last executing test programs: 1m27.91286808s ago: executing program 3 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180080001e66e73e21b061719660014000280050002853a00000008000140000000a40900010073797a30000000000900020073797a320000000014000000110001000000000000000007dd4585b737439782b0e61bed7a57ea39dc161acc1ff55b7bd0ed894991bb6408d78696a62e11bb314b0003c6cb06ba9fd1906180103246519cd49d27dbb7450a3c62bd4ff404a097b55339ce6eb75ff04d862894"], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x81, 0x5, {{0xe, 0x4, 0x0, 0x22, 0x38, 0x68, 0x0, 0x1e, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@end, @lsrr={0x83, 0x23, 0x64, [@empty, @multicast2, @multicast1, @private=0xa010100, @broadcast, @multicast1, @local, @loopback]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, @loopback, 0x1ff, 0x1f, 0xffff, 0x0, 0x2, 0x4180020, r3}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r0, 0x2, 0x0, 0x4000}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000700)={{0x3b, @rand_addr=0x64010100, 0x4e23, 0x1, 'lc\x00', 0x2, 0x2, 0x43}, {@empty, 0x4e24, 0x2000, 0x3ff, 0x9, 0x1}}, 0x44) 1m27.563470871s ago: executing program 3 (id=218): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x2, 0x0}}], 0x3ffffffffffff06, 0x0) 1m27.23051747s ago: executing program 3 (id=222): epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40086602, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_proto_private(r1, 0x8927, &(0x7f0000000080)="85a84ffa1eaa50c092509b3a") 1m14.273925012s ago: executing program 3 (id=222): epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40086602, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_proto_private(r1, 0x8927, &(0x7f0000000080)="85a84ffa1eaa50c092509b3a") 1m0.175483973s ago: executing program 3 (id=222): epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40086602, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_proto_private(r1, 0x8927, &(0x7f0000000080)="85a84ffa1eaa50c092509b3a") 47.387990855s ago: executing program 3 (id=222): epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40086602, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_proto_private(r1, 0x8927, &(0x7f0000000080)="85a84ffa1eaa50c092509b3a") 1.412649643s ago: executing program 2 (id=992): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}]}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6) 1.334593884s ago: executing program 0 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) unshare(0x20000400) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x5760, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x1fffffffffffffbd, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYBLOB="0000000000004000b7080000050000007b8af84d3454d13f39ffb303000000005ae01149c401c781bfa9d3c80000b70400000000088500000056ffffe095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040), 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf2519000000500001800800030002000000140002006272696467655f736c6176655f310000140002006261746164765f736c6176655f30000014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000003000018008ea02000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200776c616e3000"/28], 0xa0}}, 0x8890) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd8a00000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000147073ce6880609e0000080000004608f0ff76000000bf9100000000000056070000000000008500000000000000b70000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001419) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xffff723c, @private0, 0x7}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x8c0, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x8ac, 0x1, [@m_police={0x8a8, 0x1, 0x0, 0x0, {{0xb}, {0x868, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x80, 0x1ff, 0x5, {0x5, 0x7753107d5ab43596, 0x63f, 0x7, 0x0, 0x10001}, {0x6, 0x2, 0x4, 0xca7, 0xffab, 0x3}, 0x6, 0xc0000000, 0xa95a}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0xb313, 0xfffffffd, 0x2, 0x800, 0x7, 0x7fffffff, 0x3ff, 0x6, 0x1189, 0x8, 0x1, 0x7ff, 0x0, 0x4, 0x4, 0x8, 0xb20, 0x0, 0x9, 0x3, 0xbf04, 0x1, 0x5, 0x0, 0x2, 0x8001, 0x6, 0xffffff8b, 0xfffeffff, 0x1000, 0x7f, 0x4b1, 0xfffffffc, 0x3, 0x2, 0x8, 0xff00da0b, 0x0, 0x0, 0x2a93, 0x0, 0xffffffc1, 0x17, 0x8, 0x10001, 0xf4ab, 0x3, 0x40, 0x80, 0x1, 0x2, 0x6, 0x95f, 0x38, 0x2, 0x5, 0x2, 0x3, 0x40000, 0x0, 0xfffffffc, 0x0, 0x10001, 0x84f, 0x9, 0x4, 0x6, 0x8, 0xff, 0x5, 0x4, 0x4, 0x9, 0x3, 0x7, 0xc2, 0x91, 0x0, 0x7, 0xffffffff, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x8, 0x4, 0x7, 0x1356, 0x5, 0x1, 0x2, 0x0, 0x7, 0x3, 0x6, 0x4, 0x8, 0x200, 0x100, 0x8, 0x905, 0xae3b, 0x1c0, 0x8, 0x1, 0xfffff9fa, 0x79c, 0x7fff, 0x5, 0x4, 0x7, 0x3, 0x64d, 0x1, 0x1000, 0x0, 0x8, 0x6, 0x7, 0x400, 0x2, 0x8, 0x8, 0xe322, 0x7, 0x8000, 0x8, 0x80000000, 0xc9, 0x5, 0x8, 0x3, 0xffffffff, 0xa8000000, 0x0, 0x3f, 0x400, 0x404bf90a, 0xa, 0xe6d3, 0x0, 0x4, 0xd6, 0x6, 0x8, 0x1203, 0xffffffff, 0x400000, 0x12, 0x0, 0x5, 0x23, 0x3, 0x1917, 0x8, 0x80, 0x80000000, 0x9, 0xfff, 0x5, 0x0, 0x1, 0x10000, 0x8c67, 0x401, 0x10001, 0xe519, 0x1ff, 0x92, 0x10000, 0x5, 0xdca, 0xe9b, 0x2b6, 0x8001, 0x613a7f0f, 0x81, 0x1, 0x100, 0x1, 0x6d, 0x7ff, 0x1, 0xfbbe, 0x7ff, 0x5, 0x36d8, 0x2, 0x1, 0x4, 0x7, 0x8, 0x9, 0xced, 0xe0000000, 0x1, 0x7fff, 0x800, 0x100, 0x0, 0x1000, 0x1f, 0x101, 0x8, 0x8, 0x7, 0x2, 0x6, 0x80000000, 0x7fffffff, 0xffff8001, 0x2, 0x3ff, 0x1, 0x0, 0x1, 0x1, 0x80, 0x4, 0x2, 0xcf32, 0x8, 0xffff7fff, 0x1cc5, 0x4, 0x6, 0xba, 0x7fffffff, 0x2, 0x4, 0x9, 0xe294, 0x5, 0x769a, 0x400, 0xfff, 0x4, 0x4, 0x1, 0x0, 0x6, 0x9, 0x6, 0x200, 0x4, 0x7fffffff, 0x68d, 0xe40, 0xfff, 0x2, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbe}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff8, 0x3, 0x9, 0x9, 0x7, 0x2, 0x0, 0x5, 0x8, 0x0, 0x9, 0x6ea676d7, 0x3, 0x40, 0x1, 0x12, 0x9, 0x8, 0x0, 0x3ff, 0x6, 0x3, 0x0, 0x3f53, 0xfffff001, 0x6b6c, 0x7ff, 0x5, 0x9, 0xba24, 0x8, 0xfffffffa, 0x158, 0x5, 0x0, 0x2, 0x8, 0x7ff, 0x14, 0x6, 0x80000001, 0x5, 0x9, 0xa1b, 0x7, 0x80000000, 0x7fffffff, 0xff, 0x5, 0x6, 0x5, 0xba, 0x0, 0x0, 0x0, 0x24, 0x80000000, 0x8, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8ee, 0xfffffff8, 0x8, 0x7, 0x3, 0x3de7, 0xd06, 0x3, 0x4, 0x5, 0x133, 0x7, 0x1000, 0x3, 0x7, 0x4, 0x5, 0x101, 0x5, 0xfff, 0x200, 0x2b25, 0xfff, 0x8, 0x100, 0x128953cf, 0x9, 0x9, 0x3ff, 0x5cc, 0x0, 0xf2, 0x1, 0xffffffff, 0xbb66, 0x9, 0x47, 0x9, 0x9, 0x80000001, 0x4, 0xff, 0x1000, 0xf8, 0x0, 0x8, 0x7fff, 0xca, 0x1, 0x1f, 0x3, 0x6, 0x20, 0x80000000, 0x7, 0x9, 0x8001, 0x5, 0x1, 0x0, 0x4, 0x1, 0xffffffff, 0xfff, 0x20, 0x7, 0x80, 0x1f, 0x9, 0x5, 0x8001, 0x12e, 0x20, 0x400, 0xfffffffa, 0x8, 0x74c, 0x1, 0x8, 0xfffffffc, 0xb626, 0xff, 0xf578, 0x9, 0x7, 0x2, 0x10000, 0xf5, 0x1e, 0x95, 0x7fffffff, 0x7, 0x8000, 0x7fffffff, 0x4, 0xfffeffff, 0x0, 0x7, 0x285, 0xe54, 0x4, 0x3fc, 0x0, 0x7, 0x100, 0x7c, 0x8, 0xf7, 0x3, 0x8001, 0x5, 0x80000000, 0x3, 0xffff, 0x3, 0x52, 0x1ff, 0x0, 0x9, 0x7, 0xff, 0x401, 0x7, 0x5, 0x14, 0x71, 0x3, 0x8, 0x7, 0x0, 0x3, 0x7f, 0x6, 0x6, 0x9, 0x7fff, 0x2, 0x3, 0xfffffffe, 0x20, 0x9, 0x2, 0xa3d2, 0x7f, 0x7f, 0x7, 0x8, 0x6, 0x903, 0x4, 0x401]}]]}, {0x15, 0x6, "49bb11b158e68a9bebd224702c00c84c85"}, {0xc, 0x3}, {0xc}}}]}]}, 0x8c0}}, 0x0) 1.326604829s ago: executing program 2 (id=994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@delchain={0x314, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x2dc, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x2c8, 0x9, 0x0, 0x1, [@m_tunnel_key={0x258, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x21d, 0x6, "212075267d41096a34f9432bf5efcef3b1c2cf335a49b348db76559712ce3e56101d72f227b3d98773c36efeac11780e9655c0afef6afd072a92499f442ddf219eb51723c93eaa393fec86b837bbb646a14cf1062661010aa85f1efa00869497c21354573275e08da73d9b111081f460a5b8c1cd7e72264d66bb3ff4740545b16112ce5dcb26f1b1383bb63da56963d7a791789125104d8f5ad3de2e145869b5fbe6b033faf8deb6562c7d34ca92fa0aaea10000000000000000000000933612cd23bb6300e5d0b1e7ceca952352992e0de4b3b929cb81c03ff60da41b2e59e4815468a5558a1e2e4a95283ae88b26583e9660deef3d068e90510a030545b78f49b0d95b71035627b6a4950ccc0cc7efcb08a353ad6e0eefc4853c940b1b63b4b1569863a2cc1ea82ade934021190e4f7fad7c2b938697bc48f24d59370a24cca1a36b1c53907c6cfc50ff1cdf3761d08e3df76d420dc4b6180405c9bd2197d6962eb4f8670dcc2108e598ae5b5f37b894bb2aaffd2166bbbb38160f9d4b7ff31031ff2f319fcf05a367ce68468f778cf1e8a25acfabe6c3b95456debb8f1cf4ef16a33c5508e0197fe6f8c6f6bdec1cba673973d043308ee178b3a46284f2ac04f961181d9d92ac7f8a2ba00b29c728006fdc28882665012f41dfc9551f45cdb16d5b7b1f430e6b74a3d0fc4785daae6f3fa2b0577c69a9c94a1e5b60487ed205965b5cbb77a4df6e5193f2ca57a5f4dd4cd96c86da1f4c00"}, {0xc}, {0xc}}}, @m_skbedit={0x6c, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x35, 0x6, "95dcc74d4393affe2ea7d03dde2ad7cdbb3ce93cf19573a4bd0ca7fc52668cfc303fdb063837788180f6420bfa78e12144"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}]}}]}, 0x314}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.259100044s ago: executing program 2 (id=995): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879310000000005002000050000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x40844) 1.208464788s ago: executing program 0 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) unshare(0x20000400) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x5760, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x1fffffffffffffbd, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYBLOB="0000000000004000b7080000050000007b8af84d3454d13f39ffb303000000005ae01149c401c781bfa9d3c80000b70400000000088500000056ffffe095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040), 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd8a00000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32, @ANYBLOB="0000147073ce6880609e0000080000004608f0ff76000000bf9100000000000056070000000000008500000000000000b70000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001419) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xffff723c, @private0, 0x7}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x8c0, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x8ac, 0x1, [@m_police={0x8a8, 0x1, 0x0, 0x0, {{0xb}, {0x868, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x80, 0x1ff, 0x5, {0x5, 0x7753107d5ab43596, 0x63f, 0x7, 0x0, 0x10001}, {0x6, 0x2, 0x4, 0xca7, 0xffab, 0x3}, 0x6, 0xc0000000, 0xa95a}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0xb313, 0xfffffffd, 0x2, 0x800, 0x7, 0x7fffffff, 0x3ff, 0x6, 0x1189, 0x8, 0x1, 0x7ff, 0x0, 0x4, 0x4, 0x8, 0xb20, 0x0, 0x9, 0x3, 0xbf04, 0x1, 0x5, 0x0, 0x2, 0x8001, 0x6, 0xffffff8b, 0xfffeffff, 0x1000, 0x7f, 0x4b1, 0xfffffffc, 0x3, 0x2, 0x8, 0xff00da0b, 0x0, 0x0, 0x2a93, 0x0, 0xffffffc1, 0x17, 0x8, 0x10001, 0xf4ab, 0x3, 0x40, 0x80, 0x1, 0x2, 0x6, 0x95f, 0x38, 0x2, 0x5, 0x2, 0x3, 0x40000, 0x0, 0xfffffffc, 0x0, 0x10001, 0x84f, 0x9, 0x4, 0x6, 0x8, 0xff, 0x5, 0x4, 0x4, 0x9, 0x3, 0x7, 0xc2, 0x91, 0x0, 0x7, 0xffffffff, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x8, 0x4, 0x7, 0x1356, 0x5, 0x1, 0x2, 0x0, 0x7, 0x3, 0x6, 0x4, 0x8, 0x200, 0x100, 0x8, 0x905, 0xae3b, 0x1c0, 0x8, 0x1, 0xfffff9fa, 0x79c, 0x7fff, 0x5, 0x4, 0x7, 0x3, 0x64d, 0x1, 0x1000, 0x0, 0x8, 0x6, 0x7, 0x400, 0x2, 0x8, 0x8, 0xe322, 0x7, 0x8000, 0x8, 0x80000000, 0xc9, 0x5, 0x8, 0x3, 0xffffffff, 0xa8000000, 0x0, 0x3f, 0x400, 0x404bf90a, 0xa, 0xe6d3, 0x0, 0x4, 0xd6, 0x6, 0x8, 0x1203, 0xffffffff, 0x400000, 0x12, 0x0, 0x5, 0x23, 0x3, 0x1917, 0x8, 0x80, 0x80000000, 0x9, 0xfff, 0x5, 0x0, 0x1, 0x10000, 0x8c67, 0x401, 0x10001, 0xe519, 0x1ff, 0x92, 0x10000, 0x5, 0xdca, 0xe9b, 0x2b6, 0x8001, 0x613a7f0f, 0x81, 0x1, 0x100, 0x1, 0x6d, 0x7ff, 0x1, 0xfbbe, 0x7ff, 0x5, 0x36d8, 0x2, 0x1, 0x4, 0x7, 0x8, 0x9, 0xced, 0xe0000000, 0x1, 0x7fff, 0x800, 0x100, 0x0, 0x1000, 0x1f, 0x101, 0x8, 0x8, 0x7, 0x2, 0x6, 0x80000000, 0x7fffffff, 0xffff8001, 0x2, 0x3ff, 0x1, 0x1, 0x1, 0x1, 0x80, 0x4, 0x2, 0xcf32, 0x8, 0xffff7fff, 0x1cc5, 0x4, 0x6, 0xba, 0x7fffffff, 0x2, 0x4, 0x9, 0xe294, 0x5, 0x769a, 0x400, 0xfff, 0x4, 0x4, 0x1, 0x0, 0x6, 0x9, 0x6, 0x200, 0x4, 0x7fffffff, 0x68d, 0xe40, 0xfff, 0x2, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbe}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff8, 0x3, 0x9, 0x9, 0x7, 0x2, 0x800, 0x5, 0x8, 0x0, 0x9, 0x6ea676d7, 0x3, 0x40, 0x1, 0x12, 0x9, 0x8, 0x0, 0x3ff, 0x6, 0x3, 0x7fff, 0x3f53, 0xfffff001, 0x6b6c, 0x7ff, 0x5, 0x9, 0xba24, 0x8, 0xfffffffa, 0x158, 0x5, 0x0, 0x2, 0x8, 0x7ff, 0x14, 0x6, 0x80000001, 0x5, 0x9, 0xa1b, 0x7, 0x80000000, 0x7fffffff, 0xff, 0x5, 0x6, 0x5, 0xba, 0x5, 0x9, 0x2, 0x24, 0x80000000, 0x8, 0x60, 0x2, 0x5, 0x76, 0xf58, 0x100, 0x4b2, 0x8, 0x800, 0x8, 0x6, 0x7, 0x7, 0x87, 0x7d, 0xfffffffe, 0x6, 0x80, 0x101, 0x8, 0x5, 0x28000000, 0x8, 0x3, 0x20, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8ee, 0xfffffff8, 0x8, 0x7, 0x3, 0x3de7, 0xd06, 0x3, 0x4, 0x5, 0x133, 0x7, 0x1000, 0x3, 0x7, 0x4, 0x5, 0x101, 0x5, 0xfff, 0x200, 0x2b25, 0xfff, 0x8, 0x100, 0x128953cf, 0x9, 0x9, 0x3ff, 0x5cc, 0x0, 0xf2, 0x1, 0xffffffff, 0xbb66, 0x9, 0x47, 0x9, 0x9, 0x80000001, 0x4, 0xff, 0x1000, 0xf8, 0x0, 0x8, 0x7fff, 0xca, 0x1, 0x1f, 0x3, 0x6, 0x20, 0x80000000, 0x7, 0x9, 0x8001, 0x5, 0x1, 0x0, 0x4, 0x1, 0xffffffff, 0xfff, 0x20, 0x7, 0x80, 0x1f, 0x9, 0x5, 0x8001, 0x12e, 0x20, 0x400, 0xfffffffa, 0x8, 0x74c, 0x1, 0x8, 0xfffffffc, 0xb626, 0xff, 0xf578, 0x9, 0x7, 0x2, 0x10000, 0xf5, 0x1e, 0x95, 0x7fffffff, 0x7, 0x8000, 0x7fffffff, 0x4, 0xfffeffff, 0x0, 0x7, 0x285, 0xe54, 0x4, 0x3fc, 0x0, 0x7, 0x100, 0x7c, 0x8, 0xf7, 0x3, 0x8001, 0x5, 0x80000000, 0x3, 0xffff, 0x3, 0x52, 0x1ff, 0x0, 0x9, 0x7, 0xff, 0x401, 0x7, 0x5, 0x14, 0x71, 0x3, 0x8, 0x7, 0x0, 0x3, 0x7f, 0x6, 0x6, 0x9, 0x7fff, 0x2, 0x3, 0xfffffffe, 0x20, 0x9, 0x2, 0xa3d2, 0x7f, 0x7f, 0x7, 0x8, 0x6, 0x903, 0x4, 0x401]}]]}, {0x15, 0x6, "49bb11b158e68a9bebd224702c00c84c85"}, {0xc, 0x3}, {0xc}}}]}]}, 0x8c0}}, 0x0) 1.131328852s ago: executing program 2 (id=997): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x14, &(0x7f0000000280)={r1}, 0x8) 1.085600807s ago: executing program 2 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001b00)=ANY=[@ANYBLOB="68010000", @ANYRES16, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"/405], 0x168}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050040000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100ff0202060270"], 0x2b) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b6933d100", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000101c006300000000000000000070bb0400", @ANYRES32=0x0, @ANYBLOB="8000be000a00020063ccc76963240000"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1, 0x5, 0x18, @local, @mcast1, 0x7800, 0x40, 0x8, 0x10000}}) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@deltfilter={0x34, 0x2d, 0x4, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0xf}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x51}}, @TCA_CHAIN={0x8, 0xb, 0x4e16}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x7) r10 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b00)={{r8}, 0x0, 0xc, @unused=[0x9, 0x7, 0x8, 0x80000000], @devid}) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x2}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 942.381299ms ago: executing program 0 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 775.387266ms ago: executing program 4 (id=1002): syz_emit_ethernet(0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="fffffffffffbaaaaaaaaaaaa803508006001"], 0x0) 733.78636ms ago: executing program 4 (id=1004): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}]}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6) 699.754193ms ago: executing program 1 (id=1005): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, 0x1, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x40}}, 0x0) 578.155122ms ago: executing program 4 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) unshare(0x20000400) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x5760, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x1fffffffffffffbd, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYBLOB="0000000000004000b7080000050000007b8af84d3454d13f39ffb303000000005ae01149c401c781bfa9d3c80000b70400000000088500000056ffffe095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040), 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf2519000000500001800800030002000000140002006272696467655f736c6176655f310000140002006261746164765f736c6176655f30000014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000003000018008ea02000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200776c616e3000"/28], 0xa0}}, 0x8890) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd8a00000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000147073ce6880609e0000080000004608f0ff76000000bf9100000000000056070000000000008500000000000000b70000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001419) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xffff723c, @private0, 0x7}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x8c0, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x8ac, 0x1, [@m_police={0x8a8, 0x1, 0x0, 0x0, {{0xb}, {0x868, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x80, 0x1ff, 0x5, {0x5, 0x7753107d5ab43596, 0x63f, 0x7, 0x0, 0x10001}, {0x6, 0x2, 0x4, 0xca7, 0xffab, 0x3}, 0x6, 0xc0000000, 0xa95a}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0xb313, 0xfffffffd, 0x2, 0x800, 0x7, 0x7fffffff, 0x3ff, 0x6, 0x1189, 0x8, 0x1, 0x7ff, 0x0, 0x4, 0x4, 0x8, 0xb20, 0x0, 0x9, 0x3, 0xbf04, 0x1, 0x5, 0x0, 0x2, 0x8001, 0x6, 0xffffff8b, 0xfffeffff, 0x1000, 0x7f, 0x4b1, 0xfffffffc, 0x3, 0x2, 0x8, 0xff00da0b, 0x0, 0x0, 0x2a93, 0x0, 0xffffffc1, 0x17, 0x8, 0x10001, 0xf4ab, 0x3, 0x40, 0x80, 0x1, 0x2, 0x6, 0x95f, 0x38, 0x2, 0x5, 0x2, 0x3, 0x40000, 0x0, 0xfffffffc, 0x0, 0x10001, 0x84f, 0x9, 0x4, 0x6, 0x8, 0xff, 0x5, 0x4, 0x4, 0x9, 0x3, 0x7, 0xc2, 0x91, 0x0, 0x7, 0xffffffff, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x8, 0x4, 0x7, 0x1356, 0x5, 0x1, 0x2, 0x0, 0x7, 0x3, 0x6, 0x4, 0x8, 0x200, 0x100, 0x8, 0x905, 0xae3b, 0x1c0, 0x8, 0x1, 