last executing test programs: 2m22.234049232s ago: executing program 4 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8f3caafa", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000800178004000100"], 0x2c}}, 0x0) unshare(0xc040480) unshare(0xc040480) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x6c, 0x48, 0x2, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x40, 0x0, r4, 0x2}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008804) 2m21.900528084s ago: executing program 4 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (async) 2m21.302903775s ago: executing program 4 (id=576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @private=0xa010101}}, 0x0, 0x0, 0xd, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb6b8300c7cb361d921eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="b0", 0x1}], 0x1}}], 0x2, 0x6049005) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x2, 0x20000000, 0x3) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x17, 0x0, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r6, r6, 0x2f, 0x20, 0x4, @void, @void, @void, @value}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x5e20, @local}, 0x10) 2m20.929602233s ago: executing program 4 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xbe3) close(r2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES8=r2, @ANYRES8=r0, @ANYBLOB="d51c8cdc58dd106f473ba9ab1b6defc2deddf08b5831f349b770d6ba712e324f75178c68f01c7659a6073b08d9033fc84c0f9d6939cc0cb40f0579c8557d9e"], 0x64}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 2m20.627158567s ago: executing program 4 (id=582): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(r4) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfffffc3f) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtclass={0x50, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0x4}, {0x5, 0x6}, {0x10, 0x9}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x1a, 0x57}}]}, 0x50}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="05001e00060000006a8e344ebe6ff40acc5b0b900b2b30eafff218150db4c95e061091ffff944fbbd829ada817d3ed6426fd2343a1df0d2b6d90cc22f1347d7849fed11cae06da31fb1950a291d66f299b0083b918e44e44984214fa5ae032548b68007b45746ee37d8f87953798247330c61ed7dc9dc71af0349d29087b5a4154c4b1554aeaf78d8bf552e10ac6de19894a69ab07"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000140)=0x80) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x6115c000) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r6) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 2m19.899252569s ago: executing program 4 (id=586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x99a, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x99a, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 2m10.744398164s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x10, 0xb, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0xc7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x8, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x5, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x3}, {0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x3, 0xd}, {0x2, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x2c, 0x8b, &(0x7f0000000300)="13b00e6ea7862e4cb27d212d071679d8b94fa17825ec15b96d9d470e8334303e86c031f5a4f532b1fbdd2a3b", &(0x7f0000000340)=""/139, 0xa, 0x0, 0x3a, 0x8c, &(0x7f0000000400)="df5fda6ac5c4b5572cb7e007b933cf359a516bfe0af509626af10c16c3a50b2455d3a6de19536c4f2bdcf77ed718161aa646307bfd034e163e5f", &(0x7f0000000440)="6f8d4418bf2cc37bfb31e713362fc7de00ec8dc7ecdc39d9b7b218f33e27df059e71add4bebed9946137fb6f02300b9c858e929f7ebf95d75201ba0087960d051ec7c4127d593662d8a18469f1450318f8dead08ee013ef771f0c41428f8354523c85eca0483d04d2914a4a79c03766fb65d99d74bde8055eaac6db8bcbe5841c1ab2f230890a2bd607f5605", 0x6, 0x0, 0x2}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) 2m10.70322895s ago: executing program 1 (id=418): r0 = socket(0x1e, 0x3, 0xfffeffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/23, 0x17}], 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000054) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x6, 0x1, 0xa00, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x240448d1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) 2m4.883384155s ago: executing program 32 (id=586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x99a, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x99a, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m51.726754858s ago: executing program 1 (id=418): r0 = socket(0x1e, 0x3, 0xfffeffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/23, 0x17}], 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000054) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x6, 0x1, 0xa00, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x240448d1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) 1m50.464667021s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x10, 0xb, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0xc7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x8, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x5, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x3}, {0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x3, 0xd}, {0x2, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x2c, 0x8b, &(0x7f0000000300)="13b00e6ea7862e4cb27d212d071679d8b94fa17825ec15b96d9d470e8334303e86c031f5a4f532b1fbdd2a3b", &(0x7f0000000340)=""/139, 0xa, 0x0, 0x3a, 0x8c, &(0x7f0000000400)="df5fda6ac5c4b5572cb7e007b933cf359a516bfe0af509626af10c16c3a50b2455d3a6de19536c4f2bdcf77ed718161aa646307bfd034e163e5f", &(0x7f0000000440)="6f8d4418bf2cc37bfb31e713362fc7de00ec8dc7ecdc39d9b7b218f33e27df059e71add4bebed9946137fb6f02300b9c858e929f7ebf95d75201ba0087960d051ec7c4127d593662d8a18469f1450318f8dead08ee013ef771f0c41428f8354523c85eca0483d04d2914a4a79c03766fb65d99d74bde8055eaac6db8bcbe5841c1ab2f230890a2bd607f5605", 