last executing test programs: 1m2.099909058s ago: executing program 4 (id=101): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/199, 0xc7}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x102, 0x0) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000040)=""/36, 0x24}, &(0x7f00000001c0), 0x8}, 0x20) 50.102239659s ago: executing program 4 (id=101): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/199, 0xc7}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x102, 0x0) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000040)=""/36, 0x24}, &(0x7f00000001c0), 0x8}, 0x20) 30.546870514s ago: executing program 4 (id=101): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/199, 0xc7}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x102, 0x0) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000040)=""/36, 0x24}, &(0x7f00000001c0), 0x8}, 0x20) 30.546794008s ago: executing program 4 (id=101): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/199, 0xc7}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x102, 0x0) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000040)=""/36, 0x24}, &(0x7f00000001c0), 0x8}, 0x20) 24.034501339s ago: executing program 4 (id=101): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/199, 0xc7}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x102, 0x0) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000040)=""/36, 0x24}, &(0x7f00000001c0), 0x8}, 0x20) 20.151841191s ago: executing program 0 (id=1379): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 20.079748827s ago: executing program 0 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.855756243s ago: executing program 0 (id=1383): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4, 0x1ff, 0x14}, 0xc) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x10b0, 0x32, 0x229, 0x0, 0x0, {0xa}, [@nested={0x109c, 0x13f, 0x0, 0x1, [@nested={0x1096, 0x39, 0x0, 0x1, [@nested={0x4, 0x45}, @nested={0x4, 0x142}, @nested={0x4, 0x1d}, @generic="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", @generic="7223cf9479cd79a925bb6d3d9d91b8fadb68ed4b53ac06beba4abc5728a5dddc0224a027a7ab50b652d945f4a7505f4af7306e04620c5ca33017430e203da5bb9ce58ddefae2f114b5423e9be784e1aeb0b468da181feefe5e9fc0f606f81bd2714564b72d05fda63cd670bb5db23d4e2d34bebe48811e4f3ffb647aaf2c", @typed={0x8, 0x2d44, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}]}, 0x10b0}}, 0x0) 19.718615145s ago: executing program 0 (id=1387): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a081189", 0x3d}], 0x1}}], 0x1, 0xc0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc000000000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff6fa420497d5c3a00000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x1a4}}, 0x0) 19.385636726s ago: executing program 0 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) 12.514120229s ago: executing program 4 (id=101): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/199, 0xc7}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x102, 0x0) close(0xffffffffffffffff) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000040)=""/36, 0x24}, &(0x7f00000001c0), 0x8}, 0x20) 8.714460646s ago: executing program 0 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) 2.104352611s ago: executing program 1 (id=1531): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000002c0)) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d", 0xa}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000040)=@ccm_128={{0x304}, "a788e68b65993a13", "b1c8d2bdaf191c55dfaabe4b9e1ffb5a", "956185cd", "2b60b70fba7a4d1c"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x38, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601000000000300000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050001000700000005000500000000000500010006"], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1.604452632s ago: executing program 2 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x2b5}, 0x8) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x1) 1.481174942s ago: executing program 2 (id=1538): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="a0002883e99ced2eeeb203", 0xb}, {&(0x7f0000002440)="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", 0x5aa}], 0x2}}], 0x1, 0x0) 1.378921404s ago: executing program 3 (id=1539): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x4) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000600), &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000680), &(0x7f00000006c0)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40816) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000c00)={{0x2, 0x4e22, @empty}, {0x6, @broadcast}, 0x20, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6tnl0\x00'}) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0x4}, 0x8) 1.208563126s ago: executing program 3 (id=1540): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x5}, @in6={0xa, 0x4e24, 0x32a, @mcast2, 0x650}, @in={0x2, 0x4e21, @empty}], 0x74) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000004000)) 1.192308325s ago: executing program 3 (id=1541): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x420, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [], @ipv4=@multicast2}, {@ipv4=@private, [], @ipv4=@broadcast}, {@ipv4=@loopback, [], @ipv4=@broadcast}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1, 0x84}}, @common=@inet=@set2={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1.190280602s ago: executing program 1 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104c0000000000040000000000000095000000000000006d53cb346e9076ab71e30733de43a59935ad74c31e6e107ae2b404"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f0000000100)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0xfffffffffffffdba}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104c0000000000040000000000000095000000000000006d53cb346e9076ab71e30733de43a59935ad74c31e6e107ae2b404"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f0000000100)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0xfffffffffffffdba}, 0x48) (async) 1.086054874s ago: executing program 1 (id=1543): ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8014}, 0x8814) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8011) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000440)={'veth1_vlan\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) r3 = socket$inet(0x2, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000700)="2ef518bd7b2397d5d23c1da94513f930d4cc3ec2ccae3267c3e37aa4d0623ab4f0779c2fc2308cb5927b7f53fc625cd65879e70e01b83978e2e0d0512583c31c3e0c6bbe9b2160c8523f34ccde314810dee624edd7b5692a13c6138fc4ba85962a83cf742f0ed59e25da50de69ce81c2c6eb0db60ae4f01dad6b2cea1c18031a3c393676c572c7e168ee1cbfbc5bd4448faf12fff2", 0x95) r6 = accept4(r5, &(0x7f00000007c0)=@caif=@rfm, &(0x7f0000000840)=0x80, 0x100000) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@deltclass={0x68, 0x29, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0x4, 0x1}, {0x10012, 0xb}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x3, 0xc39, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6, 0xc0000}}]}}]}, 0x68}}, 0x51) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0xffff}, {0x6, 0xe}, {0xf, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x800) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000b40)=0x160d1, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xff, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}}, 0x8000) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/net\x00') ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000d40)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x120, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4091) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000f40)="adf1d4f38a537c700b2870a1b149fd02ce87404c1e0fd57f9800df8e9b03e35a604a882eb59b307b9e627ebbb97f38f46cc3aafa6cfce6cff1ec1451de6fcc0e2225953f7aa6ef761cbfc9742c404d478ce37bd0cd0bde473dfefa069038686d31dd5e8982215b4ffcf2f3c5331afdbc427716d795d39707a04394fd552f811db8774b0b43cbd57d1d0206fb1b7203d792095cad85dce08b22e86ff6c0aeec7dce4d7d37aed83cbb036718431e6e3a18f9a0642a6366b36d7d6f367d71e66d2a7be9f087935b304526578766661746c3b0e0e42c20347f33caca39b1a011a46fe065174d9d978b", 0xe7) getpeername$packet(r6, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001080)=0x14) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e23, 0x0, @local, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001140)={r10, 0x0, 0x3, 0xd}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r11) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.net/syz1\x00', 0x200002, 0x0) 812.466157ms ago: executing program 3 (id=1544): bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) socket$igmp(0x2, 0x3, 0x2) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x4}}, @TCA_FLOW_MASK={0x8, 0x6, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0xfffffffe}, 0x10) 811.378347ms ago: executing program 1 (id=1545): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 771.641749ms ago: executing program 2 (id=1546): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0xff3c}], 0x1}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) accept4(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80, 0x0) 592.701787ms ago: executing program 1 (id=1547): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00010000000000000000000c00000001000000000000e6"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00010000000000000000000c00000001000000000000e6"], 0x20}], 0x1}, 0x0) socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0x20, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x80}, 0x40001) (async) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x80}, 0x40001) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) 392.449057ms ago: executing program 3 (id=1548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0xa}, 0x1) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, r6, 0x1, 0x709d26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x40000) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x69}, {0x2}, {0xc}, {0x36, 0x1}, {0x6}, {0x60, 0x1}, {0x9}, {0x6c}, {0x1, 0x1}, {0xb}, {0x0, 0x1}, {0x6}, {0x1b, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x8000) (async) r7 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r7, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) listen(r7, 0xda8c) accept4(r7, &(0x7f0000000340)=@nfc, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 64) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) getsockopt$inet6_int(r9, 0x29, 0x19, 0x0, &(0x7f0000000280)) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) (async, rerun: 64) poll(&(0x7f00000001c0)=[{r8}], 0x1, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f0000000040)) (rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r10, &(0x7f0000000100)}, 0x20) 391.97001ms ago: executing program 2 (id=1549): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004041000045ccc3af06dde4ee9ad3d1a92f64000000004200020000d5bea2c979ee97881521e79328b1ef636416621902502db2f4604a757479fa441cdbb6aeb49aa26529c355405d5de5c6f228ac076af4ba1416c8753bf8767405c48c41a08c0b6653cc777ab541caeec9fe7b12ef80fc"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x10, '\x00', @mcast1}}}}}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000003c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfffffcebfff, 0x1000, 0x800}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6, 0x0, 0x20007fffffff}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f00000001c0)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4004814) 353.677025ms ago: executing program 1 (id=1550): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000200)="e1", 0x1, 0x40011, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e120800060000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d", 0xa2}, {&(0x7f00000005c0)="b8cadd1b63d27c4fc2da", 0xa}, {&(0x7f0000000980)="84a33e5a63b49ad64070db02fc47dcbdcdc74d23d861c56fa46597169f24bf325d642f3daec69e6e1ba23958", 0x2c}], 0x3}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240)="78ac4638f917", &(0x7f0000000040)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000f40)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f0000000740)=""/132, 0x84}, {&(0x7f00000006c0)}], 0x9, &(0x7f00000009c0)=""/125, 0x7d}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/251, 0xfb}, {&(0x7f0000000b40)=""/14, 0xe}], 0x2, &(0x7f0000000bc0)=""/214, 0xd6}}, {{&(0x7f0000000cc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/139, 0x8b}], 0x1, &(0x7f0000000ec0)=""/67, 0x43}, 0x9e9b}], 0x3, 0x2, &(0x7f0000000e40)={0x0, 0x989680}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x1001f) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000520000000000019078ac1e0101ac1414aa030490781204183f2500004000000000000c0000000000007f062f065b7fae113a00000100186371ae9b1c03"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 166.010794ms ago: executing program 2 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x71, &(0x7f0000000080)=""/4059, &(0x7f0000000040)=0xffed) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x6, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "0404bb5e190caeebdbf254ec669441f3e6a628fcf83beb41c03261b26692e6381333a8d92b6a410b8b6422361a1414b8293034eb3dfe0eca07138883a1ee7b1e3ee629c1556ad8048c51cceb3eed4524d31ef77281a6c163312ca8f806a30922e535753d8e0f7424e0d8eba15fe15ec5d298acb40f97e69329a3505079f5208025e62e594205f547a6987cf4f32e918fe3595e84611bbd7bb445c8cee81295e8303701113fe60c68dad227a3d0f2943b9ab5d2d532cf154936ec0b8896cca03f0cf350a4b2edd0be7acd49339e7a2f25a62418c05602c86446cdb47ba3e0233ee469d572a72442adf5fde64d13"}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1cc}}, 0x0) 36.376746ms ago: executing program 3 (id=1552): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="170000001300290a00000000000000200700000088fdc6f133eafe6c777ff243d8498cc9466e99f19ddef522e9c59a42feca3093051508a467cc621f52eec47c5c365085a08df74df653a683aba86b9ce956c03649983d7ca5a311a4135bdeddd39676fe11c9e127370497c59b9c70d63293c7a78dd89ed9deae732878e3e8f43ff8", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000080", @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf25210000000c0099000e0000000c0000000600f70000d900000600eb00000800000400ec00"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004010) 0s ago: executing program 2 (id=1553): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010090005000000005656faad36337ada99477aae6c0a4f11606f44c16b0558b1121e658ad4aadb8e2e6a56f8b4619c81cc26e2b9d49ea197cd3bfede1c49619ee5e3aad3679e46af1eb734e150d16dfc36267d6eb5a1591e00"/104, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e001800028008000300000000000a0004000000000000000000"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000500)={0x0, 0x6, 0x8, 0x800}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r6) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100026bd7000ffdbdf25050000000c00020005000000000000000c00040000000000000000000c0005000000000000000000f0a181008572e46acb767409abacf3b2244bea36d4a4ffed7e553e59706c9b206519011e1355f705a00bc2dc7709c26b4e05f352859e664968d67a3fb8c9781b8284b9ed2f91a7a8269869903de817389fe94b2c2ddea1cb38f87d0604361679661c54804f27ba32567075689df336921d9b563325bf7035b6c477a6956d01caa2"], 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x811) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) sendto$unix(r0, &(0x7f0000000280)="94f7a65821cbb3d1760dd2717027850a8ea4721de564bea65eef28193e94a16d7723e88c5ba958ea910388982a4ec56f18e4903bc251756bcc54ee87d855ea2be66105765c933c48c7281cd7bc6a5036f8af49be752c267d55d807682c16323d9068155a7f41ba8d54789a0da8332de7d44ce73434b8691fbc431326ae76ac43127368c14af2ec8449fc43dae38d7b02747cdcc9dc5bc050898c5ad155d61cc1702c8bde7671ef87a579", 0xaa, 0x20024090, &(0x7f0000000340)=@file={0x4cb10a8420311729, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): : making interface the new active one [ 150.205550][ T8626] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 150.265968][ T8620] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 150.336065][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.421417][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.466080][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.473329][ T6372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.525433][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.532676][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.987532][ T8659] syzkaller0: entered promiscuous mode [ 150.993063][ T8659] syzkaller0: entered allmulticast mode [ 151.132026][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 151.164675][ T8659] netlink: 92 bytes leftover after parsing attributes in process `syz.1.596'. [ 151.312787][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 151.323475][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 151.379990][ T5841] Bluetooth: hci0: command tx timeout [ 151.568290][ T8685] xt_hashlimit: max too large, truncated to 1048576 [ 152.702570][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.838775][ T8693] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 152.971971][ T8704] netlink: 260 bytes leftover after parsing attributes in process `syz.2.603'. [ 153.004592][ T8693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.115704][ T8693] bond5: (slave gretap2): making interface the new active one [ 153.138088][ T8693] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 153.165239][ T8693] syz.2.603 (8693) used greatest stack depth: 20040 bytes left [ 153.223864][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 153.244848][ T8711] batadv1: entered allmulticast mode [ 153.351543][ T8716] macvlan2: entered promiscuous mode [ 153.357173][ T8716] macvlan2: entered allmulticast mode [ 153.397629][ T8716] batadv0: entered promiscuous mode [ 153.418310][ T8716] batadv0: entered allmulticast mode [ 153.424195][ T8716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.453105][ T8716] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 153.466965][ T5841] Bluetooth: hci0: command tx timeout [ 153.604166][ T8354] veth0_vlan: entered promiscuous mode [ 153.661808][ T8354] veth1_vlan: entered promiscuous mode [ 153.705812][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 153.763446][ T8354] veth0_macvtap: entered promiscuous mode [ 153.837522][ T8354] veth1_macvtap: entered promiscuous mode [ 153.977914][ T8746] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 153.996003][ T8746] netlink: 224 bytes leftover after parsing attributes in process `syz.3.615'. [ 154.059755][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 154.072442][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 154.096980][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 154.100316][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.151212][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.180688][ T8354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.195523][ T8354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.211220][ T8354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.224450][ T8354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.305444][ T8759] netlink: 'syz.2.620': attribute type 2 has an invalid length. [ 154.314297][ T8757] IPVS: set_ctl: invalid protocol: 46 172.20.20.29:20001 [ 154.328166][ T8755] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 154.534756][ T6154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.573120][ T6154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.674868][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.718413][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.858771][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 155.036517][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 155.056169][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 155.126159][ T8793] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 155.246220][ T8795] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 155.348375][ T6379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.544054][ T6379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.802406][ T6379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.920780][ T6379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.041557][ T6379] bridge_slave_1: left allmulticast mode [ 156.048062][ T6379] bridge_slave_1: left promiscuous mode [ 156.053802][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.065419][ T6379] bridge_slave_0: left allmulticast mode [ 156.071629][ T6379] bridge_slave_0: left promiscuous mode [ 156.078810][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.337135][ T8821] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 156.576881][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.626444][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.643149][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.654029][ T6379] bond0 (unregistering): Released all slaves [ 156.814005][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.831883][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.841252][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.853274][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.862971][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.638152][ T8860] xt_cluster: node mask cannot exceed total number of nodes [ 157.672118][ T8860] netlink: 'syz.2.649': attribute type 7 has an invalid length. [ 157.742018][ T8864] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 157.748734][ T6379] hsr_slave_0: left promiscuous mode [ 157.793394][ T6379] hsr_slave_1: left promiscuous mode [ 157.807433][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.841782][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.863189][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.880810][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.921872][ T6379] veth1_macvtap: left promiscuous mode [ 157.929773][ T6379] veth0_macvtap: left promiscuous mode [ 157.937709][ T6379] veth1_vlan: left promiscuous mode [ 157.949370][ T6379] veth0_vlan: left promiscuous mode [ 158.356458][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 158.400477][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 158.749677][ T8884] sctp: [Deprecated]: syz.3.656 (pid 8884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.749677][ T8884] Use struct sctp_sack_info instead [ 158.773055][ T8884] sctp: [Deprecated]: syz.3.656 (pid 8884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.773055][ T8884] Use struct sctp_sack_info instead [ 158.899663][ T5847] Bluetooth: hci0: command tx timeout [ 159.213399][ T8906] pimreg: entered allmulticast mode [ 159.234597][ T8900] pimreg: left allmulticast mode [ 159.295428][ T8915] __nla_validate_parse: 11 callbacks suppressed [ 159.295447][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 159.324942][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'. [ 159.368950][ T8830] chnl_net:caif_netlink_parms(): no params data found [ 159.715100][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'. [ 159.715817][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.759335][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.785264][ T8830] bridge_slave_0: entered allmulticast mode [ 159.813276][ T8830] bridge_slave_0: entered promiscuous mode [ 159.833153][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.841540][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.849474][ T8830] bridge_slave_1: entered allmulticast mode [ 159.858075][ T8830] bridge_slave_1: entered promiscuous mode [ 159.980871][ T8830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.002513][ T8830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.092096][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'. [ 160.115531][ T8830] team0: Port device team_slave_0 added [ 160.158477][ T8830] team0: Port device team_slave_1 added [ 160.212765][ T8949] netlink: 112 bytes leftover after parsing attributes in process `syz.3.671'. [ 160.246102][ T8951] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.255958][ T8951] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.290964][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.300298][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.328007][ T8830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.343818][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.351438][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.391861][ T8830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.407946][ T8953] tipc: Started in network mode [ 160.412192][ T6372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.413557][ T8953] tipc: Node identity 7f000001, cluster identity 4711 [ 160.430295][ T8953] tipc: Enabled bearer , priority 10 [ 160.437141][ T8957] netlink: 'syz.1.673': attribute type 4 has an invalid length. [ 160.440095][ T6372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.472212][ T8955] netlink: 'syz.1.673': attribute type 4 has an invalid length. [ 160.595029][ T8830] hsr_slave_0: entered promiscuous mode [ 160.605919][ T8830] hsr_slave_1: entered promiscuous mode [ 160.620496][ T8830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.633383][ T8830] Cannot create hsr debugfs directory [ 160.962726][ T8986] netlink: 'syz.1.679': attribute type 5 has an invalid length. [ 160.976775][ T5847] Bluetooth: hci0: command tx timeout [ 161.414164][ T9009] netlink: 108 bytes leftover after parsing attributes in process `syz.1.687'. [ 161.481260][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 161.547462][ T5985] tipc: Node number set to 2130706433 [ 161.633704][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 161.778579][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 162.052620][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 162.099516][ T9037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.139793][ T8830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.155802][ T8830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.204978][ T8830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.256547][ T8830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.284219][ T9044] syzkaller1: entered promiscuous mode [ 162.290040][ T9044] syzkaller1: entered allmulticast mode [ 162.322408][ T9044] x_tables: duplicate underflow at hook 3 [ 163.067042][ T5847] Bluetooth: hci0: command tx timeout [ 164.196520][ T8830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.255481][ T8830] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.337424][ T9087] __nla_validate_parse: 2 callbacks suppressed [ 164.337442][ T9087] netlink: 108 bytes leftover after parsing attributes in process `syz.3.705'. [ 164.376169][ T9086] netlink: 244 bytes leftover after parsing attributes in process `syz.0.704'. [ 164.392639][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.399873][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.431492][ T9] IPVS: starting estimator thread 0... [ 164.461864][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.469129][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.547643][ T9090] IPVS: using max 32 ests per chain, 76800 per kthread [ 164.612805][ T9097] sctp: [Deprecated]: syz.2.706 (pid 9097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.612805][ T9097] Use struct sctp_sack_info instead [ 164.648516][ T9096] netlink: 'syz.0.707': attribute type 3 has an invalid length. [ 164.674347][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 164.675334][ T9098] veth1_macvtap: left promiscuous mode [ 164.690942][ T9098] macsec0: entered promiscuous mode [ 164.696432][ T9098] macsec0: entered allmulticast mode [ 164.724893][ T9103] netlink: 100 bytes leftover after parsing attributes in process `syz.1.708'. [ 164.728144][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 164.754051][ T9094] veth1_macvtap: entered promiscuous mode [ 164.764357][ T9094] veth1_macvtap: entered allmulticast mode [ 164.771766][ T9094] macsec0: left promiscuous mode [ 164.782218][ T9094] macsec0: left allmulticast mode [ 164.795118][ T9094] veth1_macvtap: left allmulticast mode [ 164.832711][ T9096] netlink: 'syz.0.707': attribute type 33 has an invalid length. [ 165.053052][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 165.071073][ T9117] bridge0: left allmulticast mode [ 165.127525][ T9122] delete_channel: no stack [ 165.138710][ T5847] Bluetooth: hci0: command tx timeout [ 165.385515][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 165.414431][ T9137] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 165.437454][ T8830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.518752][ T9137] netlink: 248 bytes leftover after parsing attributes in process `syz.0.715'. [ 165.664046][ T9139] xt_CT: No such helper "syz0" [ 166.167804][ T9170] netlink: 108 bytes leftover after parsing attributes in process `syz.0.723'. [ 166.472035][ T8830] veth0_vlan: entered promiscuous mode [ 166.496384][ T8830] veth1_vlan: entered promiscuous mode [ 166.616322][ T8830] veth0_macvtap: entered promiscuous mode [ 166.684522][ T8830] veth1_macvtap: entered promiscuous mode [ 166.711915][ T9198] unsupported nla_type 52263 [ 166.751469][ T8830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.802076][ T8830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.836186][ T8830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.857357][ T8830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.877367][ T8830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.894752][ T8830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.253495][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.279470][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.373874][ T6385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.412538][ T6385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.986327][ T6385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.160090][ T9252] syzkaller0: entered promiscuous mode [ 168.175869][ T9252] syzkaller0: entered allmulticast mode [ 168.240519][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 168.271602][ T6385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.102332][ T9272] netlink: 'syz.1.741': attribute type 49 has an invalid length. [ 169.552267][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.571249][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.579494][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.588619][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.599122][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.100763][ T6385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.124806][ T9273] netlink: 256 bytes leftover after parsing attributes in process `syz.1.741'. [ 170.224732][ T9291] sctp: [Deprecated]: syz.3.744 (pid 9291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.224732][ T9291] Use struct sctp_sack_info instead [ 170.241236][ T9286] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 170.270220][ T9291] sctp: [Deprecated]: syz.3.744 (pid 9291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.270220][ T9291] Use struct sctp_sack_info instead [ 170.376879][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'. [ 170.390729][ T6385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.535258][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 170.590568][ T9306] netlink: 596 bytes leftover after parsing attributes in process `syz.0.749'. [ 170.926001][ T9320] netlink: 108 bytes leftover after parsing attributes in process `syz.2.753'. [ 171.165456][ T6385] bridge_slave_1: left allmulticast mode [ 171.190231][ T6385] bridge_slave_1: left promiscuous mode [ 171.207886][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.229134][ T6385] bridge_slave_0: left allmulticast mode [ 171.246801][ T6385] bridge_slave_0: left promiscuous mode [ 171.253393][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.667155][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 171.697011][ T5847] Bluetooth: hci0: command tx timeout [ 171.837498][ T6385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.851533][ T6385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.863276][ T6385] bond0 (unregistering): Released all slaves [ 171.892598][ T9324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.897090][ T9356] netlink: 108 bytes leftover after parsing attributes in process `syz.1.760'. [ 171.977158][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 172.235203][ T9362] x_tables: duplicate underflow at hook 1 [ 172.315154][ T9373] netlink: 