0xfffff9fa, 0x79c, 0x7fff, 0x5, 0x4, 0x7, 0x3, 0x64d, 0x1, 0x1000, 0x0, 0x8, 0x6, 0x7, 0x400, 0x2, 0x8, 0x8, 0xe322, 0x7, 0x8000, 0x8, 0x80000000, 0xc9, 0x5, 0x8, 0x3, 0xffffffff, 0xa8000000, 0x0, 0x3f, 0x400, 0x404bf90a, 0xa, 0xe6d3, 0x0, 0x4, 0xd6, 0x6, 0x8, 0x1203, 0xffffffff, 0x400000, 0x12, 0x0, 0x5, 0x23, 0x3, 0x1917, 0x8, 0x80, 0x80000000, 0x9, 0xfff, 0x5, 0x0, 0x1, 0x10000, 0x8c67, 0x401, 0x10001, 0xe519, 0x1ff, 0x92, 0x10000, 0x5, 0xdca, 0xe9b, 0x2b6, 0x8001, 0x613a7f0f, 0x81, 0x1, 0x100, 0x1, 0x6d, 0x7ff, 0x1, 0xfbbe, 0x7ff, 0x5, 0x36d8, 0x2, 0x1, 0x4, 0x7, 0x8, 0x9, 0xced, 0xe0000000, 0x1, 0x7fff, 0x800, 0x100, 0x0, 0x1000, 0x1f, 0x101, 0x8, 0x8, 0x7, 0x2, 0x6, 0x80000000, 0x7fffffff, 0xffff8001, 0x2, 0x3ff, 0x1, 0x0, 0x1, 0x1, 0x80, 0x4, 0x2, 0xcf32, 0x8, 0xffff7fff, 0x1cc5, 0x4, 0x6, 0xba, 0x7fffffff, 0x2, 0x4, 0x9, 0xe294, 0x5, 0x769a, 0x400, 0xfff, 0x4, 0x4, 0x1, 0x0, 0x6, 0x9, 0x6, 0x200, 0x4, 0x7fffffff, 0x68d, 0xe40, 0xfff, 0x2, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbe}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff8, 0x3, 0x9, 0x9, 0x7, 0x2, 0x0, 0x5, 0x8, 0x0, 0x9, 0x6ea676d7, 0x3, 0x40, 0x1, 0x12, 0x9, 0x8, 0x0, 0x3ff, 0x6, 0x3, 0x0, 0x3f53, 0xfffff001, 0x6b6c, 0x7ff, 0x5, 0x9, 0xba24, 0x8, 0xfffffffa, 0x158, 0x5, 0x0, 0x2, 0x8, 0x7ff, 0x14, 0x6, 0x80000001, 0x5, 0x9, 0xa1b, 0x7, 0x80000000, 0x7fffffff, 0xff, 0x5, 0x6, 0x5, 0xba, 0x0, 0x0, 0x0, 0x24, 0x80000000, 0x8, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8ee, 0xfffffff8, 0x8, 0x7, 0x3, 0x3de7, 0xd06, 0x3, 0x4, 0x5, 0x133, 0x7, 0x1000, 0x3, 0x7, 0x4, 0x5, 0x101, 0x5, 0xfff, 0x200, 0x2b25, 0xfff, 0x8, 0x100, 0x128953cf, 0x9, 0x9, 0x3ff, 0x5cc, 0x0, 0xf2, 0x1, 0xffffffff, 0xbb66, 0x9, 0x47, 0x9, 0x9, 0x80000001, 0x4, 0xff, 0x1000, 0xf8, 0x0, 0x8, 0x7fff, 0xca, 0x1, 0x1f, 0x3, 0x6, 0x20, 0x80000000, 0x7, 0x9, 0x8001, 0x5, 0x1, 0x0, 0x4, 0x1, 0xffffffff, 0xfff, 0x20, 0x7, 0x80, 0x1f, 0x9, 0x5, 0x8001, 0x12e, 0x20, 0x400, 0xfffffffa, 0x8, 0x74c, 0x1, 0x8, 0xfffffffc, 0xb626, 0xff, 0xf578, 0x9, 0x7, 0x2, 0x10000, 0xf5, 0x1e, 0x95, 0x7fffffff, 0x7, 0x8000, 0x7fffffff, 0x4, 0xfffeffff, 0x0, 0x7, 0x285, 0xe54, 0x4, 0x3fc, 0x0, 0x7, 0x100, 0x7c, 0x8, 0xf7, 0x3, 0x8001, 0x5, 0x80000000, 0x3, 0xffff, 0x3, 0x52, 0x1ff, 0x0, 0x9, 0x7, 0xff, 0x401, 0x7, 0x5, 0x14, 0x71, 0x3, 0x8, 0x7, 0x0, 0x3, 0x7f, 0x6, 0x6, 0x9, 0x7fff, 0x2, 0x3, 0xfffffffe, 0x20, 0x9, 0x2, 0xa3d2, 0x7f, 0x7f, 0x7, 0x8, 0x6, 0x903, 0x4, 0x401]}]]}, {0x15, 0x6, "49bb11b158e68a9bebd224702c00c84c85"}, {0xc, 0x3}, {0xc}}}]}]}, 0x8c0}}, 0x0) 577.608384ms ago: executing program 1 (id=1007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879310000000005002000050000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x40844) 519.004582ms ago: executing program 0 (id=1008): pipe(&(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="a7", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040), &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xe) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a000109000000000000000080000004"], 0x1c}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="9eeb49c894bc13eabbb7980b2b7418be9177ce9b5c", 0x15}], 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x2, 0x3, 0x22b4, r1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x0, 0xc20a, 0x12}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000680)=[{0x4, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x10}, {0x0, 0x0, 0xc, 0x2}, {0x5, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0xffffffff}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="0bcc1ebd5bc44d769d23fa541d6b0a43d32c2cbea7b0374885837a79ca7089dc18a21a4a2adc35fc98651d88b7b8940250bc2e2f26af6a743708719e8eeb90913e810437823d599246ebe11e35c2f284f7a358f0b73bf764a89028450a061a6637ada6601660bc56447397a992383304669af66c98d57612aa31f0bc7cdd9bedafe672ebac0dd884d856d13a2163f894dd579fdff4f851f86a", 0x99}, {&(0x7f0000000280)="09b70180e6db72d24a7cb84063842a93230b03d42434568758c1ff5ff3c8e611d5baf334f3f58cceb65c2d51e16b926faa9d86025d8f88b635685b3694ebeb60ef6fed594ebe001a341db192241108ca0d062a4344153d71db72ea635a6a300596a70d6f96162adc9aeb004b56c2e6a3160f47ef4625215182308515d6b8ed4228ed7d81b0dfd0aa0f01728be6f54acc353223ab1e3ca40e8a65347ab9b78a8ad5575fe4be2019621bc8e200f98394cf8b284878908e9507527852e41800731eaf0f889792e895581bf6fb9cc9763b2c969e4c025fc2ddabe39afbdba5cb278fe33ca69968ddac5d8e695263eb4765954d2d5f3c688f8076f6e222e720026798c8bfd42ced306d5acff10c50d073772a1564bfbcd5abda7e7cd31999e706bcba78896bd030460607d93ef0d1f7d23c4c9ddc28b16d58143781e2880661a8d3ef02632f6ff94fa9cfd013ae0b567600692e5b4afd3f838171d05e20080f8694785f78689ad78e1cfc10a338f4c3cb2f658dafc9ba18fa145ef40a02054357d68b883704d1cab6190abca2510e7be12b99e247a5bd23e2070e22ae554ff057ce3e7cd650d9ff859134a34eea09860b0321e34f88157bdcead2ca57611e41549ef29fe9c25444af4bf1cb9feeef071255918aba525bc3bea63d08523f802044f0059c1f7b65a47a0c078818979440c353de47773ff655960dd20df9de896b5de6f381debf9ebe6dc603b34f7468d201209d5bbb44cbcf45202596c655b4e1f9b881302fcaf76a7c0bf0de392a5e0d7eaf4ff3ac8ed16b26b39fdd4f519a03e88fb92a38cad898e043c1455a67615d33e2f552fbf70cc6982f9dc8220c188660190a2030db31d9b155cbee899f838d3919b783634d8dcf2d1675be0f032bbda9dc041f81e3bcb0a4c9cbbb215ce471d5c680290f396260536d4e7218d8e6fa67421a09cfa1f47b23fd3c2bd4407a60f821dc45a61a95ef3df66da68eb14574b71199c9f1bf1e2ca5b985becba2b8e028f8b501e7d9087a6600ce2251b4c5a8f4547d7e073b033b9468b63e7bde26766a102538c0cb99a24989976cbc92514bcb4e2836a75cfe176ff9299bf0f9d80d002c711cca57502c5374197b05338c684620d0ade352d6b3649e3b1b91631f2b1c264e207d312ab94727ee8bd914d029340e928b9945f7af178441092fb23ce2687edde68a753267185739a367418863c4ccaab52727e53d", 0x365}], 0x2}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1}, 0xc) close(r6) 461.962421ms ago: executing program 1 (id=1009): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x14, &(0x7f0000000280)={r1}, 0x8) 430.48037ms ago: executing program 4 (id=1010): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000022c0)={'syztnl0\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x45, 0x4, 0x0, 0x0, 0x114, 0x0, 0x0, 0x20, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @rr={0x7, 0x17, 0x0, [@loopback, @remote, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x0, 0xf, "ea6157aa7f9da8c1cbf0262550"}, @lsrr={0x83, 0x1b, 0x0, [@private, @loopback, @remote, @rand_addr, @empty, @dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @generic={0x0, 0x5, "cb1e37"}, @timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x0, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@remote}, {@multicast2}, {@private}, {@loopback}, {@dev}, {@empty}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@loopback}, {@remote}]}, @ssrr={0x89, 0x17, 0x0, [@remote, @remote, @dev, @remote, @local]}]}}}}}) 274.534621ms ago: executing program 4 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) unshare(0x20000400) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x5760, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x1fffffffffffffbd, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYBLOB="0000000000004000b7080000050000007b8af84d3454d13f39ffb303000000005ae01149c401c781bfa9d3c80000b70400000000088500000056ffffe095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040), 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd8a00000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32, @ANYBLOB="0000147073ce6880609e0000080000004608f0ff76000000bf9100000000000056070000000000008500000000000000b70000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001419) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xffff723c, @private0, 0x7}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x8c0, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x8ac, 0x1, [@m_police={0x8a8, 0x1, 0x0, 0x0, {{0xb}, {0x868, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x80, 0x1ff, 0x5, {0x5, 0x7753107d5ab43596, 0x63f, 0x7, 0x0, 0x10001}, {0x6, 0x2, 0x4, 0xca7, 0xffab, 0x3}, 0x6, 0xc0000000, 0xa95a}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0xb313, 0xfffffffd, 0x2, 0x800, 0x7, 0x7fffffff, 0x3ff, 0x6, 0x1189, 0x8, 0x1, 0x7ff, 0x0, 0x4, 0x4, 0x8, 0xb20, 0x0, 0x9, 0x3, 0xbf04, 0x1, 0x5, 0x0, 0x2, 0x8001, 0x6, 0xffffff8b, 0xfffeffff, 0x1000, 0x7f, 0x4b1, 0xfffffffc, 0x3, 0x2, 0x8, 0xff00da0b, 0x0, 0x0, 0x2a93, 0x0, 0xffffffc1, 0x17, 0x8, 0x10001, 0xf4ab, 0x3, 0x40, 0x80, 0x1, 0x2, 0x6, 0x95f, 0x38, 0x2, 0x5, 0x2, 0x3, 0x40000, 0x0, 0xfffffffc, 0x0, 0x10001, 0x84f, 0x9, 0x4, 0x6, 0x8, 0xff, 0x5, 0x4, 0x4, 0x9, 0x3, 0x7, 0xc2, 0x91, 0x0, 0x7, 0xffffffff, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x8, 0x4, 0x7, 0x1356, 0x5, 0x1, 0x2, 0x0, 0x7, 0x3, 0x6, 0x4, 0x8, 0x200, 0x100, 0x8, 0x905, 0xae3b, 0x1c0, 0x8, 0x1, 0xfffff9fa, 0x79c, 0x7fff, 0x5, 0x4, 0x7, 0x3, 0x64d, 0x1, 0x1000, 0x0, 0x8, 0x6, 0x7, 0x400, 0x2, 0x8, 0x8, 0xe322, 0x7, 0x8000, 0x8, 0x80000000, 0xc9, 0x5, 0x8, 0x3, 0xffffffff, 0xa8000000, 0x0, 0x3f, 0x400, 0x404bf90a, 0xa, 0xe6d3, 0x0, 0x4, 0xd6, 0x6, 0x8, 0x1203, 0xffffffff, 0x400000, 0x12, 0x0, 0x5, 0x23, 0x3, 0x1917, 0x8, 0x80, 0x80000000, 0x9, 0xfff, 0x5, 0x0, 0x1, 0x10000, 0x8c67, 0x401, 0x10001, 0xe519, 0x1ff, 0x92, 0x10000, 0x5, 0xdca, 0xe9b, 0x2b6, 0x8001, 0x613a7f0f, 0x81, 0x1, 0x100, 0x1, 0x6d, 0x7ff, 0x1, 0xfbbe, 0x7ff, 0x5, 0x36d8, 0x2, 0x1, 0x4, 0x7, 0x8, 0x9, 0xced, 0xe0000000, 0x1, 0x7fff, 0x800, 0x100, 0x0, 0x1000, 0x1f, 0x101, 0x8, 0x8, 0x7, 0x2, 0x6, 0x80000000, 0x7fffffff, 0xffff8001, 0x2, 0x3ff, 0x1, 0x1, 0x1, 0x1, 0x80, 0x4, 0x2, 0xcf32, 0x8, 0xffff7fff, 0x1cc5, 0x4, 0x6, 0xba, 0x7fffffff, 0x2, 0x4, 0x9, 0xe294, 0x5, 0x769a, 0x400, 0xfff, 0x4, 0x4, 0x1, 0x0, 0x6, 0x9, 0x6, 0x200, 0x4, 0x7fffffff, 0x68d, 0xe40, 0xfff, 0x2, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbe}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff8, 0x3, 0x9, 0x9, 0x7, 0x2, 0x800, 0x5, 0x8, 0x0, 0x9, 0x6ea676d7, 0x3, 0x40, 0x1, 0x12, 0x9, 0x8, 0x0, 0x3ff, 0x6, 0x3, 0x7fff, 0x3f53, 0xfffff001, 0x6b6c, 0x7ff, 0x5, 0x9, 0xba24, 0x8, 0xfffffffa, 0x158, 0x5, 0x0, 0x2, 0x8, 0x7ff, 0x14, 0x6, 0x80000001, 0x5, 0x9, 0xa1b, 0x7, 0x80000000, 0x7fffffff, 0xff, 0x5, 0x6, 0x5, 0xba, 0x5, 0x9, 0x2, 0x24, 0x80000000, 0x8, 0x60, 0x2, 0x5, 0x76, 0xf58, 0x100, 0x4b2, 0x8, 0x800, 0x8, 0x6, 0x7, 0x7, 0x87, 0x7d, 0xfffffffe, 0x6, 0x80, 0x101, 0x8, 0x5, 0x28000000, 0x8, 0x3, 0x20, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8ee, 0xfffffff8, 0x8, 0x7, 0x3, 0x3de7, 0xd06, 0x3, 0x4, 0x5, 0x133, 0x7, 0x1000, 0x3, 0x7, 0x4, 0x5, 0x101, 0x5, 0xfff, 0x200, 0x2b25, 0xfff, 0x8, 0x100, 0x128953cf, 0x9, 0x9, 0x3ff, 0x5cc, 0x0, 0xf2, 0x1, 0xffffffff, 0xbb66, 0x9, 0x47, 0x9, 0x9, 0x80000001, 0x4, 0xff, 0x1000, 0xf8, 0x0, 0x8, 0x7fff, 0xca, 0x1, 0x1f, 0x3, 0x6, 0x20, 0x80000000, 0x7, 0x9, 0x8001, 0x5, 0x1, 0x0, 0x4, 0x1, 0xffffffff, 0xfff, 0x20, 0x7, 0x80, 0x1f, 0x9, 0x5, 0x8001, 0x12e, 0x20, 0x400, 0xfffffffa, 0x8, 0x74c, 0x1, 0x8, 0xfffffffc, 0xb626, 0xff, 0xf578, 0x9, 0x7, 0x2, 0x10000, 0xf5, 0x1e, 0x95, 0x7fffffff, 0x7, 0x8000, 0x7fffffff, 0x4, 0xfffeffff, 0x0, 0x7, 0x285, 0xe54, 0x4, 0x3fc, 0x0, 0x7, 0x100, 0x7c, 0x8, 0xf7, 0x3, 0x8001, 0x5, 0x80000000, 0x3, 0xffff, 0x3, 0x52, 0x1ff, 0x0, 0x9, 0x7, 0xff, 0x401, 0x7, 0x5, 0x14, 0x71, 0x3, 0x8, 0x7, 0x0, 0x3, 0x7f, 0x6, 0x6, 0x9, 0x7fff, 0x2, 0x3, 0xfffffffe, 0x20, 0x9, 0x2, 0xa3d2, 0x7f, 0x7f, 0x7, 0x8, 0x6, 0x903, 0x4, 0x401]}]]}, {0x15, 0x6, "49bb11b158e68a9bebd224702c00c84c85"}, {0xc, 0x3}, {0xc}}}]}]}, 0x8c0}}, 0x0) 274.17412ms ago: executing program 1 (id=1012): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="cd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003240), 0x0, &(0x7f0000005740)=ANY=[], 0x12b0}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000180)="26c726c468e31d1a6327e6fba34a7e8faee2ced06a29885b9feb475b7ce6c5429f118b6357534c47ff959fe9832a4a698464672b8f2ae35c7d30b3b63f5775166313b77e913373f68238c0d187950c0000773767ba65d6db", 0x58}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="266328fd9035106e50c0d544750452ff8295aa0cfad5716265ce3a3a5ea6acfad01adf32aba2a06c9e3fd542b8288f39b37f74a7156e337d9f4af765b3dcb9c391784daa534222769d698d66a8550fb65ec6130951676f9ec34c57c20e06cdf2e269e17b73efa7694a03bfe07d7b5283bdf395d8ca693e4a2433e0086b75777eab2c1cfab93ede8dd828a4084887446f406083b147cec48798", 0x99}, {&(0x7f0000000440)="82cce78cb20179f235b3e436177e886cbcecd9d8126d1fcd4355473ff181eb64446514716b2332d6bf82baf8da1b2f073a9080ae8b538ad6822a52f160efb9b7f2fe85cf70ee24e9f30177eb68bd1de2861b7474b14c5f46cd4f4e56d142ddfd766a038f9f24f1a3bf837c", 0x6b}, {&(0x7f0000000640)="7506e7db502686b1dd8054f1298e12a0d56db7216cee8d9bf45169f59fe8de3220b1dda74ce5a03b2152b09fe94590d3e71ff76d66d442824f0b16f90a78d9507f0788237437b8cba2005e7e763b6a52e609b98d911809d60baae4ca48e57f6a5dcb6da38fc1d575e943fbea77d7c6962318428a0a59e9df50a7686a66a76079b78e27d2313edfc4e3220d1b395cdc3e2b7a5980fc0b19", 0x97}], 0x3, &(0x7f0000000700)=[@hoplimit={{0x14}}], 0x18}}], 0x4, 0x0) 244.010305ms ago: executing program 2 (id=1013): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf669ebecab19b3fd50fec5eade4bb02aa4f152b8f66388c86b074dc9bc42751ece81bdfdf8ffffffffffffff547930a8ab50e020a1a45f8d67000000000000f669011b4511ccb706ceac9856ba"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x3f02, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0xff9f}, 0x28) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0xfffffffe}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x20, 0x9, 0x0, 0x1}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r4}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0x5, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="58d84c3fb4facf57280364e07062786dadf58e301ff3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c944117", 0x3a}, {&(0x7f00000002c0)="9e39cdede732", 0x6}], 0x2}, 0x20008040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000002b80)=ANY=[@ANYBLOB="b40000", @ANYRES16, @ANYBLOB="01de77000000000000000300000050000180040002803800040020ff0f00000000000000000000000000000000000000ffff7f000001000000001400020002000000ffffffff00000000000000000e0001006574683a766c616e30"], 0xb4}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendmmsg$inet6(r1, &(0x7f0000002c00)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000001700"/24], 0x18}}], 0x2, 0x0) 237.380634ms ago: executing program 0 (id=1014): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) 121.902429ms ago: executing program 0 (id=1015): socket(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xfdef) 120.962836ms ago: executing program 1 (id=1016): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@delchain={0x34c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x314, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x2c8, 0x9, 0x0, 0x1, [@m_tunnel_key={0x258, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x21d, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbedit={0x6c, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x35, 0x6, "95dcc74d4393affe2ea7d03dde2ad7cdbb3ce93cf19573a4bd0ca7fc52668cfc303fdb063837788180f6420bfa78e12144"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'q'}}}, @TCF_EM_CANID={0x14}]}]}]}}]}, 0x34c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 30.873684ms ago: executing program 4 (id=1017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r1, &(0x7f0000000100)=""/41, 0x29) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x2}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = socket$inet6(0xa, 0x5, 0x101) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x34) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001740)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @private0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9, 0x2, 0xffd4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000004480)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="adffa888d2260000050021003400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000cdb64de5ccff0f592615d3bc83000101010100000000000000000a000000040001"], 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 1 (id=1018): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xf}}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) r6 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x8000, 0x8000, 0xff, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r7, 0xf9, "a372ea84df0ba370fdd5974a175e99d95326a293eec6d2f9c791e33c5573216a5b8f35befbad16d4cce6e645a0e463cadab832c1046e6409e918b01e3563ad01a0b0b0369ae9fdf82268a58941a238766e32ff7ebe62175cdc302380a842f24c3a87a3984f8d7694df7813ebc5118d031e9c71152ea29c27cf79b639d6475b02e051bd36d1be417822d78ca0e2a52f47bcdad931b13135a7778af19967354233c00cfb85a0a6892215ba6d13665511343194a53a7381a3e5f0584202f36114255cd37e220b4725be8fc296a93168ebebb06c6ef544afd6f8bc65eaf2892d374b24c044cd3347e418644d9e53de4ebdc108f7bebe8fae96bb56"}, &(0x7f0000000240)=0x101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x3c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x3c}}, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) kernel console output (not intermixed with test programs): not active [ 52.428542][ T5089] hsr_slave_0: entered promiscuous mode [ 52.435142][ T5089] hsr_slave_1: entered promiscuous mode [ 52.441383][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.449214][ T5089] Cannot create hsr debugfs directory [ 52.482618][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.489752][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.516163][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.728094][ T5088] hsr_slave_0: entered promiscuous mode [ 52.734379][ T5088] hsr_slave_1: entered promiscuous mode [ 52.741397][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.749065][ T5088] Cannot create hsr debugfs directory [ 52.984390][ T5086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.994711][ T5086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.019725][ T5086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.041644][ T5086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.112780][ T5089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.124932][ T5089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.134527][ T5089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.150898][ T5089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.239789][ T5087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.258092][ T5087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.269120][ T5087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.287500][ T5087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.369728][ T5085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.380166][ T5085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.391231][ T5085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.415172][ T5085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.471415][ T5088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.509853][ T5088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.534720][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.543356][ T5088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.554233][ T5088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.601916][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.629900][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.657864][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.665284][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.695405][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.721565][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.728674][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.739499][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.746644][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.790520][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.797677][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.859996][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.940933][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.956090][ T5086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.967763][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.994632][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.007600][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.053742][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.082274][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.101489][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.108650][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.128133][ T5105] Bluetooth: hci4: command tx timeout [ 54.131983][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.140587][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.153918][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.161056][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.192319][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.199478][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.206920][ T5105] Bluetooth: hci0: command tx timeout [ 54.212747][ T5105] Bluetooth: hci2: command tx timeout [ 54.216831][ T5102] Bluetooth: hci3: command tx timeout [ 54.218473][ T5105] Bluetooth: hci1: command tx timeout [ 54.282195][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.289357][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.333081][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.340254][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.410730][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.623286][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.704437][ T5086] veth0_vlan: entered promiscuous mode [ 54.755218][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.783325][ T5086] veth1_vlan: entered promiscuous mode [ 54.901327][ T5086] veth0_macvtap: entered promiscuous mode [ 54.909471][ T5089] veth0_vlan: entered promiscuous mode [ 54.933933][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.948709][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.965189][ T5086] veth1_macvtap: entered promiscuous mode [ 54.984209][ T5089] veth1_vlan: entered promiscuous mode [ 54.992909][ T5085] veth0_vlan: entered promiscuous mode [ 55.056331][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.077302][ T5085] veth1_vlan: entered promiscuous mode [ 55.099672][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.120736][ T5086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.130429][ T5086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.142282][ T5086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.151290][ T5086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.229512][ T5087] veth0_vlan: entered promiscuous mode [ 55.282320][ T5087] veth1_vlan: entered promiscuous mode [ 55.311520][ T5089] veth0_macvtap: entered promiscuous mode [ 55.321963][ T5089] veth1_macvtap: entered promiscuous mode [ 55.385343][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.395018][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.409066][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.411892][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.428189][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.439192][ T5085] veth0_macvtap: entered promiscuous mode [ 55.454480][ T5088] veth0_vlan: entered promiscuous mode [ 55.494428][ T5088] veth1_vlan: entered promiscuous mode [ 55.509717][ T5087] veth0_macvtap: entered promiscuous mode [ 55.522259][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.533012][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.545098][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.554203][ T5085] veth1_macvtap: entered promiscuous mode [ 55.583850][ T5087] veth1_macvtap: entered promiscuous mode [ 55.604608][ T5089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.613701][ T5089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.623195][ T5089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.632193][ T5089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.666223][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.674854][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.691559][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.702422][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.717304][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.729768][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.741559][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.756219][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.767885][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.780550][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.791074][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.801632][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.812402][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.826885][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.848784][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.859360][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.870690][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.881422][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.893096][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.904659][ T5087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.914596][ T5087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.923581][ T5087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.933948][ T5087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.951501][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.963103][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.981498][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.992539][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.002630][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.013347][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.025792][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.071341][ T5085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.080776][ T5085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.093596][ T5085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.108419][ T5085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.203896][ T5088] veth0_macvtap: entered promiscuous mode [ 56.206872][ T5105] Bluetooth: hci4: command tx timeout [ 56.240048][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.251752][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.287270][ T5105] Bluetooth: hci1: command tx timeout [ 56.287763][ T5092] Bluetooth: hci3: command tx timeout [ 56.293368][ T5105] Bluetooth: hci2: command tx timeout [ 56.298358][ T5102] Bluetooth: hci0: command tx timeout [ 56.318499][ T5088] veth1_macvtap: entered promiscuous mode [ 56.375656][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.388921][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.428197][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.436006][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.475887][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.489996][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.501664][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.516834][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.527072][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.537591][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.547967][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.558470][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.570317][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.602085][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.615784][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.632595][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.664597][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.674966][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.686078][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.699323][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.710192][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.728444][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.745141][ T5181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.762969][ T2425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.774147][ T5088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.784118][ T2425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.793107][ T5181] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 56.797041][ T5088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828068][ T5088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.839237][ T5088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.871524][ T5178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.909828][ T5181] ip6tnl0: entered promiscuous mode [ 56.924720][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.941243][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.020100][ T5180] ip6tnl0: left promiscuous mode [ 57.053101][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.096001][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.124568][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.143009][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.180600][ T5185] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 57.216235][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.228991][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.822249][ T5211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.837080][ T5210] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 57.878558][ T5209] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14'. [ 57.893702][ T5210] Zero length message leads to an empty skb [ 57.918981][ T5210] ip6tnl0: entered promiscuous mode [ 57.953699][ T5208] ip6tnl0: left promiscuous mode [ 58.075957][ T5168] IPVS: starting estimator thread 0... [ 58.198025][ T5218] IPVS: using max 18 ests per chain, 43200 per kthread [ 58.286961][ T5092] Bluetooth: hci4: command tx timeout [ 58.369179][ T5102] Bluetooth: hci3: command tx timeout [ 58.374629][ T5100] Bluetooth: hci1: command tx timeout [ 58.376861][ T5092] Bluetooth: hci2: command tx timeout [ 58.549563][ T5205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 59.074864][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.229269][ T5245] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 59.444379][ T5245] ip6tnl0: entered promiscuous mode [ 59.499850][ T5244] ip6tnl0: left promiscuous mode [ 59.606469][ T5251] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 59.706011][ T5251] ip6tnl0: entered promiscuous mode [ 59.761845][ T5256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.767983][ T5250] ip6tnl0: left promiscuous mode [ 60.004496][ T5263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.050373][ T5271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.33'. [ 60.101793][ T5273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.35'. [ 60.392236][ T5281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.546466][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 60.555514][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 60.794385][ T5265] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 61.319080][ T5309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.349504][ T5310] netlink: 64 bytes leftover after parsing attributes in process `syz.1.51'. [ 62.040914][ T5307] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 62.163621][ T5333] netlink: 64 bytes leftover after parsing attributes in process `syz.4.56'. [ 62.234422][ T5336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.589264][ T5349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.665229][ T5141] IPVS: starting estimator thread 0... [ 62.673711][ T5352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 62.684337][ T5352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 62.767211][ T5353] IPVS: using max 24 ests per chain, 57600 per kthread [ 62.820965][ T5357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.870828][ T5331] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 63.091376][ T5367] netlink: 64 bytes leftover after parsing attributes in process `syz.4.70'. [ 63.790903][ T5363] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 63.796462][ T5390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.066090][ T5397] netlink: 64 bytes leftover after parsing attributes in process `syz.4.80'. [ 64.734360][ T5141] IPVS: starting estimator thread 0... [ 64.781006][ T5394] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 64.829263][ T5405] IPVS: using max 21 ests per chain, 50400 per kthread [ 64.996831][ T5410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.225389][ T5417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.331274][ T5424] netlink: 56 bytes leftover after parsing attributes in process `syz.3.88'. [ 65.582620][ T5430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'. [ 65.596623][ T5138] IPVS: starting estimator thread 0... [ 65.616979][ T5430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'. [ 65.707688][ T5431] IPVS: using max 18 ests per chain, 43200 per kthread [ 65.838628][ T5439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.358865][ T5456] netlink: 64 bytes leftover after parsing attributes in process `syz.2.96'. [ 66.602782][ T5136] IPVS: starting estimator thread 0... [ 66.609726][ T5460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 66.646877][ T5460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 66.696796][ T5462] IPVS: using max 25 ests per chain, 60000 per kthread [ 66.993259][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.101'. [ 67.044337][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.101'. [ 67.079455][ T5451] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.336699][ T5477] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 67.407895][ T5479] ip6tnl0: entered promiscuous mode [ 67.445010][ T5474] ip6tnl0: left promiscuous mode [ 68.036432][ T5489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.413561][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 68.462136][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 68.492105][ T5502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.663310][ T5510] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 68.707662][ T5512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 68.726869][ T5512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 68.752584][ T5513] ip6tnl0: entered promiscuous mode [ 68.783764][ T5509] ip6tnl0: left promiscuous mode [ 68.937125][ T5516] netlink: 56 bytes leftover after parsing attributes in process `syz.4.118'. [ 69.238107][ T5521] netlink: 64 bytes leftover after parsing attributes in process `syz.2.117'. [ 69.759850][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 69.785100][ T5537] netlink: 56 bytes leftover after parsing attributes in process `syz.1.122'. [ 69.895988][ T5518] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 70.082488][ T5542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.127'. [ 70.448261][ T5556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 70.542100][ T5560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.799434][ T5541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.235024][ T5590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.404204][ T5598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.673196][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.680990][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.937537][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 73.049032][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.474727][ T5679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.638696][ T5682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.830607][ T5690] __nla_validate_parse: 14 callbacks suppressed [ 73.830626][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 73.857952][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 73.949545][ T5666] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 