last executing test programs: 1m24.930668124s ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m13.35014045s ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m12.077163845s ago: executing program 0 (id=3428): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000005a3000010007000000"], 0x1c}}, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x5, [0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe]}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002040)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @broadcast}, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 57.134736006s ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 56.674892696s ago: executing program 0 (id=3428): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000005a3000010007000000"], 0x1c}}, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x5, [0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe]}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002040)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @broadcast}, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 45.544434289s ago: executing program 4 (id=3733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="02"], 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1278}, 0x20000080) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r7, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8811}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES32=r5], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getpid() r10 = accept(r6, &(0x7f0000000800)=@nl, &(0x7f0000000880)=0x80) mkdirat$cgroup(r4, &(0x7f0000000980)='syz0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xc0, 0x2, 0x22, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, 0x80, 0x8000, 0x4, 0x2}}) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000380)=r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r9, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000005c0)='\x00'}, 0x30) 45.400340274s ago: executing program 4 (id=3735): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0197a0b57e816213e0000a00000008000280040005"], 0x1c}}, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r2, &(0x7f0000001700)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 45.141665419s ago: executing program 4 (id=3738): r0 = socket(0xb, 0x3, 0x401) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@bridge_setlink={0x1d0, 0x13, 0x300, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_VF_PORTS={0x1a8, 0x18, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "df831a81c2571425cb3c48aa5268b14d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc9}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1ba72aab7381742a92b6b94c8f7af802"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "22188b23f7c84319fd40ef38064045ad"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "56b35ca89844624b703fb365c34952f4"}, @IFLA_PORT_PROFILE={0xb, 0x2, ':\xab:{!\'-'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2cc016e29a03c9405e0262eac0136862"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "18f40551cc2cb8f72ab3bba51c872e82"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dcbdc952a8a3f985a50d1d9a73ff1c43"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "146d68a62bcad9d7c6455a43ba394368"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6c871153af87ff5f9a00c75246619eb5"}, @IFLA_PORT_VF={0x8, 0x1, 0x938}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x93}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "beddfd75243c3d09f4b3993e83b010f9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b36a37e3bb10494d072d8a6c355796b"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "00cbc1a0b109a7789bc7bf4aea3d41e3"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f9869d098e7700d639ea2bec65626574"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7e560a596a30afedd94670f96844dba2"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c17069856271f1ccf48d4222760329a"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0xdd1, 0x7, 0x0, 0x3}, 0x14) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020906000300000025bd7000fddbdf250100180003000000"], 0x18}}, 0x50) 43.633746765s ago: executing program 0 (id=3428): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000005a3000010007000000"], 0x1c}}, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x5, [0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe]}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002040)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @broadcast}, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 42.570537432s ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 32.905310697s ago: executing program 4 (id=3738): r0 = socket(0xb, 0x3, 0x401) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@bridge_setlink={0x1d0, 0x13, 0x300, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_VF_PORTS={0x1a8, 0x18, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "df831a81c2571425cb3c48aa5268b14d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc9}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1ba72aab7381742a92b6b94c8f7af802"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "22188b23f7c84319fd40ef38064045ad"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "56b35ca89844624b703fb365c34952f4"}, @IFLA_PORT_PROFILE={0xb, 0x2, ':\xab:{!\'-'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2cc016e29a03c9405e0262eac0136862"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "18f40551cc2cb8f72ab3bba51c872e82"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dcbdc952a8a3f985a50d1d9a73ff1c43"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "146d68a62bcad9d7c6455a43ba394368"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6c871153af87ff5f9a00c75246619eb5"}, @IFLA_PORT_VF={0x8, 0x1, 0x938}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x93}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "beddfd75243c3d09f4b3993e83b010f9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b36a37e3bb10494d072d8a6c355796b"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "00cbc1a0b109a7789bc7bf4aea3d41e3"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f9869d098e7700d639ea2bec65626574"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7e560a596a30afedd94670f96844dba2"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c17069856271f1ccf48d4222760329a"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0xdd1, 0x7, 0x0, 0x3}, 0x14) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020906000300000025bd7000fddbdf250100180003000000"], 0x18}}, 0x50) 31.602076586s ago: executing program 0 (id=3428): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000005a3000010007000000"], 0x1c}}, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x5, [0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe]}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002040)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @broadcast}, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 29.61502101s ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 18.670088438s ago: executing program 4 (id=3738): r0 = socket(0xb, 0x3, 0x401) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@bridge_setlink={0x1d0, 0x13, 0x300, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_VF_PORTS={0x1a8, 0x18, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "df831a81c2571425cb3c48aa5268b14d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc9}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1ba72aab7381742a92b6b94c8f7af802"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "22188b23f7c84319fd40ef38064045ad"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "56b35ca89844624b703fb365c34952f4"}, @IFLA_PORT_PROFILE={0xb, 0x2, ':\xab:{!\'-'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2cc016e29a03c9405e0262eac0136862"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "18f40551cc2cb8f72ab3bba51c872e82"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dcbdc952a8a3f985a50d1d9a73ff1c43"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "146d68a62bcad9d7c6455a43ba394368"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6c871153af87ff5f9a00c75246619eb5"}, @IFLA_PORT_VF={0x8, 0x1, 0x938}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x93}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "beddfd75243c3d09f4b3993e83b010f9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b36a37e3bb10494d072d8a6c355796b"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "00cbc1a0b109a7789bc7bf4aea3d41e3"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f9869d098e7700d639ea2bec65626574"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7e560a596a30afedd94670f96844dba2"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c17069856271f1ccf48d4222760329a"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0xdd1, 0x7, 0x0, 0x3}, 0x14) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020906000300000025bd7000fddbdf250100180003000000"], 0x18}}, 0x50) 17.33904611s ago: executing program 0 (id=3428): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000005a3000010007000000"], 0x1c}}, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x5, [0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe]}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002040)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @broadcast}, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 14.047413691s ago: executing program 2 (id=1665): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.665709609s ago: executing program 4 (id=3738): r0 = socket(0xb, 0x3, 0x401) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@bridge_setlink={0x1d0, 0x13, 0x300, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_VF_PORTS={0x1a8, 0x18, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "df831a81c2571425cb3c48aa5268b14d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc9}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1ba72aab7381742a92b6b94c8f7af802"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "22188b23f7c84319fd40ef38064045ad"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "56b35ca89844624b703fb365c34952f4"}, @IFLA_PORT_PROFILE={0xb, 0x2, ':\xab:{!\'-'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2cc016e29a03c9405e0262eac0136862"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "18f40551cc2cb8f72ab3bba51c872e82"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dcbdc952a8a3f985a50d1d9a73ff1c43"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "146d68a62bcad9d7c6455a43ba394368"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6c871153af87ff5f9a00c75246619eb5"}, @IFLA_PORT_VF={0x8, 0x1, 0x938}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x93}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "beddfd75243c3d09f4b3993e83b010f9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b36a37e3bb10494d072d8a6c355796b"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "00cbc1a0b109a7789bc7bf4aea3d41e3"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f9869d098e7700d639ea2bec65626574"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7e560a596a30afedd94670f96844dba2"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c17069856271f1ccf48d4222760329a"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0xdd1, 0x7, 0x0, 0x3}, 0x14) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020906000300000025bd7000fddbdf250100180003000000"], 0x18}}, 0x50) 3.626774149s ago: executing program 0 (id=3428): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000005a3000010007000000"], 0x1c}}, 0x0) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x5, [0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe]}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002040)={{0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @broadcast}, 'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 1.976402399s ago: executing program 3 (id=3939): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8, 0x6, [0x7, 0x9, 0x401, 0x7f, 0xddc]}}) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000280)) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 1.776004381s ago: executing program 1 (id=3940): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000301011100000000000000000a0000000800034000002400140019"], 0x30}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@func={0x9, 0x0, 0x0, 0xc, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x5}, @ptr={0x20010, 0x0, 0x0, 0x2, 0x2}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x9}]}, @enum64={0xc, 0x2, 0x0, 0x13, 0x1, 0x2, [{0xc, 0x6, 0x7}, {0xe, 0x8000}]}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000000500)=""/189, 0x7d, 0xbd, 0x0, 0x40, 0x10000, @value=r3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x24, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.718238249s ago: executing program 1 (id=3941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40036}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040055) syz_emit_ethernet(0xe7, &(0x7f0000000000)={@remote, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xb1, 0x88, 0x0, @empty, @local, {[], {0x0, 0x0, 0xb1, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100, @val=0x80}, "d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198c7a24f3ec2185138fe030170dda008bd7d42867c177d4e352c8492e93525924032a8ebbf88fabece1fcfff79b9544f0ad325ac8c4f2c53cb996973bdd18dca63ab3f725ab41fad4a54db99422926d452006e143116973d45ba10a1dc45d22255abf10b2a566d58ec90d270995951f16e471"}}}}}}}, 0x0) 1.629816058s ago: executing program 1 (id=3942): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r3 = gettid() (async, rerun: 32) r4 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000240)=0x90) (async, rerun: 32) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r4, r1, r1, r5, r1, r0]}}], 0x38}, 0x0) (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000080)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 700.205014ms ago: executing program 3 (id=3943): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x24008051, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 673.635405ms ago: executing program 1 (id=3944): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}, "060086dd030020a9"}}}}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) (async) r2 = accept4(r0, &(0x7f0000000340)=@ieee802154={0x24, @short}, &(0x7f00000003c0)=0x80, 0x80000) bind$xdp(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, r1, 0x16, r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) unshare(0x22020400) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310303000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r8, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xffffffff, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x9, 0x8) syz_emit_ethernet(0x19d, &(0x7f0000000100)={@local, @dev, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x3, 0x36, 0x18b, 0x65, 0xfffc, 0x0, 0x6, 0x0, @private=0x8, @multicast2, {[@end, @noop, @timestamp={0x44, 0x1c, 0x8f, 0x0, 0x5, [0xe, 0x0, 0x0, 0x2, 0x2, 0x8]}, @generic={0x94, 0x9, "776ee929ddcc94"}]}}, {{0x4e24, 0x4e22, r7, r10, 0x0, 0x0, 0x19, 0x80, 0x9, 0x0, 0x6, {[@fastopen={0x22, 0xe, "d1ce9e371b452942e7a27a17"}, @mss={0x2, 0x4, 0x9}, @md5sig={0x13, 0x12, "6d3022be3c25cd6aaf3ae1de08164399"}, @sack={0x5, 0xe, [0x78, 0x4, 0x6]}, @mss={0x2, 0x4, 0x3d}, @window={0x3, 0x3, 0x48}, @sack_perm={0x4, 0x2}, @nop, @nop, @sack={0x5, 0x12, [0x5, 0x4, 0x8, 0x6]}]}}, {"cca29872d75bda5a73724aaadedd6168e4874ff00d2fab251652b405ec1419fe1d2f2a74ae0807f4b07aca0952890bb9d07eab9ae4e55fdd207f013511eb81a2b38963299283b891e0a2b948676a39132fb1820c49c8cd26595bac379d8dbfaec18333e8d071d726b097be3d0117b7869c7a04db28bec1b1816cafb2eed4806d2f7bdbab7ddafefe4756a8d8f0ba9f08859e5ceaea9a5515c89a25963b089951c2793e98aa19302a0c01fa5344c4cbcda2bf8a1cee1da6855e139cb37bf0b4ddf8d13859bef3c32a4d4918229ead3aa097a991db3931160a3ea5511ede6cb4470580eb00719679a660fab0"}}}}}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 631.884122ms ago: executing program 3 (id=3945): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000120000006000a004e240000080008"], 0x38}}, 0x0) 541.228129ms ago: executing program 1 (id=3946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282100f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 316.025721ms ago: executing program 3 (id=3947): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4750a8f0a42ba726}, 0x488c0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x5, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r6}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x9, 0x4, {{0x13, 0x4, 0x1, 0x11, 0x4c, 0x64, 0x0, 0x7, 0x4, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x13, 0xb9, [@empty, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x17, 0xe7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x8c, 0x3, 0xf, [{@multicast1, 0x7}]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="45cc4648630f00000700000000000000000000000000000000d691d47896fd1cd8759997aa", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="00000000020000000300"/28], 