108 bytes leftover after parsing attributes in process `syz.0.766'. [ 172.553672][ T9389] netlink: 596 bytes leftover after parsing attributes in process `syz.2.768'. [ 172.590310][ T9381] netlink: 'syz.2.768': attribute type 29 has an invalid length. [ 172.608147][ T9386] netlink: 'syz.2.768': attribute type 29 has an invalid length. [ 172.637818][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.661001][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.672948][ T9288] bridge_slave_0: entered allmulticast mode [ 172.683000][ T9288] bridge_slave_0: entered promiscuous mode [ 172.695711][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.712640][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.742022][ T9288] bridge_slave_1: entered allmulticast mode [ 172.763353][ T9288] bridge_slave_1: entered promiscuous mode [ 172.796716][ T9380] netlink: 'syz.1.767': attribute type 5 has an invalid length. [ 173.022987][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 173.080857][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.134684][ T6385] hsr_slave_0: left promiscuous mode [ 173.144069][ T6385] hsr_slave_1: left promiscuous mode [ 173.152233][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.188404][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.203827][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.213569][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.255863][ T6385] veth1_macvtap: left promiscuous mode [ 173.261762][ T6385] veth0_macvtap: left promiscuous mode [ 173.270758][ T6385] veth1_vlan: left promiscuous mode [ 173.276227][ T6385] veth0_vlan: left promiscuous mode [ 173.691630][ T6385] team0 (unregistering): Port device team_slave_1 removed [ 173.735918][ T6385] team0 (unregistering): Port device team_slave_0 removed [ 173.787157][ T5847] Bluetooth: hci0: command tx timeout [ 174.262099][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.451012][ T9288] team0: Port device team_slave_0 added [ 174.510965][ T9288] team0: Port device team_slave_1 added [ 174.623942][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.638424][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.701628][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.729091][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.746337][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.795205][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.065068][ T9466] macvtap1: entered promiscuous mode [ 175.074291][ T9466] vlan0: entered promiscuous mode [ 175.087689][ T9466] macvtap1: entered allmulticast mode [ 175.093279][ T9466] vlan0: entered allmulticast mode [ 175.099236][ T9466] veth0_vlan: entered allmulticast mode [ 175.109524][ T9466] vlan0: left allmulticast mode [ 175.114495][ T9466] veth0_vlan: left allmulticast mode [ 175.121296][ T9466] vlan0: left promiscuous mode [ 175.170340][ T9288] hsr_slave_0: entered promiscuous mode [ 175.184261][ T9288] hsr_slave_1: entered promiscuous mode [ 175.192491][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.202134][ T9288] Cannot create hsr debugfs directory [ 175.365537][ T9476] __nla_validate_parse: 7 callbacks suppressed [ 175.365555][ T9476] netlink: 96 bytes leftover after parsing attributes in process `syz.2.790'. [ 175.384390][ T9480] netlink: 168 bytes leftover after parsing attributes in process `syz.3.793'. [ 175.418029][ T9484] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.790'. [ 175.418120][ T9483] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 175.436189][ T9483] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 175.446026][ T9483] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 175.454019][ T9483] netlink: 136 bytes leftover after parsing attributes in process `syz.0.792'. [ 175.475234][ T9483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.482090][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 175.484370][ T9476] 8021q: VLANs not supported on ip_vti0 [ 175.787873][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 175.841615][ T9502] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 175.858210][ T5847] Bluetooth: hci0: command tx timeout [ 175.871489][ T9502] netlink: 244 bytes leftover after parsing attributes in process `syz.1.795'. [ 175.946815][ T9507] netlink: 1 bytes leftover after parsing attributes in process `syz.3.800'. [ 176.069497][ T9512] netlink: 108 bytes leftover after parsing attributes in process `syz.3.802'. [ 176.354920][ T9288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.384498][ T9288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.415798][ T9288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.440651][ T9288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.744776][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.820991][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.911365][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.918586][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.031451][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.038680][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.347065][ T9567] netlink: 'syz.3.814': attribute type 11 has an invalid length. [ 177.406367][ T9571] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.814'. [ 177.949920][ T5847] Bluetooth: hci0: command tx timeout [ 178.086103][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.127095][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.286307][ T9605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.573796][ T9627] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 178.626456][ T9632] veth0: entered promiscuous mode [ 178.631790][ T9627] netlink: 'syz.3.828': attribute type 3 has an invalid length. [ 178.708762][ T9626] veth0: left promiscuous mode [ 178.745855][ T9634] dvmrp0: entered allmulticast mode [ 178.897436][ T9288] veth0_vlan: entered promiscuous mode [ 178.944502][ T9288] veth1_vlan: entered promiscuous mode [ 179.038465][ T9288] veth0_macvtap: entered promiscuous mode [ 179.051511][ T9288] veth1_macvtap: entered promiscuous mode [ 179.122837][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.184227][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.234064][ T9288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.265753][ T9288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.278833][ T9288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.294289][ T9288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.664151][ T6372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.702328][ T6372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.813281][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.842398][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.093357][ T9699] veth0: entered promiscuous mode [ 180.166226][ T9701] netlink: 'syz.3.847': attribute type 12 has an invalid length. [ 180.291288][ T6372] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.425442][ T6372] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.543525][ T6372] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.615250][ T6372] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.805002][ T6372] bridge_slave_1: left allmulticast mode [ 180.811645][ T6372] bridge_slave_1: left promiscuous mode [ 180.818670][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.830523][ T6372] bridge_slave_0: left allmulticast mode [ 180.836170][ T6372] bridge_slave_0: left promiscuous mode [ 180.842034][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.113308][ T6372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.124419][ T6372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.135593][ T6372] bond0 (unregistering): Released all slaves [ 181.376391][ T9716] bridge0: port 1(gretap0) entered blocking state [ 181.388379][ T9720] __nla_validate_parse: 16 callbacks suppressed [ 181.388408][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.854'. [ 181.397372][ T9716] bridge0: port 1(gretap0) entered disabled state [ 181.480491][ T9716] gretap0: entered allmulticast mode [ 181.502929][ T9716] gretap0: entered promiscuous mode [ 181.529949][ T9716] bridge0: port 1(gretap0) entered blocking state [ 181.536505][ T9716] bridge0: port 1(gretap0) entered forwarding state [ 181.839889][ T9732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.856'. [ 181.849479][ T9731] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.887711][ T6372] hsr_slave_0: left promiscuous mode [ 181.906858][ T6372] hsr_slave_1: left promiscuous mode [ 181.924461][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.946767][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.972676][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.998120][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.034983][ T6372] veth1_macvtap: left promiscuous mode [ 182.056739][ T6372] veth0_macvtap: left promiscuous mode [ 182.071810][ T6372] veth1_vlan: left promiscuous mode [ 182.085485][ T6372] veth0_vlan: left promiscuous mode [ 182.093848][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.104546][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.112939][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.122951][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.131561][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.565925][ T6372] team0 (unregistering): Port device team_slave_1 removed [ 182.604997][ T6372] team0 (unregistering): Port device team_slave_0 removed [ 183.589871][ T9773] netlink: 340 bytes leftover after parsing attributes in process `syz.0.869'. [ 183.894898][ T9744] chnl_net:caif_netlink_parms(): no params data found [ 183.962787][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 184.043640][ T9792] xt_l2tp: v2 sid > 0xffff: 262144 [ 184.076240][ T9794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.147690][ T9800] xt_limit: Overflow, try lower: 0/0 [ 184.177633][ T5841] Bluetooth: hci0: command tx timeout [ 184.189602][ T9794] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 184.379517][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.388128][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.395325][ T9744] bridge_slave_0: entered allmulticast mode [ 184.404430][ T9744] bridge_slave_0: entered promiscuous mode [ 184.422252][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.430595][ T9810] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.878'. [ 184.443171][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.452429][ T9744] bridge_slave_1: entered allmulticast mode [ 184.462215][ T9744] bridge_slave_1: entered promiscuous mode [ 184.682006][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 184.694162][ T9827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.739631][ T9744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.763825][ T9744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.204410][ T9744] team0: Port device team_slave_0 added [ 186.232636][ T9744] team0: Port device team_slave_1 added [ 186.256858][ T5841] Bluetooth: hci0: command tx timeout [ 186.392897][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.405445][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.434410][ T9744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.501794][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.530775][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.564566][ T9744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.578667][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 186.580523][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 186.627047][ T9871] bridge_slave_0: entered promiscuous mode [ 186.814066][ T9744] hsr_slave_0: entered promiscuous mode [ 186.824939][ T9744] hsr_slave_1: entered promiscuous mode [ 186.833001][ T9744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.841308][ T9744] Cannot create hsr debugfs directory [ 186.844041][ T9888] openvswitch: netlink: Key type 16144 is out of range max 32 [ 186.923364][ T9895] netlink: 'syz.3.902': attribute type 2 has an invalid length. [ 186.962155][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 187.242975][ T9910] netlink: 72 bytes leftover after parsing attributes in process `syz.0.904'. [ 187.281156][ T9910] netlink: 72 bytes leftover after parsing attributes in process `syz.0.904'. [ 187.297490][ T9913] vxcan1: tx address claim with different name [ 187.315347][ T9909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.904'. [ 187.333732][ T9909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.904'. [ 187.384670][ T9909] netlink: 'syz.0.904': attribute type 39 has an invalid length. [ 187.595629][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 187.914527][ T9945] netlink: 256 bytes leftover after parsing attributes in process `syz.3.913'. [ 187.988505][ T9946] netlink: 3724 bytes leftover after parsing attributes in process `syz.1.912'. [ 188.153077][ T9955] netlink: 'syz.1.917': attribute type 4 has an invalid length. [ 188.164147][ T9959] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 188.174076][ T9959] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 188.202225][ T9955] netlink: 'syz.1.917': attribute type 4 has an invalid length. [ 188.336972][ T5841] Bluetooth: hci0: command tx timeout [ 188.474584][ T9744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.531659][ T9744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.565435][ T9744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.605380][ T9744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.783132][ T9744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.811547][ T9744] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.835004][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.842221][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.863524][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.870821][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.015798][ T9744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.631708][T10026] sctp: [Deprecated]: syz.0.932 (pid 10026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.631708][T10026] Use struct sctp_sack_info instead [ 189.741887][ T9744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.345752][T10061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.409176][T10064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.424854][ T5841] Bluetooth: hci0: command tx timeout [ 190.500586][T10068] tipc: Enabling of bearer rejected, failed to enable media [ 190.561569][ T9744] veth0_vlan: entered promiscuous mode [ 190.589849][ T9744] veth1_vlan: entered promiscuous mode [ 190.683822][ T9744] veth0_macvtap: entered promiscuous mode [ 190.774145][ T9744] veth1_macvtap: entered promiscuous mode [ 190.855579][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.870729][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.912667][ T9744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.929385][ T9744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.938524][ T9744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.957170][ T9744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.014055][T10088] xt_l2tp: invalid flags combination: c [ 191.601386][T10119] __nla_validate_parse: 9 callbacks suppressed [ 191.601407][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 193.095037][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.146625][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.175977][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.963'. [ 193.237442][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.257234][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.514849][T10161] netlink: 'syz.2.969': attribute type 11 has an invalid length. [ 193.540817][T10161] netlink: 'syz.2.969': attribute type 11 has an invalid length. [ 193.562746][T10161] netlink: 224 bytes leftover after parsing attributes in process `syz.2.969'. [ 194.026004][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 194.227450][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 194.236444][T10178] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 194.315176][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 194.336141][T10178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.348216][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.502402][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.977'. [ 