74.131263][ T5696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 74.157983][ T5696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 74.365145][ T5705] netlink: 64 bytes leftover after parsing attributes in process `syz.3.167'. [ 74.997032][ T5699] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 75.217675][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.261132][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.276068][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.297608][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.307305][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.320592][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.411729][ T5718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.505309][ T5089] syz-executor (5089) used greatest stack depth: 18736 bytes left [ 75.650263][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.713632][ T5736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.779401][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.878655][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.971584][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.307241][ T5719] chnl_net:caif_netlink_parms(): no params data found [ 76.372970][ T1107] bridge_slave_1: left allmulticast mode [ 76.406568][ T1107] bridge_slave_1: left promiscuous mode [ 76.413631][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.513928][ T5761] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.538931][ T1107] bridge_slave_0: left allmulticast mode [ 76.568467][ T1107] bridge_slave_0: left promiscuous mode [ 76.589472][ T5761] Cannot find set identified by id 0 to match [ 76.591066][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.781521][ T784] cfg80211: failed to load regulatory.db [ 76.957747][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 77.122385][ T5771] netlink: 56 bytes leftover after parsing attributes in process `syz.1.186'. [ 77.406993][ T5102] Bluetooth: hci4: command tx timeout [ 77.715159][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.753346][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.779892][ T1107] bond0 (unregistering): Released all slaves [ 77.879998][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 77.907669][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 77.978543][ T5765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'. [ 78.310979][ T5800] netlink: 'syz.1.190': attribute type 3 has an invalid length. [ 78.325228][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.340150][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.348390][ T5719] bridge_slave_0: entered allmulticast mode [ 78.355921][ T5719] bridge_slave_0: entered promiscuous mode [ 78.415463][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.440456][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.467178][ T5719] bridge_slave_1: entered allmulticast mode [ 78.486141][ T5719] bridge_slave_1: entered promiscuous mode [ 78.664481][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.704773][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.715052][ T5812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.872503][ T1107] hsr_slave_0: left promiscuous mode [ 78.886189][ T1107] hsr_slave_1: left promiscuous mode [ 78.896407][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.912603][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.925707][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.943727][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.980322][ T1107] veth1_macvtap: left promiscuous mode [ 78.986404][ T1107] veth0_macvtap: left promiscuous mode [ 78.997952][ T1107] veth1_vlan: left promiscuous mode [ 79.007071][ T1107] veth0_vlan: left promiscuous mode [ 79.487020][ T5102] Bluetooth: hci4: command tx timeout [ 79.643990][ T5854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.677096][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 79.710566][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 79.992061][ T5719] team0: Port device team_slave_0 added [ 80.001800][ T5828] batadv_slave_1: entered promiscuous mode [ 80.023261][ T5839] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 80.058107][ T5719] team0: Port device team_slave_1 added [ 80.075343][ T5834] batadv_slave_1: left promiscuous mode [ 80.287661][ T5861] Bluetooth: MGMT ver 1.22 [ 80.317271][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.357681][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.435865][ T5869] __nla_validate_parse: 2 callbacks suppressed [ 80.435883][ T5869] netlink: 56 bytes leftover after parsing attributes in process `syz.4.199'. [ 80.511872][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.583544][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.604639][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.690151][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.963482][ T5719] hsr_slave_0: entered promiscuous mode [ 80.974393][ T1107] IPVS: stop unused estimator thread 0... [ 81.017772][ T5719] hsr_slave_1: entered promiscuous mode [ 81.039176][ T5719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.054426][ T5719] Cannot create hsr debugfs directory [ 81.448344][ T5911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.556690][ T5918] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 81.568544][ T5102] Bluetooth: hci4: command tx timeout [ 81.663041][ T5918] ip6tnl0: entered promiscuous mode [ 81.812676][ T5917] ip6tnl0: left promiscuous mode [ 82.128350][ T5719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.188585][ T5719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.266852][ T5719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.273638][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.313417][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.348064][ T5719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.394056][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 82.448685][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 82.678883][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 82.786302][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.844778][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.897962][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.905098][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.934243][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.941428][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.052413][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.245086][ T5986] IPVS: length: 221 != 8 [ 83.267600][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.325215][ T5988] batadv_slave_1: entered promiscuous mode [ 83.411628][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.482067][ T5981] batadv_slave_1: left promiscuous mode [ 83.619220][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.635223][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.649315][ T5102] Bluetooth: hci4: command tx timeout [ 83.790738][ T6014] trusted_key: syz.1.228 sent an empty control message without MSG_MORE. [ 83.801708][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.813277][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.825440][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.844034][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.859416][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.874717][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.941224][ T50] bridge_slave_1: left allmulticast mode [ 83.950434][ T50] bridge_slave_1: left promiscuous mode [ 83.956920][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.991973][ T50] bridge_slave_0: left allmulticast mode [ 84.020697][ T50] bridge_slave_0: left promiscuous mode [ 84.028527][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.525187][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.551919][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.585537][ T50] bond0 (unregistering): Released all slaves [ 84.854590][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.064852][ T50] hsr_slave_0: left promiscuous mode [ 85.113002][ T50] hsr_slave_1: left promiscuous mode [ 85.188443][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.229769][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.307987][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.315425][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.373040][ T50] veth1_macvtap: left promiscuous mode [ 85.383610][ T50] veth0_macvtap: left promiscuous mode [ 85.417021][ T50] veth1_vlan: left promiscuous mode [ 85.422310][ T50] veth0_vlan: left promiscuous mode [ 85.977306][ T5102] Bluetooth: hci0: command tx timeout [ 86.270419][ T50] team0 (unregistering): Port device team_slave_1 removed [ 86.305098][ T50] team0 (unregistering): Port device team_slave_0 removed [ 86.575423][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.584673][ T6072] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 86.605594][ T6072] team0: Port device netdevsim0 added [ 86.629916][ T6073] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 86.645149][ T6073] team0: Port device netdevsim0 removed [ 86.653446][ T6073] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 86.666298][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 86.685789][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 86.710560][ T6083] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 86.764514][ T6086] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 86.775753][ T6088] tc_dump_action: action bad kind [ 86.776045][ T6086] syz.1.238 (6086) used greatest stack depth: 18352 bytes left [ 87.285162][ T5719] veth0_vlan: entered promiscuous mode [ 87.355850][ T5719] veth1_vlan: entered promiscuous mode [ 87.366607][ T6125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.484909][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 87.551049][ T50] IPVS: stop unused estimator thread 0... [ 87.755516][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.777289][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.811420][ T6013] bridge_slave_0: entered allmulticast mode [ 87.843295][ T6013] bridge_slave_0: entered promiscuous mode [ 87.881234][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.907228][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.914501][ T6013] bridge_slave_1: entered allmulticast mode [ 87.943455][ T6013] bridge_slave_1: entered promiscuous mode [ 87.961221][ T5719] veth0_macvtap: entered promiscuous mode [ 88.050992][ T5102] Bluetooth: hci0: command tx timeout [ 88.095992][ T5719] veth1_macvtap: entered promiscuous mode [ 88.131537][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.203848][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.239483][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.278798][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.292430][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.250'. [ 88.322872][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.355738][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.378519][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.396466][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.409499][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.551444][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.582574][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.593827][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.611606][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.622933][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.639686][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.656414][ T6179] Bluetooth: MGMT ver 1.22 [ 88.670051][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.680694][ T6179] Bluetooth: hci3: invalid len left 7, exp >= 81 [ 88.702941][ T6013] team0: Port device team_slave_0 added [ 88.732263][ T6013] team0: Port device team_slave_1 added [ 88.745349][ T5719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.763114][ T5719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.774132][ T5719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.796686][ T5719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.903845][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.914200][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.961962][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.071395][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.111652][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.145041][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.337576][ T6013] hsr_slave_0: entered promiscuous mode [ 89.349008][ T6013] hsr_slave_1: entered promiscuous mode [ 89.364372][ T6013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.372654][ T6013] Cannot create hsr debugfs directory [ 89.379408][ T6201] batadv_slave_1: entered promiscuous mode [ 89.495495][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.543810][ T6198] batadv_slave_1: left promiscuous mode [ 89.576686][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.590143][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.801637][ T67] tipc: Subscription rejected, illegal request [ 89.834293][ T6221] Bluetooth: hci3: unsupported parameter 64512 [ 89.857122][ T6221] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 89.862845][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.894353][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.127289][ T5102] Bluetooth: hci0: command tx timeout [ 90.181740][ T6237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.290326][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 90.309918][ T6237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.323012][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 90.399417][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.414658][ T6245] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 90.469589][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 90.492241][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 90.503846][ T6013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.528459][ T6013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.554142][ T6245] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 90.586214][ T6261] tc_dump_action: action bad kind [ 90.592890][ T6013] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.615339][ T6013] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.872114][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.959816][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.020439][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.028124][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.057052][ T6278] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 91.097483][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.104673][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.239351][ T6013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.268687][ T6013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.372260][ T6293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.541076][ T6304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 91.812135][ T6318] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 92.003535][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.209810][ T6013] veth0_vlan: entered promiscuous mode [ 92.217803][ T5102] Bluetooth: hci0: command tx timeout [ 92.297418][ T6013] veth1_vlan: entered promiscuous mode [ 92.302252][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 92.384676][ T6013] veth0_macvtap: entered promiscuous mode [ 92.443003][ T6013] veth1_macvtap: entered promiscuous mode [ 92.513654][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.537980][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.564991][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.605135][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.640248][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.663658][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679745][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 92.682837][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.726785][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.753333][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.819615][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.297'. [ 92.903840][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.923685][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.945665][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.972198][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.993747][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.036648][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.061795][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.065555][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.078345][ T6364] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 93.104245][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140218][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.213820][ T6371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.249392][ T6013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.283896][ T6013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.326094][ T6013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.362122][ T6013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.563586][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.592832][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.692396][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.712553][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.043414][ T6381] IPv6: sit1: Disabled Multicast RS [ 94.748230][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.840742][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.969066][ T6410] xt_TCPMSS: Only works on TCP SYN packets [ 94.977609][ T6410] netlink: 64 bytes