hsr_slave_0: entered promiscuous mode [ 299.869569][T11345] hsr_slave_1: entered promiscuous mode [ 299.875993][T11345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.883899][T11345] Cannot create hsr debugfs directory [ 299.907498][T11337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.929201][T11337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.052217][ T5988] IPVS: stop unused estimator thread 0... [ 300.083027][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 300.085730][T11337] team0: Port device team_slave_0 added [ 300.111428][T11427] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1505'. [ 300.124821][T11428] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1505'. [ 300.136024][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 300.151470][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 300.151748][ T5836] Bluetooth: hci0: command tx timeout [ 300.170981][T11337] team0: Port device team_slave_1 added [ 300.285830][T11337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.293322][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.320737][T11337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.374154][T11337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.382136][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.408693][T11337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.580739][ T5988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.619074][ T5836] Bluetooth: hci4: command tx timeout [ 300.730077][ T5988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.779368][T11337] hsr_slave_0: entered promiscuous mode [ 300.789461][T11337] hsr_slave_1: entered promiscuous mode [ 300.795900][T11337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.804157][T11337] Cannot create hsr debugfs directory [ 300.875507][T11363] chnl_net:caif_netlink_parms(): no params data found [ 300.922567][ T5988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.947776][T11451] sctp: [Deprecated]: syz.4.1513 (pid 11451) Use of int in max_burst socket option deprecated. [ 300.947776][T11451] Use struct sctp_assoc_value instead [ 301.094710][ T5988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.259076][ T5836] Bluetooth: hci2: command tx timeout [ 301.341068][T11345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.469556][T11345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.486707][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.494819][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.502799][T11363] bridge_slave_0: entered allmulticast mode [ 301.511167][T11363] bridge_slave_0: entered promiscuous mode [ 301.545890][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.553282][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.561160][T11363] bridge_slave_1: entered allmulticast mode [ 301.568598][T11363] bridge_slave_1: entered promiscuous mode [ 301.606162][T11345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.669235][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.689605][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.716452][T11345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.870678][T11363] team0: Port device team_slave_0 added [ 301.891324][T11363] team0: Port device team_slave_1 added [ 301.972287][ T5988] bridge_slave_1: left allmulticast mode [ 301.998484][ T5988] bridge_slave_1: left promiscuous mode [ 302.005873][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.037625][ T5988] bridge_slave_0: left allmulticast mode [ 302.045036][ T5988] bridge_slave_0: left promiscuous mode [ 302.054399][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.067000][ T5988] bridge_slave_1: left allmulticast mode [ 302.073157][ T5988] bridge_slave_1: left promiscuous mode [ 302.079474][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.090451][ T5988] bridge_slave_0: left allmulticast mode [ 302.096216][ T5988] bridge_slave_0: left promiscuous mode [ 302.102772][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.219368][ T5836] Bluetooth: hci0: command tx timeout [ 302.695916][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.704791][ T5836] Bluetooth: hci4: command tx timeout [ 302.716095][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.726772][ T5988] bond0 (unregistering): Released all slaves [ 302.824155][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.835110][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.845715][ T5988] bond0 (unregistering): Released all slaves [ 302.895620][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.914748][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.941975][T11490] netlink: 'syz.4.1523': attribute type 21 has an invalid length. [ 302.948506][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.997224][T11491] netlink: 'syz.4.1523': attribute type 26 has an invalid length. [ 303.008239][T11490] __nla_validate_parse: 6 callbacks suppressed [ 303.008257][T11490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1523'. [ 303.033009][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.041650][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.081543][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.168098][T11495] xt_hashlimit: invalid interval [ 303.229883][T11363] hsr_slave_0: entered promiscuous mode [ 303.236551][T11363] hsr_slave_1: entered promiscuous mode [ 303.244937][T11363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.253098][T11363] Cannot create hsr debugfs directory [ 303.296357][T11345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.339022][ T5836] Bluetooth: hci2: command tx timeout [ 303.350387][T11345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.373668][T11345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.476827][T11345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.519715][T11502] veth0: entered promiscuous mode [ 303.571083][T11502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.721626][T11502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.750164][T11504] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1527'. [ 303.823323][T11502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.889905][ T5988] hsr_slave_0: left promiscuous mode [ 303.895890][ T5988] hsr_slave_1: left promiscuous mode [ 303.906773][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.914782][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.924057][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.931965][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.944170][ T5988] hsr_slave_0: left promiscuous mode [ 303.952461][ T5988] hsr_slave_1: left promiscuous mode [ 303.958416][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.966517][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.975832][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.984110][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.021315][ T5988] veth1_macvtap: left promiscuous mode [ 304.026915][ T5988] veth0_macvtap: left promiscuous mode [ 304.033141][ T5988] veth1_vlan: left promiscuous mode [ 304.038557][ T5988] veth0_vlan: left promiscuous mode [ 304.045372][ T5988] veth1_macvtap: left promiscuous mode [ 304.051025][ T5988] veth0_macvtap: left promiscuous mode [ 304.056642][ T5988] veth1_vlan: left promiscuous mode [ 304.062194][ T5988] veth0_vlan: left promiscuous mode [ 304.245824][T11507] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1528'. [ 304.646173][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 304.694538][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 304.788908][ T5836] Bluetooth: hci4: command tx timeout [ 305.479307][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 305.530053][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 305.947621][T11502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.000666][T11507] gretap0: entered promiscuous mode [ 306.108105][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 306.134900][T11512] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 306.144040][T11512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.192493][T11337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.250959][T11502] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.264854][T11337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.284945][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.317102][T11337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.377343][T11502] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.411275][T11502] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.432113][T11337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.491523][T11502] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.581056][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.631284][T11502] veth0: left promiscuous mode [ 306.638563][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.645790][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.657947][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.665205][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.776291][T11527] netlink: 'syz.4.1533': attribute type 7 has an invalid length. [ 306.789181][T11527] netlink: 'syz.4.1533': attribute type 8 has an invalid length. [ 306.829809][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 306.844504][T11345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.978555][T11363] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.034803][T11363] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.049371][T11535] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.080540][T11363] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.122592][T11363] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.223092][T11337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.322546][T11337] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.396078][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.403359][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.455435][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.462684][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.527841][T11345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.648324][T11337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.712040][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.773675][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.808286][T11345] veth0_vlan: entered promiscuous mode [ 307.837336][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.844725][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.888313][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.895575][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.978414][T11345] veth1_vlan: entered promiscuous mode [ 308.173153][T11345] veth0_macvtap: entered promiscuous mode [ 308.212369][T11345] veth1_macvtap: entered promiscuous mode [ 308.304280][T11345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.346143][T11345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.407386][T11345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.421074][T11345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.430452][T11345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.439331][T11345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.454878][T11562] netlink: 'syz.4.1542': attribute type 7 has an invalid length. [ 308.506915][T11337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.605094][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1544'. [ 308.614977][T11569] tc_dump_action: action bad kind [ 308.694992][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.810304][T11337] veth0_vlan: entered promiscuous mode [ 308.820216][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.828264][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.886967][T11337] veth1_vlan: entered promiscuous mode [ 308.983527][T11363] veth0_vlan: entered promiscuous mode [ 308.996581][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1546'. [ 309.008507][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1546'. [ 309.029348][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.037531][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.070465][T11363] veth1_vlan: entered promiscuous mode [ 309.160444][T11337] veth0_macvtap: entered promiscuous mode [ 309.185888][T11337] veth1_macvtap: entered promiscuous mode [ 309.325414][T11363] veth0_macvtap: entered promiscuous mode [ 309.342740][T11337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.352582][T11589] netlink: 'syz.4.1549': attribute type 21 has an invalid length. [ 309.374782][T11363] veth1_macvtap: entered promiscuous mode [ 309.393205][T11589] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1549'. [ 309.413561][T11337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.572822][ T5983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.626967][T11337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.647507][T11337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.671409][T11337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.690731][T11337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.718167][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.774258][ T5983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.871021][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.931620][ T5983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.974807][T11363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.001686][T11363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.018899][T11363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.027755][T11363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.096513][ T5983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.240209][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.248524][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.281259][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.298017][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.357891][ T5983] bridge_slave_1: left allmulticast mode [ 310.364434][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.366252][ T5983] bridge_slave_1: left promiscuous mode [ 310.378634][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.385828][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.395938][ T5983] bridge_slave_0: left allmulticast mode [ 310.401937][ T5983] bridge_slave_0: left promiscuous mode [ 310.408373][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.752795][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.764251][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.774915][ T5983] bond0 (unregistering): Released all slaves [ 310.805040][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.818420][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.067202][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1552'. [ 311.273699][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 311.304272][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 311.334438][T11607] netlink: 'syz.1.1553': attribute type 14 has an invalid length. [ 311.351194][T11607] netlink: 'syz.1.1553': attribute type 18 has an invalid length. [ 311.367586][T11606] bond0: entered promiscuous mode [ 311.389959][T11606] bond_slave_0: entered promiscuous mode [ 311.395869][T11606] bond_slave_1: entered promiscuous mode [ 311.449376][T11606] bond0: entered allmulticast mode [ 311.454735][T11606] bond_slave_0: entered allmulticast mode [ 311.467079][T11606] bond_slave_1: entered allmulticast mode [ 311.482083][T11606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.565853][ T5983] hsr_slave_0: left promiscuous mode [ 311.583778][ T5983] hsr_slave_1: left promiscuous mode [ 311.597284][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.606765][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.629818][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.648883][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.664965][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.687668][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.698944][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.709515][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.727831][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.800060][ T5983] veth1_macvtap: left promiscuous mode [ 311.805685][ T5983] veth0_macvtap: left promiscuous mode [ 311.811446][ T5983] veth1_vlan: left promiscuous mode [ 311.816772][T11616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1555'. [ 311.827148][ T5983] veth0_vlan: left promiscuous mode [ 312.269256][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.286308][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.297159][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.319124][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.327002][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.576667][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 312.619619][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 