194.586349][T10191] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 194.617704][T10191] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 194.641671][T10192] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 194.672940][T10192] bridge_slave_1: left allmulticast mode [ 194.684309][T10192] bridge_slave_1: left promiscuous mode [ 194.694631][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.718381][T10192] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 194.823884][ T6379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.905236][ T6379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.970730][ T6379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.042786][ T6379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.152062][ T6379] bridge_slave_1: left allmulticast mode [ 195.157865][ T6379] bridge_slave_1: left promiscuous mode [ 195.163559][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.173496][ T6379] bridge_slave_0: left allmulticast mode [ 195.179624][ T6379] bridge_slave_0: left promiscuous mode [ 195.185324][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.473321][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.484178][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.494639][ T6379] bond0 (unregistering): Released all slaves [ 195.763850][T10201] netlink: 68 bytes leftover after parsing attributes in process `syz.0.979'. [ 195.767476][T10200] 8021q: VLANs not supported on lo [ 195.773364][T10203] tls_set_device_offload: netdev not found [ 195.800712][T10199] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.981'. [ 195.915936][ T6379] hsr_slave_0: left promiscuous mode [ 195.929936][ T6379] hsr_slave_1: left promiscuous mode [ 195.957037][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.975689][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.025240][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.039072][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.071296][T10213] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 196.102759][ T6379] veth1_macvtap: left promiscuous mode [ 196.111566][ T6379] veth0_macvtap: left promiscuous mode [ 196.118391][ T6379] veth1_vlan: left promiscuous mode [ 196.123978][ T6379] veth0_vlan: left promiscuous mode [ 196.257035][ T5847] Bluetooth: hci3: command 0x0405 tx timeout [ 196.299621][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.315892][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.327990][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.336130][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.344370][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.416376][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 198.423898][ T5847] Bluetooth: hci0: command tx timeout [ 198.463572][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 198.818665][T10213] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 199.420085][T10220] chnl_net:caif_netlink_parms(): no params data found [ 199.558673][T10260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.995'. [ 199.605553][T10257] syzkaller0: entered promiscuous mode [ 199.615688][T10257] syzkaller0: entered allmulticast mode [ 199.635661][T10257] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 199.702596][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.718784][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.726056][T10220] bridge_slave_0: entered allmulticast mode [ 199.737751][T10220] bridge_slave_0: entered promiscuous mode [ 199.748314][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.755740][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.768459][T10220] bridge_slave_1: entered allmulticast mode [ 199.778540][T10220] bridge_slave_1: entered promiscuous mode [ 200.033911][T10276] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.421894][T10289] netlink: 'syz.2.1001': attribute type 1 has an invalid length. [ 200.497078][ T5843] Bluetooth: hci0: command tx timeout [ 201.444961][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.487811][T10289] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 201.511340][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.553681][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 201.560149][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 201.566201][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 201.697487][T10220] team0: Port device team_slave_0 added [ 201.706408][T10220] team0: Port device team_slave_1 added [ 201.823181][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.844612][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.929955][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.032307][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.033044][T10315] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1007'. [ 202.082788][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.139544][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.258759][T10328] netlink: 'syz.3.1012': attribute type 1 has an invalid length. [ 202.402510][T10220] hsr_slave_0: entered promiscuous mode [ 202.410231][T10220] hsr_slave_1: entered promiscuous mode [ 202.419719][T10220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.428187][T10220] Cannot create hsr debugfs directory [ 202.598174][ T5847] Bluetooth: hci0: command tx timeout [ 202.828248][T10368] netlink: 'syz.0.1023': attribute type 2 has an invalid length. [ 202.848145][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 202.869170][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 202.959769][T10372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.021824][T10376] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 203.061057][T10379] Driver unsupported XDP return value 0 on prog (id 301) dev N/A, expect packet loss! [ 203.240706][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 203.528575][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 203.537780][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 203.567893][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 203.569876][T10409] netlink: 'syz.1.1035': attribute type 15 has an invalid length. [ 204.656892][ T5847] Bluetooth: hci0: command tx timeout [ 205.226049][T10220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.273190][T10423] netem: change failed [ 205.283606][T10220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.327162][T10220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.360617][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1040'. [ 205.390913][T10220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.459634][T10434] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 205.672309][T10455] xt_socket: unknown flags 0x50 [ 205.898899][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 205.964736][T10476] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1049'. [ 208.730170][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 208.756826][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'. [ 208.800907][T10500] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 209.028784][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.106261][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.124702][T10518] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 209.143388][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.150611][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.267431][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.274625][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.434395][T10526] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.490993][T10537] netlink: 'syz.3.1065': attribute type 2 has an invalid length. [ 209.579183][ T6378] tipc: Subscription rejected, illegal request [ 209.659241][T10545] xt_nat: multiple ranges no longer supported [ 209.807693][T10548] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 209.836496][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 209.975447][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.183208][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 210.236842][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 210.368283][T10573] syz.1.1074 (10573) used greatest stack depth: 15960 bytes left [ 210.428469][T10585] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1079'. [ 210.462180][T10579] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.541843][T10591] sctp: [Deprecated]: syz.1.1081 (pid 10591) Use of int in maxseg socket option. [ 210.541843][T10591] Use struct sctp_assoc_value instead [ 210.551964][T10588] batman_adv: batadv0: Adding interface: ipvlan2 [ 210.593296][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 210.602368][T10588] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.636689][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.663793][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.681975][T10588] batman_adv: batadv0: Interface activated: ipvlan2 [ 210.727768][T10601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1082'. [ 210.821293][T10597] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 210.842823][T10605] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 210.913884][T10220] veth0_vlan: entered promiscuous mode [ 210.920545][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678cc00: rx timeout, send abort [ 210.933302][T10220] veth1_vlan: entered promiscuous mode [ 211.009105][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 211.022943][T10220] veth0_macvtap: entered promiscuous mode [ 211.036518][T10220] veth1_macvtap: entered promiscuous mode [ 211.048878][T10614] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1087'. [ 211.070417][T10609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1087'. [ 211.093320][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 211.106002][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.114359][T10614] netlink: 'syz.3.1087': attribute type 30 has an invalid length. [ 211.130640][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.139952][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 211.141656][T10220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.159013][T10220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.169807][T10220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.178947][T10220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.204459][T10614] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.213537][T10614] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.222775][T10614] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.231673][T10614] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.366537][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.375778][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.420660][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678d000: rx timeout, send abort [ 211.429241][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678cc00: abort rx timeout. Force session deactivation [ 211.480055][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.509609][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.682145][T10642] Bluetooth: MGMT ver 1.23 [ 211.928983][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678d000: abort rx timeout. Force session deactivation [ 211.991781][T10653] can: request_module (can-proto-4) failed. [ 212.059976][T10656] bond6: entered promiscuous mode [ 212.080935][T10656] bond6: entered allmulticast mode [ 212.102754][T10656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.110907][T10664] time_mt_check: 23 callbacks suppressed [ 212.110924][T10664] xt_time: unknown flags 0x4 [ 212.122333][T10664] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 212.519599][T10687] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 212.733165][ T6378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.893158][ T6378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.141399][ T6378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.238523][ T6378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.384515][ T6378] bridge_slave_1: left allmulticast mode [ 213.390262][ T6378] bridge_slave_1: left promiscuous mode [ 213.395967][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.405283][ T6378] bridge_slave_0: left allmulticast mode [ 213.411951][ T6378] bridge_slave_0: left promiscuous mode [ 213.417889][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.757921][T10693] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 213.765710][T10693] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1112'. [ 213.813605][T10693] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 214.001786][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.024506][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.061519][ T6378] bond0 (unregistering): Released all slaves [ 214.067963][T10713] netlink: 'syz.1.1111': attribute type 7 has an invalid length. [ 214.077535][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 214.138283][T10718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.329257][T10723] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 214.444208][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.454663][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.463298][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.478614][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.489635][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.552621][T10723] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 214.641043][T10739] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.816831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.893046][T10760] netlink: 'syz.2.1126': attribute type 6 has an invalid length. [ 214.915885][T10760] netlink: 'syz.2.1126': attribute type 5 has an invalid length. [ 214.928406][T10761] netlink: 'syz.2.1126': attribute type 6 has an invalid length. [ 214.936374][T10761] netlink: 'syz.2.1126': attribute type 5 has an invalid length. [ 215.128123][ T6378] hsr_slave_0: left promiscuous mode [ 215.162184][ T6378] hsr_slave_1: left promiscuous mode [ 215.187632][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.226961][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.290661][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.317561][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.424001][ T6378] veth1_macvtap: left promiscuous mode [ 215.433882][ T6378] veth0_macvtap: left promiscuous mode [ 215.440082][ T6378] veth1_vlan: left promiscuous mode [ 215.445615][ T6378] veth0_vlan: left promiscuous mode [ 216.195108][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 216.195296][T10818] __nla_validate_parse: 8 callbacks suppressed [ 216.195310][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 216.226208][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 216.248410][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 216.577466][ T5835] Bluetooth: hci0: command tx timeout [ 216.689150][T10818] veth7: entered allmulticast mode [ 216.907070][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 216.995759][T10840] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1140'. [ 217.173390][T10840] bridge0: port 1(gretap0) entered disabled state [ 217.240024][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 217.272776][T10852] netlink: set zone limit has 8 unknown bytes [ 217.311687][T10732] chnl_net:caif_netlink_parms(): no params data found [ 217.359325][T10859] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 217.403365][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 217.836450][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.867031][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.874306][T10732] bridge_slave_0: entered allmulticast mode [ 217.903437][T10732] bridge_slave_0: entered promiscuous mode [ 217.953594][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.983474][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.001802][T10732] bridge_slave_1: entered allmulticast mode [ 218.012504][T10732] bridge_slave_1: entered promiscuous mode [ 218.171085][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.171655][T10891] openvswitch: netlink: IPv6 tunnel dst address is zero [ 