leftover after parsing attributes in process `syz.2.309'. [ 95.061887][ T6410] sctp: [Deprecated]: syz.2.309 (pid 6410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.061887][ T6410] Use struct sctp_sack_info instead [ 95.084795][ T6410] sctp: [Deprecated]: syz.2.309 (pid 6410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.084795][ T6410] Use struct sctp_sack_info instead [ 95.380818][ T6423] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 95.602284][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.125164][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.606119][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.813246][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.840306][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.849975][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.859057][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.867769][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.875754][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.883706][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.016960][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.522811][ T12] bridge_slave_1: left allmulticast mode [ 97.557314][ T12] bridge_slave_1: left promiscuous mode [ 97.576882][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.628275][ T12] bridge_slave_0: left allmulticast mode [ 97.633966][ T12] bridge_slave_0: left promiscuous mode [ 97.673697][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.840906][ T6479] netlink: 56 bytes leftover after parsing attributes in process `syz.2.328'. [ 98.362757][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.376139][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.389258][ T12] bond0 (unregistering): Released all slaves [ 98.652786][ T6506] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 98.776052][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 98.848390][ T6510] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.857684][ T6510] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.866403][ T6510] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.875208][ T6510] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.907674][ T6510] vxlan0: entered promiscuous mode [ 98.927252][ T5102] Bluetooth: hci0: command tx timeout [ 99.124945][ T6520] netlink: 172 bytes leftover after parsing attributes in process `syz.0.334'. [ 99.162615][ T6455] chnl_net:caif_netlink_parms(): no params data found [ 99.362399][ T12] hsr_slave_0: left promiscuous mode [ 99.414853][ T12] hsr_slave_1: left promiscuous mode [ 99.446630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.474954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.523424][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.573832][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.575473][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 99.636106][ T6533] netlink: 104 bytes leftover after parsing attributes in process `syz.0.336'. [ 99.645397][ T6535] raw_sendmsg: syz.2.337 forgot to set AF_INET. Fix it! [ 99.697749][ T6529] Driver unsupported XDP return value 0 on prog (id 93) dev N/A, expect packet loss! [ 99.709274][ T12] veth1_macvtap: left promiscuous mode [ 99.714833][ T12] veth0_macvtap: left promiscuous mode [ 99.746791][ T12] veth1_vlan: left promiscuous mode [ 99.754473][ T12] veth0_vlan: left promiscuous mode [ 100.514838][ T6569] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 100.827124][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.861144][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.008416][ T5102] Bluetooth: hci0: command tx timeout [ 101.467598][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.486176][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.528137][ T6455] bridge_slave_0: entered allmulticast mode [ 101.592542][ T6455] bridge_slave_0: entered promiscuous mode [ 101.635458][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.665518][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.685923][ T6455] bridge_slave_1: entered allmulticast mode [ 101.707137][ T6455] bridge_slave_1: entered promiscuous mode [ 101.958279][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.966849][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.986229][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.141363][ T6455] team0: Port device team_slave_0 added [ 102.160600][ T6455] team0: Port device team_slave_1 added [ 102.287917][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.304911][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.367691][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.402903][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.409294][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.420120][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.480426][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.504813][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.576091][ T6625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.619243][ T6633] netlink: 164 bytes leftover after parsing attributes in process `syz.2.358'. [ 102.716465][ T6455] hsr_slave_0: entered promiscuous mode [ 102.758690][ T6455] hsr_slave_1: entered promiscuous mode [ 102.780911][ T6455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.804286][ T6455] Cannot create hsr debugfs directory [ 103.087245][ T5102] Bluetooth: hci0: command tx timeout [ 103.463072][ T6667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.120027][ T6682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.438700][ T6691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.371'. [ 104.488761][ T6691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.371'. [ 104.505458][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 104.540886][ T6694] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 104.560500][ T6694] macvlan0: entered promiscuous mode [ 104.570323][ T6694] macvlan0: entered allmulticast mode [ 104.622050][ T6694] veth1_vlan: entered allmulticast mode [ 104.665545][ T6694] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 104.810171][ T6703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.912622][ T6703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.927284][ T6455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.958031][ T6455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.988757][ T6455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.995546][ T6703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.016412][ T6455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.167158][ T5102] Bluetooth: hci0: command tx timeout [ 105.385126][ T6732] syzkaller1: entered promiscuous mode [ 105.404854][ T6732] syzkaller1: entered allmulticast mode [ 105.445316][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.575070][ T6455] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.634382][ T6740] warning: `syz.2.383' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.659741][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.666942][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.758887][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.766070][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.471048][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.677930][ T6455] veth0_vlan: entered promiscuous mode [ 106.686223][ T6789] Bluetooth: hci3: unsupported parameter 65535 [ 106.707045][ T6789] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 106.744400][ T6455] veth1_vlan: entered promiscuous mode [ 106.747841][ T6797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.395'. [ 106.832116][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 106.858005][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 106.905181][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 107.023529][ T6455] veth0_macvtap: entered promiscuous mode [ 107.062837][ T6455] veth1_macvtap: entered promiscuous mode [ 107.072701][ T6812] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 107.132602][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.155877][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.179675][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.196652][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.208376][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.243133][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.265661][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.278198][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.298226][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.320814][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'. [ 107.354311][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.412044][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.468605][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.493715][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.511664][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.542722][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.579921][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.616673][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.644599][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.680646][ T6455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.696550][ T6455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.726682][ T6455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.745884][ T6455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.764030][ T6838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.996113][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.024501][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.143089][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.162439][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.455731][ T6868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.534500][ T6868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.590784][ T6868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.110932][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.415'. [ 109.618802][ T6922] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 109.675275][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 109.695093][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 109.943683][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.070146][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.386205][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.426'. [ 110.625005][ T6959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.713247][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.763045][ T6965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.781587][ T6959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.812732][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.822485][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.830729][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.854658][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.863592][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.874382][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.949305][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.035399][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.121949][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.322300][ T6969] chnl_net:caif_netlink_parms(): no params data found [ 111.425514][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 111.562556][ T50] bridge_slave_1: left allmulticast mode [ 111.569138][ T5102] Bluetooth: hci4: command tx timeout [ 111.575034][ T50] bridge_slave_1: left promiscuous mode [ 111.581451][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.598737][ T50] bridge_slave_0: left allmulticast mode [ 111.604521][ T50] bridge_slave_0: left promiscuous mode [ 111.610710][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.985365][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.999970][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.012545][ T50] bond0 (unregistering): Released all slaves [ 112.043138][ T6983] vxcan0: entered promiscuous mode [ 112.067106][ T6983] vlan0: entered promiscuous mode [ 112.094042][ T6983] vxcan0: left promiscuous mode [ 112.146337][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.438'. [ 112.495123][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 112.515488][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 112.541167][ T7014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.604757][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.643975][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.670711][ T6969] bridge_slave_0: entered allmulticast mode [ 112.699666][ T6969] bridge_slave_0: entered promiscuous mode [ 112.782753][ T7040] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 112.810973][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.837638][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.844871][ T6969] bridge_slave_1: entered allmulticast mode [ 112.895131][ T6969] bridge_slave_1: entered promiscuous mode [ 112.934781][ T5102] Bluetooth: hci0: command tx timeout [ 113.090619][ T6969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.144512][ T6969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.199536][ T50] hsr_slave_0: left promiscuous mode [ 113.205423][ T50] hsr_slave_1: left promiscuous mode [ 113.213229][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.221061][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.229351][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.237958][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.261550][ T50] veth1_macvtap: left promiscuous mode [ 113.267579][ T50] veth0_macvtap: left promiscuous mode [ 113.273209][ T50] veth1_vlan: left promiscuous mode [ 113.279711][ T50] veth0_vlan: left promiscuous mode [ 113.863804][ T50] team0 (unregistering): Port device team_slave_1 removed [ 113.896053][ T50] team0 (unregistering): Port device team_slave_0 removed [ 114.195926][ T7056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.450'. [ 114.212667][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 114.369044][ T6969] team0: Port device team_slave_0 added [ 114.410720][ T7067] vxcan0: entered promiscuous mode [ 114.426779][ T7067] vlan2: entered promiscuous mode [ 114.459886][ T7067] vxcan0: left promiscuous mode [ 114.562288][ T6969] team0: Port device team_slave_1 added [ 114.619916][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 114.654348][ T7076] bridge_slave_1: left allmulticast mode [ 114.709458][ T7076] bridge_slave_1: left promiscuous mode [ 114.739299][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.778128][ T7092] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 114.818397][ T7076] bridge_slave_0: left allmulticast mode [ 114.844482][ T7076] bridge_slave_0: left promiscuous mode [ 114.857830][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.007717][ T5102] Bluetooth: hci0: command tx timeout [ 115.134681][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.161265][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.225402][ T6969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.294382][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.319476][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.374681][ T6969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.391787][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 115.418064][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 115.698308][ T6969] hsr_slave_0: entered promiscuous mode [ 115.710628][ T7136] SET target dimension over the limit! [ 115.733750][ T6969] hsr_slave_1: entered promiscuous mode [ 115.741530][ T6969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.759822][ T6969] Cannot create hsr debugfs directory [ 115.835690][ T7140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.959561][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 115.977069][ T7143] bridge_slave_1: left allmulticast mode [ 115.982782][ T7143] bridge_slave_1: left promiscuous mode [ 116.002694][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.021213][ T7143] bridge_slave_0: left allmulticast mode [ 116.030600][ T7143] bridge_slave_0: left promiscuous mode [ 116.036519][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.165823][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.475'. [ 116.462020][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 116.488763][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 116.604086][ T5102] block nbd0: Receive control failed (result -107) [ 116.662965][ T7182] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 116.768671][ T7182] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.857091][ T7195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.088981][ T5102] Bluetooth: hci0: command tx timeout [ 117.100304][ T7209] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 117.211760][ T7209] bond1: entered promiscuous mode [ 117.224071][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.615804][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.645335][ T6969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.691052][ T6969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.742938][ T6969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.783863][ T6969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.801001][ T7239] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 117.965037][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 117.997758][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 118.046394][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'. [ 118.197247][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.213372][ T7250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.493'. [ 