313.463975][T11617] chnl_net:caif_netlink_parms(): no params data found [ 313.647354][ T5983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.722728][T11610] chnl_net:caif_netlink_parms(): no params data found [ 313.745079][ T5847] Bluetooth: hci0: command tx timeout [ 313.791679][T11636] netlink: 'syz.4.1559': attribute type 62 has an invalid length. [ 313.873709][ T5983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.938402][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.951075][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.959535][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.969673][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.978372][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.039460][ T5983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.126927][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.134673][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.143122][T11617] bridge_slave_0: entered allmulticast mode [ 314.153051][T11617] bridge_slave_0: entered promiscuous mode [ 314.176850][ T5983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.231983][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.239841][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.247127][T11617] bridge_slave_1: entered allmulticast mode [ 314.255564][T11617] bridge_slave_1: entered promiscuous mode [ 314.380270][ T5836] Bluetooth: hci2: command tx timeout [ 314.403148][T11610] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.417174][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.425672][T11610] bridge_slave_0: entered allmulticast mode [ 314.442077][T11610] bridge_slave_0: entered promiscuous mode [ 314.472307][T11610] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.489020][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.496674][T11610] bridge_slave_1: entered allmulticast mode [ 314.521906][T11610] bridge_slave_1: entered promiscuous mode [ 314.597809][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.640167][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.691429][T11610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.732568][T11610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.760846][T11617] team0: Port device team_slave_0 added [ 314.831430][T11617] team0: Port device team_slave_1 added [ 314.902339][T11610] team0: Port device team_slave_0 added [ 314.912834][T11610] team0: Port device team_slave_1 added [ 314.972980][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.980910][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.013624][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.108539][T11670] netlink: 'syz.1.1567': attribute type 30 has an invalid length. [ 315.125460][ T5983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.146078][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.153961][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.181848][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.203191][T11610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.210468][T11610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.237201][T11610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.254993][T11610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.262675][T11610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.289233][T11610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.329508][T11670] bond2: entered allmulticast mode [ 315.381825][ T5983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.626178][T11617] hsr_slave_0: entered promiscuous mode [ 315.660463][T11617] hsr_slave_1: entered promiscuous mode [ 315.666963][T11617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.691831][T11617] Cannot create hsr debugfs directory [ 315.821970][ T5836] Bluetooth: hci0: command tx timeout [ 315.847186][ T5983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.934617][T11610] hsr_slave_0: entered promiscuous mode [ 315.948710][T11610] hsr_slave_1: entered promiscuous mode [ 315.955797][T11610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.972000][T11610] Cannot create hsr debugfs directory [ 315.990664][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1574'. [ 316.042720][ T5983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.059161][ T5836] Bluetooth: hci4: command tx timeout [ 316.076289][T11702] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 316.086845][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 316.114959][T11642] chnl_net:caif_netlink_parms(): no params data found [ 316.461866][ T5836] Bluetooth: hci2: command tx timeout [ 316.481324][T11717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 316.717132][T11642] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.725867][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.734642][T11642] bridge_slave_0: entered allmulticast mode [ 316.743102][T11642] bridge_slave_0: entered promiscuous mode [ 316.778436][T11719] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1581'. [ 316.792970][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.803188][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.813999][T11642] bridge_slave_1: entered allmulticast mode [ 316.826228][T11642] bridge_slave_1: entered promiscuous mode [ 316.913180][ T5983] bridge_slave_1: left allmulticast mode [ 316.919341][ T5983] bridge_slave_1: left promiscuous mode [ 316.925264][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.935549][ T5983] bridge_slave_0: left allmulticast mode [ 316.943519][ T5983] bridge_slave_0: left promiscuous mode [ 316.949688][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.963095][ T5983] bridge_slave_1: left allmulticast mode [ 316.970525][ T5983] bridge_slave_1: left promiscuous mode [ 316.976433][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.986433][ T5983] bridge_slave_0: left allmulticast mode [ 316.992767][ T5983] bridge_slave_0: left promiscuous mode [ 316.998689][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.732104][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.745456][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.756112][ T5983] bond0 (unregistering): Released all slaves [ 317.862784][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.874420][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.885584][ T5983] bond0 (unregistering): Released all slaves [ 317.909834][ T5836] Bluetooth: hci0: command tx timeout [ 317.936639][T11642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.048680][T11731] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1584'. [ 318.075932][T11642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.103222][T11733] netlink: 'syz.4.1585': attribute type 21 has an invalid length. [ 318.132344][T11733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.139697][T11733] IPv6: NLM_F_CREATE should be set when creating new route [ 318.146994][T11733] IPv6: NLM_F_CREATE should be set when creating new route [ 318.154291][T11733] IPv6: NLM_F_CREATE should be set when creating new route [ 318.162543][ T5836] Bluetooth: hci4: command tx timeout [ 318.424160][T11642] team0: Port device team_slave_0 added [ 318.472963][T11642] team0: Port device team_slave_1 added [ 318.539086][ T5836] Bluetooth: hci2: command tx timeout [ 318.664236][T11642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.675861][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.715190][T11642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.757170][T11642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.764449][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.791048][T11642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.906208][T11642] hsr_slave_0: entered promiscuous mode [ 318.915988][T11642] hsr_slave_1: entered promiscuous mode [ 318.934286][T11642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.942742][T11642] Cannot create hsr debugfs directory [ 319.129725][ T5983] hsr_slave_0: left promiscuous mode [ 319.135859][ T5983] hsr_slave_1: left promiscuous mode [ 319.144824][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.152635][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.161067][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.168692][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.176959][T11764] netlink: 'syz.1.1592': attribute type 21 has an invalid length. [ 319.194078][ T5983] hsr_slave_0: left promiscuous mode [ 319.202854][ T5983] hsr_slave_1: left promiscuous mode [ 