0x6, 0x0, 0x2}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) 1m32.734280644s ago: executing program 1 (id=418): r0 = socket(0x1e, 0x3, 0xfffeffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/23, 0x17}], 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000054) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x6, 0x1, 0xa00, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x240448d1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) 1m31.720058341s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x10, 0xb, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0xc7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x8, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x5, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x3}, {0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x3, 0xd}, {0x2, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x2c, 0x8b, &(0x7f0000000300)="13b00e6ea7862e4cb27d212d071679d8b94fa17825ec15b96d9d470e8334303e86c031f5a4f532b1fbdd2a3b", &(0x7f0000000340)=""/139, 0xa, 0x0, 0x3a, 0x8c, &(0x7f0000000400)="df5fda6ac5c4b5572cb7e007b933cf359a516bfe0af509626af10c16c3a50b2455d3a6de19536c4f2bdcf77ed718161aa646307bfd034e163e5f", &(0x7f0000000440)="6f8d4418bf2cc37bfb31e713362fc7de00ec8dc7ecdc39d9b7b218f33e27df059e71add4bebed9946137fb6f02300b9c858e929f7ebf95d75201ba0087960d051ec7c4127d593662d8a18469f1450318f8dead08ee013ef771f0c41428f8354523c85eca0483d04d2914a4a79c03766fb65d99d74bde8055eaac6db8bcbe5841c1ab2f230890a2bd607f5605", 0x6, 0x0, 0x2}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) 1m27.795605996s ago: executing program 2 (id=799): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 1m27.583373941s ago: executing program 2 (id=801): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000023c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000100000e00005800"}}}]}, 0x48}}, 0x8000) 1m25.323806221s ago: executing program 2 (id=806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1b) shutdown(r0, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x47, 0x6, 0x0, 0x7}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaafdffffffffff08004500002800680000fe069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780100"], 0x0) 1m8.287808901s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x10, 0xb, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0xc7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x8, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x5, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x3}, {0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x3, 0xd}, {0x2, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x2c, 0x8b, &(0x7f0000000300)="13b00e6ea7862e4cb27d212d071679d8b94fa17825ec15b96d9d470e8334303e86c031f5a4f532b1fbdd2a3b", &(0x7f0000000340)=""/139, 0xa, 0x0, 0x3a, 0x8c, &(0x7f0000000400)="df5fda6ac5c4b5572cb7e007b933cf359a516bfe0af509626af10c16c3a50b2455d3a6de19536c4f2bdcf77ed718161aa646307bfd034e163e5f", &(0x7f0000000440)="6f8d4418bf2cc37bfb31e713362fc7de00ec8dc7ecdc39d9b7b218f33e27df059e71add4bebed9946137fb6f02300b9c858e929f7ebf95d75201ba0087960d051ec7c4127d593662d8a18469f1450318f8dead08ee013ef771f0c41428f8354523c85eca0483d04d2914a4a79c03766fb65d99d74bde8055eaac6db8bcbe5841c1ab2f230890a2bd607f5605", 0x6, 0x0, 0x2}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) 1m7.111783157s ago: executing program 1 (id=418): r0 = socket(0x1e, 0x3, 0xfffeffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/23, 0x17}], 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000054) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x6, 0x1, 0xa00, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x240448d1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) 1m5.619868153s ago: executing program 2 (id=806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1b) shutdown(r0, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x47, 0x6, 0x0, 0x7}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaafdffffffffff08004500002800680000fe069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780100"], 0x0) 46.055790911s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x10, 0xb, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0xc7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x8, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x5, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x3}, {0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x3, 0xd}, {0x2, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x2c, 0x8b, &(0x7f0000000300)="13b00e6ea7862e4cb27d212d071679d8b94fa17825ec15b96d9d470e8334303e86c031f5a4f532b1fbdd2a3b", &(0x7f0000000340)=""/139, 0xa, 0x0, 0x3a, 0x8c, &(0x7f0000000400)="df5fda6ac5c4b5572cb7e007b933cf359a516bfe0af509626af10c16c3a50b2455d3a6de19536c4f2bdcf77ed718161aa646307bfd034e163e5f", &(0x7f0000000440)="6f8d4418bf2cc37bfb31e713362fc7de00ec8dc7ecdc39d9b7b218f33e27df059e71add4bebed9946137fb6f02300b9c858e929f7ebf95d75201ba0087960d051ec7c4127d593662d8a18469f1450318f8dead08ee013ef771f0c41428f8354523c85eca0483d04d2914a4a79c03766fb65d99d74bde8055eaac6db8bcbe5841c1ab2f230890a2bd607f5605", 0x6, 0x0, 0x2}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) 43.02204792s ago: executing program 1 (id=418): r0 = socket(0x1e, 0x3, 0xfffeffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/23, 0x17}], 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000054) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x6, 0x1, 0xa00, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x240448d1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) 40.44801698s ago: executing program 2 (id=806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1b) shutdown(r0, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x47, 0x6, 