118.273244][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.318158][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.325312][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.383670][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.390882][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.653174][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.689752][ T6969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.929330][ T7305] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 119.037078][ T7310] ip6tnl0: entered promiscuous mode [ 119.089125][ T7303] ip6tnl0: left promiscuous mode [ 119.168151][ T5102] Bluetooth: hci0: command tx timeout [ 119.280107][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.502900][ T6969] veth0_vlan: entered promiscuous mode [ 119.604185][ T6969] veth1_vlan: entered promiscuous mode [ 119.650160][ T7335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.737034][ T6969] veth0_macvtap: entered promiscuous mode [ 119.771301][ T6969] veth1_macvtap: entered promiscuous mode [ 119.850535][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.881516][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.911528][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.933515][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.954823][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.977267][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.023499][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.049424][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.098322][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.151910][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.173369][ T7372] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 120.176515][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.198010][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.209149][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.246703][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.267579][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.288308][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.312286][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.333260][ T7337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.342711][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.362910][ T7374] ip6tnl0: entered promiscuous mode [ 120.381829][ T6969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.405709][ T6969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.420374][ T6969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.474250][ T6969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.538199][ T7369] ip6tnl0: left promiscuous mode [ 120.769940][ T6379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.800775][ T6379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.970726][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.976650][ T7402] __nla_validate_parse: 4 callbacks suppressed [ 120.976666][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 121.012693][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.036915][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 121.766934][ T7435] netlink: 64 bytes leftover after parsing attributes in process `syz.1.529'. [ 121.819583][ T7438] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 121.939253][ T7438] ip6tnl0: entered promiscuous mode [ 121.997165][ T7436] ip6tnl0: left promiscuous mode [ 122.249137][ T7458] netlink: 64 bytes leftover after parsing attributes in process `syz.2.533'. [ 123.210858][ T7486] netlink: 64 bytes leftover after parsing attributes in process `syz.0.542'. [ 123.513760][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.828437][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.321058][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.674163][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.738037][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.747941][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.756406][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.765687][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.774037][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.781973][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.937049][ T35] bridge_slave_1: left allmulticast mode [ 124.950004][ T35] bridge_slave_1: left promiscuous mode [ 124.955728][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.965894][ T35] bridge_slave_0: left allmulticast mode [ 124.971771][ T35] bridge_slave_0: left promiscuous mode [ 124.978205][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.988386][ T7525] netlink: 'syz.1.547': attribute type 3 has an invalid length. [ 124.997636][ T7525] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.547'. [ 125.300331][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.314378][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.325226][ T35] bond0 (unregistering): Released all slaves [ 125.403996][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ec83400: rx timeout, send abort [ 125.413747][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ec83c00: rx timeout, send abort [ 125.431290][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ec83400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.446580][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ec83c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.885277][ T7543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.550'. [ 125.963939][ T7553] netlink: 64 bytes leftover after parsing attributes in process `syz.2.551'. [ 125.994281][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 126.005613][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 126.044089][ T35] hsr_slave_0: left promiscuous mode [ 126.064469][ T35] hsr_slave_1: left promiscuous mode [ 126.078634][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.095620][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.111556][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.120778][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.155248][ T35] veth1_macvtap: left promiscuous mode [ 126.163989][ T35] veth0_macvtap: left promiscuous mode [ 126.170220][ T35] veth1_vlan: left promiscuous mode [ 126.177453][ T35] veth0_vlan: left promiscuous mode [ 126.387593][ T7533] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 126.523788][ T7541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 126.865242][ T35] team0 (unregistering): Port device team_slave_1 removed [ 126.905463][ T35] team0 (unregistering): Port device team_slave_0 removed [ 127.248277][ T7572] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.335716][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'. [ 127.400099][ T7575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.554'. [ 127.448229][ T7581] netlink: 'syz.2.557': attribute type 4 has an invalid length. [ 127.526934][ T7519] chnl_net:caif_netlink_parms(): no params data found [ 127.646538][ T7603] Cannot find add_set index 0 as target [ 127.681977][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.905684][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.928935][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 127.933749][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.942808][ T7622] nbd: nbd0 already in use [ 127.960097][ T7519] bridge_slave_0: entered allmulticast mode [ 127.986302][ T7519] bridge_slave_0: entered promiscuous mode [ 128.018213][ T7628] netlink: 'syz.2.567': attribute type 10 has an invalid length. [ 128.125285][ T7628] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.148713][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.163692][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.172256][ T7519] bridge_slave_1: entered allmulticast mode [ 128.180073][ T7519] bridge_slave_1: entered promiscuous mode [ 128.210833][ T7631] netlink: 64 bytes leftover after parsing attributes in process `syz.4.566'. [ 128.299492][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.322550][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.421818][ T7519] team0: Port device team_slave_0 added [ 128.458339][ T7519] team0: Port device team_slave_1 added [ 128.519735][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.536561][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.579439][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.618899][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.625880][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.676444][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.741923][ T7621] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 128.814766][ T7519] hsr_slave_0: entered promiscuous mode [ 128.835904][ T7519] hsr_slave_1: entered promiscuous mode [ 128.859808][ T7519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.880726][ T7519] Cannot create hsr debugfs directory [ 129.148274][ T7669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.573'. [ 129.238664][ T7666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.571582][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 129.598465][ T7687] nbd: nbd0 already in use [ 129.792846][ T7694] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 129.856847][ T7664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.864847][ T7694] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.960652][ T7698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.990846][ T7705] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 130.076940][ T7708] ip6tnl0: entered promiscuous mode [ 130.132329][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'. [ 130.141108][ T7519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.158590][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 130.181843][ T7519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.193650][ T7703] ip6tnl0: left promiscuous mode [ 130.227237][ T7519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.245175][ T7519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.571780][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.668341][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.736038][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.743277][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.807308][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.814531][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.140064][ T7752] __nla_validate_parse: 2 callbacks suppressed [ 131.140082][ T7752] netlink: 64 bytes leftover after parsing attributes in process `syz.2.591'. [ 131.491538][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.661671][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.693201][ T7519] veth0_vlan: entered promiscuous mode [ 131.754499][ T7519] veth1_vlan: entered promiscuous mode [ 131.849123][ T7519] veth0_macvtap: entered promiscuous mode [ 131.871654][ T7519] veth1_macvtap: entered promiscuous mode [ 131.929805][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.962761][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.993463][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.020894][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.048705][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.083109][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.093644][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.112878][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.153554][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.182282][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.208746][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.222236][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.246052][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.266649][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.290651][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.300646][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.311256][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.325635][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.352510][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 132.369216][ T7519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.392899][ T7519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.426659][ T7519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.446871][ T7519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.737946][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.773675][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.815292][ T7808] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 132.907777][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.940329][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.083267][ T7827] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 133.098759][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.105092][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.193533][ T7827] ip6tnl0: entered promiscuous mode [ 133.237359][ T7825] ip6tnl0: left promiscuous mode [ 133.683265][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.012045][ T7853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.464778][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 134.605499][ T7883] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 134.635395][ T7883] ip6tnl0: entered promiscuous mode [ 134.673687][ T7882] ip6tnl0: left promiscuous mode [ 135.092094][ T7900] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 135.118085][ T7900] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.621'. [ 135.298715][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.384123][ T7910] pim6reg: entered allmulticast mode [ 135.406953][ T7907] pim6reg: left allmulticast mode [ 135.464674][ T7910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.624'. [ 135.682787][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.974798][ T7932] syzkaller0: entered promiscuous mode [ 135.982133][ T7932] syzkaller0: entered allmulticast mode [ 135.989380][ T1042] syzkaller0: tun_net_xmit 48 [ 136.029877][ T7932] syzkaller0: tun_net_xmit 1280 [ 136.041995][ T7932] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 136.066795][ T7932] team0: Port device dummy0 added [ 137.164729][ T7948] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 137.173233][ T7948] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.634'. [ 137.311534][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 137.320697][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 137.518677][ T7956] netlink: 176 bytes leftover after parsing attributes in process `syz.4.638'. [ 137.549824][ T7956] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.638'. [ 137.582725][ T7956] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.838220][ T7965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.382796][ T7971] netlink: 'syz.1.644': attribute type 2 has an invalid length. [ 138.725462][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 138.879061][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 138.906780][ T8001] nbd: nbd0 already in use [ 138.973889][ T8007] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 139.022747][ T8007] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.249645][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.699491][ T8034] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 139.731781][ T8034] ip6tnl0: entered promiscuous mode [ 139.747401][ T8033] ip6tnl0: left promiscuous mode [ 139.754169][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 139.895639][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.995055][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 140.005930][ T8047] nbd: nbd0 already in use [ 140.059413][ T8047] netlink: 'syz.1.664': attribute type 10 has an invalid length. [ 140.078467][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 140.093762][ T8051] vlan2: entered promiscuous mode [ 140.101159][ T8051] team0: entered promiscuous mode [ 140.112061][ T8051] team_slave_0: entered promiscuous mode [ 140.120404][ T8051] team_slave_1: entered promiscuous mode [ 140.126229][ T8051] dummy0: entered promiscuous mode [ 140.136875][ T8051] team0: left promiscuous mode [ 140.145394][ T8051] team_slave_0: left promiscuous mode [ 140.151109][ T8051] team_slave_1: left promiscuous mode [ 140.157447][ T8051] dummy0: left promiscuous mode [ 140.766268][ T8074] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 140.836902][ T8074] ip6tnl0: entered promiscuous mode [ 140.878189][ T8073] ip6tnl0: left promiscuous mode [ 141.014677][ T8084] nbd: nbd0 already in use [ 141.085517][ T8089] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 141.268678][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.398918][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.414527][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.427863][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.438027][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.445700][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.453512][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.921917][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 142.212837][ T8132] netlink: 'syz.1.683': attribute type 27 has an invalid length. [ 142.256656][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.278795][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.314725][ T8098] bridge_slave_0: entered allmulticast mode [ 142.328028][ T8098] bridge_slave_0: entered promiscuous mode [ 142.357961][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.367342][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.374559][ T8098] bridge_slave_1: entered allmulticast mode [ 142.405199][ T8098] bridge_slave_1: entered promiscuous mode [ 142.504419][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.538498][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.658091][ T8098] team0: Port device team_slave_0 added [ 142.666960][ T8098] team0: Port device team_slave_1 added [ 