0x50) 308.455534ms ago: executing program 1 (id=3948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100003d9c0cd15726b2daccf187aefdc0113d98fd2c66afa7506f5681fc5249258c6222184b87b7b998868fc0c377cca401bf7bcb1b183f6c6f88576328338f9ff0aa67f94830d8baecbb0dae40b86e5a7563f8b2c0c4f49dbaea0d53e8a7618de88b5b66ae749cd5e81b0980e966b48c9b301c499e31f26c0c513c8b89b8aaa539fffffffffffffffba025bcc71a29e8ac245f2acdd54c41438d1d3bd5cad80bdd9fa98332e16e6da40281de2e538b33b506759f57820c776cbdb425723c8d9d4b6bf3c0d3f4b753f6", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x24, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x31}]}, 0x24}], 0x1}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r6, 0x5, 0x0, 0x25df5bfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}}, 0x40050) 191.125764ms ago: executing program 3 (id=3949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010003b0c9a3401b60115be0000000000019c45bf243378b7d1d1d03e8328d6449393015e917574b58b244d7291d04b6b5014a9ca3a572061304bdba30d32ce021f8bbe4f7a79e166170eac80318f43bde0f77db3bfeb8485f753558805f1dc056a63ecd51345a05d5416c0affdb1209afab417bca495f3e86f75afe29bfa267eac21f4fb3f8dd667d80da0e0c8e733810872b617d08c13caa810f4f7cc767750979e39919819c387fe5ef4506d174f514cf285db1c2e8c0dac783aa59d92563ba7f904f077ff", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028006000f00000000000400120006001000000000000600110000000000"], 0x50}}, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000000c0)=0xb) 0s ago: executing program 3 (id=3950): close(0x3) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 6.536114][T18503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.557588][T18590] lo speed is unknown, defaulting to 1000 [ 426.571305][T18503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.680754][T18605] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 426.790969][T18503] team0: Port device team_slave_0 added [ 426.841232][T18503] team0: Port device team_slave_1 added [ 427.023222][T18624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.050727][T18622] macsec0: entered allmulticast mode [ 427.060821][T18623] macsec0: left allmulticast mode [ 427.066641][T18503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.073626][T18503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.096840][T18617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.100516][T18503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.124930][T18503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.132845][T18503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.159330][T18503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.175643][T18617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.188514][T18590] lo speed is unknown, defaulting to 1000 [ 427.211408][T18590] xfrm0 speed is unknown, defaulting to 1000 [ 427.273665][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 427.318887][T18503] hsr_slave_0: entered promiscuous mode [ 427.331061][T18503] hsr_slave_1: entered promiscuous mode [ 427.342313][T18503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.352847][T18503] Cannot create hsr debugfs directory [ 427.598746][ T5831] Bluetooth: hci2: command tx timeout [ 427.658006][T18647] ip6t_srh: unknown srh match flags 536B [ 427.775370][T18655] rdma_rxe: rxe_newlink: failed to add lo [ 427.832226][T18658] netlink: ct family unspecified [ 427.867707][T18658] openvswitch: netlink: Actions may not be safe on all matching packets [ 427.901024][T18590] chnl_net:caif_netlink_parms(): no params data found [ 427.991911][T18666] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 428.101351][T18676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3457'. [ 428.174206][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.182713][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.196726][T18590] bridge_slave_0: entered allmulticast mode [ 428.205930][T18590] bridge_slave_0: entered promiscuous mode [ 428.226225][T18679] batadv_slave_1: entered promiscuous mode [ 428.233606][T18679] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 428.246402][T18679] Cannot create hsr debugfs directory [ 428.270894][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.287128][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.304628][T18590] bridge_slave_1: entered allmulticast mode [ 428.318737][T18590] bridge_slave_1: entered promiscuous mode [ 428.354812][T18691] veth0_macvtap: mtu less than device minimum [ 428.404792][T18693] bond6: entered allmulticast mode [ 428.424896][T18693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.479134][ T5831] Bluetooth: hci0: command tx timeout [ 428.484723][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.509952][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.605758][T18590] team0: Port device team_slave_0 added [ 428.664715][T18590] team0: Port device team_slave_1 added [ 428.771177][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.794567][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.828910][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.900997][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.910417][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.954548][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.954983][T18721] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3470'. [ 428.985900][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 429.009582][T18721] 8021q: VLANs not supported on sit0 [ 429.018218][T18724] bridge0: port 3(veth0_to_bridge) entered blocking state [ 429.025724][T18724] bridge0: port 3(veth0_to_bridge) entered disabled state [ 429.036425][T18724] veth0_to_bridge: entered allmulticast mode [ 429.055990][T18724] veth0_to_bridge: entered promiscuous mode [ 429.150025][T18503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.173457][T18590] hsr_slave_0: entered promiscuous mode [ 429.189118][T18590] hsr_slave_1: entered promiscuous mode [ 429.204352][T18590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.206275][T18732] Bluetooth: MGMT ver 1.23 [ 429.222396][T18590] Cannot create hsr debugfs directory [ 429.228358][T18503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.254008][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'. [ 429.268259][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'. [ 429.278546][T18503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.291936][T18732] veth0_to_bridge: left allmulticast mode [ 429.299772][T18732] veth0_to_bridge: left promiscuous mode [ 429.305665][T18732] bridge0: port 3(veth0_to_bridge) entered disabled state [ 429.317480][T18732] bridge_slave_1: left allmulticast mode [ 429.323290][T18732] bridge_slave_1: left promiscuous mode [ 429.330087][T18732] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.340519][T18732] bridge_slave_0: left allmulticast mode [ 429.346190][T18732] bridge_slave_0: left promiscuous mode [ 429.354427][T18732] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.374681][T18732] bond0: (slave bridge0): Releasing backup interface [ 429.429021][T18734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.437362][T18734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.445284][T18734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.453423][T18734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.528646][T18503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.676826][ T5831] Bluetooth: hci2: command tx timeout [ 429.812688][T18503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.835126][T18503] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.873348][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.880567][T15971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.895584][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.902712][T15971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.142250][T18590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.172483][T18590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.193673][T18590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.218183][T18590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.304151][T18503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.413322][T18503] veth0_vlan: entered promiscuous mode [ 430.443507][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.453899][T18503] veth1_vlan: entered promiscuous mode [ 430.511242][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.524963][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.532156][T15973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.550925][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.557209][ T5831] Bluetooth: hci0: command tx timeout [ 430.558087][T15973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.592167][T18503] veth0_macvtap: entered promiscuous mode [ 430.671345][T18503] veth1_macvtap: entered promiscuous mode [ 430.725456][T18503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.782788][T18503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.815808][T18503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.836001][T18503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.868693][T18503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.879072][T18503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.094761][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 431.101069][T18790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.144038][ T7393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.164534][ T7393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.211132][T18790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.235171][T15977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.259145][T15977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.278080][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.288689][T18792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.351506][T18794] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3492'. [ 431.375061][T18796] tipc: Trying to set illegal importance in message [ 431.393233][T18796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3493'. [ 431.439897][T18590] veth0_vlan: entered promiscuous mode [ 431.491033][T18590] veth1_vlan: entered promiscuous mode [ 431.539500][T18590] veth0_macvtap: entered promiscuous mode [ 431.570264][T18590] veth1_macvtap: entered promiscuous mode [ 431.591406][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.604211][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.621331][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.652902][T18590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.670948][T18590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.684641][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.712456][T18590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.725723][T18590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.735405][T18590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.744570][T18590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.916358][T15977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.924233][T15977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.972370][T18813] netlink: 'syz.3.3500': attribute type 11 has an invalid length. [ 432.000885][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.011580][T18819] pimreg: entered allmulticast mode [ 432.058137][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.169896][T18825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3503'. [ 432.314609][T18833] netlink: 'syz.1.3506': attribute type 1 has an invalid length. [ 432.324824][T18833] netlink: 'syz.1.3506': attribute type 2 has an invalid length. [ 432.403131][T15971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.235110][T15971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.351604][T15971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.418340][T15971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.657455][T18843] netlink: 'syz.4.3510': attribute type 10 has an invalid length. [ 433.683816][T15971] bridge_slave_1: left allmulticast mode [ 433.702491][T15971] bridge_slave_1: left promiscuous mode [ 433.720868][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.743643][T15971] bridge_slave_0: left allmulticast mode [ 433.766999][T15971] bridge_slave_0: left promiscuous mode [ 433.772805][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.011106][T18845] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3509'. [ 434.090842][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.101545][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.110596][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.136716][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.144595][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.234596][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.248803][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.257630][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.269117][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.280993][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.565361][T15971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.577724][T15971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.590070][T15971] bond0 (unregistering): Released all slaves [ 434.603408][T18841] syzkaller1: entered promiscuous mode [ 434.609497][T18841] syzkaller1: entered allmulticast mode [ 434.723646][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 434.769272][T18856] lo speed is unknown, defaulting to 1000 [ 434.804509][T18858] lo speed is unknown, defaulting to 1000 [ 434.821410][T18868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3516'. [ 435.111473][T18883] IPVS: set_ctl: invalid protocol: 131 172.20.20.187:20004 [ 435.180676][T18887] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.260445][T18889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3523'. [ 435.503892][T18858] lo speed is unknown, defaulting to 1000 [ 435.529923][T18858] xfrm0 speed is unknown, defaulting to 1000 [ 435.542021][T18856] lo speed is unknown, defaulting to 1000 [ 435.625678][T18856] xfrm0 speed is unknown, defaulting to 1000 [ 435.729878][T18911] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3530'. [ 435.745034][T18911] unsupported nlmsg_type 40 [ 435.750247][T18910] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3529'. [ 435.863249][T18908] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3529'. [ 435.981376][T18922] batadv_slave_1: entered promiscuous mode [ 436.053394][T15971] hsr_slave_0: left promiscuous mode [ 436.069689][T15971] hsr_slave_1: left promiscuous mode [ 436.075699][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.103359][T18926] netlink: 'syz.1.3533': attribute type 16 has an invalid length. [ 436.106401][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.115036][T18926] netlink: 'syz.1.3533': attribute type 3 has an invalid length. [ 436.127030][T18926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3533'. [ 436.130736][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 436.148139][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.155693][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.191949][T15971] veth1_macvtap: left promiscuous mode [ 436.198958][T15971] veth0_macvtap: left promiscuous mode [ 436.205022][T15971] veth1_vlan: left promiscuous mode [ 436.211503][T15971] veth0_vlan: left promiscuous mode [ 436.237293][ T5831] Bluetooth: hci0: command tx timeout [ 436.321108][ T5831] Bluetooth: hci2: command tx timeout [ 436.655060][T15971] team0 (unregistering): Port device team_slave_1 removed [ 436.700967][T15971] team0 (unregistering): Port device team_slave_0 removed [ 437.285535][T18941] vlan2: entered allmulticast mode [ 437.291271][T18941] gretap0: entered allmulticast mode [ 437.562813][T18953] unknown channel width for channel at 909000KHz? [ 437.597860][T18953] unknown channel width for channel at 909000KHz? [ 437.605507][T18962] openvswitch: netlink: Tunnel attr 13 has unexpected len 10 expected 16 [ 437.660507][T18858] chnl_net:caif_netlink_parms(): no params data found [ 437.695261][T18856] chnl_net:caif_netlink_parms(): no params data found [ 437.843776][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 438.063878][T18856] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.081974][T18856] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.097237][T18856] bridge_slave_0: entered allmulticast mode [ 438.104317][T18856] bridge_slave_0: entered promiscuous mode [ 438.173143][T18858] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.187012][T18858] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.203398][T18858] bridge_slave_0: entered allmulticast mode [ 438.218883][T18858] bridge_slave_0: entered promiscuous mode [ 438.239796][T18856] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.253547][T18856] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.264281][T18856] bridge_slave_1: entered allmulticast mode [ 438.284137][T18856] bridge_slave_1: entered promiscuous mode [ 438.316461][ T5831] Bluetooth: hci0: command tx timeout [ 438.343210][T18858] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.353420][T18858] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.363728][T18858] bridge_slave_1: entered allmulticast mode [ 438.375012][T18858] bridge_slave_1: entered promiscuous mode [ 438.396383][ T5831] Bluetooth: hci2: command tx timeout [ 438.486027][T19000] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 438.569725][T18856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.601480][T15971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.625445][T18858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.650375][T18856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.691347][T18858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.756218][T19010] xt_policy: too many policy elements [ 440.134052][T15971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.182298][T18856] team0: Port device team_slave_0 added [ 440.193291][T18856] team0: Port device team_slave_1 added [ 440.233503][T19024] __nla_validate_parse: 1 callbacks suppressed [ 440.233521][T19024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3563'. [ 440.252964][T18858] team0: Port device team_slave_0 added [ 440.254938][T19024] netlink: 'syz.3.3563': attribute type 7 has an invalid length. [ 440.278582][T19024] netlink: 'syz.3.3563': attribute type 8 has an invalid length. [ 440.307237][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 440.348229][T15971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.398104][ T5836] Bluetooth: hci0: command tx timeout [ 440.480738][ T5836] Bluetooth: hci2: command tx timeout [ 440.491202][T19038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3566'. [ 440.517796][T18858] team0: Port device team_slave_1 added [ 440.675980][T15971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.807665][T18856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.832602][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.881570][T18856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.898470][T18858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.920574][T18858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.989422][T18858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.020287][T18856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.052256][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.112340][T18856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.124606][T19056] netlink: 'syz.1.3570': attribute type 4 has an invalid length. [ 441.134116][T18858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.157491][T18858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.200678][T19059] netlink: 'syz.1.3570': attribute type 4 has an invalid length. [ 441.203010][T19058] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20002 [ 441.213925][T18858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.370022][T17419] lo speed is unknown, defaulting to 1000 [ 441.379654][T17419] syz: Port: 1 Link ACTIVE [ 441.381872][T18856] hsr_slave_0: entered promiscuous mode [ 441.399876][T18856] hsr_slave_1: entered promiscuous mode [ 441.414276][T18856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.432635][T18856] Cannot create hsr debugfs directory [ 441.573485][T18858] hsr_slave_0: entered promiscuous mode [ 441.615337][T18858] hsr_slave_1: entered promiscuous mode [ 441.641175][T18858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.647235][T19071] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 441.657639][T18858] Cannot create hsr debugfs directory [ 441.981412][T19078] syzkaller0: entered promiscuous mode [ 441.987476][T19078] syzkaller0: entered allmulticast mode [ 442.092918][T15971] bridge_slave_1: left allmulticast mode [ 442.108531][T15971] bridge_slave_1: left promiscuous mode [ 442.120461][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.143214][T15971] bridge_slave_0: left allmulticast mode [ 442.149741][T15971] bridge_slave_0: left promiscuous mode [ 442.155491][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.163135][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 442.487901][ T5831] Bluetooth: hci0: command tx timeout [ 442.557419][ T5831] Bluetooth: hci2: command tx timeout [ 442.577103][T15971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.589335][T15971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.599544][T15971] bond0 (unregistering): Released all slaves [ 442.623345][T19085] syzkaller1: entered promiscuous mode [ 442.629473][T19085] syzkaller1: entered allmulticast mode [ 442.946422][T19109] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3583'. [ 443.274125][T15971] hsr_slave_0: left promiscuous mode [ 443.290263][T15971] hsr_slave_1: left promiscuous mode [ 443.293205][T19120] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3587'. [ 443.296250][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.339303][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.354712][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.369006][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.403533][T15971] veth1_macvtap: left promiscuous mode [ 443.410995][T15971] veth0_macvtap: left promiscuous mode [ 443.419459][T19131] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3588'. [ 443.419509][T15971] veth1_vlan: left promiscuous mode [ 443.434704][T15971] veth0_vlan: left promiscuous mode [ 443.435207][T19131] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 443.518106][T19133] netlink: 'syz.3.3590': attribute type 39 has an invalid length. [ 443.892571][T15971] team0 (unregistering): Port device team_slave_1 removed [ 443.933005][T15971] team0 (unregistering): Port device team_slave_0 removed [ 444.422495][T19139] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3590'. [ 444.433738][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 444.450995][T19141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3591'. [ 444.463297][T19144] openvswitch: netlink: Message has 4 unknown bytes. [ 444.643488][T18856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.681520][T18856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.714515][T18856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.783084][T18856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.008750][T19174] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 445.025602][T19175] xt_CONNSECMARK: invalid mode: 0 [ 445.037931][T19174] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 445.225427][T18856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.401653][T18856] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.460022][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.467221][T15971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.542023][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.549250][T15971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.572983][T18858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.607372][T18858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.663749][T18858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.692852][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 445.707838][T18858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.789861][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 445.790507][T18856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.833668][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 445.931663][T19206] netlink: 'syz.4.3606': attribute type 9 has an invalid length. [ 445.957710][T18858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.966175][T19206] netlink: 'syz.4.3606': attribute type 6 has an invalid length. [ 446.014737][T18858] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.044291][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3607'. [ 446.050282][T19212] netlink: 'syz.1.3608': attribute type 9 has an invalid length. [ 446.062405][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.069566][T15975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.108611][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.115784][T15975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.150255][T19214] sch_fq: defrate 0 ignored. [ 446.229132][T18856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.365459][T18856] veth0_vlan: entered promiscuous mode [ 446.394558][T19230] netlink: 'syz.4.3612': attribute type 3 has an invalid length. [ 446.413571][T18856] veth1_vlan: entered promiscuous mode [ 446.428423][T19230] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3612'. [ 446.487921][T19233] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 446.505467][T18856] veth0_macvtap: entered promiscuous mode [ 446.538348][T18856] veth1_macvtap: entered promiscuous mode [ 446.625975][T18856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.626102][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'. [ 446.672008][T18856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.677768][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3615'. [ 446.718580][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3614'. [ 446.734191][T19239] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3614'. [ 446.745008][T18856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.771697][T18856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.786792][T18856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.795638][T18856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.962359][T18858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.002561][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 447.035810][T19250] netlink: 'syz.1.3618': attribute type 1 has an invalid length. [ 447.051818][T19250] netlink: 'syz.1.3618': attribute type 2 has an invalid length. [ 447.077439][T15971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.119644][T15971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.208607][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.215498][T19258] No such timeout policy "syz0" [ 447.227427][T19259] No such timeout policy "syz0" [ 447.234457][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.276012][T18858] veth0_vlan: entered promiscuous mode [ 447.323731][T18858] veth1_vlan: entered promiscuous mode [ 447.394395][T18858] veth0_macvtap: entered promiscuous mode [ 447.425770][T18858] veth1_macvtap: entered promiscuous mode [ 447.467346][T18858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.491018][T18858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.513074][T18858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.540990][T18858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.576854][T18858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.598428][T18858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.621484][T18858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.646562][T18858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.655297][T18858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.665603][T18858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.898161][T15973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.921876][T15973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.957394][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.965699][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.161706][T19263] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 448.295931][T19299] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 448.525165][T19319] netlink: 'syz.4.3636': attribute type 11 has an invalid length. [ 448.565589][T15971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.698008][T15971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.773605][T15971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.871076][T15971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.507937][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.519322][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.527822][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.551501][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.568656][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.615781][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.627667][T15971] bridge_slave_1: left allmulticast mode [ 449.633346][T15971] bridge_slave_1: left promiscuous mode [ 449.639282][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.649141][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.657498][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.671674][T15971] bridge_slave_0: left allmulticast mode [ 449.678336][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.685553][T15971] bridge_slave_0: left promiscuous mode [ 449.691947][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.699523][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.998735][T15971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.011693][T15971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.021851][T15971] bond0 (unregistering): Released all slaves [ 450.223022][T19352] lo speed is unknown, defaulting to 1000 [ 450.253831][T19370] netlink: 'syz.4.3646': attribute type 1 has an invalid length. [ 450.503226][T19354] lo speed is unknown, defaulting to 1000 [ 450.565527][T19376] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 450.728060][T19388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.890277][T19389] xt_CT: No such helper "pptp" [ 451.125831][T19354] lo speed is unknown, defaulting to 1000 [ 451.135678][T19354] xfrm0 speed is unknown, defaulting to 1000 [ 451.143891][T19352] lo speed is unknown, defaulting to 1000 [ 451.185468][T19352] xfrm0 speed is unknown, defaulting to 1000 [ 451.309704][T19406] __nla_validate_parse: 2 callbacks suppressed [ 451.309721][T19406] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3656'. [ 451.469018][T15971] hsr_slave_0: left promiscuous mode [ 451.475257][T15971] hsr_slave_1: left promiscuous mode [ 451.481440][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.489233][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.518177][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.533384][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.570152][T15971] veth1_macvtap: left promiscuous mode [ 451.575710][T15971] veth0_macvtap: left promiscuous mode [ 451.581688][T15971] veth1_vlan: left promiscuous mode [ 451.587648][T15971] veth0_vlan: left promiscuous mode [ 451.607244][ T5836] Bluetooth: hci0: command tx timeout [ 451.758746][ T5836] Bluetooth: hci2: command tx timeout [ 452.010788][T15971] team0 (unregistering): Port device team_slave_1 removed [ 452.051049][T15971] team0 (unregistering): Port device team_slave_0 removed [ 452.421825][T19414] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 452.497558][T19418] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3658'. [ 452.862514][T19354] chnl_net:caif_netlink_parms(): no params data found [ 452.890957][T19442] x_tables: duplicate underflow at hook 3 [ 453.081840][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 453.146782][T19352] chnl_net:caif_netlink_parms(): no params data found [ 453.399003][T15975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.450092][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3670'. [ 453.474113][T19354] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.501533][T19354] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.522454][T19354] bridge_slave_0: entered allmulticast mode [ 453.535921][T19354] bridge_slave_0: entered promiscuous mode [ 453.563746][T19354] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.573269][T19354] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.592868][T19354] bridge_slave_1: entered allmulticast mode [ 453.600872][T19354] bridge_slave_1: entered promiscuous mode [ 453.660449][T15975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.677127][ T5836] Bluetooth: hci0: command tx timeout [ 453.841256][T15975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.841486][ T5836] Bluetooth: hci2: command tx timeout [ 453.859630][T19501] netlink: 'syz.4.3679': attribute type 7 has an invalid length. [ 453.875113][T19354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.903811][T19494] ip6gre2: entered promiscuous mode [ 453.919772][T19354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.980150][T19352] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.988569][T19352] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.995820][T19352] bridge_slave_0: entered allmulticast mode [ 454.004053][T19352] bridge_slave_0: entered promiscuous mode [ 454.024840][T19503] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 454.035725][T19503] netlink: 'syz.3.3678': attribute type 4 has an invalid length. [ 454.041956][T19354] team0: Port device team_slave_0 added [ 454.060480][T19503] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.3678'. [ 454.089840][T15975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.121718][T19352] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.138919][T19352] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.166720][T19352] bridge_slave_1: entered allmulticast mode [ 