0x0, 0x7}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaafdffffffffff08004500002800680000fe069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780100"], 0x0) 22.864766448s ago: executing program 1 (id=418): r0 = socket(0x1e, 0x3, 0xfffeffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f0000000100)=""/23, 0x17}], 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000054) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x6, 0x1, 0xa00, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x240448d1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0) 22.055699603s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x10, 0xb, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0xc7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x8, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x5, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x3}, {0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x3, 0xd}, {0x2, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x2c, 0x8b, &(0x7f0000000300)="13b00e6ea7862e4cb27d212d071679d8b94fa17825ec15b96d9d470e8334303e86c031f5a4f532b1fbdd2a3b", &(0x7f0000000340)=""/139, 0xa, 0x0, 0x3a, 0x8c, &(0x7f0000000400)="df5fda6ac5c4b5572cb7e007b933cf359a516bfe0af509626af10c16c3a50b2455d3a6de19536c4f2bdcf77ed718161aa646307bfd034e163e5f", &(0x7f0000000440)="6f8d4418bf2cc37bfb31e713362fc7de00ec8dc7ecdc39d9b7b218f33e27df059e71add4bebed9946137fb6f02300b9c858e929f7ebf95d75201ba0087960d051ec7c4127d593662d8a18469f1450318f8dead08ee013ef771f0c41428f8354523c85eca0483d04d2914a4a79c03766fb65d99d74bde8055eaac6db8bcbe5841c1ab2f230890a2bd607f5605", 0x6, 0x0, 0x2}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) 21.248247806s ago: executing program 2 (id=806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1b) shutdown(r0, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x47, 0x6, 0x0, 0x7}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaafdffffffffff08004500002800680000fe069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780100"], 0x0) 13.047173991s ago: executing program 5 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000040)=""/75, 0x4b, 0x3) sendfile(r2, r2, 0x0, 0x3) sendfile(r3, r3, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x408d1}, 0x4000044) 12.598883691s ago: executing program 5 (id=1104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) close(r1) 12.483185109s ago: executing program 5 (id=1105): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x14, 0x0, &(0x7f00000007c0)) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x38}, 0x1, 0x8, [@rand_addr=0x64010102, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, @local, @broadcast, @loopback]}, 0x30) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x2000000000000000, 0x8) (async) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000c40)={r4, 0xca60, 0xfffa}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 12.260493518s ago: executing program 5 (id=1107): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="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", 0x114, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="79ef34395d4c410d32132319c6a502980bd70906e911e78ea6dce2f7034f7998430f21880804822ef849375a594e0acc408221d74ee07c139bd280b66b5396cfe597d56ffeda39436d6fb5e0e6153cfe9af489e2", 0x54}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="fa", 0x1}], 0x1}}], 0x1, 0x404000c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2, 0x4e22, 0x92a, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x15, 0x0, r9}, {0x0, 0x1, 0x4, 0x47e8, 0x7f, 0xffffffffffffff00, 0xd020, 0x8}, {0x2, 0x6, 0x4, 0x10000}, 0x80000001, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x4d5, 0x19}, 0x2, @in6=@empty, 0x0, 0x3, 0x1, 0x4, 0x7, 0xda7, 0x7}}, 0xe8) 12.1271516s ago: executing program 5 (id=1108): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xf8, 0x8, 0x29, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0x80000001, 0x10000}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xf8, 0x8, 0x29, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0x80000001, 0x10000}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11.737190328s ago: executing program 5 (id=1110): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x22000, 0x1000, 0x1, 0x2}, 0x20) 1.891276837s ago: executing program 3 (id=1132): getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 1.836290318s ago: executing program 3 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) r2 = accept$unix(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000004", @ANYRES8=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff06000000000000000000000000000108000a0000000000060002000100000014001f0000000000000000000000ffffffffffff"], 0x5c}}, 0x20050800) 1.703220706s ago: executing program 3 (id=1134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) unshare(0x24020400) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f0000000180)='%pB \x00'}, 0x20) close(r5) writev(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) socket$inet(0x2, 0x5, 0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) read$alg(r2, &(0x7f0000000a00)=""/4096, 0x1000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000a0000003c000380080001"], 0x88}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 743.394036ms ago: executing program 3 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x24, 0x1b, 0x6}]}, 0x24}}, 0x4000005) 653.463461ms ago: executing program 3 (id=1136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x10, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r2, 0x1, 0x10100, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xe9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="c5b037a65566c354439f75fb6564674f9118c80557402ef0e6480c685415f87ee2b2b0187c921e8682ab53e7865e1239e22a05534110fa7e3f113b44b1de2520be54566e6ab18963f9528f7f56cca9a9dec7d6957c2ce3c3692fe7f8a0", 