142.763939][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.776939][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.834669][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.866357][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.886675][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.936559][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.034772][ T8157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.061434][ T8098] hsr_slave_0: entered promiscuous mode [ 143.093398][ T8098] hsr_slave_1: entered promiscuous mode [ 143.130066][ T8098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.150202][ T8098] Cannot create hsr debugfs directory [ 143.450773][ T8098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.462680][ T8098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.487681][ T5102] Bluetooth: hci5: command tx timeout [ 143.582904][ T8098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.593960][ T8098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.623096][ T8178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.695598][ T8098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.719731][ T8098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.816404][ T8098] bond0: (slave netdevsim0): Releasing backup interface [ 143.825799][ T8098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.836405][ T8098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.852596][ T8182] __nla_validate_parse: 2 callbacks suppressed [ 143.852617][ T8182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.697'. [ 143.931812][ T8187] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 143.979514][ T8187] ip6tnl0: entered promiscuous mode [ 144.010453][ T8186] ip6tnl0: left promiscuous mode [ 144.015912][ T8098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.027099][ T8098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.037757][ T8098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.059015][ T8098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.191023][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.235864][ T8098] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.259335][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.266566][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.329671][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.336858][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.682601][ T8209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.891533][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.999688][ T8098] veth0_vlan: entered promiscuous mode [ 145.041791][ T8098] veth1_vlan: entered promiscuous mode [ 145.116407][ T8098] veth0_macvtap: entered promiscuous mode [ 145.148716][ T8098] veth1_macvtap: entered promiscuous mode [ 145.194140][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.225216][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.238694][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.254354][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.274478][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.285121][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.302154][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.313620][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.334019][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.345805][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.369802][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.390515][ T8225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.399250][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.436096][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.480938][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.496501][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.507166][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.524768][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.543295][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.555105][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.574242][ T5102] Bluetooth: hci5: command tx timeout [ 145.590908][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.609190][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.624319][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.661051][ T8098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.676402][ T8098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.687310][ T8098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.696029][ T8098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.780543][ T8243] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 145.909680][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.931862][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.032673][ T8251] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 146.058188][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.078250][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.105606][ T8251] ip6tnl0: entered promiscuous mode [ 146.140665][ T8249] ip6tnl0: left promiscuous mode [ 146.188747][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.272225][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.306203][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.576985][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.729'. [ 146.675010][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 146.895608][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 146.905036][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 147.186252][ T8295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.373004][ T8304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 147.611756][ T8314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.647046][ T5102] Bluetooth: hci5: command tx timeout [ 147.931550][ T8330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.397551][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.752'. [ 148.765470][ T8365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.040790][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.303464][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.764'. [ 149.525365][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.729610][ T5102] Bluetooth: hci5: command tx timeout [ 149.929787][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 150.061097][ T8418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.144287][ T8423] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 150.202849][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 150.335190][ T8431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.782'. [ 150.354426][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 150.365689][ T8431] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.549187][ T8442] netlink: 64 bytes leftover after parsing attributes in process `syz.1.784'. [ 150.742575][ T8453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.969327][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 151.045806][ T8468] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 151.142184][ T8468] ip6tnl0: entered promiscuous mode [ 151.172365][ T8467] ip6tnl0: left promiscuous mode [ 151.194198][ T8479] netlink: 64 bytes leftover after parsing attributes in process `syz.4.797'. [ 151.514009][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 151.530549][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 151.817333][ T8505] sit0: entered allmulticast mode [ 151.860746][ T8505] sit0: entered promiscuous mode [ 152.007090][ T8512] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 152.164089][ T8512] ip6tnl0: entered promiscuous mode [ 152.273268][ T8511] ip6tnl0: left promiscuous mode [ 152.290634][ T8526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.493882][ T8542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.080705][ T8574] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 153.115197][ T8574] team0: Port device netdevsim0 added [ 153.131320][ T8571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.217735][ T8568] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 153.255848][ T8568] team0: Port device netdevsim0 removed [ 153.303193][ T8568] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 153.568466][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.581231][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.597016][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.607135][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.620438][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.628020][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.867562][ T8590] IPv6: sit2: Disabled Multicast RS [ 154.103463][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.131561][ T8596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.244019][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.395426][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.411154][ T8609] __nla_validate_parse: 4 callbacks suppressed [ 154.411170][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'. [ 154.432273][ T8609] vlan2: entered promiscuous mode [ 154.437392][ T8609] team0: entered promiscuous mode [ 154.442425][ T8609] team_slave_0: entered promiscuous mode [ 154.448678][ T8609] team_slave_1: entered promiscuous mode [ 154.456981][ T8609] team0: left promiscuous mode [ 154.461768][ T8609] team_slave_0: left promiscuous mode [ 154.470572][ T8609] team_slave_1: left promiscuous mode [ 154.493059][ T8611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'. [ 154.562919][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.596885][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 154.703823][ T8616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.841'. [ 154.745609][ T8618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.894199][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 154.905915][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 154.956797][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.963932][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.989553][ T8584] bridge_slave_0: entered allmulticast mode [ 155.007602][ T8584] bridge_slave_0: entered promiscuous mode [ 155.012112][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 155.028216][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.030357][ T8631] nbd: nbd0 already in use [ 155.035320][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.056725][ T8584] bridge_slave_1: entered allmulticast mode [ 155.064050][ T8584] bridge_slave_1: entered promiscuous mode [ 155.208889][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.235887][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.269868][ T35] bridge_slave_1: left allmulticast mode [ 155.275547][ T35] bridge_slave_1: left promiscuous mode [ 155.291745][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.320061][ T35] bridge_slave_0: left allmulticast mode [ 155.329519][ T35] bridge_slave_0: left promiscuous mode [ 155.335327][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.728040][ T5102] Bluetooth: hci1: command tx timeout [ 156.097760][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.118865][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.138839][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 156.157507][ T35] bond0 (unregistering): Released all slaves [ 156.319338][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 156.387849][ T8584] team0: Port device team_slave_0 added [ 156.442975][ T8652] openvswitch: netlink: Flow key attr not present in new flow. [ 156.527053][ T8584] team0: Port device team_slave_1 added [ 156.563101][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 156.582679][ T8658] nbd: nbd0 already in use [ 156.597326][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 156.643046][ T8650] vlan2: entered promiscuous mode [ 156.662531][ T8650] team0: entered promiscuous mode [ 156.670513][ T8650] team_slave_0: entered promiscuous mode [ 156.682154][ T8650] team_slave_1: entered promiscuous mode [ 156.693359][ T8650] team0: left promiscuous mode [ 156.706677][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.716719][ T8650] team_slave_0: left promiscuous mode [ 156.726829][ T8650] team_slave_1: left promiscuous mode [ 156.832586][ T8666] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 156.848915][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.866628][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.923124][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.987150][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.994131][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.044924][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.141768][ T35] hsr_slave_0: left promiscuous mode [ 157.195041][ T35] hsr_slave_1: left promiscuous mode [ 157.202189][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.211173][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.219818][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.229239][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.263451][ T35] veth1_macvtap: left promiscuous mode [ 157.269242][ T35] veth0_macvtap: left promiscuous mode [ 157.275877][ T35] veth1_vlan: left promiscuous mode [ 157.282045][ T35] veth0_vlan: left promiscuous mode [ 157.319264][ T8693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.723939][ T35] team0 (unregistering): Port device team_slave_1 removed [ 157.754573][ T35] team0 (unregistering): Port device team_slave_0 removed [ 157.806609][ T5102] Bluetooth: hci1: command tx timeout [ 158.197171][ T8584] hsr_slave_0: entered promiscuous mode [ 158.211402][ T8584] hsr_slave_1: entered promiscuous mode [ 158.267053][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 158.419172][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.622020][ T8711] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.631390][ T8711] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.640385][ T8711] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.649249][ T8711] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.659210][ T8711] vxlan0: entered promiscuous mode [ 158.664384][ T8711] vxlan0: entered allmulticast mode [ 158.675226][ T8711] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.675269][ T8717] nbd: nbd0 already in use [ 158.684233][ T8711] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.684290][ T8711] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.684317][ T8711] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.789515][ T8723] netlink: 'syz.0.865': attribute type 10 has an invalid length. [ 158.983083][ T8729] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.992517][ T8729] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.001534][ T8729] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.010537][ T8729] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.036757][ T8729] vxlan0: entered promiscuous mode [ 159.062632][ T8729] vxlan0: entered allmulticast mode [ 159.136724][ T8729] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.145720][ T8729] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.155115][ T8729] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.164607][ T8729] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.260800][ T35] IPVS: stop unused estimator thread 0... [ 159.321266][ T8743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.530835][ T8749] __nla_validate_parse: 1 callbacks suppressed [ 159.530853][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 159.730220][ T8584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.741427][ T8584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.757097][ T8754] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.765818][ T8754] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.774800][ T8754] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.783568][ T8754] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.793830][ T8754] vxlan0: entered promiscuous mode [ 159.799211][ T8754] vxlan0: entered allmulticast mode [ 159.806627][ T8754] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.815759][ T8754] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.824876][ T8754] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.833926][ T8754] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.865932][ T8584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.875689][ T8584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.887392][ T5102] Bluetooth: hci1: command tx timeout [ 160.152132][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.203211][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.251697][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.258879][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.308986][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.316189][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.408773][ T8770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.702065][ T8788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.731231][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'. [ 160.823779][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.902812][ T8584] veth0_vlan: entered promiscuous mode [ 160.930064][ T8584] veth1_vlan: entered promiscuous mode [ 160.993822][ T8584] veth0_macvtap: entered promiscuous mode [ 161.011311][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.015814][ T8584] veth1_macvtap: entered promiscuous mode [ 161.087718][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.112729][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.129440][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.140976][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.156736][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.174721][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.188638][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.212275][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.223368][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.234181][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.246008][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.259439][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'. [ 