218.218632][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.374943][T10895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1157'. [ 218.397705][T10732] team0: Port device team_slave_0 added [ 218.441859][T10732] team0: Port device team_slave_1 added [ 218.561110][T10902] xt_SECMARK: invalid mode: 0 [ 218.656734][ T5835] Bluetooth: hci0: command tx timeout [ 218.753545][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.776287][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.826971][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.840853][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.849931][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.890723][T10911] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 218.899021][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.964617][T10911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 219.025098][T10913] bond8: (slave geneve3): making interface the new active one [ 219.034559][T10913] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 219.079332][T10911] bond8: entered promiscuous mode [ 219.079476][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'. [ 219.091833][T10911] geneve3: entered promiscuous mode [ 219.203059][T10732] hsr_slave_0: entered promiscuous mode [ 219.219421][T10732] hsr_slave_1: entered promiscuous mode [ 219.225856][T10732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.234423][T10732] Cannot create hsr debugfs directory [ 219.248456][T10922] tipc: Enabled bearer , priority 10 [ 219.253133][T10924] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 219.500980][T10927] x_tables: unsorted entry at hook 3 [ 219.525699][T10927] x_tables: duplicate underflow at hook 3 [ 219.813917][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 219.848399][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1170'. [ 219.932571][T10951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1172'. [ 220.126143][T10732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.149773][T10732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.173105][T10732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.235117][T10732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.324555][T10974] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 220.490905][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.533346][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.591903][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.599164][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.648972][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.656215][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.739076][ T5835] Bluetooth: hci0: command 0x040f tx timeout [ 220.754901][T10992] tipc: Started in network mode [ 220.776791][T10992] tipc: Node identity 4, cluster identity 292 [ 220.787854][T10992] tipc: Node number set to 4 [ 220.851299][T10732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.862643][T10732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.134924][T11013] x_tables: duplicate entry at hook 1 [ 221.471959][T11025] bridge0: entered allmulticast mode [ 221.492315][T11025] __nla_validate_parse: 4 callbacks suppressed [ 221.492333][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 221.575242][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.644578][T11031] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 221.745841][T11034] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1190'. [ 221.808884][T11003] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 222.453746][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 222.649245][T11057] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1194'. [ 222.703430][T11064] bridge0: port 2(gretap0) entered blocking state [ 222.753212][T11064] bridge0: port 2(gretap0) entered disabled state [ 222.816819][ T5847] Bluetooth: hci0: command 0x040f tx timeout [ 222.823131][T11064] gretap0: entered allmulticast mode [ 222.838349][T11064] gretap0: entered promiscuous mode [ 223.009352][T10732] veth0_vlan: entered promiscuous mode [ 223.053568][T10732] veth1_vlan: entered promiscuous mode [ 223.236007][T11075] Bluetooth: MGMT ver 1.23 [ 223.251971][T10732] veth0_macvtap: entered promiscuous mode [ 223.284128][T10732] veth1_macvtap: entered promiscuous mode [ 223.284465][T11078] netlink: 'syz.3.1199': attribute type 15 has an invalid length. [ 223.359576][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.405502][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.449094][T10732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.467516][T11084] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 223.511948][T10732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.523804][T11087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1202'. [ 223.546860][T10732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.561222][T10732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.574011][T11092] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1204'. [ 223.851322][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.891268][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.951278][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.981253][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.293539][T11125] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1211'. [ 224.309705][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 224.577543][ T6288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.741515][ T6288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.929344][ T6288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.130813][ T6288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.344019][ T6288] bridge_slave_1: left allmulticast mode [ 225.350558][ T6288] bridge_slave_1: left promiscuous mode [ 225.356250][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.369133][ T6288] bridge_slave_0: left allmulticast mode [ 225.374789][ T6288] bridge_slave_0: left promiscuous mode [ 225.381479][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.667838][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.681265][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.691666][ T6288] bond0 (unregistering): Released all slaves [ 225.863384][T11146] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 225.928062][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.937223][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.946294][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.955430][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.964577][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.973713][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.982858][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.991993][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.001096][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.010214][T11154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.046550][T11155] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001 [ 226.297936][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.312010][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.327060][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.342796][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.362113][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.414716][T11159] netem: change failed [ 226.515411][ T6288] hsr_slave_0: left promiscuous mode [ 226.521580][ T6288] hsr_slave_1: left promiscuous mode [ 226.529765][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.537497][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.545451][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.553428][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.572349][ T6288] veth1_macvtap: left promiscuous mode [ 226.578084][ T6288] veth0_macvtap: left promiscuous mode [ 226.583884][ T6288] veth1_vlan: left promiscuous mode [ 226.589548][ T6288] veth0_vlan: left promiscuous mode [ 226.673134][T11172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 226.916160][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 226.991778][T11187] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1224'. [ 227.331824][ T6288] team0 (unregistering): Port device team_slave_1 removed [ 227.400577][ T6288] team0 (unregistering): Port device team_slave_0 removed [ 227.818935][T11177] bridge0: port 3(veth0_to_bridge) entered blocking state [ 227.826802][T11177] bridge0: port 3(veth0_to_bridge) entered disabled state [ 227.847259][T11177] veth0_to_bridge: entered allmulticast mode [ 227.856378][T11177] veth0_to_bridge: entered promiscuous mode [ 227.864909][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 228.037658][T11211] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 228.264127][T11217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'. [ 228.276963][T11217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'. [ 228.354551][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 228.417263][ T5847] Bluetooth: hci0: command tx timeout [ 228.456328][T11165] chnl_net:caif_netlink_parms(): no params data found [ 228.474138][T11233] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 228.535476][T11229] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 228.694265][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 228.850890][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 228.922489][T11257] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 228.955265][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.963919][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.971690][T11165] bridge_slave_0: entered allmulticast mode [ 228.980962][T11165] bridge_slave_0: entered promiscuous mode [ 228.998936][T11262] netlink: 'syz.2.1246': attribute type 33 has an invalid length. [ 229.009167][T11262] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1246'. [ 229.035697][T11264] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 229.155159][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.162475][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.170471][T11165] bridge_slave_1: entered allmulticast mode [ 229.178830][T11165] bridge_slave_1: entered promiscuous mode [ 229.236007][T11275] dvmrp1: entered allmulticast mode [ 229.325439][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.370762][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.469043][T11165] team0: Port device team_slave_0 added [ 229.517100][T11165] team0: Port device team_slave_1 added [ 229.661283][T11165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.696649][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.741376][T11165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.770880][T11165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.806628][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.851690][T11165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.113071][T11165] hsr_slave_0: entered promiscuous mode [ 230.137765][T11165] hsr_slave_1: entered promiscuous mode [ 230.154474][T11165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.170567][T11165] Cannot create hsr debugfs directory [ 230.180747][T11312] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 230.498803][ T5847] Bluetooth: hci0: command tx timeout [ 231.097403][T11355] netlink: 'syz.3.1269': attribute type 8 has an invalid length. [ 231.245732][T11361] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 231.270951][T11165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.316183][T11368] netlink: 'syz.1.1274': attribute type 10 has an invalid length. [ 231.327910][T11165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.351151][T11366] bond7: (slave bridge6): making interface the new active one [ 231.359600][T11366] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 231.381425][T11368] batman_adv: batadv0: Adding interface: team0 [ 231.397083][T11368] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 231.438680][T11368] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 231.471072][T11165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.514076][T11165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.660008][T11383] xfrm1: entered promiscuous mode [ 231.665205][T11383] xfrm1: entered allmulticast mode [ 231.680470][T11165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.727719][T11165] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.758742][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.765998][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.808384][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.815604][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.856413][T11395] xt_hashlimit: size too large, truncated to 1048576 [ 232.102145][T11400] __nla_validate_parse: 8 callbacks suppressed [ 232.102166][T11400] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1280'. [ 232.343060][T11407] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 232.479522][T11165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.577069][ T5847] Bluetooth: hci0: command tx timeout [ 233.013903][T11165] veth0_vlan: entered promiscuous mode [ 233.029308][T11165] veth1_vlan: entered promiscuous mode [ 233.055961][T11165] veth0_macvtap: entered promiscuous mode [ 233.071121][T11165] veth1_macvtap: entered promiscuous mode [ 233.094091][T11165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.106360][T11165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.121171][T11165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.131544][T11165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.140656][T11165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.149407][T11165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.214490][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.223213][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.254461][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.264177][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.312944][ T6376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.782110][ T6376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.191915][ T6376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.391840][ T6376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.531182][ T6376] bridge_slave_1: left allmulticast mode [ 235.543168][ T6376] bridge_slave_1: left promiscuous mode [ 235.550259][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.564023][ T6376] bridge_slave_0: left allmulticast mode [ 235.571121][ T6376] bridge_slave_0: left promiscuous mode [ 235.577328][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.882842][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.892721][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.901047][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.911802][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.940779][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.040056][ T6376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.053478][ T6376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.064591][ T6376] bond0 (unregistering): Released all slaves [ 236.318829][ T6376] hsr_slave_0: left promiscuous mode [ 236.325168][ T6376] hsr_slave_1: left promiscuous mode [ 236.331945][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.339926][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.348446][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.356555][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.375356][ T6376] veth1_macvtap: left promiscuous mode [ 236.381003][ T6376] veth0_macvtap: left promiscuous mode [ 236.386617][ T6376] veth1_vlan: left promiscuous mode [ 236.391913][ T6376] veth0_vlan: left promiscuous mode [ 236.811611][ T6376] team0 (unregistering): Port device team_slave_1 removed [ 236.856305][ T6376] team0 (unregistering): Port device team_slave_0 removed [ 237.259580][T11424] chnl_net:caif_netlink_parms(): no params data found [ 237.377735][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.390069][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.397504][T11424] bridge_slave_0: entered allmulticast mode [ 237.405382][T11424] bridge_slave_0: entered promiscuous mode [ 237.419921][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.432544][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.441003][T11424] bridge_slave_1: entered allmulticast mode [ 237.451391][T11424] bridge_slave_1: entered promiscuous mode [ 237.485751][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.504820][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.549670][T11424] team0: Port device team_slave_0 added [ 237.559052][T11424] team0: Port device team_slave_1 added [ 237.589249][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.596226][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.623961][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.638082][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.645064][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.672281][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.720512][T11424] hsr_slave_0: entered promiscuous mode [ 237.727616][T11424] hsr_slave_1: entered promiscuous mode [ 237.733800][T11424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.742431][T11424] Cannot create hsr debugfs directory [ 238.017017][ T5847] Bluetooth: hci0: command tx timeout [ 238.087396][T11424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.100884][T11424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.110918][T11424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.122803][T11424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.149168][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.156399][T11424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.163928][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.171072][T11424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.224519][T11424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.243610][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.252766][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.274587][T11424] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.287745][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.294846][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.310980][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.318108][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.490397][T11424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.693576][T11424] veth0_vlan: entered promiscuous mode [ 238.704218][T11424] veth1_vlan: entered promiscuous mode [ 238.730548][T11424] veth0_macvtap: entered promiscuous mode [ 238.744583][T11424] veth1_macvtap: entered promiscuous mode [ 238.762883][T11424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.776306][T11424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.789135][T11424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.798574][T11424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.807697][T11424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.818013][T11424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.878317][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.886492][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.922838][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.931691][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.601526][ T6376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.160835][ T6376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.180566][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.194362][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.202988][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.212031][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.219803][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.270045][ T6376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.361165][ T6376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.449664][T11449] chnl_net:caif_netlink_parms(): no params data found [ 242.585012][ T6376] bridge_slave_1: left allmulticast mode [ 242.591676][ T6376] bridge_slave_1: left promiscuous mode [ 242.597725][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.609123][ T6376] bridge_slave_0: left allmulticast mode [ 242.614785][ T6376] bridge_slave_0: left promiscuous mode [ 242.621065][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.923382][ T6376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.934622][ T6376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.945320][ T6376] bond0 (unregistering): Released all slaves [ 242.959496][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.967415][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.974603][T11449] bridge_slave_0: entered allmulticast mode [ 242.983571][T11449] bridge_slave_0: entered promiscuous mode [ 242.992652][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.014190][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.028118][T11449] bridge_slave_1: entered allmulticast mode [ 243.035140][T11449] bridge_slave_1: entered promiscuous mode [ 243.103823][T11449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.117309][T11449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.183206][T11449] team0: Port device team_slave_0 added [ 243.191105][T11449] team0: Port device team_slave_1 added [ 243.245818][ T6376] hsr_slave_0: left promiscuous mode [ 243.251908][ T6376] hsr_slave_1: left promiscuous mode [ 243.260549][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.268356][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.276150][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.283798][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.301616][ T6376] veth1_macvtap: left promiscuous mode [ 243.308391][ T6376] veth0_macvtap: left promiscuous mode [ 243.314010][ T6376] veth1_vlan: left promiscuous mode [ 243.320599][ T6376] veth0_vlan: left promiscuous mode [ 243.734775][ T6376] team0 (unregistering): Port device team_slave_1 removed [ 243.822143][T11465] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 243.839477][ T6376] team0 (unregistering): Port device team_slave_0 removed [ 244.260001][ T5835] Bluetooth: hci0: command tx timeout [ 244.458895][T11449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.466104][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.499767][T11449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.532143][T11460] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 244.602337][T11471] bond11: (slave bridge4): making interface the new active one [ 244.613612][T11471] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 244.637614][T11449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.644604][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.797123][T11449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.893853][T11498] team0: Device gtp0 is of different type [ 244.931248][T11500] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1292'. [ 245.097422][T11508] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1295'. [ 245.181238][T11449] hsr_slave_0: entered promiscuous mode [ 245.208180][T11449] hsr_slave_1: entered promiscuous mode [ 245.214531][T11449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.250862][T11449] Cannot create hsr debugfs directory [ 245.274350][T11516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1298'. [ 245.335606][T11516] Bluetooth: MGMT ver 1.23 [ 245.635245][T11533] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 245.951538][T11547] netlink: 'syz.1.1305': attribute type 16 has an invalid length. [ 245.952637][T11551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 245.959434][T11547] netlink: 'syz.1.1305': attribute type 3 has an invalid length. [ 245.959453][T11547] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1305'. [ 246.174356][T11560] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1310'. [ 246.249348][T11560] sctp: [Deprecated]: syz.0.1310 (pid 11560) Use of int in max_burst socket option. [ 246.249348][T11560] Use struct sctp_assoc_value instead [ 246.293581][T11560] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 246.346282][T11572] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 246.352844][ T5835] Bluetooth: hci0: command tx timeout [ 246.459588][T11577] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 246.460936][T11449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.482508][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1316'. [ 246.484020][T11449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.585953][T11449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.618692][T11449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.646164][T11590] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1318'. [ 246.854633][T11603] net_ratelimit: 3346 callbacks suppressed [ 246.854652][T11603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.894398][T11449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.957586][T11449] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.982179][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.989433][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.035378][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.042641][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.081783][T11612] tipc: Enabling of bearer rejected, failed to enable media [ 247.115152][T11617] netlink: 'syz.0.1323': attribute type 2 has an invalid length. [ 247.121189][T11612] tipc: Enabled bearer , priority 0 [ 247.295338][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.365020][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 247.532574][T11449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.785789][T11639] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 247.795486][T11638] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 247.842320][T11639] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.903141][T11642] bond9: (slave geneve2): making interface the new active one [ 247.914036][T11642] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 248.010453][T11643] bond9: (slave bridge7): making interface the new active one [ 248.019097][T11643] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 248.057434][T11635] bond9: entered promiscuous mode [ 248.066694][T11635] geneve2: entered promiscuous mode [ 248.130743][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 248.416783][ T5835] Bluetooth: hci0: command tx timeout [ 248.581403][T11449] veth0_vlan: entered promiscuous mode [ 248.624692][T11449] veth1_vlan: entered promiscuous mode [ 248.722394][T11449] veth0_macvtap: entered promiscuous mode [ 248.759077][T11449] veth1_macvtap: entered promiscuous mode [ 248.841171][T11449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.922667][T11449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.948341][T11449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.971573][T11449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.981216][T11449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.990747][T11449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.997106][T11704] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 249.091915][T11709] bond10: (slave bridge7): making interface the new active one [ 249.100596][T11709] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 249.249548][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.281958][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.374255][T11722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.397632][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.418345][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.037913][T11747] __nla_validate_parse: 8 callbacks suppressed [ 250.037934][T11747] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1355'. [ 250.245247][ T6378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.422091][ T6378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.679931][ T6378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.933372][ T6378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.052212][ T6378] bridge_slave_1: left allmulticast mode [ 251.058251][ T6378] bridge_slave_1: left promiscuous mode [ 251.063932][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.075117][ T6378] bridge_slave_0: left allmulticast mode [ 251.081133][ T6378] bridge_slave_0: left promiscuous mode [ 251.087130][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.404655][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.415874][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.425984][ T6378] bond0 (unregistering): Released all slaves [ 251.672953][ T6378] hsr_slave_0: left promiscuous mode [ 251.681722][ T6378] hsr_slave_1: left promiscuous mode [ 251.689077][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.696503][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.705507][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.713486][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.731161][ T6378] veth1_macvtap: left promiscuous mode [ 251.736875][ T6378] veth0_macvtap: left promiscuous mode [ 251.743275][ T6378] veth1_vlan: left promiscuous mode [ 251.748807][ T6378] veth0_vlan: left promiscuous mode [ 251.993979][T11767] netlink: 'syz.3.1360': attribute type 4 has an invalid length. [ 252.041175][T11767] netlink: 'syz.3.1360': attribute type 2 has an invalid length. [ 252.080124][T11767] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1360'. [ 252.119658][T11773] sock: sock_timestamping_bind_phc: sock not bind to device [ 252.160485][T11767] nbd: must specify a device to reconfigure [ 252.644009][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.667382][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.683270][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.692774][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.702055][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.834317][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 252.878929][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 253.282805][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 253.308209][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 253.612382][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1368'. [ 253.690494][T11810] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1370'. [ 253.982168][T11828] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 254.070248][T11833] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 254.243133][T11792] chnl_net:caif_netlink_parms(): no params data found [ 254.409519][T11847] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1377'. [ 254.434354][T11847] nbd: illegal input index 61504 [ 254.442165][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 254.461694][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1377'. [ 254.564504][T11858] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 254.715782][T11863] tc_dump_action: action bad kind [ 254.722427][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.736899][ T5835] Bluetooth: hci0: command tx timeout [ 254.747782][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.763493][T11866] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1384'. [ 254.792845][T11792] bridge_slave_0: entered allmulticast mode [ 254.809955][T11792] bridge_slave_0: entered promiscuous mode [ 254.822345][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.835611][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.860439][T11792] bridge_slave_1: entered allmulticast mode [ 254.898684][T11792] bridge_slave_1: entered promiscuous mode [ 255.083178][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.111646][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.222445][T11792] team0: Port device team_slave_0 added [ 255.247707][T11792] team0: Port device team_slave_1 added [ 255.346392][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.357966][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.384543][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.399461][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.407985][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.434418][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.566056][T11792] hsr_slave_0: entered promiscuous mode [ 255.585133][T11792] hsr_slave_1: entered promiscuous mode [ 255.601581][T11792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.617304][T11792] Cannot create hsr debugfs directory [ 255.622968][T11896] __nla_validate_parse: 2 callbacks suppressed [ 255.622983][T11896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1396'. [ 255.645588][T11896] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1396'. [ 255.773601][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1397'. [ 255.794437][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1397'. [ 255.838287][T11904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1397'. [ 255.996198][T11909] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.010951][T11913] netlink: 'syz.1.1399': attribute type 8 has an invalid length. [ 256.028407][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.040020][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.050883][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.059153][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.071720][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.293701][T11927] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1404'. [ 256.709535][T11915] chnl_net:caif_netlink_parms(): no params data found [ 256.827241][ T5835] Bluetooth: hci0: command tx timeout [ 256.999741][T11792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.020958][T11792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.050585][T11957] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 257.099858][T11792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.188675][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 257.190954][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.205219][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1413'. [ 257.227619][T11915] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.243412][T11915] bridge_slave_0: entered allmulticast mode [ 257.284647][T11915] bridge_slave_0: entered promiscuous mode [ 257.309450][T11792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.343711][T11959] bridge: RTM_NEWNEIGH with invalid ether address [ 257.376083][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.397628][T11915] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.418518][T11915] bridge_slave_1: entered allmulticast mode [ 257.446425][T11915] bridge_slave_1: entered promiscuous mode [ 257.616518][T11987] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1417'. [ 257.650959][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 257.680428][T11915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.716114][T11915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.846502][T11915] team0: Port device team_slave_0 added [ 257.934445][T11915] team0: Port device team_slave_1 added [ 258.051973][T11915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.062455][T11915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.097010][ T5835] Bluetooth: hci1: command tx timeout [ 258.122558][T11915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.217292][T11915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.224822][T11915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.254495][T12017] netlink: 'syz.3.1422': attribute type 8 has an invalid length. [ 258.292102][T11915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.345804][T11792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.373885][T12019] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 258.533939][T11915] hsr_slave_0: entered promiscuous mode [ 258.542529][T11915] hsr_slave_1: entered promiscuous mode [ 258.554065][T11915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.563847][T11915] Cannot create hsr debugfs directory [ 258.725243][T11792] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.786137][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.793346][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.839821][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.847032][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.863451][T12042] netlink: 'syz.2.1431': attribute type 11 has an invalid length. [ 258.896816][ T5835] Bluetooth: hci0: command tx timeout [ 259.310795][T11915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.471081][T11915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.603220][T11915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.749559][T11792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.913168][T11915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.919643][T12089] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 259.945002][T12089] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 259.972251][T12089] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 259.984860][T12089] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 260.182369][ T5835] Bluetooth: hci1: command tx timeout [ 260.484968][T11792] veth0_vlan: entered promiscuous mode [ 260.519305][T11792] veth1_vlan: entered promiscuous mode [ 260.610632][T11792] veth0_macvtap: entered promiscuous mode [ 260.639583][T11792] veth1_macvtap: entered promiscuous mode [ 260.702954][T11792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.724780][T11792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.776303][T11792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.785809][T11792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.796190][T11792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.815635][T11792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.959447][T12113] __nla_validate_parse: 10 callbacks suppressed [ 260.959464][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 260.984549][ T5835] Bluetooth: hci0: command tx timeout [ 261.233991][T12121] netlink: 'syz.1.1454': attribute type 3 has an invalid length. [ 261.257048][T12121] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1454'. [ 261.271791][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.290483][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.292716][T12125] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 261.327910][T12125] bond12: entered promiscuous mode [ 261.333353][T12125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 261.363592][T12125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 261.371129][T12125] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 261.382303][T12125] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 261.398073][T12125] bond12: (slave wireguard0): making interface the new active one [ 261.414659][T12125] wireguard0: entered promiscuous mode [ 261.422872][T12125] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 261.444985][T11915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.551777][T11915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.566738][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.578151][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.613914][T11915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.672298][T11915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.790663][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1461'. [ 261.815826][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 262.004046][T12155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.031442][ T6154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.117854][T11915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.159825][ T6154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.215302][T11915] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.229901][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.237105][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.261393][ T5835] Bluetooth: hci1: command tx timeout [ 262.273778][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.280964][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.314381][ T6154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.409039][ T6154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.615513][ T6154] bridge_slave_1: left allmulticast mode [ 262.622362][ T6154] bridge_slave_1: left promiscuous mode [ 262.628798][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.640596][ T6154] bridge_slave_0: left allmulticast mode [ 262.646262][ T6154] bridge_slave_0: left promiscuous mode [ 262.652297][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.993931][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.005185][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.016011][ T6154] bond0 (unregistering): Released all slaves [ 263.044340][T11915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.142756][T11915] veth0_vlan: entered promiscuous mode [ 263.155290][T11915] veth1_vlan: entered promiscuous mode [ 263.194241][T11915] veth0_macvtap: entered promiscuous mode [ 263.232720][T11915] veth1_macvtap: entered promiscuous mode [ 263.249562][T11915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.265034][T11915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.276423][T11915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.288333][T11915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.300198][T11915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.309267][T11915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.343906][ T6154] hsr_slave_0: left promiscuous mode [ 263.350426][ T6154] hsr_slave_1: left promiscuous mode [ 263.356212][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.364022][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.373383][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.381565][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.401640][ T6154] veth1_macvtap: left promiscuous mode [ 263.407320][ T6154] veth0_macvtap: left promiscuous mode [ 263.412881][ T6154] veth1_vlan: left promiscuous mode [ 263.418895][ T6154] veth0_vlan: left promiscuous mode [ 263.798533][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 264.105544][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 264.172294][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 264.172572][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.200558][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.210476][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.224544][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.241728][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.336925][ T5847] Bluetooth: hci1: command tx timeout [ 264.617308][T12171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.769714][T12183] xt_cluster: node mask cannot exceed total number of nodes [ 264.951184][T12191] openvswitch: netlink: Key type 29 is not supported [ 264.965030][T12191] netlink: 'syz.1.1471': attribute type 2 has an invalid length. [ 265.027167][ T6380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.057135][ T6380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.157362][T12201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.164903][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 265.172261][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 265.179612][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 265.187792][T12200] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1474'. [ 265.232422][T12201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.237594][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 265.265050][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.293599][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.422358][T12210] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1476'. [ 265.447044][T12210] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1476'. [ 265.470310][T12213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1476'. [ 265.673113][T12180] chnl_net:caif_netlink_parms(): no params data found [ 266.133454][ T6379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.180353][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.212107][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.219881][T12180] bridge_slave_0: entered allmulticast mode [ 266.252144][T12180] bridge_slave_0: entered promiscuous mode [ 266.272947][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.296822][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.304102][T12180] bridge_slave_1: entered allmulticast mode [ 266.328839][T12180] bridge_slave_1: entered promiscuous mode [ 266.357698][ T5847] Bluetooth: hci0: command tx timeout [ 266.470109][ T6379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.657393][T12235] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 266.788910][ T6379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.875223][T12180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.942573][T12180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.022847][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.037009][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.047617][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.065236][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.074778][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.137960][ T6379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.161555][T12180] team0: Port device team_slave_0 added [ 267.205260][T12180] team0: Port device team_slave_1 added [ 267.216475][T12260] netlink: 'syz.2.1486': attribute type 11 has an invalid length. [ 267.239978][T12260] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1486'. [ 267.252258][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 267.372424][T12180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.386396][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.417595][T12180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.454290][T12180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.463627][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.526250][T12180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.543780][T12272] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 267.879380][T12180] hsr_slave_0: entered promiscuous mode [ 267.896353][T12180] hsr_slave_1: entered promiscuous mode [ 267.907501][T12180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.915172][T12180] Cannot create hsr debugfs directory [ 267.921054][ T6379] bridge_slave_1: left allmulticast mode [ 267.927485][ T6379] bridge_slave_1: left promiscuous mode [ 267.933315][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.955969][ T6379] bridge_slave_0: left allmulticast mode [ 267.963273][ T6379] bridge_slave_0: left promiscuous mode [ 267.971843][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1495'. [ 267.973819][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.997151][T12288] netlink: 'syz.1.1495': attribute type 10 has an invalid length. [ 268.074766][T12290] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1496'. [ 268.401610][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.413387][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.422278][ T5835] Bluetooth: hci0: command tx timeout [ 268.429814][ T6379] bond0 (unregistering): Released all slaves [ 268.814176][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 269.138537][ T5835] Bluetooth: hci1: command tx timeout [ 269.146083][T12255] chnl_net:caif_netlink_parms(): no params data found [ 269.205708][ T6379] hsr_slave_0: left promiscuous mode [ 269.223069][ T6379] hsr_slave_1: left promiscuous mode [ 269.233940][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.242867][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.257517][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.266708][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.295777][ T6379] veth1_macvtap: left promiscuous mode [ 269.301942][ T6379] veth0_macvtap: left promiscuous mode [ 269.303747][T12339] netlink: 'syz.1.1507': attribute type 3 has an invalid length. [ 269.307844][ T6379] veth1_vlan: left promiscuous mode [ 269.320303][T12339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.321174][ T6379] veth0_vlan: left promiscuous mode [ 269.760623][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 269.800888][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 270.464145][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 270.474008][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 270.499659][ T5835] Bluetooth: hci0: command tx timeout [ 270.633769][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.654171][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.682861][T12255] bridge_slave_0: entered allmulticast mode [ 270.692918][T12255] bridge_slave_0: entered promiscuous mode [ 270.731413][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.739136][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.746348][T12255] bridge_slave_1: entered allmulticast mode [ 270.753930][T12255] bridge_slave_1: entered promiscuous mode [ 270.813602][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.832502][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.928193][T12255] team0: Port device team_slave_0 added [ 270.936891][T12363] netlink: 'syz.2.1513': attribute type 1 has an invalid length. [ 270.944647][T12363] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1513'. [ 270.958485][T12255] team0: Port device team_slave_1 added [ 270.980166][T12363] netlink: 'syz.2.1513': attribute type 10 has an invalid length. [ 270.988993][T12363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1513'. [ 271.015117][T12363] batadv0: entered promiscuous mode [ 271.020626][T12363] batadv0: entered allmulticast mode [ 271.026475][T12363] bridge0: port 4(batadv0) entered blocking state [ 271.034639][T12363] bridge0: port 4(batadv0) entered disabled state [ 271.057558][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.075415][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.103547][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.129957][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.143457][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.169738][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.201989][T12366] netlink: 'syz.2.1514': attribute type 8 has an invalid length. [ 271.229045][ T5835] Bluetooth: hci1: command 0x041b tx timeout [ 271.296183][ T6154] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 271.305757][ T6154] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 271.383333][T12255] hsr_slave_0: entered promiscuous mode [ 271.391121][T12255] hsr_slave_1: entered promiscuous mode [ 271.397778][T12255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.405478][T12255] Cannot create hsr debugfs directory [ 271.512000][T12378] delete_channel: no stack [ 271.669460][T12385] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1522'. [ 271.695533][T12180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.717514][T12386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.724893][T12180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.831572][T12180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.991704][T12180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.155278][T12411] bridge10: entered promiscuous mode [ 272.165985][T12411] bridge10: entered allmulticast mode [ 272.210138][T12408] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 272.253864][T12419] netlink: 'syz.3.1529': attribute type 11 has an invalid length. [ 272.285854][T12419] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1529'. [ 272.395788][T12421] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 272.504725][T12429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1533'. [ 272.570908][T12180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.577087][ T5847] Bluetooth: hci0: command tx timeout [ 272.636161][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.721005][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.728229][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.790071][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.797309][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.805518][T12255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.823160][T12255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.849135][T12255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.870024][T12255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.960084][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1537'. [ 273.011360][T12180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.299154][ T5847] Bluetooth: hci1: command 0x041b tx timeout [ 273.436339][T12466] xt_policy: too many policy elements [ 273.506015][T12449] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.693433][T12474] openvswitch: netlink: Missing valid actions attribute. [ 273.733730][T12255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.743366][T12474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.799623][T12474] tipc: Failed to remove unknown binding: 66,1,1/4:2730478579/2730478581 [ 273.804490][T12478] netlink: 'syz.2.1546': attribute type 39 has an invalid length. [ 273.814836][T12255] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.844548][T12180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.973132][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 274.006165][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 274.031585][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.038735][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.097441][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.104629][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.350760][T12507] netlink: 'syz.1.1550': attribute type 21 has an invalid length. [ 274.552272][T12514] ------------[ cut here ]------------ [ 274.557860][T12514] WARNING: CPU: 1 PID: 12514 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 274.568768][T12514] Modules linked in: [ 274.572976][T12514] CPU: 1 UID: 0 PID: 12514 Comm: syz.3.1552 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 274.585451][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.595635][T12514] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 274.602181][T12514] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 274.622084][T12514] RSP: 0018:ffffc9000423ef48 EFLAGS: 00010283 [ 274.628404][T12514] RAX: ffffffff8adafb23 RBX: ffff88806567c000 RCX: 0000000000080000 [ 274.636413][T12514] RDX: ffffc9000ceea000 RSI: 00000000000003a6 RDI: 00000000000003a7 [ 274.644483][T12514] RBP: 0000000000000000 R08: ffff888058638000 R09: 0000000000000007 [ 274.652607][T12514] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 274.661828][T12514] R13: 0000000000000006 R14: ffff88806567c180 R15: 1ffff1100cacf830 [ 274.670192][T12514] FS: 00007fa05514b6c0(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 274.679394][T12514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.686009][T12514] CR2: 0000200000001080 CR3: 000000007435c000 CR4: 00000000003526f0 [ 274.694212][T12514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.702311][T12514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.710398][T12514] Call Trace: [ 274.713706][T12514] [ 274.716749][T12514] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 274.722763][T12514] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 274.728478][T12514] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 274.735019][T12514] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 274.740872][T12514] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 274.746456][T12514] ? ieee80211_get_link_sband+0x335/0x3e0 [ 274.752281][T12514] sta_link_apply_parameters+0xbb8/0xec0 [ 274.758361][T12514] sta_apply_parameters+0x944/0x15b0 [ 274.763719][T12514] ieee80211_add_station+0x424/0x6a0 [ 274.769334][T12514] rdev_add_station+0x105/0x290 [ 274.774230][T12514] nl80211_new_station+0x1723/0x1b40 [ 274.779701][T12514] ? __pfx_nl80211_new_station+0x10/0x10 [ 274.785375][T12514] ? netdev_run_todo+0xe1d/0xea0 [ 274.790424][T12514] ? nl80211_pre_doit+0x4f1/0x930 [ 274.792190][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.795482][T12514] genl_family_rcv_msg_doit+0x215/0x300 [ 274.795568][T12514] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.811668][T12180] veth0_vlan: entered promiscuous mode [ 274.814129][T12514] ? bpf_lsm_capable+0x9/0x20 [ 274.814155][T12514] ? security_capable+0x7e/0x2e0 [ 274.814188][T12514] genl_rcv_msg+0x60e/0x790 [ 274.834005][T12514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.839181][T12514] ? ref_tracker_free+0x63a/0x7d0 [ 274.844239][T12514] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 274.849700][T12514] ? __pfx_nl80211_new_station+0x10/0x10 [ 274.855370][T12514] ? __pfx_nl80211_post_doit+0x10/0x10 [ 274.861364][T12514] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.867049][T12514] netlink_rcv_skb+0x205/0x470 [ 274.871861][T12514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.877028][T12514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.881224][T12180] veth1_vlan: entered promiscuous mode [ 274.882357][T12514] ? down_read+0x1ad/0x2e0 [ 274.882387][T12514] genl_rcv+0x28/0x40 [ 274.896313][T12514] netlink_unicast+0x758/0x8d0 [ 274.901529][T12514] netlink_sendmsg+0x805/0xb30 [ 274.906340][T12514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.911724][T12514] ? aa_sock_msg_perm+0x94/0x160 [ 274.916765][T12514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.922084][T12514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.927465][T12514] __sock_sendmsg+0x219/0x270 [ 274.932183][T12514] ____sys_sendmsg+0x505/0x830 [ 274.937053][T12514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.942396][T12514] ? import_iovec+0x74/0xa0 [ 274.947043][T12514] ___sys_sendmsg+0x21f/0x2a0 [ 274.951765][T12514] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.957101][T12514] ? __fget_files+0x2a/0x420 [ 274.962047][T12514] ? __fget_files+0x3a0/0x420 [ 274.967037][T12514] __x64_sys_sendmsg+0x19b/0x260 [ 274.972031][T12514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.979430][T12514] ? rcu_is_watching+0x15/0xb0 [ 274.984253][T12514] ? do_syscall_64+0xbe/0x3b0 [ 274.989033][T12514] do_syscall_64+0xfa/0x3b0 [ 274.993584][T12514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.999742][T12514] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.005928][T12514] ? clear_bhb_loop+0x60/0xb0 [ 275.010701][T12514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.016656][T12514] RIP: 0033:0x7fa05438e929 [ 275.021120][T12514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.040860][T12514] RSP: 002b:00007fa05514b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.049441][T12514] RAX: ffffffffffffffda RBX: 00007fa0545b5fa0 RCX: 00007fa05438e929 [ 275.057676][T12514] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 275.066016][T12514] RBP: 00007fa054410b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.074286][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.082368][T12514] R13: 0000000000000000 R14: 00007fa0545b5fa0 R15: 00007ffc54d74db8 [ 275.090418][T12514] [ 275.092553][T12255] veth0_vlan: entered promiscuous mode [ 275.093454][T12514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 275.093470][T12514] CPU: 1 UID: 0 PID: 12514 Comm: syz.3.1552 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 275.093494][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.093505][T12514] Call Trace: [ 275.093512][T12514] [ 275.093520][T12514] dump_stack_lvl+0x99/0x250 [ 275.093552][T12514] ? __asan_memcpy+0x40/0x70 [ 275.093578][T12514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.093606][T12514] ? __pfx__printk+0x10/0x10 [ 275.093640][T12514] panic+0x2db/0x790 [ 275.093672][T12514] ? __pfx_panic+0x10/0x10 [ 275.093695][T12514] ? show_trace_log_lvl+0x4fb/0x550 [ 275.093742][T12514] __warn+0x31b/0x4b0 [ 275.093766][T12514] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 275.093791][T12514] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 275.093813][T12514] report_bug+0x2be/0x4f0 [ 275.093838][T12514] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 275.093860][T12514] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 275.093883][T12514] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 275.093905][T12514] handle_bug+0x84/0x160 [ 275.093925][T12514] exc_invalid_op+0x1a/0x50 [ 275.093944][T12514] asm_exc_invalid_op+0x1a/0x20 [ 275.093961][T12514] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 275.093985][T12514] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 275.094002][T12514] RSP: 0018:ffffc9000423ef48 EFLAGS: 00010283 [ 275.094020][T12514] RAX: ffffffff8adafb23 RBX: ffff88806567c000 RCX: 0000000000080000 [ 275.094035][T12514] RDX: ffffc9000ceea000 RSI: 00000000000003a6 RDI: 00000000000003a7 [ 275.094048][T12514] RBP: 0000000000000000 R08: ffff888058638000 R09: 0000000000000007 [ 275.094060][T12514] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 275.094072][T12514] R13: 0000000000000006 R14: ffff88806567c180 R15: 1ffff1100cacf830 [ 275.094100][T12514] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 275.094130][T12514] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 275.094155][T12514] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 275.094177][T12514] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 275.094207][T12514] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 275.094232][T12514] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 275.094254][T12514] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 275.094277][T12514] ? ieee80211_get_link_sband+0x335/0x3e0 [ 275.094304][T12514] sta_link_apply_parameters+0xbb8/0xec0 [ 275.094338][T12514] sta_apply_parameters+0x944/0x15b0 [ 275.094374][T12514] ieee80211_add_station+0x424/0x6a0 [ 275.094406][T12514] rdev_add_station+0x105/0x290 [ 275.094430][T12514] nl80211_new_station+0x1723/0x1b40 [ 275.094475][T12514] ? __pfx_nl80211_new_station+0x10/0x10 [ 275.094499][T12514] ? netdev_run_todo+0xe1d/0xea0 [ 275.094551][T12514] ? nl80211_pre_doit+0x4f1/0x930 [ 275.094582][T12514] genl_family_rcv_msg_doit+0x215/0x300 [ 275.094624][T12514] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.094663][T12514] ? bpf_lsm_capable+0x9/0x20 [ 275.094681][T12514] ? security_capable+0x7e/0x2e0 [ 275.094711][T12514] genl_rcv_msg+0x60e/0x790 [ 275.094743][T12514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.094772][T12514] ? ref_tracker_free+0x63a/0x7d0 [ 275.094794][T12514] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 275.094816][T12514] ? __pfx_nl80211_new_station+0x10/0x10 [ 275.094840][T12514] ? __pfx_nl80211_post_doit+0x10/0x10 [ 275.094864][T12514] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.094899][T12514] netlink_rcv_skb+0x205/0x470 [ 275.094922][T12514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.094947][T12514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.094986][T12514] ? down_read+0x1ad/0x2e0 [ 275.095009][T12514] genl_rcv+0x28/0x40 [ 275.095031][T12514] netlink_unicast+0x758/0x8d0 [ 275.095062][T12514] netlink_sendmsg+0x805/0xb30 [ 275.095098][T12514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.095123][T12514] ? aa_sock_msg_perm+0x94/0x160 [ 275.095148][T12514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.095170][T12514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.095193][T12514] __sock_sendmsg+0x219/0x270 [ 275.095222][T12514] ____sys_sendmsg+0x505/0x830 [ 275.095251][T12514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.095284][T12514] ? import_iovec+0x74/0xa0 [ 275.095307][T12514] ___sys_sendmsg+0x21f/0x2a0 [ 275.095331][T12514] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.095393][T12514] ? __fget_files+0x2a/0x420 [ 275.095412][T12514] ? __fget_files+0x3a0/0x420 [ 275.095443][T12514] __x64_sys_sendmsg+0x19b/0x260 [ 275.095469][T12514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.095502][T12514] ? rcu_is_watching+0x15/0xb0 [ 275.095536][T12514] ? do_syscall_64+0xbe/0x3b0 [ 275.095566][T12514] do_syscall_64+0xfa/0x3b0 [ 275.095594][T12514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.095611][T12514] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.095630][T12514] ? clear_bhb_loop+0x60/0xb0 [ 275.095653][T12514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.095671][T12514] RIP: 0033:0x7fa05438e929 [ 275.095687][T12514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.095702][T12514] RSP: 002b:00007fa05514b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.095722][T12514] RAX: ffffffffffffffda RBX: 00007fa0545b5fa0 RCX: 00007fa05438e929 [ 275.095736][T12514] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 275.095749][T12514] RBP: 00007fa054410b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.095761][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.095772][T12514] R13: 0000000000000000 R14: 00007fa0545b5fa0 R15: 00007ffc54d74db8 [ 275.095803][T12514] [ 275.099172][T12514] Kernel Offset: disabled