319.213714][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.221375][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.232243][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.240722][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.280093][ T5983] veth1_macvtap: left promiscuous mode [ 319.285736][ T5983] veth0_macvtap: left promiscuous mode [ 319.292059][ T5983] veth1_vlan: left promiscuous mode [ 319.297479][ T5983] veth0_vlan: left promiscuous mode [ 319.306890][ T5983] veth1_macvtap: left promiscuous mode [ 319.312522][ T5983] veth0_macvtap: left promiscuous mode [ 319.318157][ T5983] veth1_vlan: left promiscuous mode [ 319.323772][ T5983] veth0_vlan: left promiscuous mode [ 319.941859][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 319.983002][ T5836] Bluetooth: hci0: command tx timeout [ 319.997812][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 320.219714][ T5836] Bluetooth: hci4: command tx timeout [ 320.633842][ T5836] Bluetooth: hci2: command tx timeout [ 320.768411][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 320.812825][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 321.245939][T11764] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1592'. [ 321.652616][T11610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.689272][T11610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.715155][T11610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.750852][T11610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.896679][T11788] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.935254][T11617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.998146][T11617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.019990][T11786] openvswitch: netlink: Actions may not be safe on all matching packets [ 322.087281][T11617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.198087][T11617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.299248][ T5836] Bluetooth: hci4: command tx timeout [ 322.353219][T11804] net veth1_virt_wifi : renamed from virt_wifi0 [ 322.465045][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.605283][T11610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.794173][T11610] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.802891][T11642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.816885][T11642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.841603][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.876189][T11642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.891743][T11819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1608'. [ 322.904419][T11642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.966952][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.974226][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.993126][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.000414][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.085290][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.164626][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.172061][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.222302][T11610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.263781][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.271251][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.362850][T11834] IPVS: ip_vs_edit_dest(): server weight less than zero [ 323.400064][T11835] IPVS: ip_vs_edit_dest(): server weight less than zero [ 323.494528][T11617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.505305][T11617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.653542][T11642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.741379][T11642] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.775000][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.782560][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.847310][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.854549][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.973325][T11610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.069311][T11859] lo: entered allmulticast mode [ 324.079327][T11859] lo: left allmulticast mode [ 324.229882][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.237882][T11862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.251267][T11610] veth0_vlan: entered promiscuous mode [ 324.307490][T11610] veth1_vlan: entered promiscuous mode [ 324.417467][T11617] veth0_vlan: entered promiscuous mode [ 324.432908][T11610] veth0_macvtap: entered promiscuous mode [ 324.435135][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 324.463358][T11610] veth1_macvtap: entered promiscuous mode [ 324.468643][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 324.482793][T11617] veth1_vlan: entered promiscuous mode [ 324.543471][T11610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.556333][T11610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.593736][T11610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.605061][T11610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.615591][T11610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.626020][T11610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.659959][T11617] veth0_macvtap: entered promiscuous mode [ 324.686556][T11642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.720406][T11617] veth1_macvtap: entered promiscuous mode [ 324.805721][T11879] veth0_to_hsr: entered promiscuous mode [ 324.836493][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.874566][T11878] veth0_to_hsr: left promiscuous mode [ 324.895473][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.914532][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.927454][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.970853][T11617] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.000296][T11617] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.014242][T11617] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.023737][T11617] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.087476][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.113388][T11642] veth0_vlan: entered promiscuous mode [ 325.120193][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.213197][T11642] veth1_vlan: entered promiscuous mode [ 325.282661][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.300184][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.411172][T11642] veth0_macvtap: entered promiscuous mode [ 325.433454][T11642] veth1_macvtap: entered promiscuous mode [ 325.442192][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.468279][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.608623][T11642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.725101][ T5986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.810976][T11642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.857588][ T5986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.876003][T11642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.897073][T11642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.919180][T11642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.928159][T11642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.006625][ T5986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.078012][ T5986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.137891][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.148552][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.210844][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.242752][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.300320][ T5986] bridge_slave_1: left allmulticast mode [ 326.307681][ T5986] bridge_slave_1: left promiscuous mode [ 326.336039][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.363329][ T5986] bridge_slave_0: left allmulticast mode [ 326.383603][ T5986] bridge_slave_0: left promiscuous mode [ 326.398851][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.541820][T11906] xt_hashlimit: size too large, truncated to 1048576 [ 326.670249][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 326.946953][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.961558][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.970200][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.978439][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.987225][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.058580][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.072387][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.089974][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.126825][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.148086][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.216221][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.233033][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.243534][ T5986] bond0 (unregistering): Released all slaves [ 327.794194][ T5986] hsr_slave_0: left promiscuous mode [ 327.800975][ T5986] hsr_slave_1: left promiscuous mode [ 327.807148][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.815111][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.824001][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.831645][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.851705][ T5986] veth1_macvtap: left promiscuous mode [ 327.857314][ T5986] veth0_macvtap: left promiscuous mode [ 327.863305][ T5986] veth1_vlan: left promiscuous mode [ 327.868627][ T5986] veth0_vlan: left promiscuous mode [ 328.313009][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 328.356901][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 328.990693][T11914] chnl_net:caif_netlink_parms(): no params data found [ 329.012526][T11916] chnl_net:caif_netlink_parms(): no params data found [ 329.029131][ T5836] Bluetooth: hci0: command tx timeout [ 329.259607][ T5836] Bluetooth: hci2: command tx timeout [ 329.323390][T11940] netlink: 'syz.1.1632': attribute type 12 has an invalid length. [ 329.355697][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.363166][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.384940][T11914] bridge_slave_0: entered allmulticast mode [ 329.431449][T11914] bridge_slave_0: entered promiscuous mode [ 329.452050][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.473379][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.484893][T11916] bridge_slave_0: entered allmulticast mode [ 329.495275][T11916] bridge_slave_0: entered promiscuous mode [ 329.505272][T11914] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.514005][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.531982][T11914] bridge_slave_1: entered allmulticast mode [ 329.541036][T11914] bridge_slave_1: entered promiscuous mode [ 329.547771][T11947] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1634'. [ 329.587059][T11916] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.596787][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.611080][T11916] bridge_slave_1: entered allmulticast mode [ 329.621413][T11916] bridge_slave_1: entered promiscuous mode [ 329.642898][T11947] vlan0: entered allmulticast mode [ 329.650466][T11947] gretap0: entered allmulticast mode [ 329.687317][T11914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.823437][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.837930][T11914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.859334][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.868735][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.878208][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.893681][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.903878][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.930221][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.970813][T11914] team0: Port device team_slave_0 added [ 330.028359][ T5981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.054207][T11914] team0: Port device team_slave_1 added [ 330.125915][T11916] team0: Port device team_slave_0 added [ 330.169545][ T5981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.187892][T11914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.195654][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.226057][T11914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.242836][T11916] team0: Port device team_slave_1 added [ 330.286740][T11959] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1637'. [ 330.286859][T11914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.310681][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.337449][T11914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.407502][ T5981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.502254][T11966] netlink: 'syz.4.1638': attribute type 2 has an invalid length. [ 330.517876][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.538863][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.570960][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.612947][ T5981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.665848][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.681674][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.717259][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.768990][T11968] tipc: Enabling of bearer rejected, failed to enable media [ 330.823415][T11914] hsr_slave_0: entered promiscuous mode [ 330.834586][T11914] hsr_slave_1: entered promiscuous mode [ 330.843418][T11914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.856300][T11914] Cannot create hsr debugfs directory [ 330.970809][T11916] hsr_slave_0: entered promiscuous mode [ 330.982486][T11916] hsr_slave_1: entered promiscuous mode [ 330.989620][T11916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.997226][T11916] Cannot create hsr debugfs directory [ 331.052569][T11973] IPVS: Unknown mcast interface: veth0_macvtap [ 331.099808][ T5847] Bluetooth: hci0: command tx timeout [ 331.138746][T11976] netlink: 'syz.1.1643': attribute type 21 has an invalid length. [ 331.163523][T11976] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1643'. [ 331.339413][ T5847] Bluetooth: hci2: command tx timeout [ 331.556955][ T5981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.568540][T11992] xt_hashlimit: invalid rate [ 331.645648][T11953] chnl_net:caif_netlink_parms(): no params data found [ 331.666703][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 331.692506][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 331.708513][T11996] netlink: 'syz.4.1650': attribute type 20 has an invalid length. [ 331.746544][ T5981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.813831][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 331.836151][T11999] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1650'. [ 331.878674][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 331.906525][ T5981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.980221][ T5847] Bluetooth: hci4: command tx timeout [ 332.110326][ T5981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.166102][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.180568][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.191666][T11953] bridge_slave_0: entered allmulticast mode [ 332.200470][T11953] bridge_slave_0: entered promiscuous mode [ 332.213147][T11953] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.220817][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.228173][T11953] bridge_slave_1: entered allmulticast mode [ 332.236477][T11953] bridge_slave_1: entered promiscuous mode [ 332.302464][T12015] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20003 [ 332.372081][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.406622][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.524658][T11953] team0: Port device team_slave_0 added [ 332.535823][T12022] x_tables: duplicate entry at hook 2 [ 332.548707][T11953] team0: Port device team_slave_1 added [ 332.563604][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 332.650255][T11953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.659853][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.686614][T11953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.763605][ T5981] bridge_slave_1: left allmulticast mode [ 332.777108][ T5981] bridge_slave_1: left promiscuous mode [ 332.783988][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.806837][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 332.817359][ T5981] bridge_slave_0: left allmulticast mode [ 332.836832][ T5981] bridge_slave_0: left promiscuous mode [ 332.849198][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.864989][ T5981] bridge_slave_1: left allmulticast mode [ 332.871047][ T5981] bridge_slave_1: left promiscuous mode [ 332.876906][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.887849][ T5981] bridge_slave_0: left allmulticast mode [ 332.894083][ T5981] bridge_slave_0: left promiscuous mode [ 332.901903][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.055778][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c7b2400: rx timeout, send