161.271330][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'. [ 161.295281][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.336540][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.346387][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.396562][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.406408][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.446620][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.466500][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.486913][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.504739][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.525906][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.550868][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.574304][ T8819] veth0_vlan: left promiscuous mode [ 161.624325][ T8584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.634406][ T8584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.644631][ T8584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.666851][ T8584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.841636][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.866526][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.952758][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.966895][ T5102] Bluetooth: hci1: command tx timeout [ 161.967697][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.032655][ T8829] ebtables: ebtables: counters copy to user failed while replacing table [ 162.531725][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.548336][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 162.685784][ T8855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.731384][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 162.745812][ T8853] vlan2: entered promiscuous mode [ 162.751576][ T8853] team0: entered promiscuous mode [ 162.756766][ T8853] team_slave_0: entered promiscuous mode [ 162.762641][ T8853] team_slave_1: entered promiscuous mode [ 162.776094][ T8853] team0: left promiscuous mode [ 162.780992][ T8853] team_slave_0: left promiscuous mode [ 162.787625][ T8853] team_slave_1: left promiscuous mode [ 162.896121][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 162.905444][ T8859] nbd: nbd0 already in use [ 163.043326][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.901'. [ 163.498311][ T8876] ebtables: ebtables: counters copy to user failed while replacing table [ 163.535098][ T8886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.908'. [ 163.885113][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.108989][ T8906] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 164.144017][ T8906] team0: Port device netdevsim0 added [ 164.251327][ T8911] netlink: 'syz.4.918': attribute type 10 has an invalid length. [ 164.436197][ T8918] netlink: 64 bytes leftover after parsing attributes in process `syz.4.920'. [ 164.516243][ T8922] vlan2: entered promiscuous mode [ 164.526351][ T8922] team0: entered promiscuous mode [ 164.538637][ T8922] team_slave_0: entered promiscuous mode [ 164.544408][ T8922] team_slave_1: entered promiscuous mode [ 164.554672][ T8922] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 164.574418][ T8922] team0: left promiscuous mode [ 164.581517][ T8922] team_slave_0: left promiscuous mode [ 164.591789][ T8922] team_slave_1: left promiscuous mode [ 164.600163][ T8922] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 164.799677][ T8933] __nla_validate_parse: 1 callbacks suppressed [ 164.799694][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'. [ 164.973045][ T8934] ebtables: ebtables: counters copy to user failed while replacing table [ 165.278243][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 165.287378][ T8946] nbd: nbd0 already in use [ 165.334019][ T8949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.930'. [ 165.351584][ T8949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.930'. [ 165.361705][ T8951] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 165.422624][ T8951] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.467923][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.724829][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 165.840044][ T8969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.946873][ T8975] netlink: 'syz.1.940': attribute type 10 has an invalid length. [ 165.989245][ T8975] team0: Port device netdevsim0 added [ 166.385445][ T8997] netlink: 64 bytes leftover after parsing attributes in process `syz.1.950'. [ 166.696292][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 166.711997][ T9011] nbd: nbd0 already in use [ 166.840420][ T9019] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 166.888759][ T9019] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.897594][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'. [ 166.906681][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'. [ 167.144494][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.161352][ T9028] veth1_macvtap: left promiscuous mode [ 167.784063][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 167.838373][ T9057] vlan2: entered promiscuous mode [ 167.844283][ T9057] team0: entered promiscuous mode [ 167.853193][ T9057] team_slave_0: entered promiscuous mode [ 167.859532][ T9057] team_slave_1: entered promiscuous mode [ 167.869461][ T9057] team0: left promiscuous mode [ 167.879206][ T9057] team_slave_0: left promiscuous mode [ 167.904035][ T9057] team_slave_1: left promiscuous mode [ 168.070226][ T9069] netlink: 'syz.0.980': attribute type 10 has an invalid length. [ 168.157160][ T9069] team0: Port device netdevsim0 added [ 168.406236][ T9087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.434251][ T9088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.473466][ T9087] ip6tnl0: entered promiscuous mode [ 168.511566][ T9084] ip6tnl0: left promiscuous mode [ 169.208135][ T9130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.731371][ T9164] pim6reg: entered allmulticast mode [ 169.754342][ T9167] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 169.772321][ T9161] pim6reg: left allmulticast mode [ 169.977008][ T9180] __nla_validate_parse: 5 callbacks suppressed [ 169.977026][ T9180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1011'. [ 170.241163][ T9190] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1017'. [ 170.251296][ T7743] ================================================================== [ 170.259380][ T7743] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 170.267653][ T7743] Read of size 8 at addr ffff88807be63858 by task syz.2.591/7743 [ 170.275375][ T7743] [ 170.277698][ T7743] CPU: 0 PID: 7743 Comm: syz.2.591 Not tainted 6.10.0-rc5-syzkaller-00187-gc93a6f62cb1b #0 [ 170.287674][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 170.297732][ T7743] Call Trace: [ 170.301002][ T7743] [ 170.303919][ T7743] dump_stack_lvl+0x241/0x360 [ 170.308597][ T7743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.313788][ T7743] ? __pfx__printk+0x10/0x10 [ 170.318372][ T7743] ? _printk+0xd5/0x120 [ 170.322531][ T7743] ? __virt_addr_valid+0x183/0x520 [ 170.327649][ T7743] ? __virt_addr_valid+0x183/0x520 [ 170.332753][ T7743] print_report+0x169/0x550 [ 170.337252][ T7743] ? __virt_addr_valid+0x183/0x520 [ 170.342358][ T7743] ? __virt_addr_valid+0x183/0x520 [ 170.347460][ T7743] ? __virt_addr_valid+0x44e/0x520 [ 170.352561][ T7743] ? __phys_addr+0xba/0x170 [ 170.357058][ T7743] ? skb_queue_purge_reason+0xb9/0x500 [ 170.362504][ T7743] kasan_report+0x143/0x180 [ 170.367006][ T7743] ? skb_queue_purge_reason+0xb9/0x500 [ 170.372457][ T7743] skb_queue_purge_reason+0xb9/0x500 [ 170.377731][ T7743] ? trace_contention_end+0x3c/0x120 [ 170.383010][ T7743] ? __mutex_lock+0x2ef/0xd70 [ 170.387678][ T7743] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 170.393570][ T7743] ? drain_workqueue+0x2d3/0x3a0 [ 170.398500][ T7743] ? hci_conn_hash_flush+0x1da/0x240 [ 170.403781][ T7743] vhci_flush+0x44/0x50 [ 170.407939][ T7743] ? __pfx_vhci_flush+0x10/0x10 [ 170.412784][ T7743] hci_dev_reset+0x42a/0x5d0 [ 170.417371][ T7743] sock_do_ioctl+0x158/0x460 [ 170.421959][ T7743] ? __pfx_sock_do_ioctl+0x10/0x10 [ 170.427075][ T7743] sock_ioctl+0x629/0x8e0 [ 170.431402][ T7743] ? __pfx_sock_ioctl+0x10/0x10 [ 170.436248][ T7743] ? __fget_files+0x29/0x470 [ 170.440833][ T7743] ? __fget_files+0x3f6/0x470 [ 170.445504][ T7743] ? __fget_files+0x29/0x470 [ 170.450089][ T7743] ? bpf_lsm_file_ioctl+0x9/0x10 [ 170.455020][ T7743] ? security_file_ioctl+0x87/0xb0 [ 170.460127][ T7743] ? __pfx_sock_ioctl+0x10/0x10 [ 170.464975][ T7743] __se_sys_ioctl+0xfc/0x170 [ 170.469562][ T7743] do_syscall_64+0xf3/0x230 [ 170.474064][ T7743] ? clear_bhb_loop+0x35/0x90 [ 170.478732][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.484628][ T7743] RIP: 0033:0x7f4cac175f19 [ 170.489037][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.508631][ T7743] RSP: 002b:00007f4cacf34048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.517039][ T7743] RAX: ffffffffffffffda RBX: 00007f4cac303f60 RCX: 00007f4cac175f19 [ 170.524997][ T7743] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000005 [ 170.532954][ T7743] RBP: 00007f4cac1e4bcd R08: 0000000000000000 R09: 0000000000000000 [ 170.540910][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.548869][ T7743] R13: 000000000000000b R14: 00007f4cac303f60 R15: 00007fff4fdb6648 [ 170.556837][ T7743] [ 170.559843][ T7743] [ 170.562149][ T7743] Allocated by task 7519: [ 170.566461][ T7743] kasan_save_track+0x3f/0x80 [ 170.571138][ T7743] __kasan_kmalloc+0x98/0xb0 [ 170.575717][ T7743] kmalloc_trace_noprof+0x19c/0x2c0 [ 170.580909][ T7743] vhci_open+0x57/0x370 [ 170.585053][ T7743] misc_open+0x313/0x390 [ 170.589277][ T7743] chrdev_open+0x5b0/0x630 [ 170.593683][ T7743] do_dentry_open+0x95a/0x1720 [ 170.598436][ T7743] path_openat+0x289f/0x3280 [ 170.603015][ T7743] do_filp_open+0x235/0x490 [ 170.607505][ T7743] do_sys_openat2+0x13e/0x1d0 [ 170.612175][ T7743] __x64_sys_openat+0x247/0x2a0 [ 170.617012][ T7743] do_syscall_64+0xf3/0x230 [ 170.621505][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.627389][ T7743] [ 170.629696][ T7743] Freed by task 7519: [ 170.633655][ T7743] kasan_save_track+0x3f/0x80 [ 170.638341][ T7743] kasan_save_free_info+0x40/0x50 [ 170.643364][ T7743] poison_slab_object+0xe0/0x150 [ 170.648295][ T7743] __kasan_slab_free+0x37/0x60 [ 170.653050][ T7743] kfree+0x149/0x360 [ 170.656943][ T7743] vhci_release+0xbf/0xd0 [ 170.661260][ T7743] __fput+0x406/0x8b0 [ 170.665232][ T7743] task_work_run+0x24f/0x310 [ 170.669813][ T7743] do_exit+0xa27/0x27e0 [ 170.673960][ T7743] do_group_exit+0x207/0x2c0 [ 170.678540][ T7743] __x64_sys_exit_group+0x3f/0x40 [ 170.683552][ T7743] do_syscall_64+0xf3/0x230 [ 170.688047][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.693936][ T7743] [ 170.696242][ T7743] The buggy address belongs to the object at ffff88807be63800 [ 170.696242][ T7743] which belongs to the cache kmalloc-1k of size 1024 [ 170.710280][ T7743] The buggy address is located 88 bytes inside of [ 170.710280][ T7743] freed 1024-byte region [ffff88807be63800, ffff88807be63c00) [ 170.724061][ T7743] [ 170.726373][ T7743] The buggy address belongs to the physical page: [ 170.732771][ T7743] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807be62800 pfn:0x7be60 [ 170.742819][ T7743] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.751301][ T7743] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 170.759794][ T7743] page_type: 0xffffefff(slab) [ 170.764458][ T7743] raw: 00fff00000000240 ffff888015041dc0 ffffea0001b0b410 ffffea000056e210 [ 170.773048][ T7743] raw: ffff88807be62800 0000000000100009 00000001ffffefff 0000000000000000 [ 170.781643][ T7743] head: 00fff00000000240 ffff888015041dc0 ffffea0001b0b410 ffffea000056e210 [ 170.790307][ T7743] head: ffff88807be62800 0000000000100009 00000001ffffefff 0000000000000000 [ 170.798971][ T7743] head: 00fff00000000003 ffffea0001ef9801 ffffffffffffffff 0000000000000000 [ 170.807631][ T7743] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 170.816279][ T7743] page dumped because: kasan: bad access detected [ 170.822684][ T7743] page_owner tracks the page as allocated [ 170.828382][ T7743] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 35, tgid 35 (kworker/u8:2), ts 56335006470, free_ts 56277747617 [ 170.848690][ T7743] post_alloc_hook+0x1f3/0x230 [ 170.853453][ T7743] get_page_from_freelist+0x2e4c/0x2f10 [ 170.858994][ T7743] __alloc_pages_noprof+0x256/0x6c0 [ 170.864249][ T7743] alloc_slab_page+0x5f/0x120 [ 170.868933][ T7743] allocate_slab+0x5a/0x2f0 [ 170.873441][ T7743] ___slab_alloc+0xcd1/0x14b0 [ 170.878115][ T7743] __slab_alloc+0x58/0xa0 [ 170.882432][ T7743] __kmalloc_noprof+0x257/0x400 [ 170.887279][ T7743] ___neigh_create+0x691/0x2470 [ 170.892121][ T7743] ip6_finish_output2+0x1629/0x1670 [ 170.897309][ T7743] ip6_finish_output+0x41e/0x810 [ 170.902233][ T7743] ndisc_send_skb+0xab0/0x1380 [ 170.906986][ T7743] addrconf_dad_completed+0x76c/0xcd0 [ 170.912354][ T7743] addrconf_dad_work+0xdc2/0x16f0 [ 170.917373][ T7743] process_scheduled_works+0xa2c/0x1830 [ 170.922921][ T7743] worker_thread+0x86d/0xd50 [ 170.927514][ T7743] page last free pid 4526 tgid 4526 stack trace: [ 170.933836][ T7743] free_unref_page+0xd22/0xea0 [ 170.938606][ T7743] __put_partials+0xeb/0x130 [ 170.943184][ T7743] put_cpu_partial+0x17c/0x250 [ 170.947936][ T7743] __slab_free+0x2ea/0x3d0 [ 170.952338][ T7743] qlist_free_all+0x9e/0x140 [ 170.956917][ T7743] kasan_quarantine_reduce+0x14f/0x170 [ 170.962362][ T7743] __kasan_slab_alloc+0x23/0x80 [ 170.967202][ T7743] __kmalloc_noprof+0x1a3/0x400 [ 170.972047][ T7743] tomoyo_realpath_from_path+0xcf/0x5e0 [ 170.977583][ T7743] tomoyo_path_perm+0x2b7/0x740 [ 170.982428][ T7743] security_inode_getattr+0xd8/0x130 [ 170.987702][ T7743] vfs_getattr+0x45/0x430 [ 170.992023][ T7743] vfs_fstatat+0xd6/0x190 [ 170.996343][ T7743] __x64_sys_newfstatat+0x125/0x1b0 [ 171.001525][ T7743] do_syscall_64+0xf3/0x230 [ 171.006021][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.011908][ T7743] [ 171.014215][ T7743] Memory state around the buggy address: [ 171.019828][ T7743] ffff88807be63700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 171.027878][ T7743] ffff88807be63780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 171.035923][ T7743] >ffff88807be63800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.043965][ T7743] ^ [ 171.051057][ T7743] ffff88807be63880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.059103][ T7743] ffff88807be63900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.067147][ T7743] ================================================================== [ 171.095386][ T7743] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.102613][ T7743] CPU: 0 PID: 7743 Comm: syz.2.591 Not tainted 6.10.0-rc5-syzkaller-00187-gc93a6f62cb1b #0 [ 171.112602][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.122666][ T7743] Call Trace: [ 171.125952][ T7743] [ 171.128890][ T7743] dump_stack_lvl+0x241/0x360 [ 171.133688][ T7743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.138912][ T7743] ? __pfx__printk+0x10/0x10 [ 171.143522][ T7743] ? preempt_schedule+0xe1/0xf0 [ 171.148388][ T7743] ? vscnprintf+0x5d/0x90 [ 171.152733][ T7743] panic+0x349/0x860 [ 171.156645][ T7743] ? check_panic_on_warn+0x21/0xb0 [ 171.161776][ T7743] ? __pfx_panic+0x10/0x10 [ 171.166211][ T7743] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 171.172206][ T7743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.178547][ T7743] ? print_report+0x502/0x550 [ 171.183247][ T7743] check_panic_on_warn+0x86/0xb0 [ 171.188197][ T7743] ? skb_queue_purge_reason+0xb9/0x500 [ 171.193649][ T7743] end_report+0x77/0x160 [ 171.197885][ T7743] kasan_report+0x154/0x180 [ 171.202381][ T7743] ? skb_queue_purge_reason+0xb9/0x500 [ 171.207837][ T7743] skb_queue_purge_reason+0xb9/0x500 [ 171.213109][ T7743] ? trace_contention_end+0x3c/0x120 [ 171.218386][ T7743] ? __mutex_lock+0x2ef/0xd70 [ 171.223053][ T7743] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 171.228947][ T7743] ? drain_workqueue+0x2d3/0x3a0 [ 171.233873][ T7743] ? hci_conn_hash_flush+0x1da/0x240 [ 171.239147][ T7743] vhci_flush+0x44/0x50 [ 171.243313][ T7743] ? __pfx_vhci_flush+0x10/0x10 [ 171.248155][ T7743] hci_dev_reset+0x42a/0x5d0 [ 171.252737][ T7743] sock_do_ioctl+0x158/0x460 [ 171.257322][ T7743] ? __pfx_sock_do_ioctl+0x10/0x10 [ 171.262435][ T7743] sock_ioctl+0x629/0x8e0 [ 171.266757][ T7743] ? __pfx_sock_ioctl+0x10/0x10 [ 171.271598][ T7743] ? __fget_files+0x29/0x470 [ 171.276178][ T7743] ? __fget_files+0x3f6/0x470 [ 171.280842][ T7743] ? __fget_files+0x29/0x470 [ 171.285424][ T7743] ? bpf_lsm_file_ioctl+0x9/0x10 [ 171.290353][ T7743] ? security_file_ioctl+0x87/0xb0 [ 171.295457][ T7743] ? __pfx_sock_ioctl+0x10/0x10 [ 171.300301][ T7743] __se_sys_ioctl+0xfc/0x170 [ 171.304881][ T7743] do_syscall_64+0xf3/0x230 [ 171.309378][ T7743] ? clear_bhb_loop+0x35/0x90 [ 171.314042][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.319929][ T7743] RIP: 0033:0x7f4cac175f19 [ 171.324331][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.343922][ T7743] RSP: 002b:00007f4cacf34048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.352326][ T7743] RAX: ffffffffffffffda RBX: 00007f4cac303f60 RCX: 00007f4cac175f19 [ 171.360284][ T7743] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000005 [ 171.368327][ T7743] RBP: 00007f4cac1e4bcd R08: 0000000000000000 R09: 0000000000000000 [ 171.376284][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.384240][ T7743] R13: 000000000000000b R14: 00007f4cac303f60 R15: 00007fff4fdb6648 [ 171.392208][ T7743] [ 171.395320][ T7743] Kernel Offset: disabled [ 171.399630][ T7743] Rebooting in 86400 seconds..