0x5d}, {&(0x7f00000002c0)="ebc3dd46af3d73e9b4ab867a3096e373c5cabc078f9505a5e7ef109cd0772b030f5239a62eca4f62bfbfd4c76dfa989498876689ccccb768a97d96f1efa84c7dde6426f47a329a4d01d16bc3", 0x4c}, {&(0x7f0000000100)="778677a51782c5041dc48c5a55a2f868f02cca95d02a69617b5e547138588b974a29cd577df477c81fbdb624", 0x2c}, {&(0x7f0000000480)="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", 0x1000}], 0x4, &(0x7f0000001480)=[@ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x6, [{@empty, 0x7ff}]}, @ssrr={0x89, 0xf, 0x5b, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0xaf, [@private=0xa010102, @local, @local, @multicast2, @broadcast, @local]}, @noop, @ssrr={0x89, 0x7, 0x22, [@multicast2]}, @timestamp_addr={0x44, 0xc, 0x39, 0x1, 0x0, [{@local, 0x1}]}, @timestamp={0x44, 0x24, 0x26, 0x0, 0x8, [0x1, 0x2, 0xfffffff8, 0x2, 0x3, 0x401, 0xb, 0x8]}]}}}, @ip_tos_int={{0x14}}], 0x98}, 0x20048080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x95) close(0x3) 0s ago: executing program 3 (id=1137): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0xf) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r1, 0x8) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x801}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7}}, [0x5, 0x5, 0x4, 0x10, 0x3cf, 0x9, 0x1, 0x7, 0xf5b, 0x3, 0x5, 0x4, 0x6, 0x8, 0x6]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000540)={r6, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="58000000000000000000000000000000630167000400000095000000000000005aa7eb6559c86a43a3fd206d59660108d1cb557b52e76d6dab2e1aa2de654d9cf44cbcf9836d4a3526b2bed3f9ce8ed98556a270969b26b828ecd105fdda386bf6622dce76c7a13aba1946caeff1950dcac1936f4d549ad609590fb5e4e3636c68cb628680fd9b847089cf605b93aeca4b8ebc022f05f592b4838a2745c1dd072223dce818769e45adb497887f5f1067547d68af2673264eabed48a60a4645993854f09bf80c33be3abb09d6835f9ef5ab357386ecfa7431c6d6c0d165b3e925b73b56a14029b49869fd3eb226bed9bf296b6d6c4c2062d22708ef454ac68b766c98cdf2c64317d4b45677febe4c686a52437ac44cfdc6d76811bd447f66436d3475c1afe91c6f52374340a2f9bba91ed103aefefb1d471a4cb5d6077d9feba63e354ad26815a7b71bf85edeeafd71a84638b0d21c1deb81b98143056ea4af2d7466f095de26ff7f000000000000838eb1d16589e3df8a3eb87ad22425cc8a556ebf93328c835c9bee93e3ac135c53c1849474c080ff4f8bd94e184a5e389a21ad6e4ecbed042e52b9c6f33e0893e1186b69b0ea50b1998793b501813e7e5331cf6fed8e84fa42bd58134d31299fd81beb647546330132c36bdc9e0e664c9d8b6dd43d5e5270429ece8ae6638e6428125f562f4d7d685e3832a352fa0c349bf1eae10ce8055f4ffaa81c0b86f63c96992807977058efd3d6076d2a0e895d8131e8ff05944f26a394a8cb7774e4c16411c12638812f0d70d1e329321bbbbbe0e761c6ef6560a49ef4fd12ad1c0700003863160210e62d1830e9ced60dd06dc402c855a76150c44bed374e1ac48451695e94b54f5df5f2b9df6bb17fc65a00f1f7307bfb9c2d9bba7435845b848155e9e77a3ba82de1fff7981e7cdaf5f02105a8552c01ddba9efe7a54e080a15f184c44f1deaae632bd2384a8dcf2cfb5da0bb74894d5345094ff5e346bc1b08f330beaa469f7637685"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): cc 0x0c38 length: 249 > 2 [ 190.634024][ T8723] netlink: 'syz.5.696': attribute type 11 has an invalid length. [ 190.672497][ T993] hsr_slave_0: left promiscuous mode [ 190.696162][ T55] Bluetooth: hci1: command tx timeout [ 190.701864][ T8721] netlink: 'syz.5.696': attribute type 11 has an invalid length. [ 190.737078][ T993] hsr_slave_1: left promiscuous mode [ 190.745490][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.755038][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.769607][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.788154][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.876492][ T993] veth1_macvtap: left promiscuous mode [ 190.885544][ T993] veth0_macvtap: left promiscuous mode [ 190.900574][ T993] veth1_vlan: left promiscuous mode [ 190.913367][ T993] veth0_vlan: left promiscuous mode [ 191.157075][ T30] audit: type=1800 audit(1747764874.741:4): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.695" name="cgroup.controllers" dev="tmpfs" ino=1010 res=0 errno=0 [ 191.497943][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 191.630559][ T8738] netlink: 'syz.2.699': attribute type 21 has an invalid length. [ 191.983445][ T993] team0 (unregistering): Port device team_slave_1 removed [ 192.028814][ T993] team0 (unregistering): Port device team_slave_0 removed [ 192.132480][ T55] Bluetooth: hci4: command tx timeout [ 192.477951][ T8736] vlan2: entered allmulticast mode [ 192.505173][ T8736] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 192.538012][ T8738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.699'. [ 192.757921][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 192.767241][ T8752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.702'. [ 192.780118][ T55] Bluetooth: hci1: command tx timeout [ 192.786343][ T8754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.948481][ T8752] gretap1: entered promiscuous mode [ 192.971743][ T8752] gretap1: entered allmulticast mode [ 193.030179][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 193.227805][ T8681] chnl_net:caif_netlink_parms(): no params data found [ 193.670257][ T8784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'. [ 194.012704][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.034815][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.123176][ T8681] bridge_slave_0: entered allmulticast mode [ 194.144041][ T8681] bridge_slave_0: entered promiscuous mode [ 194.212724][ T55] Bluetooth: hci4: command tx timeout [ 194.219319][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.225900][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.378708][ T993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.410755][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.419131][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.427754][ T8681] bridge_slave_1: entered allmulticast mode [ 194.437527][ T8681] bridge_slave_1: entered promiscuous mode [ 194.636010][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.691432][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.810392][ T8840] netlink: 1 bytes leftover after parsing attributes in process `syz.2.717'. [ 194.840820][ T993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.853924][ T55] Bluetooth: hci1: command tx timeout [ 194.997149][ T8681] team0: Port device team_slave_0 added [ 195.129770][ T993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.150186][ T8681] team0: Port device team_slave_1 added [ 195.244338][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.721'. [ 195.414907][ T993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.513578][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.532026][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.594353][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.635799][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.659293][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.706160][ T8873] netlink: 'syz.5.724': attribute type 58 has an invalid length. [ 195.723132][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.724'. [ 195.739178][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.292681][ T55] Bluetooth: hci4: command tx timeout [ 196.304113][ T8681] hsr_slave_0: entered promiscuous mode [ 196.310877][ T8681] hsr_slave_1: entered promiscuous mode [ 196.340963][ T8681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.348867][ T8681] Cannot create hsr debugfs directory [ 196.413228][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 196.623787][ T8897] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 196.700584][ T8897] netlink: 232 bytes leftover after parsing attributes in process `syz.2.729'. [ 196.922912][ T8902] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 196.932284][ T55] Bluetooth: hci1: command tx timeout [ 197.240059][ T993] bridge_slave_1: left allmulticast mode [ 197.245922][ T993] bridge_slave_1: left promiscuous mode [ 197.251781][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.270677][ T993] bridge_slave_0: left allmulticast mode [ 197.280232][ T993] bridge_slave_0: left promiscuous mode [ 197.288918][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.817191][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.828725][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.847865][ T993] bond0 (unregistering): Released all slaves [ 197.869228][ T8910] macvlan3: entered promiscuous mode [ 197.874893][ T8910] macvlan3: entered allmulticast mode [ 197.881672][ T8910] batadv0: entered promiscuous mode [ 197.889834][ T8910] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 197.903134][ T8910] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 197.978948][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.000567][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.016476][ T8706] bridge_slave_0: entered allmulticast mode [ 198.026998][ T8706] bridge_slave_0: entered promiscuous mode [ 198.036376][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.043944][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.051174][ T8706] bridge_slave_1: entered allmulticast mode [ 198.061056][ T8706] bridge_slave_1: entered promiscuous mode [ 198.244601][ T8706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.287799][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 198.374828][ T55] Bluetooth: hci4: command tx timeout [ 198.398263][ T8706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.638912][ T8933] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 198.741165][ T8706] team0: Port device team_slave_0 added [ 198.763988][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 198.773568][ T8935] netlink: 176 bytes leftover after parsing attributes in process `syz.2.736'. [ 198.782740][ T8935] netlink: 'syz.2.736': attribute type 5 has an invalid length. [ 198.845333][ T8706] team0: Port device team_slave_1 added [ 199.244962][ T8941] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.277183][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.284546][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.311329][ T8706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.408725][ T993] hsr_slave_0: left promiscuous mode [ 199.418654][ T993] hsr_slave_1: left promiscuous mode [ 199.431528][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.452102][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.474880][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.512103][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.530348][ T8949] netlink: 'syz.3.741': attribute type 32 has an invalid length. [ 199.568450][ T993] veth1_macvtap: left promiscuous mode [ 199.574885][ T993] veth0_macvtap: left promiscuous mode [ 199.583304][ T993] veth1_vlan: left promiscuous mode [ 199.592382][ T993] veth0_vlan: left promiscuous mode [ 200.129155][ T993] team0 (unregistering): Port device team_slave_1 removed [ 200.177869][ T993] team0 (unregistering): Port device team_slave_0 removed [ 200.572130][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.579151][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.612119][ T8706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.913896][ T8706] hsr_slave_0: entered promiscuous mode [ 200.943195][ T8706] hsr_slave_1: entered promiscuous mode [ 200.949696][ T8706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.981083][ T8706] Cannot create hsr debugfs directory [ 201.047717][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 201.411219][ T8981] netlink: 104 bytes leftover after parsing attributes in process `syz.5.748'. [ 201.441093][ T8681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.468856][ T8681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.568646][ T8681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.598541][ T8681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.648921][ T8984] syzkaller1: entered promiscuous mode [ 201.658264][ T8984] syzkaller1: entered allmulticast mode [ 201.820107][ T8994] netlink: 'syz.5.750': attribute type 12 has an invalid length. [ 202.176921][ T5912] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 202.186910][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.192346][ T5912] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 202.201138][ T5912] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 202.211602][ T5912] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 202.228559][ T9002] netlink: 'syz.5.752': attribute type 1 has an invalid length. [ 202.229273][ T5912] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 202.236641][ T9002] netlink: 'syz.5.752': attribute type 10 has an invalid length. [ 202.278493][ T9002] netlink: 236 bytes leftover after parsing attributes in process `syz.5.752'. [ 202.307122][ T9004] netlink: 'syz.5.752': attribute type 1 has an invalid length. [ 202.326234][ T9004] netlink: 'syz.5.752': attribute type 10 has an invalid length. [ 202.340726][ T8681] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.347725][ T9004] netlink: 236 bytes leftover after parsing attributes in process `syz.5.752'. [ 202.497190][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.499112][ T9006] fido_id[9006]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 202.504400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.576048][ T9011] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 202.635171][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.642421][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.673018][ T8706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.747474][ T8706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.839114][ T8706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.861712][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 202.868656][ T8706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.128866][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 203.162704][ T9029] netlink: 'syz.2.758': attribute type 2 has an invalid length. [ 203.208152][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'. [ 203.271403][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.359695][ T8706] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.417032][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.424247][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.505106][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.512355][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.592549][ T9044] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 203.605299][ T9044] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 203.880515][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.091208][ T8681] veth0_vlan: entered promiscuous mode [ 204.171634][ T8681] veth1_vlan: entered promiscuous mode [ 204.320275][ T8681] veth0_macvtap: entered promiscuous mode [ 204.467522][ T9072] vlan1 (unregistering): left allmulticast mode [ 204.485071][ T9072] veth0_vlan: left allmulticast mode [ 204.514419][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 204.544346][ T8681] veth1_macvtap: entered promiscuous mode [ 204.660178][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.702626][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.746353][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.774588][ T8681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.785533][ T8681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.795340][ T8681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.807277][ T8681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.944557][ T8706] veth0_vlan: entered promiscuous mode [ 205.008507][ T8706] veth1_vlan: entered promiscuous mode [ 205.067137][ T8813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.122236][ T8813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.221601][ T8706] veth0_macvtap: entered promiscuous mode [ 205.247724][ T8706] veth1_macvtap: entered promiscuous mode [ 205.285838][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.334393][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.366088][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.415892][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.471017][ T8706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.500417][ T8706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.519449][ T8706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.538486][ T8706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.718690][ T9100] xt_CT: No such helper "pptp" [ 206.195266][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.258607][ T8803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.292260][ T8803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.410095][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.458978][ T8803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.471498][ T8803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.606288][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.694246][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.032290][ T53] bridge_slave_1: left allmulticast mode [ 207.072732][ T53] bridge_slave_1: left promiscuous mode [ 207.078983][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.173467][ T53] bridge_slave_0: left allmulticast mode [ 207.179169][ T53] bridge_slave_0: left promiscuous mode [ 