abort [ 333.179204][ T5847] Bluetooth: hci0: command tx timeout [ 333.420327][ T5847] Bluetooth: hci2: command tx timeout [ 333.556399][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888052cf5000: rx timeout, send abort [ 333.564865][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c7b2400: abort rx timeout. Force session deactivation [ 333.624202][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.636258][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.647349][ T5981] bond0 (unregistering): Released all slaves [ 333.763818][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.775079][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.790226][ T5981] bond0 (unregistering): Released all slaves [ 333.805866][T11953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.813130][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.839880][T11953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.038582][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'. [ 334.063167][ T5847] Bluetooth: hci4: command tx timeout [ 334.068655][ C0] vxcan1 (unregistered): j1939_tp_rxtimer: 0xffff888052cf5000: abort rx timeout. Force session deactivation [ 334.175388][ T5847] block nbd1: Receive control failed (result -32) [ 334.233810][T11953] hsr_slave_0: entered promiscuous mode [ 334.250285][T11953] hsr_slave_1: entered promiscuous mode [ 334.256816][T11953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.271638][T11953] Cannot create hsr debugfs directory [ 334.337361][T12041] batadv0: entered promiscuous mode [ 334.345994][T12041] team0: entered promiscuous mode [ 334.367373][T12041] C: entered promiscuous mode [ 334.373381][T12041] team_slave_1: entered promiscuous mode [ 334.384388][T12041] geneve0: entered promiscuous mode [ 334.393971][T12041] hsr1: entered promiscuous mode [ 334.399307][T12041] hsr1: entered allmulticast mode [ 334.404520][T12041] batadv0: entered allmulticast mode [ 334.410139][T12041] team0: entered allmulticast mode [ 334.415344][T12041] C: entered allmulticast mode [ 334.420454][T12041] team_slave_1: entered allmulticast mode [ 334.426347][T12041] geneve0: entered allmulticast mode [ 334.756851][T11916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.860774][ T5981] hsr_slave_0: left promiscuous mode [ 334.886217][ T5981] hsr_slave_1: left promiscuous mode [ 334.892485][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.909264][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.927680][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.947175][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.985125][ T5981] hsr_slave_0: left promiscuous mode [ 334.992203][ T5981] hsr_slave_1: left promiscuous mode [ 334.998309][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.006412][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.015894][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.023811][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.065996][ T5981] veth1_macvtap: left promiscuous mode [ 335.072272][ T5981] veth0_macvtap: left promiscuous mode [ 335.077974][ T5981] veth1_vlan: left promiscuous mode [ 335.083466][ T5981] veth0_vlan: left promiscuous mode [ 335.091178][ T5981] veth1_macvtap: left promiscuous mode [ 335.098982][ T5981] veth0_macvtap: left promiscuous mode [ 335.104760][ T5981] veth1_vlan: left promiscuous mode [ 335.110435][ T5981] veth0_vlan: left promiscuous mode [ 335.258967][ T5847] Bluetooth: hci0: command tx timeout [ 335.511311][ T5847] Bluetooth: hci2: command tx timeout [ 335.832425][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 335.875372][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 336.152946][ T5847] Bluetooth: hci4: command tx timeout [ 336.676940][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 336.724210][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 337.152807][T11916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.237542][T11916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.252537][T11916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.406367][T11914] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.450175][T11914] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.528007][T11914] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.572771][T11914] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.693969][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 337.694807][T12087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.716655][T12087] bond2: entered promiscuous mode [ 337.722083][T12087] bond2: entered allmulticast mode [ 337.728224][T12087] bond0: (slave bond2): Enslaving as an active interface with an up link [ 337.937231][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.992753][T12100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1686'. [ 338.019868][T12100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1686'. [ 338.036982][T12100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1686'. [ 338.157964][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.219870][ T5847] Bluetooth: hci4: command tx timeout [ 338.260644][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.267864][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.403511][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.411024][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.467750][T11953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.517190][T11953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.555466][T11953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.582181][T11953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.616053][T11914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.697987][T11914] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.758557][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.765912][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.796774][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.804136][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.193494][T11953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.257339][T11953] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.307354][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.354563][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.361802][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.381673][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 339.429564][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.436929][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.540532][T11916] veth0_vlan: entered promiscuous mode [ 339.811413][T11916] veth1_vlan: entered promiscuous mode [ 339.921198][T11914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.935523][T12150] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1698'. [ 340.008365][T11916] veth0_macvtap: entered promiscuous mode [ 340.053942][T11916] veth1_macvtap: entered promiscuous mode [ 340.166981][T11914] veth0_vlan: entered promiscuous mode [ 340.191035][T11914] veth1_vlan: entered promiscuous mode [ 340.216868][T12157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.220788][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.296171][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.338197][T11916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.353143][T11916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.370387][T11916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.381821][T11916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.445356][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 340.472203][T11914] veth0_macvtap: entered promiscuous mode [ 340.492972][T11914] veth1_macvtap: entered promiscuous mode [ 340.537299][T11953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.566998][T11914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.588252][T11914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.634272][T11914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.644699][T11914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.654094][T11914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.664374][T11914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.824724][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.838817][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.855011][T11953] veth0_vlan: entered promiscuous mode [ 340.880896][T12171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.884003][T11953] veth1_vlan: entered promiscuous mode [ 