454.174330][T19352] bridge_slave_1: entered promiscuous mode [ 454.192825][T19354] team0: Port device team_slave_1 added [ 454.308425][T19352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.335820][T19354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.349045][T19354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.381485][T19354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.394237][T19354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.420526][T19354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.448283][T19354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.473480][T19352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.702418][T19352] team0: Port device team_slave_0 added [ 454.793625][T19352] team0: Port device team_slave_1 added [ 454.836273][T19354] hsr_slave_0: entered promiscuous mode [ 454.844279][T19354] hsr_slave_1: entered promiscuous mode [ 454.851428][T19354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.872829][T19354] Cannot create hsr debugfs directory [ 454.997407][T19352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.014669][T19352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.066141][T19352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.135374][T19352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.144773][T19352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.178498][T19352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.221288][T15975] bridge_slave_1: left allmulticast mode [ 455.231940][T15975] bridge_slave_1: left promiscuous mode [ 455.238362][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.249071][T15975] bridge_slave_0: left allmulticast mode [ 455.256123][T15975] bridge_slave_0: left promiscuous mode [ 455.270392][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 455.287718][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.742631][T19562] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 455.764107][ T5836] Bluetooth: hci0: command tx timeout [ 455.930194][ T5836] Bluetooth: hci2: command tx timeout [ 455.982841][T15975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.993630][T15975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.003890][T15975] bond0 (unregistering): Released all slaves [ 456.183620][T19352] hsr_slave_0: entered promiscuous mode [ 456.196222][T19352] hsr_slave_1: entered promiscuous mode [ 456.205586][T19352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.218183][T19352] Cannot create hsr debugfs directory [ 456.245905][T19569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3698'. [ 456.365109][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3702'. [ 456.938795][T15975] hsr_slave_0: left promiscuous mode [ 456.956163][T15975] hsr_slave_1: left promiscuous mode [ 456.971927][T15975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.981832][T15975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.997430][T15975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.005105][T15975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.045728][T15975] veth1_macvtap: left promiscuous mode [ 457.054730][T15975] veth0_macvtap: left promiscuous mode [ 457.063894][T15975] veth1_vlan: left promiscuous mode [ 457.071635][T15975] veth0_vlan: left promiscuous mode [ 457.671170][T15975] team0 (unregistering): Port device team_slave_1 removed [ 457.766871][T15975] team0 (unregistering): Port device team_slave_0 removed [ 457.847268][ T5836] Bluetooth: hci0: command tx timeout [ 458.006583][ T5836] Bluetooth: hci2: command tx timeout [ 458.653121][T19626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3715'. [ 458.680141][T19623] x_tables: duplicate underflow at hook 2 [ 458.863426][T19640] netlink: 'syz.4.3718': attribute type 1 has an invalid length. [ 458.873652][T19640] netlink: 'syz.4.3718': attribute type 4 has an invalid length. [ 458.883279][T19640] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.3718'. [ 458.944686][T19354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.972465][T19354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.990934][T19354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.053888][T19354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.073996][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3720'. [ 459.099737][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'. [ 459.103491][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3720'. [ 459.113255][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'. [ 459.237735][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3722'. [ 459.252733][T19354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.274730][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'. [ 459.305923][T19354] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.369259][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.376467][T15973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.440109][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.447325][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.575909][T19352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.633206][T19352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.659286][T19352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.696019][T19352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.936021][T19352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.996218][T19352] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.055119][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.062855][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.075624][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.082824][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.195225][T19354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.345344][T19354] veth0_vlan: entered promiscuous mode [ 460.461417][T19354] veth1_vlan: entered promiscuous mode [ 460.533884][T19354] veth0_macvtap: entered promiscuous mode [ 460.568251][T19354] veth1_macvtap: entered promiscuous mode [ 460.615179][T19354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.668785][T19354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.692678][T19352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.708597][T19354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.720908][T19354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.738934][T19354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.747943][T19354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.922551][T19352] veth0_vlan: entered promiscuous mode [ 460.928495][T15973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.951400][T15973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.993305][T19352] veth1_vlan: entered promiscuous mode [ 461.096146][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.112770][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.193241][T19352] veth0_macvtap: entered promiscuous mode [ 461.237104][T19352] veth1_macvtap: entered promiscuous mode [ 461.274618][T19352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.292827][T19352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.304776][T19727] netlink: 'syz.1.3744': attribute type 2 has an invalid length. [ 461.318088][T19352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.421672][T19352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.439950][T19352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.452723][T19352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.462195][T19731] bond0: entered allmulticast mode [ 461.482073][T19352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.506936][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.517071][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.524162][T19352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.540034][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.544010][T19352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.562929][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.570393][T19352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.580219][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.589910][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'. [ 461.721306][T19733] lo speed is unknown, defaulting to 1000 [ 461.803995][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.816096][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.910277][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.926709][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.185898][T15971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.275923][T19733] lo speed is unknown, defaulting to 1000 [ 462.290155][T19733] xfrm0 speed is unknown, defaulting to 1000 [ 462.425246][T19733] chnl_net:caif_netlink_parms(): no params data found [ 462.509973][T19733] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.517568][T19733] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.525233][T19733] bridge_slave_0: entered allmulticast mode [ 462.533304][T19733] bridge_slave_0: entered promiscuous mode [ 462.542542][T19733] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.550028][T19733] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.558992][T19733] bridge_slave_1: entered allmulticast mode [ 462.565961][T19733] bridge_slave_1: entered promiscuous mode [ 462.607114][T19733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.623953][T19733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.666479][T19733] team0: Port device team_slave_0 added [ 462.675108][T19733] team0: Port device team_slave_1 added [ 462.756140][T15971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.790161][T19733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.806581][T19733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.835479][T19733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.855785][T19766] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.3754'. [ 462.883731][T19766] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 462.921014][T19733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.941882][T19733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.021146][T19733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.187938][T15971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.307992][T19733] hsr_slave_0: entered promiscuous mode [ 463.322339][T19733] hsr_slave_1: entered promiscuous mode [ 463.333119][T19733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.349573][T19733] Cannot create hsr debugfs directory [ 463.354210][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.366518][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.374630][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.387466][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.396946][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.448453][T15971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.557296][T19778] lo speed is unknown, defaulting to 1000 [ 463.683578][ T5831] Bluetooth: hci2: command tx timeout [ 463.702415][T15971] bridge_slave_1: left allmulticast mode [ 463.708177][T15971] bridge_slave_1: left promiscuous mode [ 463.713917][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.725518][T15971] bridge_slave_0: left allmulticast mode [ 463.738183][T15971] bridge_slave_0: left promiscuous mode [ 463.743935][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.067871][T15971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.079137][T15971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.090005][T15971] bond0 (unregistering): Released all slaves [ 464.122512][T19778] lo speed is unknown, defaulting to 1000 [ 464.129251][T19778] xfrm0 speed is unknown, defaulting to 1000 [ 464.448855][T19733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.486126][T19733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.512818][T19733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.540587][T19778] chnl_net:caif_netlink_parms(): no params data found [ 464.593118][T15971] hsr_slave_0: left promiscuous mode [ 464.598992][T15971] hsr_slave_1: left promiscuous mode [ 464.604769][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.614873][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.623136][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.630807][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.652937][T15971] veth1_macvtap: left promiscuous mode [ 464.658702][T15971] veth0_macvtap: left promiscuous mode [ 464.664268][T15971] veth1_vlan: left promiscuous mode [ 464.670768][T15971] veth0_vlan: left promiscuous mode [ 465.032620][T15971] team0 (unregistering): Port device team_slave_1 removed [ 465.068872][T15971] team0 (unregistering): Port device team_slave_0 removed [ 465.441495][ T5831] Bluetooth: hci0: command tx timeout [ 465.676030][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.692328][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.701139][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.719952][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.731766][T19733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 465.731822][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.761640][ T5836] Bluetooth: hci2: command tx timeout [ 465.903682][T19799] lo speed is unknown, defaulting to 1000 [ 466.025934][T19778] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.066754][T19778] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.079351][T19778] bridge_slave_0: entered allmulticast mode [ 466.098346][T19778] bridge_slave_0: entered promiscuous mode [ 466.118160][T19778] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.125321][T19778] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.147707][T19778] bridge_slave_1: entered allmulticast mode [ 466.155519][T19778] bridge_slave_1: entered promiscuous mode [ 466.263024][T19799] lo speed is unknown, defaulting to 1000 [ 466.291988][T19778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.304292][T19799] xfrm0 speed is unknown, defaulting to 1000 [ 466.317675][T19778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.370707][T19778] team0: Port device team_slave_0 added [ 466.392096][T19778] team0: Port device team_slave_1 added [ 466.441961][T19778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.449402][T19778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.477310][T19778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.502288][T19778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.510200][T19778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.536841][T19778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.623507][T15971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.643394][T19778] hsr_slave_0: entered promiscuous mode [ 466.651157][T19778] hsr_slave_1: entered promiscuous mode [ 466.657484][T19778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.665039][T19778] Cannot create hsr debugfs directory [ 466.678742][T19733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.733747][T15971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.843651][T15971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.883605][T19733] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.984329][T15971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.061745][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.068964][T15975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.109564][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.116769][T15973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.172417][T19799] chnl_net:caif_netlink_parms(): no params data found [ 467.285204][T19832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.292499][T19832] IPv6: NLM_F_CREATE should be set when creating new route [ 467.385716][T19835] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 467.479930][T19837] pim6reg: entered allmulticast mode [ 467.513760][T19837] lo: entered allmulticast mode [ 467.520630][ T5836] Bluetooth: hci0: command tx timeout [ 467.531332][T19837] pim6reg: left allmulticast mode [ 467.539674][T19837] lo: left allmulticast mode [ 467.617015][T19799] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.626107][T19799] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.627158][T19837] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3769'. [ 467.634310][T19799] bridge_slave_0: entered allmulticast mode [ 467.652303][T19799] bridge_slave_0: entered promiscuous mode [ 467.663149][T19799] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.673820][T19799] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.681709][T19799] bridge_slave_1: entered allmulticast mode [ 467.690307][T19799] bridge_slave_1: entered promiscuous mode [ 467.810137][T19799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.839425][ T5836] Bluetooth: hci2: command tx timeout [ 467.844900][ T5836] Bluetooth: hci3: command tx timeout [ 467.848297][T19799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.861445][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3772'. [ 467.891194][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3772'. [ 467.900519][T15971] bridge_slave_1: left allmulticast mode [ 467.906180][T15971] bridge_slave_1: left promiscuous mode [ 467.912735][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.923485][T15971] bridge_slave_0: left allmulticast mode [ 467.931419][T15971] bridge_slave_0: left promiscuous mode [ 467.937804][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.229835][T15971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.241771][T15971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.252236][T15971] bond0 (unregistering): Released all slaves [ 468.283892][T19799] team0: Port device team_slave_0 added [ 468.409028][T19799] team0: Port device team_slave_1 added [ 468.483020][T19865] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 468.513435][T19860] netlink: 'syz.1.3774': attribute type 11 has an invalid length. [ 468.555637][T19799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.562943][T19865] lo speed is unknown, defaulting to 1000 [ 468.569685][T19799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.637704][T19799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.698838][T19799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.705914][T19799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.733324][T19799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.793369][T19778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.900722][T19778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.912665][T19778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.048075][T19799] hsr_slave_0: entered promiscuous mode [ 469.098028][T19799] hsr_slave_1: entered promiscuous mode [ 469.104353][T19799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.111712][T19890] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3779'. [ 469.147218][T19799] Cannot create hsr debugfs directory [ 469.167825][T19778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.264603][T15971] hsr_slave_0: left promiscuous mode [ 469.276115][T15971] hsr_slave_1: left promiscuous mode [ 469.285666][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.294411][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.307827][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.315240][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.343025][T15971] veth1_macvtap: left promiscuous mode [ 469.349122][T15971] veth0_macvtap: left promiscuous mode [ 469.354692][T15971] veth1_vlan: left promiscuous mode [ 469.360168][T15971] veth0_vlan: left promiscuous mode [ 469.598956][ T5836] Bluetooth: hci0: command tx timeout [ 469.735348][T15971] team0 (unregistering): Port device team_slave_1 removed [ 469.771694][T15971] team0 (unregistering): Port device team_slave_0 removed [ 469.916585][ T5831] Bluetooth: hci2: command tx timeout [ 469.922273][ T5836] Bluetooth: hci3: command tx timeout [ 470.297050][T19733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.386881][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3784'. [ 470.603839][T19911] netlink: 'syz.3.3786': attribute type 3 has an invalid length. [ 470.687619][T19778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.769330][T19915] delete_channel: no stack [ 470.770970][T19778] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.784266][T19915] bond0: option ad_select: unable to set because the bond device is up [ 470.809555][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.816762][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.850430][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.857609][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.040130][T19799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.063043][T19733] veth0_vlan: entered promiscuous mode [ 471.079604][T19799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.104752][T19799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.130713][T19733] veth1_vlan: entered promiscuous mode [ 471.148986][T19799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.303030][T19733] veth0_macvtap: entered promiscuous mode [ 471.343309][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 471.365514][T19733] veth1_macvtap: entered promiscuous mode [ 471.429730][T19733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.471915][T19778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.480176][T19932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 471.504101][T19799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.539626][T19733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.593652][T19932] xt_HMARK: proto mask must be zero with L3 mode [ 471.595611][T19733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.613865][T19733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.623654][T19733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.632840][T19733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.652166][T19799] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.677621][ T5836] Bluetooth: hci0: command tx timeout [ 471.788270][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.795445][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.811957][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.819152][T15977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.889135][T19778] veth0_vlan: entered promiscuous mode [ 471.972654][T19778] veth1_vlan: entered promiscuous mode [ 471.973100][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'. [ 471.997333][ T5836] Bluetooth: hci3: command tx timeout [ 472.040234][ T7393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.049043][ T7393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.105458][T19799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.138707][T19778] veth0_macvtap: entered promiscuous mode [ 472.182371][T15975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.183662][T19778] veth1_macvtap: entered promiscuous mode [ 472.206745][T15975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.281924][T19778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.310341][T19778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.323268][T19778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.388753][T19778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.421588][T19778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.434219][T19778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.452063][T19778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.468082][T19778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.483866][T19778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.492966][T19778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.599832][T19963] lo speed is unknown, defaulting to 1000 [ 472.696035][T19799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.898879][ T7393] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.059343][ T7393] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.142225][T19973] team0: No ports can be present during mode change [ 473.218274][T15973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.226109][T15973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.319301][ T7393] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.362455][T19963] lo speed is unknown, defaulting to 1000 [ 473.389595][T19963] xfrm0 speed is unknown, defaulting to 1000 [ 473.395791][T15971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.400599][T19799] veth0_vlan: entered promiscuous mode [ 473.405884][T15971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.418178][T19977] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 473.426010][T19977] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3807'. [ 473.443981][T19799] veth1_vlan: entered promiscuous mode [ 473.644171][T19799] veth0_macvtap: entered promiscuous mode [ 473.734200][ T7393] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.791179][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.823231][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.831914][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.845949][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.856111][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.909783][T19799] veth1_macvtap: entered promiscuous mode [ 473.966880][T19799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.995712][T19985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3810'. [ 474.008325][T19799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.019242][T19799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.051632][T19799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.075159][T19799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.084575][ T5836] Bluetooth: hci3: command tx timeout [ 474.271865][T19799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.288523][T19799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.303062][T19799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.316090][T19799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.335045][T19799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.386003][T19979] lo speed is unknown, defaulting to 1000 [ 474.411791][T19799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.423250][T19799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.433609][T19799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.442574][T19799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.484078][ T7393] bridge_slave_1: left allmulticast mode [ 474.491551][ T7393] bridge_slave_1: left promiscuous mode [ 474.497854][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.509486][ T7393] bridge_slave_0: left allmulticast mode [ 474.515149][ T7393] bridge_slave_0: left promiscuous mode [ 474.521301][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.875191][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.890915][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.901050][ T7393] bond0 (unregistering): Released all slaves [ 474.921689][T19979] lo speed is unknown, defaulting to 1000 [ 474.941417][T19979] xfrm0 speed is unknown, defaulting to 1000 [ 475.335855][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.383942][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.475960][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'. [ 475.494049][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.502904][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.516813][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.525517][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.534873][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.565645][T15977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.575391][T15977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.889374][T20006] lo speed is unknown, defaulting to 1000 [ 475.907241][ T7393] hsr_slave_0: left promiscuous mode [ 475.913103][ T7393] hsr_slave_1: left promiscuous mode [ 475.919989][ T5836] Bluetooth: hci2: command tx timeout [ 475.926051][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.933941][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.945268][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.953942][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.976574][ T7393] veth1_macvtap: left promiscuous mode [ 475.982101][ T7393] veth0_macvtap: left promiscuous mode [ 475.989114][ T7393] veth1_vlan: left promiscuous mode [ 475.994471][ T7393] veth0_vlan: left promiscuous mode [ 476.516188][ T7393] team0 (unregistering): Port device team_slave_1 removed [ 476.573996][ T7393] team0 (unregistering): Port device team_slave_0 removed [ 477.024088][T19979] chnl_net:caif_netlink_parms(): no params data found [ 477.220869][T20006] lo speed is unknown, defaulting to 1000 [ 477.221784][T19979] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.233927][T19979] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.241292][T19979] bridge_slave_0: entered allmulticast mode [ 477.248561][T19979] bridge_slave_0: entered promiscuous mode [ 477.255388][T20006] xfrm0 speed is unknown, defaulting to 1000 [ 477.256241][T19979] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.269931][T19979] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.277778][T19979] bridge_slave_1: entered allmulticast mode [ 477.284716][T19979] bridge_slave_1: entered promiscuous mode [ 477.339618][T19979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.355704][T19979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.419011][T19979] team0: Port device team_slave_0 added [ 477.437854][T19979] team0: Port device team_slave_1 added [ 477.484526][T19979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.492341][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.519487][T19979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.540696][T19979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.550660][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.578181][T19979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.596676][ T5836] Bluetooth: hci0: command tx timeout [ 477.648009][ T7393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.730933][T19979] hsr_slave_0: entered promiscuous mode [ 477.737322][T19979] hsr_slave_1: entered promiscuous mode [ 477.743279][T19979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.752550][T19979] Cannot create hsr debugfs directory [ 477.772786][ T7393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.789199][T20006] chnl_net:caif_netlink_parms(): no params data found [ 477.862868][ T7393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.955183][ T7393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.974749][T20006] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.982539][T20006] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.990627][T20006] bridge_slave_0: entered allmulticast mode [ 477.997441][ T5836] Bluetooth: hci2: command tx timeout [ 478.003827][T20006] bridge_slave_0: entered promiscuous mode [ 478.035751][T20006] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.043028][T20006] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.050689][T20006] bridge_slave_1: entered allmulticast mode [ 478.058901][T20006] bridge_slave_1: entered promiscuous mode [ 478.134907][T20006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.162542][T20006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.235378][T20030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3817'. [ 478.311275][T20006] team0: Port device team_slave_0 added [ 478.418848][T20006] team0: Port device team_slave_1 added [ 478.569975][T20006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.591660][T20006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.632447][T20006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.633121][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.655556][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.668705][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.680971][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.692420][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.758956][T20006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.766030][T20006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.792589][T20006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.837828][T20044] vlan1: entered promiscuous mode [ 478.842894][T20044] bridge0: entered promiscuous mode [ 478.880204][ T7393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.983576][T20006] hsr_slave_0: entered promiscuous mode [ 478.992135][T20006] hsr_slave_1: entered promiscuous mode [ 478.999129][T20006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.006958][T20006] Cannot create hsr debugfs directory [ 479.057882][ T7393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.161714][T20054] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3827'. [ 479.172662][T20040] lo speed is unknown, defaulting to 1000 [ 479.211415][ T7393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.383330][ T7393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.608533][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3831'. [ 479.677688][ T5836] Bluetooth: hci0: command tx timeout [ 479.685265][T20040] lo speed is unknown, defaulting to 1000 [ 479.697070][T19979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.716401][T20040] xfrm0 speed is unknown, defaulting to 1000 [ 479.722799][T19979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.772200][T19979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.791981][T19979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.824816][T20075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3833'. [ 479.871099][ T7393] bridge_slave_1: left allmulticast mode [ 479.880357][ T7393] bridge_slave_1: left promiscuous mode [ 479.886211][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.903651][ T7393] bridge_slave_0: left allmulticast mode [ 479.910337][ T7393] bridge_slave_0: left promiscuous mode [ 479.916095][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.938596][ T7393] bridge_slave_1: left allmulticast mode [ 479.944263][ T7393] bridge_slave_1: left promiscuous mode [ 479.955484][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.975058][ T7393] bridge_slave_0: left allmulticast mode [ 479.981469][ T7393] bridge_slave_0: left promiscuous mode [ 479.988158][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.077136][ T5836] Bluetooth: hci2: command tx timeout [ 480.402702][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 480.501674][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.513035][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.524353][ T7393] bond0 (unregistering): Released all slaves [ 480.621285][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.631940][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.643298][ T7393] bond0 (unregistering): Released all slaves [ 480.717176][ T5836] Bluetooth: hci3: command tx timeout [ 480.862923][T20085] netlink: 'syz.3.3835': attribute type 1 has an invalid length. [ 480.872246][T20085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3835'. [ 480.882801][T20085] netlink: 'syz.3.3835': attribute type 1 has an invalid length. [ 480.894627][T20085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3835'. [ 480.908384][T20085] netlink: 'syz.3.3835': attribute type 1 has an invalid length. [ 480.916202][T20085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3835'. [ 481.018707][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'. [ 481.257143][T19979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.345859][T20040] chnl_net:caif_netlink_parms(): no params data found [ 481.414106][T20110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3842'. [ 481.425584][T19979] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.634383][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.641595][T15975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.759708][ T5836] Bluetooth: hci0: command tx timeout [ 481.824479][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.831691][T15975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.895690][T20124] netlink: 'syz.3.3844': attribute type 21 has an invalid length. [ 481.903684][T20124] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3844'. [ 481.914691][T20123] netlink: 'syz.3.3844': attribute type 21 has an invalid length. [ 481.925992][T20006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.964543][ T7393] hsr_slave_0: left promiscuous mode [ 481.971033][ T7393] hsr_slave_1: left promiscuous mode [ 481.980837][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.989262][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.000626][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.008546][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.019670][ T7393] hsr_slave_0: left promiscuous mode [ 482.026267][ T7393] hsr_slave_1: left promiscuous mode [ 482.032629][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.040483][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.051273][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.059288][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.101698][ T7393] veth1_macvtap: left promiscuous mode [ 482.107428][ T7393] veth0_macvtap: left promiscuous mode [ 482.113042][ T7393] veth1_vlan: left promiscuous mode [ 482.119756][ T7393] veth0_vlan: left promiscuous mode [ 482.125885][ T7393] veth1_macvtap: left promiscuous mode [ 482.131868][ T7393] veth0_macvtap: left promiscuous mode [ 482.137615][ T7393] veth1_vlan: left promiscuous mode [ 482.142892][ T7393] veth0_vlan: left promiscuous mode [ 482.156696][ T5836] Bluetooth: hci2: command tx timeout [ 482.681575][ T7393] team0 (unregistering): Port device team_slave_1 removed [ 482.722129][ T7393] team0 (unregistering): Port device team_slave_0 removed [ 482.798035][ T5836] Bluetooth: hci3: command 0x041b tx timeout [ 483.378085][ T7393] team0 (unregistering): Port device team_slave_1 removed [ 483.414706][ T7393] team0 (unregistering): Port device team_slave_0 removed [ 483.775527][T20006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.797633][T20040] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.804792][T20040] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.829941][T20040] bridge_slave_0: entered allmulticast mode [ 483.836934][ T5831] Bluetooth: hci0: command tx timeout [ 483.847946][T20040] bridge_slave_0: entered promiscuous mode [ 483.860201][T20040] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.867660][T20040] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.874866][T20040] bridge_slave_1: entered allmulticast mode [ 483.889016][T20040] bridge_slave_1: entered promiscuous mode [ 483.924301][T20006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.943390][T20006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.014700][T20040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.036643][T20040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.134554][T20040] team0: Port device team_slave_0 added [ 484.155571][T20040] team0: Port device team_slave_1 added [ 484.231361][T20140] netdevsim netdevsim3: Direct firmware load for +. failed with error -2 [ 484.243914][T20140] netdevsim netdevsim3: Falling back to sysfs fallback for: +. [ 484.278696][T20040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.285672][T20040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.333747][T20040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.381160][T20040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.396603][T20040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.425538][T20040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.499961][T20040] hsr_slave_0: entered promiscuous mode [ 484.508462][T20040] hsr_slave_1: entered promiscuous mode [ 484.514844][T20040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.536589][T20040] Cannot create hsr debugfs directory [ 484.604547][T20152] __nla_validate_parse: 3 callbacks suppressed [ 484.604564][T20152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3852'. [ 484.783185][T19979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.791115][T20154] pim6reg1: entered promiscuous mode [ 484.797513][T20154] pim6reg1: entered allmulticast mode [ 484.877896][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 485.052467][T20006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.155601][T20006] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.222036][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.229248][T15975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.245402][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.252577][T15975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.289332][T20175] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3858'. [ 485.411695][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3860'. [ 485.452570][T19979] veth0_vlan: entered promiscuous mode [ 485.491806][T19979] veth1_vlan: entered promiscuous mode [ 485.623053][T19979] veth0_macvtap: entered promiscuous mode [ 485.635015][T20040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.652876][T19979] veth1_macvtap: entered promiscuous mode [ 485.662885][T20040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.684858][T20040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.728682][T20040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.809797][T19979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.887975][T19979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.905879][T20195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3864'. [ 485.934095][T20195] netlink: 'syz.1.3864': attribute type 3 has an invalid length. [ 485.953423][T19979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.968575][T19979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.979782][T19979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.992017][T19979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.023657][T20006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.239744][T20006] veth0_vlan: entered promiscuous mode [ 486.264934][ T7393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.271065][T20006] veth1_vlan: entered promiscuous mode [ 486.292183][ T7393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.383657][T20040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.423114][T20006] veth0_macvtap: entered promiscuous mode [ 486.439940][ T7393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.441325][T20006] veth1_macvtap: entered promiscuous mode [ 486.463954][ T7393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.494946][T20040] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.528231][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.535344][ T7393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.600810][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.608020][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.630656][T20006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.643178][T20006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.659354][T20006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.737821][T20006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.757972][T20006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.778405][T20006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.820589][T20006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.847853][T20006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.860329][T20006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.878137][T20006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.943882][T20040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.957031][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 487.116057][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.295940][T20237] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3876'. [ 487.318800][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.431233][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.512060][T15977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.546819][T15977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.640143][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.747530][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.757892][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.773089][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.783549][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.799199][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.808929][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.821859][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.859703][T20040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.874546][ T30] audit: type=1800 audit(1746707884.282:9): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3880" name="memory.events" dev="tmpfs" ino=4702 res=0 errno=0 [ 487.994421][T20254] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 488.013032][T20256] tap0: tun_chr_ioctl cmd 1074025672 [ 488.023849][T20256] tap0: ignored: set checksum disabled [ 488.100916][T20254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.169486][T20250] bond1: (slave ip6gretap1): making interface the new active one [ 488.178228][T20250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 488.187249][T20250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 488.195091][T20250] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 488.209767][T20254] pimreg: entered allmulticast mode [ 488.241281][T20247] lo speed is unknown, defaulting to 1000 [ 488.269124][T20040] veth0_vlan: entered promiscuous mode [ 488.346639][T20040] veth1_vlan: entered promiscuous mode [ 488.468922][ T5878] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 488.500714][T20040] veth0_macvtap: entered promiscuous mode [ 488.533858][ T54] bridge_slave_1: left allmulticast mode [ 488.540163][ T54] bridge_slave_1: left promiscuous mode [ 488.545915][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.596117][ T54] bridge_slave_0: left allmulticast mode [ 488.601970][ T54] bridge_slave_0: left promiscuous mode [ 488.616577][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.934967][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.946149][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.958667][ T54] bond0 (unregistering): Released all slaves [ 488.973619][T20040] veth1_macvtap: entered promiscuous mode [ 488.983459][T20247] lo speed is unknown, defaulting to 1000 [ 488.994736][T20247] xfrm0 speed is unknown, defaulting to 1000 [ 489.004563][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.020479][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.030602][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.041367][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 489.049070][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.060418][T20040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.106665][ T5916] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 489.124779][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.135495][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.146213][T20040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.158167][T20040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.169493][T20040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.203144][T20040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.212414][T20040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.221355][T20040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.230457][T20040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.230499][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 489.388167][T15973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 489.403667][T20269] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 489.632715][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.643865][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.654103][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.664133][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.672987][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.673080][T20269] 8021q: adding VLAN 0 to HW filter on device bond10 [ 489.802741][ T54] hsr_slave_0: left promiscuous mode [ 489.813072][ T54] hsr_slave_1: left promiscuous mode [ 489.819654][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.827523][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.835506][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.844501][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.872127][ T54] veth1_macvtap: left promiscuous mode [ 489.878079][ T54] veth0_macvtap: left promiscuous mode [ 489.883804][ T54] veth1_vlan: left promiscuous mode [ 489.891094][ T54] veth0_vlan: left promiscuous mode [ 489.916659][ T5831] Bluetooth: hci2: command tx timeout [ 490.310539][ T54] team0 (unregistering): Port device team_slave_1 removed [ 490.351876][ T54] team0 (unregistering): Port device team_slave_0 removed [ 490.399876][ T7393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 490.695210][T20277] veth23: entered promiscuous mode [ 490.894904][T15973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.926403][T15973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.994602][T15976] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 491.012233][T15976] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 491.043771][T20247] chnl_net:caif_netlink_parms(): no params data found [ 491.094824][T15976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.099095][T20275] lo speed is unknown, defaulting to 1000 [ 491.139261][T15976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.453085][T20275] lo speed is unknown, defaulting to 1000 [ 491.481732][T20275] xfrm0 speed is unknown, defaulting to 1000 [ 491.489153][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.498074][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.505899][T20247] bridge_slave_0: entered allmulticast mode [ 491.514922][T20247] bridge_slave_0: entered promiscuous mode [ 491.531251][ T7393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 491.545398][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.552834][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.560402][T20247] bridge_slave_1: entered allmulticast mode [ 491.563637][T20305] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3890'. [ 491.568141][T20247] bridge_slave_1: entered promiscuous mode [ 491.635754][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.662981][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.757785][ T5831] Bluetooth: hci0: command tx timeout [ 491.775120][T20247] team0: Port device team_slave_0 added [ 491.804550][T20247] team0: Port device team_slave_1 added [ 491.882791][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.891237][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.920638][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.952095][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.972002][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.979759][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.007213][ T5831] Bluetooth: hci2: command tx timeout [ 492.012723][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.087059][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.150504][T20247] hsr_slave_0: entered promiscuous mode [ 492.158787][T20247] hsr_slave_1: entered promiscuous mode [ 492.165562][T20247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.173284][T20247] Cannot create hsr debugfs directory [ 492.185508][T20275] chnl_net:caif_netlink_parms(): no params data found [ 492.210512][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.338426][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.404134][T20275] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.411377][T20275] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.418988][T20275] bridge_slave_0: entered allmulticast mode [ 492.428964][T20275] bridge_slave_0: entered promiscuous mode [ 492.437180][T20275] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.444627][T20275] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.452040][T20275] bridge_slave_1: entered allmulticast mode [ 492.459316][T20275] bridge_slave_1: entered promiscuous mode [ 492.550542][T20275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.563004][T20275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.650628][T20275] team0: Port device team_slave_0 added [ 492.661979][T20275] team0: Port device team_slave_1 added [ 492.720780][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.758010][T20275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.764969][T20275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.791740][T20275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.820074][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.835485][T20275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.842648][T20275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.869321][T20275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.943062][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.980782][T20275] hsr_slave_0: entered promiscuous mode [ 492.987752][T20275] hsr_slave_1: entered promiscuous mode [ 492.993968][T20275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.002412][T20275] Cannot create hsr debugfs directory [ 493.056137][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.155536][T20247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.174822][T20247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.194063][T20247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.230184][T20247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.341842][ T54] bridge_slave_1: left allmulticast mode [ 493.351270][ T54] bridge_slave_1: left promiscuous mode [ 493.358572][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.368763][ T54] bridge_slave_0: left allmulticast mode [ 493.374423][ T54] bridge_slave_0: left promiscuous mode [ 493.380681][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.393621][ T54] bridge_slave_1: left allmulticast mode [ 493.399926][ T54] bridge_slave_1: left promiscuous mode [ 493.405585][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.414671][ T54] bridge_slave_0: left allmulticast mode [ 493.420449][ T54] bridge_slave_0: left promiscuous mode [ 493.426095][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.787116][ T63] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 493.787135][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 493.836707][ T5831] Bluetooth: hci0: command tx timeout [ 493.979803][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.998575][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.017707][ T54] bond0 (unregistering): Released all slaves [ 494.078201][ T5831] Bluetooth: hci2: command tx timeout [ 494.221433][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.227943][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.240475][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.248235][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.253966][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.265631][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.268021][ T54] bond0 (unregistering): Released all slaves [ 494.281415][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.335757][T20320] netlink: 'syz.1.3891': attribute type 23 has an invalid length. [ 494.505735][T20330] netlink: 'syz.1.3893': attribute type 7 has an invalid length. [ 494.667910][T20325] lo speed is unknown, defaulting to 1000 [ 494.774325][T20247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.815725][T20247] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.842377][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.849570][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.926631][T15975] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.001890][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.009077][T15977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.263953][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3900'. [ 495.294953][T20325] lo speed is unknown, defaulting to 1000 [ 495.335148][T20358] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3902'. [ 495.356526][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.367476][T20325] xfrm0 speed is unknown, defaulting to 1000 [ 495.394531][T20275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.545583][T20275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.598218][T20275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 495.654888][T20275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 495.808601][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 495.882106][T20377] bridge_slave_1: left allmulticast mode [ 495.891217][T20377] bridge_slave_1: left promiscuous mode [ 495.903049][T20377] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.916208][T20377] bridge_slave_0: left allmulticast mode [ 495.921293][ T5831] Bluetooth: hci0: command tx timeout [ 495.923236][T20377] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.058604][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 496.104997][ T54] hsr_slave_0: left promiscuous mode [ 496.137851][ T54] hsr_slave_1: left promiscuous mode [ 496.143926][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.157025][ T5831] Bluetooth: hci2: command tx timeout [ 496.162735][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.180104][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.188097][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.227373][ T54] hsr_slave_0: left promiscuous mode [ 496.233405][ T54] hsr_slave_1: left promiscuous mode [ 496.239814][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.248986][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.257158][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.264573][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.314939][ T54] veth1_macvtap: left promiscuous mode [ 496.321226][ T5831] Bluetooth: hci3: command tx timeout [ 496.327889][ T54] veth0_macvtap: left promiscuous mode [ 496.333626][ T54] veth1_vlan: left promiscuous mode [ 496.339616][ T54] veth0_vlan: left promiscuous mode [ 496.346251][ T54] veth1_macvtap: left promiscuous mode [ 496.352428][ T54] veth0_macvtap: left promiscuous mode [ 496.358171][ T54] veth1_vlan: left promiscuous mode [ 496.362922][T20394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3912'. [ 496.363467][ T54] veth0_vlan: left promiscuous mode [ 496.855645][ T54] team0 (unregistering): Port device team_slave_1 removed [ 496.894393][ T54] team0 (unregistering): Port device team_slave_0 removed [ 497.216757][T15976] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 497.524236][ T54] team0 (unregistering): Port device team_slave_1 removed [ 497.563302][ T54] team0 (unregistering): Port device team_slave_0 removed [ 497.901679][T20397] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.3913'. [ 497.939439][T20247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.001372][ T5836] Bluetooth: hci0: command tx timeout [ 498.142579][T20406] Bluetooth: MGMT ver 1.23 [ 498.240994][T20406] pimreg3: entered allmulticast mode [ 498.348751][ T7393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 498.379273][T20275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.389798][T20325] chnl_net:caif_netlink_parms(): no params data found [ 498.400042][ T5837] Bluetooth: hci3: command tx timeout [ 498.476855][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 498.647317][T20275] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.738527][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.745690][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.755618][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.762799][T15977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.805421][T20429] lo speed is unknown, defaulting to 1000 [ 498.822800][T20325] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.836627][T20325] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.843887][T20325] bridge_slave_0: entered allmulticast mode [ 498.872326][T20325] bridge_slave_0: entered promiscuous mode [ 498.892935][T20435] netlink: 'syz.3.3921': attribute type 3 has an invalid length. [ 498.911096][T20435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3921'. [ 498.933459][T20325] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.962936][T20325] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.986850][T20325] bridge_slave_1: entered allmulticast mode [ 499.004046][T20325] bridge_slave_1: entered promiscuous mode [ 499.048935][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 499.147673][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 499.192776][T20439] hsr_slave_1 (unregistering): left promiscuous mode [ 499.239715][T20247] veth0_vlan: entered promiscuous mode [ 499.252066][T20325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.273613][T20325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.338502][T20429] lo speed is unknown, defaulting to 1000 [ 499.381118][T20429] xfrm0 speed is unknown, defaulting to 1000 [ 499.382510][T20247] veth1_vlan: entered promiscuous mode [ 499.401620][T20325] team0: Port device team_slave_0 added [ 499.429130][T20325] team0: Port device team_slave_1 added [ 499.488010][T15977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 499.542799][T20325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.550093][T20325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.578235][T20325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.593402][T20325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.601138][T20325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.627731][T20325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.686065][T20247] veth0_macvtap: entered promiscuous mode [ 499.724435][T20247] veth1_macvtap: entered promiscuous mode [ 499.841809][T20325] hsr_slave_0: entered promiscuous mode [ 499.870109][T20325] hsr_slave_1: entered promiscuous mode [ 499.878600][T20325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.888299][T20325] Cannot create hsr debugfs directory [ 499.949334][T20247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.974188][T20247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.010023][T20247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.019588][T20247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.030094][T20247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.040304][T20247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.090953][T20275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.156494][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.162566][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 500.329124][T15975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.359844][T15975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.465143][T15971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.476879][ T5836] Bluetooth: hci3: command tx timeout [ 500.481846][T15971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.519086][T20275] veth0_vlan: entered promiscuous mode [ 500.535833][T20275] veth1_vlan: entered promiscuous mode [ 500.638254][T15977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 500.640036][T20275] veth0_macvtap: entered promiscuous mode [ 500.804295][T20275] veth1_macvtap: entered promiscuous mode [ 500.868815][T20469] ip6gre1: entered allmulticast mode [ 500.915677][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.930260][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.943238][T20275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.980750][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.026452][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.058335][T20475] netlink: 'syz.1.3929': attribute type 4 has an invalid length. [ 501.068244][T20275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.191376][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.255261][T20275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.281934][T20275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.296688][T20275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.305401][T20275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.327155][ T10] lo speed is unknown, defaulting to 1000 [ 501.333203][ T10] syz: Port: 1 Link DOWN [ 501.371203][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.398954][T20325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.418554][T20325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.429803][T20325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.458448][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.472052][T20325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.547946][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.609971][T15976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.626877][T15976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.666620][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.674467][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.740904][T20325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.786947][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 501.851467][T20325] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.882502][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.889697][T15968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.965452][T15968] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.972632][T15968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.182458][ T63] bridge_slave_1: left allmulticast mode [ 502.196404][ T63] bridge_slave_1: left promiscuous mode [ 502.202203][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.234000][ T63] bridge_slave_0: left allmulticast mode [ 502.247421][ T63] bridge_slave_0: left promiscuous mode [ 502.253227][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.392018][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 502.407966][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 502.415694][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 502.437311][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 502.453969][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.562400][ T5836] Bluetooth: hci3: command tx timeout [ 502.724442][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.735382][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.745591][ T63] bond0 (unregistering): Released all slaves [ 502.845914][T20488] lo speed is unknown, defaulting to 1000 [ 502.907055][T15975] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 503.088083][T20325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.189929][T20325] veth0_vlan: entered promiscuous mode [ 503.211371][T20488] lo speed is unknown, defaulting to 1000 [ 503.238304][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 503.243036][T20325] veth1_vlan: entered promiscuous mode [ 503.268068][T20488] xfrm0 speed is unknown, defaulting to 1000 [ 503.293036][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 503.373760][T20325] veth0_macvtap: entered promiscuous mode [ 503.390421][T20325] veth1_macvtap: entered promiscuous mode [ 503.668370][T20325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.705871][T20325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.724835][T20325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.741587][T20325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.755770][T20325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.776177][T20325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.792147][T20325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.802849][T20512] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3939'. [ 503.831358][T20325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.858920][T20325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.880012][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 503.892033][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 503.899969][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.907967][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.917774][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 503.919008][T20325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.962262][ T63] hsr_slave_0: left promiscuous mode [ 503.973817][ T63] hsr_slave_1: left promiscuous mode [ 503.981081][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.992838][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.004838][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.019532][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.038178][T15975] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 504.052787][ T63] veth1_macvtap: left promiscuous mode [ 504.058856][ T63] veth0_macvtap: left promiscuous mode [ 504.064455][ T63] veth1_vlan: left promiscuous mode [ 504.069848][ T63] veth0_vlan: left promiscuous mode [ 504.076471][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 504.451154][ T63] team0 (unregistering): Port device team_slave_1 removed [ 504.485197][ T63] team0 (unregistering): Port device team_slave_0 removed [ 504.558016][ T5831] Bluetooth: hci0: command tx timeout [ 504.859469][T20325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.871967][T20325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.889637][T20325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.906374][T20325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.964964][T20515] lo speed is unknown, defaulting to 1000 [ 505.127411][T20536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3945'. [ 505.142480][ T54] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 505.353489][T20546] netlink: 'syz.1.3948': attribute type 49 has an invalid length. [ 505.396958][T15968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.404803][T15968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.414378][T15976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.422640][T15976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.490780][T20550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3949'. [ 505.517264][T20515] lo speed is unknown, defaulting to 1000 [ 505.524739][T20515] xfrm0 speed is unknown, defaulting to 1000 [ 505.635589][T20488] chnl_net:caif_netlink_parms(): no params data found [ 505.702036][T20547] syzkaller1: entered promiscuous mode [ 505.714030][T20547] syzkaller1: entered allmulticast mode [ 505.742062][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.883316][T20554] ------------[ cut here ]------------ [ 505.889127][T20554] WARNING: CPU: 1 PID: 20554 at net/ipv6/route.c:4803 rt6_multipath_rebalance+0x455/0x8b0 [ 505.899092][T20554] Modules linked in: [ 505.903198][T20554] CPU: 1 UID: 0 PID: 20554 Comm: syz.3.3950 Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 505.915291][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 505.925376][T20554] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 505.931648][T20554] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 8d 53 13 f8 e9 78 fe ff ff e8 13 5f b1 f7 eb 05 e8 0c 5f b1 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 505.951296][T20554] RSP: 0018:ffffc90003a764a0 EFLAGS: 00010287 [ 505.957411][T20554] RAX: ffffffff8a0e613d RBX: ffff8880336ab800 RCX: 0000000000080000 [ 505.965395][T20554] RDX: ffffc9001c58c000 RSI: 000000000003fc16 RDI: 000000000003fc17 [ 505.973402][T20554] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 505.981414][T20554] R10: dffffc0000000000 R11: fffff5200074ec8c R12: ffff88805851c8ce [ 505.989436][T20554] R13: ffff8880336ab890 R14: 0000000000000000 R15: 1ffff110066d5712 [ 505.997459][T20554] FS: 00007fb4b8ca96c0(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 506.006443][T20554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.013041][T20554] CR2: 000000110c27a05f CR3: 000000007eac0000 CR4: 00000000003526f0 [ 506.021072][T20554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 506.029088][T20554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 506.037125][T20554] Call Trace: [ 506.040412][T20554] [ 506.043359][T20554] fib6_ifdown+0x401/0x4c0 [ 506.047846][T20554] ? __pfx_fib6_ifdown+0x10/0x10 [ 506.052790][T20554] fib6_clean_node+0x24a/0x590 [ 506.057586][T20554] ? __pfx_fib6_clean_node+0x10/0x10 [ 506.062881][T20554] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.068303][T20554] fib6_walk_continue+0x678/0x910 [ 506.073341][T20554] fib6_walk+0x149/0x290 [ 506.077616][T20554] __fib6_clean_all+0x234/0x380 [ 506.082472][T20554] ? __fib6_clean_all+0x9b/0x380 [ 506.087467][T20554] ? __pfx_fib6_ifdown+0x10/0x10 [ 506.092410][T20554] ? __pfx___fib6_clean_all+0x10/0x10 [ 506.097842][T20554] ? __pfx_fib6_clean_node+0x10/0x10 [ 506.103132][T20554] ? __pfx_fib6_ifdown+0x10/0x10 [ 506.108101][T20554] ? __lock_acquire+0xaac/0xd20 [ 506.112966][T20554] rt6_disable_ip+0x120/0x720 [ 506.117696][T20554] ? rcu_is_watching+0x15/0xb0 [ 506.122475][T20554] ? __pfx_rt6_disable_ip+0x10/0x10 [ 506.127743][T20554] addrconf_ifdown+0x15d/0x1880 [ 506.132632][T20554] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 506.138319][T20554] ? __pfx___mutex_lock+0x10/0x10 [ 506.143351][T20554] ? tls_dev_event+0x717/0xec0 [ 506.148170][T20554] ? __pfx_addrconf_ifdown+0x10/0x10 [ 506.153501][T20554] addrconf_notify+0x1bc/0x1010 [ 506.158411][T20554] notifier_call_chain+0x1b3/0x3e0 [ 506.163547][T20554] __dev_notify_flags+0x18d/0x2e0 [ 506.168637][T20554] ? __pfx___dev_notify_flags+0x10/0x10 [ 506.174199][T20554] ? __dev_change_flags+0x4cc/0x6d0 [ 506.179453][T20554] ? __pfx___dev_change_flags+0x10/0x10 [ 506.185001][T20554] ? netif_state_change+0x256/0x3a0 [ 506.190240][T20554] ? __pfx_netif_state_change+0x10/0x10 [ 506.195805][T20554] netif_change_flags+0xe8/0x1a0 [ 506.200786][T20554] do_setlink+0xcb9/0x40d0 [ 506.205221][T20554] ? __pfx_do_setlink+0x10/0x10 [ 506.210100][T20554] ? do_raw_spin_lock+0x121/0x290 [ 506.215152][T20554] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.220384][T20554] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 506.226281][T20554] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 506.232677][T20554] ? rcu_is_watching+0x15/0xb0 [ 506.237483][T20554] ? __mutex_lock+0xa6d/0xe80 [ 506.242164][T20554] ? __mutex_lock+0x51b/0xe80 [ 506.246884][T20554] ? rtnl_newlink+0x8db/0x1c70 [ 506.251656][T20554] ? __pfx___mutex_lock+0x10/0x10 [ 506.256750][T20554] ? ns_capable+0x8a/0xf0 [ 506.261090][T20554] ? rtnl_link_get_net_capable+0x16a/0x350 [ 506.266934][T20554] rtnl_newlink+0x149f/0x1c70 [ 506.271607][T20554] ? kasan_save_track+0x3e/0x80 [ 506.276505][T20554] ? __pfx_rtnl_newlink+0x10/0x10 [ 506.281577][T20554] ? kasan_quarantine_put+0xdd/0x220 [ 506.286919][T20554] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.292138][T20554] ? nlmon_xmit+0xb0/0x100 [ 506.296612][T20554] ? kmem_cache_free+0x192/0x3f0 [ 506.301585][T20554] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.307013][T20554] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.312216][T20554] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.316507][T15968] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 506.317615][T20554] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 506.331073][T20554] ? aa_get_newest_label+0xf7/0x5d0 [ 506.336276][T20554] ? __lock_acquire+0xaac/0xd20 [ 506.341183][T20554] ? __pfx_rtnl_newlink+0x10/0x10 [ 506.346190][T20554] rtnetlink_rcv_msg+0x7cc/0xb70 [ 506.351176][T20554] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 506.356325][T20554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.361787][T20554] ? ref_tracker_free+0x63a/0x7d0 [ 506.366860][T20554] ? __copy_skb_header+0xa7/0x550 [ 506.371892][T20554] netlink_rcv_skb+0x219/0x490 [ 506.376697][T20554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.382168][T20554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.387521][T20554] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.392722][T20554] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.397996][T20554] netlink_unicast+0x758/0x8d0 [ 506.402774][T20554] netlink_sendmsg+0x805/0xb30 [ 506.407586][T20554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.412880][T20554] ? aa_sock_msg_perm+0x94/0x160 [ 506.417888][T20554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.423183][T20554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.428529][T20554] __sock_sendmsg+0x219/0x270 [ 506.433237][T20554] ____sys_sendmsg+0x505/0x830 [ 506.438042][T20554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.443340][T20554] ? import_iovec+0x74/0xa0 [ 506.447893][T20554] ___sys_sendmsg+0x21f/0x2a0 [ 506.452601][T20554] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.457900][T20554] ? __fget_files+0x2a/0x420 [ 506.462502][T20554] ? __fget_files+0x3a0/0x420 [ 506.467232][T20554] __x64_sys_sendmsg+0x19b/0x260 [ 506.472178][T20554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.477707][T20554] ? do_syscall_64+0xba/0x210 [ 506.482402][T20554] do_syscall_64+0xf6/0x210 [ 506.486949][T20554] ? clear_bhb_loop+0x45/0xa0 [ 506.491653][T20554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.497603][T20554] RIP: 0033:0x7fb4b7d8e969 [ 506.502040][T20554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.521690][T20554] RSP: 002b:00007fb4b8ca9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.530160][T20554] RAX: ffffffffffffffda RBX: 00007fb4b7fb5fa0 RCX: 00007fb4b7d8e969 [ 506.538180][T20554] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 506.546159][T20554] RBP: 00007fb4b7e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 506.554177][T20554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.562201][T20554] R13: 0000000000000000 R14: 00007fb4b7fb5fa0 R15: 00007ffe2f574648 [ 506.570248][T20554] [ 506.573287][T20554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.580569][T20554] CPU: 1 UID: 0 PID: 20554 Comm: syz.3.3950 Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 506.592622][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 506.602667][T20554] Call Trace: [ 506.605936][T20554] [ 506.608856][T20554] dump_stack_lvl+0x99/0x250 [ 506.613443][T20554] ? __asan_memcpy+0x40/0x70 [ 506.618034][T20554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.623225][T20554] ? __pfx__printk+0x10/0x10 [ 506.627818][T20554] panic+0x2db/0x790 [ 506.631714][T20554] ? __pfx_panic+0x10/0x10 [ 506.636122][T20554] ? show_trace_log_lvl+0x4fb/0x550 [ 506.641326][T20554] __warn+0x31b/0x4b0 [ 506.645297][T20554] ? rt6_multipath_rebalance+0x455/0x8b0 [ 506.650921][T20554] ? rt6_multipath_rebalance+0x455/0x8b0 [ 506.656545][T20554] report_bug+0x2be/0x4f0 [ 506.660868][T20554] ? rt6_multipath_rebalance+0x455/0x8b0 [ 506.666499][T20554] ? rt6_multipath_rebalance+0x455/0x8b0 [ 506.672137][T20554] ? rt6_multipath_rebalance+0x457/0x8b0 [ 506.677767][T20554] handle_bug+0x84/0x160 [ 506.682014][T20554] exc_invalid_op+0x1a/0x50 [ 506.686520][T20554] asm_exc_invalid_op+0x1a/0x20 [ 506.691367][T20554] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 506.697599][T20554] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 8d 53 13 f8 e9 78 fe ff ff e8 13 5f b1 f7 eb 05 e8 0c 5f b1 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 506.717193][T20554] RSP: 0018:ffffc90003a764a0 EFLAGS: 00010287 [ 506.723252][T20554] RAX: ffffffff8a0e613d RBX: ffff8880336ab800 RCX: 0000000000080000 [ 506.731211][T20554] RDX: ffffc9001c58c000 RSI: 000000000003fc16 RDI: 000000000003fc17 [ 506.739171][T20554] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 506.747129][T20554] R10: dffffc0000000000 R11: fffff5200074ec8c R12: ffff88805851c8ce [ 506.755173][T20554] R13: ffff8880336ab890 R14: 0000000000000000 R15: 1ffff110066d5712 [ 506.763141][T20554] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 506.768782][T20554] fib6_ifdown+0x401/0x4c0 [ 506.773193][T20554] ? __pfx_fib6_ifdown+0x10/0x10 [ 506.778123][T20554] fib6_clean_node+0x24a/0x590 [ 506.782881][T20554] ? __pfx_fib6_clean_node+0x10/0x10 [ 506.788160][T20554] ? __local_bh_enable_ip+0x12d/0x1c0 [ 506.793528][T20554] fib6_walk_continue+0x678/0x910 [ 506.798551][T20554] fib6_walk+0x149/0x290 [ 506.802783][T20554] __fib6_clean_all+0x234/0x380 [ 506.807620][T20554] ? __fib6_clean_all+0x9b/0x380 [ 506.812543][T20554] ? __pfx_fib6_ifdown+0x10/0x10 [ 506.817471][T20554] ? __pfx___fib6_clean_all+0x10/0x10 [ 506.822832][T20554] ? __pfx_fib6_clean_node+0x10/0x10 [ 506.828107][T20554] ? __pfx_fib6_ifdown+0x10/0x10 [ 506.833036][T20554] ? __lock_acquire+0xaac/0xd20 [ 506.837888][T20554] rt6_disable_ip+0x120/0x720 [ 506.842563][T20554] ? rcu_is_watching+0x15/0xb0 [ 506.847322][T20554] ? __pfx_rt6_disable_ip+0x10/0x10 [ 506.852518][T20554] addrconf_ifdown+0x15d/0x1880 [ 506.857366][T20554] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 506.862991][T20554] ? __pfx___mutex_lock+0x10/0x10 [ 506.868023][T20554] ? tls_dev_event+0x717/0xec0 [ 506.872788][T20554] ? __pfx_addrconf_ifdown+0x10/0x10 [ 506.878080][T20554] addrconf_notify+0x1bc/0x1010 [ 506.882925][T20554] notifier_call_chain+0x1b3/0x3e0 [ 506.888034][T20554] __dev_notify_flags+0x18d/0x2e0 [ 506.893050][T20554] ? __pfx___dev_notify_flags+0x10/0x10 [ 506.898581][T20554] ? __dev_change_flags+0x4cc/0x6d0 [ 506.903776][T20554] ? __pfx___dev_change_flags+0x10/0x10 [ 506.909311][T20554] ? netif_state_change+0x256/0x3a0 [ 506.914498][T20554] ? __pfx_netif_state_change+0x10/0x10 [ 506.920038][T20554] netif_change_flags+0xe8/0x1a0 [ 506.924969][T20554] do_setlink+0xcb9/0x40d0 [ 506.929390][T20554] ? __pfx_do_setlink+0x10/0x10 [ 506.934229][T20554] ? do_raw_spin_lock+0x121/0x290 [ 506.939255][T20554] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.944443][T20554] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 506.950328][T20554] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 506.956648][T20554] ? rcu_is_watching+0x15/0xb0 [ 506.961406][T20554] ? __mutex_lock+0xa6d/0xe80 [ 506.966080][T20554] ? __mutex_lock+0x51b/0xe80 [ 506.970754][T20554] ? rtnl_newlink+0x8db/0x1c70 [ 506.975507][T20554] ? __pfx___mutex_lock+0x10/0x10 [ 506.980534][T20554] ? ns_capable+0x8a/0xf0 [ 506.984863][T20554] ? rtnl_link_get_net_capable+0x16a/0x350 [ 506.990663][T20554] rtnl_newlink+0x149f/0x1c70 [ 506.995329][T20554] ? kasan_save_track+0x3e/0x80 [ 507.000185][T20554] ? __pfx_rtnl_newlink+0x10/0x10 [ 507.005222][T20554] ? kasan_quarantine_put+0xdd/0x220 [ 507.010503][T20554] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.015696][T20554] ? nlmon_xmit+0xb0/0x100 [ 507.020104][T20554] ? kmem_cache_free+0x192/0x3f0 [ 507.025036][T20554] ? __local_bh_enable_ip+0x12d/0x1c0 [ 507.030419][T20554] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.035625][T20554] ? __local_bh_enable_ip+0x12d/0x1c0 [ 507.040999][T20554] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 507.046728][T20554] ? aa_get_newest_label+0xf7/0x5d0 [ 507.051926][T20554] ? __lock_acquire+0xaac/0xd20 [ 507.056793][T20554] ? __pfx_rtnl_newlink+0x10/0x10 [ 507.061809][T20554] rtnetlink_rcv_msg+0x7cc/0xb70 [ 507.066741][T20554] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 507.071847][T20554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 507.077309][T20554] ? ref_tracker_free+0x63a/0x7d0 [ 507.082338][T20554] ? __copy_skb_header+0xa7/0x550 [ 507.087366][T20554] netlink_rcv_skb+0x219/0x490 [ 507.092123][T20554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 507.097576][T20554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.102865][T20554] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.108050][T20554] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.113240][T20554] netlink_unicast+0x758/0x8d0 [ 507.118008][T20554] netlink_sendmsg+0x805/0xb30 [ 507.122767][T20554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.128046][T20554] ? aa_sock_msg_perm+0x94/0x160 [ 507.132978][T20554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.138256][T20554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.143531][T20554] __sock_sendmsg+0x219/0x270 [ 507.148204][T20554] ____sys_sendmsg+0x505/0x830 [ 507.152983][T20554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.158284][T20554] ? import_iovec+0x74/0xa0 [ 507.162799][T20554] ___sys_sendmsg+0x21f/0x2a0 [ 507.167480][T20554] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.172709][T20554] ? __fget_files+0x2a/0x420 [ 507.177303][T20554] ? __fget_files+0x3a0/0x420 [ 507.181996][T20554] __x64_sys_sendmsg+0x19b/0x260 [ 507.186931][T20554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.192392][T20554] ? do_syscall_64+0xba/0x210 [ 507.197081][T20554] do_syscall_64+0xf6/0x210 [ 507.201576][T20554] ? clear_bhb_loop+0x45/0xa0 [ 507.206247][T20554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.212129][T20554] RIP: 0033:0x7fb4b7d8e969 [ 507.216538][T20554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.236153][T20554] RSP: 002b:00007fb4b8ca9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.244565][T20554] RAX: ffffffffffffffda RBX: 00007fb4b7fb5fa0 RCX: 00007fb4b7d8e969 [ 507.252529][T20554] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 507.260489][T20554] RBP: 00007fb4b7e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 507.268449][T20554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.276418][T20554] R13: 0000000000000000 R14: 00007fb4b7fb5fa0 R15: 00007ffe2f574648 [ 507.284429][T20554] [ 507.287705][T20554] Kernel Offset: disabled [ 507.292023][T20554] Rebooting in 86400 seconds..