207.229159][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.821265][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.830070][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.839335][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.862746][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.870558][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.033414][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'. [ 208.391462][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.429567][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.461765][ T53] bond0 (unregistering): Released all slaves [ 208.473952][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.483089][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.491626][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.511280][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.521155][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.588430][ T9164] netlink: 64 bytes leftover after parsing attributes in process `syz.2.783'. [ 209.374737][ T9201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.382064][ T9201] IPv6: NLM_F_CREATE should be set when creating new route [ 209.521391][ T9206] netlink: 'syz.3.792': attribute type 2 has an invalid length. [ 209.699274][ T9208] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 209.722104][ T9208] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 209.738435][ T9213] netlink: 'syz.5.794': attribute type 4 has an invalid length. [ 209.741000][ T9208] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 209.787922][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.796804][ T9211] netlink: 'syz.5.794': attribute type 4 has an invalid length. [ 209.992082][ T5833] Bluetooth: hci1: command tx timeout [ 210.153324][ T9218] xt_hashlimit: max too large, truncated to 1048576 [ 210.622986][ T5833] Bluetooth: hci4: command tx timeout [ 211.113922][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 211.142604][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 211.151450][ T9244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.800'. [ 211.655434][ T53] hsr_slave_0: left promiscuous mode [ 211.663696][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 211.669835][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 211.910865][ T53] hsr_slave_1: left promiscuous mode [ 211.924787][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.932411][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.955568][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.002715][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.052549][ T5829] Bluetooth: hci1: command tx timeout [ 212.081520][ T53] veth1_macvtap: left promiscuous mode [ 212.096965][ T53] veth0_macvtap: left promiscuous mode [ 212.107260][ T53] veth1_vlan: left promiscuous mode [ 212.115020][ T53] veth0_vlan: left promiscuous mode [ 212.702524][ T5829] Bluetooth: hci4: command tx timeout [ 212.768636][ T53] team0 (unregistering): Port device team_slave_1 removed [ 212.811628][ T53] team0 (unregistering): Port device team_slave_0 removed [ 213.265643][ T9260] macvlan2: entered promiscuous mode [ 213.614417][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.621865][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.630778][ T9168] bridge_slave_0: entered allmulticast mode [ 213.638825][ T9168] bridge_slave_0: entered promiscuous mode [ 213.647484][ T9281] netlink: 'syz.3.805': attribute type 21 has an invalid length. [ 213.674504][ T9281] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.714164][ T9281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.721654][ T9281] IPv6: NLM_F_CREATE should be set when creating new route [ 213.729035][ T9281] IPv6: NLM_F_CREATE should be set when creating new route [ 213.736338][ T9281] IPv6: NLM_F_CREATE should be set when creating new route [ 213.865332][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.880201][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.907756][ T9168] bridge_slave_1: entered allmulticast mode [ 213.963990][ T9168] bridge_slave_1: entered promiscuous mode [ 214.133549][ T5829] Bluetooth: hci1: command tx timeout [ 214.180599][ T9146] chnl_net:caif_netlink_parms(): no params data found [ 214.296146][ T9299] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.379204][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.411687][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.550886][ T9168] team0: Port device team_slave_0 added [ 214.709892][ T9299] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.773704][ T5829] Bluetooth: hci4: command tx timeout [ 214.818019][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.827488][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.835559][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.845560][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.853324][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.883126][ T9168] team0: Port device team_slave_1 added [ 215.047760][ T9299] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.219977][ T9299] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.245481][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.254463][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.280926][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.302161][ T9146] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.320383][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.330388][ T9146] bridge_slave_0: entered allmulticast mode [ 215.340161][ T9146] bridge_slave_0: entered promiscuous mode [ 215.349848][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.358200][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.366872][ T9146] bridge_slave_1: entered allmulticast mode [ 215.375461][ T9146] bridge_slave_1: entered promiscuous mode [ 215.387593][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.394883][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.421332][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.506387][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.812'. [ 