340.995756][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.004225][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.014700][T11953] veth0_macvtap: entered promiscuous mode [ 341.058124][T11953] veth1_macvtap: entered promiscuous mode [ 341.093140][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.132075][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.166373][T11953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.182407][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.190858][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.229548][T11953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.286982][T11953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.312414][T11953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.341055][T11953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.354482][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1706'. [ 341.378988][T11953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.379347][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1706'. [ 341.429862][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1706'. [ 341.885544][ T5986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.942378][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.008826][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.845021][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.854578][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.863298][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.871789][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.879630][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.245101][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.254680][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.262977][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.272413][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.280337][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.898935][ T5836] Bluetooth: hci0: command tx timeout [ 346.298978][ T5836] Bluetooth: hci2: command tx timeout [ 347.978891][ T5836] Bluetooth: hci0: command tx timeout [ 348.378897][ T5836] Bluetooth: hci2: command tx timeout [ 350.058982][ T5836] Bluetooth: hci0: command tx timeout [ 350.458902][ T5836] Bluetooth: hci2: command tx timeout [ 352.138998][ T5836] Bluetooth: hci0: command tx timeout [ 352.540956][ T5836] Bluetooth: hci2: command tx timeout [ 357.632115][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.642528][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.652394][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.661249][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.669849][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.677532][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.687473][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.695428][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.704880][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.712505][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.738993][ T5836] Bluetooth: hci6: command tx timeout [ 359.749576][ T5841] Bluetooth: hci5: command tx timeout [ 361.819063][ T5836] Bluetooth: hci6: command tx timeout [ 361.824553][ T5836] Bluetooth: hci5: command tx timeout [ 363.898947][ T5841] Bluetooth: hci6: command tx timeout [ 363.904771][ T5836] Bluetooth: hci5: command tx timeout [ 365.980275][ T5841] Bluetooth: hci5: command tx timeout [ 365.985755][ T5841] Bluetooth: hci6: command tx timeout [ 392.012403][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 392.021335][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 392.029877][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 392.040161][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 392.049628][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 394.142161][ T5836] Bluetooth: hci7: command tx timeout [ 396.218860][ T5836] Bluetooth: hci7: command tx timeout [ 398.298898][ T5836] Bluetooth: hci7: command tx timeout [ 400.378870][ T5836] Bluetooth: hci7: command tx timeout [ 405.454044][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 405.464855][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 405.473969][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 405.483297][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 405.491576][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 406.984557][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.994067][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 407.004125][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 407.013943][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 407.022255][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 407.578921][ T5836] Bluetooth: hci8: command tx timeout [ 409.099052][ T5836] Bluetooth: hci9: command tx timeout [ 409.499503][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.658945][ T5836] Bluetooth: hci8: command tx timeout [ 411.178976][ T5836] Bluetooth: hci9: command tx timeout [ 411.739097][ T5836] Bluetooth: hci8: command tx timeout [ 413.258925][ T5836] Bluetooth: hci9: command tx timeout [ 413.818923][ T5836] Bluetooth: hci8: command tx timeout [ 415.338956][ T5836] Bluetooth: hci9: command tx timeout [ 418.335526][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 418.344676][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 418.353362][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 418.361822][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 418.371474][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 418.406293][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 418.415783][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 418.424532][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 418.432893][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 418.441245][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 420.458934][ T5840] Bluetooth: hci11: command tx timeout [ 420.539029][ T5840] Bluetooth: hci10: command tx timeout [ 422.539139][ T5840] Bluetooth: hci11: command tx timeout [ 422.618919][ T5840] Bluetooth: hci10: command tx timeout [ 424.618912][ T5840] Bluetooth: hci11: command tx timeout [ 424.698991][ T5840] Bluetooth: hci10: command tx timeout [ 426.698887][ T5840] Bluetooth: hci11: command tx timeout [ 426.778920][ T5840] Bluetooth: hci10: command tx timeout [ 446.968783][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 446.976034][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12189/1:b..l [ 446.984545][ C1] rcu: (detected by 1, t=10502 jiffies, g=63553, q=1497 ncpus=2) [ 446.992481][ C1] task:syz.4.1710 state:R running task stack:25656 pid:12189 tgid:12188 ppid:5838 task_flags:0x400140 flags:0x00004004 [ 447.006991][ C1] Call Trace: [ 447.010311][ C1] [ 447.013268][ C1] __schedule+0x16e2/0x4cd0 [ 447.018149][ C1] ? rcu_is_watching+0x15/0xb0 [ 447.023023][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 447.028263][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 447.033657][ C1] ? vsnprintf+0xe11/0xf00 [ 447.038184][ C1] ? __pfx___schedule+0x10/0x10 [ 447.043107][ C1] ? snprintf+0xda/0x120 [ 447.047473][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 447.052865][ C1] preempt_schedule_irq+0xb5/0x150 [ 447.058088][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 447.064130][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 447.070169][ C1] irqentry_exit+0x6f/0x90 [ 447.074707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.081063][ C1] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 447.087327][ C1] Code: 8b e8 2f ba d0 09 65 66 8b 05 6f f7 ef 10 66 85 c0 75 5a bf 01 00 00 00 e8 c8 08 0b 00 e8 b3 86 41 00 fb 65 8b 05 4b f7 ef 10 <85> c0 75 05 e8 b2 9b ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 447.107048][ C1] RSP: 0018:ffffc900042ff940 EFLAGS: 00000286 [ 447.113139][ C1] RAX: 0000000080000000 RBX: 0000000000000200 RCX: e75d348810746c00 [ 447.121325][ C1] RDX: 0000000000000000 RSI: ffffffff8d74de43 RDI: ffffffff8bc1f3c0 [ 447.129445][ C1] RBP: ffffc900042ff9d0 R08: ffffffff8f7f3277 R09: 1ffffffff1efe64e [ 447.137591][ C1] R10: dffffc0000000000 R11: fffffbfff1efe64f R12: ffffffff898018c5 [ 447.145858][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff9200085ff28 [ 447.153953][ C1] ? bpf_test_run+0x205/0x830 [ 447.158863][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.164619][ C1] ? bpf_snprintf+0x15a/0x1b0 [ 447.169354][ C1] ? bpf_test_run+0x205/0x830 [ 447.174848][ C1] bpf_test_run+0x3fc/0x830 [ 447.179401][ C1] ? bpf_test_run+0x205/0x830 [ 447.184120][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 447.189309][ C1] ? slab_build_skb+0x273/0x3e0 [ 447.194204][ C1] ? convert___skb_to_skb+0x3d/0x590 [ 447.199529][ C1] bpf_prog_test_run_skb+0xb30/0x1560 [ 447.204956][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 447.210796][ C1] bpf_prog_test_run+0x2a9/0x340 [ 447.215951][ C1] __sys_bpf+0x4a4/0x860 [ 447.220242][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 447.225268][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 447.230611][ C1] __x64_sys_bpf+0x7c/0x90 [ 447.235063][ C1] do_syscall_64+0xf6/0x210 [ 447.239606][ C1] ? clear_bhb_loop+0x60/0xb0 [ 447.244584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.250604][ C1] RIP: 0033:0x7fb7fe38e969 [ 447.255053][ C1] RSP: 002b:00007fb7ff268038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.263676][ C1] RAX: ffffffffffffffda RBX: 00007fb7fe5b5fa0 RCX: 00007fb7fe38e969 [ 447.271677][ C1] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 447.279762][ C1] RBP: 00007fb7fe410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 447.287942][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.295944][ C1] R13: 0000000000000000 R14: 00007fb7fe5b5fa0 R15: 00007fff611913f8 [ 447.304058][ C1] [ 447.307190][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10530 jiffies! g63553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 447.319718][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=23565 [ 447.327629][ C1] rcu: rcu_preempt kthread starved for 10531 jiffies! g63553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 447.339022][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 447.349043][ C1] rcu: RCU grace-period kthread stack dump: [ 447.355038][ C1] task:rcu_preempt state:I stack:26328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 447.367091][ C1] Call Trace: [ 447.370524][ C1] [ 447.373580][ C1] __schedule+0x16e2/0x4cd0 [ 447.378134][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 447.383470][ C1] ? schedule+0x165/0x360 [ 447.387927][ C1] ? __pfx___schedule+0x10/0x10 [ 447.392835][ C1] ? schedule+0x91/0x360 [ 447.397111][ C1] schedule+0x165/0x360 [ 447.401310][ C1] schedule_timeout+0x12b/0x270 [ 447.406197][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 447.411691][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 447.417623][ C1] ? __pfx_process_timeout+0x10/0x10 [ 447.423038][ C1] ? prepare_to_swait_event+0x341/0x380 [ 447.428779][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 447.433728][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.439075][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 447.444314][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 447.450261][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 447.455679][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 447.461008][ C1] ? finish_swait+0xcd/0x1f0 [ 447.465818][ C1] rcu_gp_kthread+0x99/0x390 [ 447.470454][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 447.475744][ C1] ? __kthread_parkme+0x7b/0x200 [ 447.480718][ C1] ? __kthread_parkme+0x1a1/0x200 [ 447.485869][ C1] kthread+0x70e/0x8a0 [ 447.490074][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 447.495351][ C1] ? __pfx_kthread+0x10/0x10 [ 447.500209][ C1] ? __pfx_kthread+0x10/0x10 [ 447.504922][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.510156][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.515417][ C1] ? __pfx_kthread+0x10/0x10 [ 447.520053][ C1] ret_from_fork+0x4b/0x80 [ 447.524760][ C1] ? __pfx_kthread+0x10/0x10 [ 447.529555][ C1] ret_from_fork_asm+0x1a/0x30 [ 447.534442][ C1] [ 447.537475][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 447.543829][ C1] Sending NMI from CPU 1 to CPUs 0: [ 447.549147][ C0] NMI backtrace for cpu 0 [ 447.549172][ C0] CPU: 0 UID: 0 PID: 5988 Comm: kworker/u8:28 Not tainted 6.15.0-rc7-syzkaller-00105-g57a92d14659d #0 PREEMPT(full) [ 447.549204][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.549216][ C0] Workqueue: bat_events batadv_nc_worker [ 447.549239][ C0] RIP: 0010:taprio_dequeue_from_txq+0x12/0x900 [ 447.549265][ C0] Code: f8 48 8b 5c 24 10 eb ae 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 89 4c 24 0c <49> 89 d6 41 89 f7 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 e6 ff [ 447.549280][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000282 [ 447.549294][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000026f [ 447.549304][ C0] RDX: ffff888011caac00 RSI: 0000000000000008 RDI: ffff88806c5ac000 [ 447.549316][ C0] RBP: 1ffff1100d8b5872 R08: 0000000000000000 R09: 0000000000000000 [ 447.549327][ C0] R10: 0000000000000000 R11: ffffffff896ab1c0 R12: dffffc0000000000 [ 447.549339][ C0] R13: ffff88806c5ac394 R14: 0000000000000010 R15: 0000000000000002 [ 447.549351][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 447.549365][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.549376][ C0] CR2: 00007fb7ff267f98 CR3: 0000000068878000 CR4: 00000000003526f0 [ 447.549391][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.549401][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.549412][ C0] Call Trace: [ 447.549420][ C0] [ 447.549434][ C0] taprio_dequeue_tc_priority+0x1ac/0x750 [ 447.549465][ C0] ? taprio_dequeue+0x26/0x550 [ 447.549486][ C0] taprio_dequeue+0x186/0x550 [ 447.549515][ C0] __qdisc_run+0x239/0x15f0 [ 447.549546][ C0] qdisc_run+0xc2/0x230 [ 447.549565][ C0] net_tx_action+0x7c9/0x980 [ 447.549583][ C0] ? net_tx_action+0x634/0x980 [ 447.549601][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 447.549617][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 447.549645][ C0] handle_softirqs+0x286/0x870 [ 447.549664][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 447.549684][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 447.549707][ C0] __irq_exit_rcu+0xca/0x1f0 [ 447.549722][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 447.549744][ C0] irq_exit_rcu+0x9/0x30 [ 447.549758][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 447.549780][ C0] [ 447.549785][ C0] [ 447.549792][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.549810][ C0] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 447.549827][ C0] Code: 8b e8 2f ba d0 09 65 66 8b 05 6f f7 ef 10 66 85 c0 75 5a bf 01 00 00 00 e8 c8 08 0b 00 e8 b3 86 41 00 fb 65 8b 05 4b f7 ef 10 <85> c0 75 05 e8 b2 9b ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 447.549841][ C0] RSP: 0018:ffffc90004def980 EFLAGS: 00000282 [ 447.549855][ C0] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 4488d090c47f2e00 [ 447.549866][ C0] RDX: 0000000000000006 RSI: ffffffff8d74de43 RDI: ffffffff8bc1f3c0 [ 447.549878][ C0] RBP: ffffc90004defa18 R08: ffffffff8f7f3277 R09: 1ffffffff1efe64e [ 447.549891][ C0] R10: dffffc0000000000 R11: fffffbfff1efe64f R12: ffffffff8b24ec28 [ 447.549904][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff920009bdf30 [ 447.549919][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 447.549949][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.549967][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 447.549988][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 447.550006][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 447.550030][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 447.550059][ C0] batadv_nc_worker+0x369/0x610 [ 447.550078][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 447.550096][ C0] process_scheduled_works+0xadb/0x17a0 [ 447.550131][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.550169][ C0] worker_thread+0x8a0/0xda0 [ 447.550202][ C0] kthread+0x70e/0x8a0 [ 447.550224][ C0] ? __pfx_worker_thread+0x10/0x10 [ 447.550241][ C0] ? __pfx_kthread+0x10/0x10 [ 447.550261][ C0] ? __pfx_kthread+0x10/0x10 [ 447.550282][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.550300][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.550321][ C0] ? __pfx_kthread+0x10/0x10 [ 447.550340][ C0] ret_from_fork+0x4b/0x80 [ 447.550357][ C0] ? __pfx_kthread+0x10/0x10 [ 447.550377][ C0] ret_from_fork_asm+0x1a/0x30 [ 447.550403][ C0] [ 453.913363][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 453.923106][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 453.931715][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 453.941343][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 453.949906][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 455.979033][ T5840] Bluetooth: hci12: command tx timeout