215.515610][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.812'. [ 215.527575][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 215.559543][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.570593][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.616943][ T9146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.640796][ T9338] geneve2: entered promiscuous mode [ 215.699269][ T9146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.770235][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.790933][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.791447][ T9342] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 215.831764][ T9168] hsr_slave_0: entered promiscuous mode [ 215.841028][ T9168] hsr_slave_1: entered promiscuous mode [ 215.848554][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.859379][ T9168] Cannot create hsr debugfs directory [ 215.919297][ T9146] team0: Port device team_slave_0 added [ 215.930226][ T9342] veth1_macvtap: left promiscuous mode [ 215.954945][ T9342] veth1_macvtap: entered promiscuous mode [ 215.971216][ T9342] team0: Port device macsec0 added [ 216.027137][ T9299] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.148376][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.182448][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.206532][ T9348] netlink: 96 bytes leftover after parsing attributes in process `syz.3.814'. [ 216.217933][ T55] Bluetooth: hci1: command tx timeout [ 216.423185][ T9146] team0: Port device team_slave_1 added [ 216.514216][ T9299] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.539581][ T9299] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.576434][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.590473][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.794861][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.802880][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.838946][ T9146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.852742][ T55] Bluetooth: hci4: command tx timeout [ 216.868472][ T9299] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.935638][ T55] Bluetooth: hci2: command tx timeout [ 217.020498][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.027867][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.055619][ T9146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.300335][ T9146] hsr_slave_0: entered promiscuous mode [ 217.315905][ T9146] hsr_slave_1: entered promiscuous mode [ 217.323271][ T9146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.330929][ T9146] Cannot create hsr debugfs directory [ 217.499773][ T9381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.712198][ T9401] netlink: 144 bytes leftover after parsing attributes in process `syz.5.821'. [ 218.016135][ T9321] chnl_net:caif_netlink_parms(): no params data found [ 218.097616][ T9168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.250322][ T9168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.425323][ T9168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.640202][ T9168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.657088][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.667602][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.675150][ T9321] bridge_slave_0: entered allmulticast mode [ 218.685734][ T9321] bridge_slave_0: entered promiscuous mode [ 218.695339][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.703246][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.713318][ T9321] bridge_slave_1: entered allmulticast mode [ 218.721603][ T9321] bridge_slave_1: entered promiscuous mode [ 218.729376][ T9428] tipc: Started in network mode [ 218.734848][ T9428] tipc: Node identity @, cluster identity 4711 [ 218.741206][ T9428] tipc: Enabling of bearer rejected, failed to enable media [ 218.752404][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 218.758319][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 218.764983][ T9425] vxcan0: tx address claim with different name [ 218.943547][ T53] bridge_slave_1: left allmulticast mode [ 218.949275][ T53] bridge_slave_1: left promiscuous mode [ 218.973659][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.012219][ T55] Bluetooth: hci2: command tx timeout [ 219.016027][ T53] bridge_slave_0: left allmulticast mode [ 219.045839][ T53] bridge_slave_0: left promiscuous mode [ 219.051656][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.104278][ T53] bridge_slave_1: left allmulticast mode [ 219.110032][ T53] bridge_slave_1: left promiscuous mode [ 219.137938][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.150542][ T53] bridge_slave_0: left allmulticast mode [ 219.175010][ T53] bridge_slave_0: left promiscuous mode [ 219.180837][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.548915][ T53] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 220.224169][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.238754][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.250957][ T53] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 220.260690][ T53] batadv0: left promiscuous mode [ 220.269550][ T53] bond0 (unregistering): Released all slaves [ 220.357870][ T53] bond1 (unregistering): Released all slaves [ 220.443750][ T53] bond2 (unregistering): Released all slaves [ 220.463427][ T53] bond3 (unregistering): Released all slaves [ 220.557179][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.569867][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.580456][ T53] bond0 (unregistering): Released all slaves [ 220.600991][ T9321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.717794][ T9321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.859352][ T53] tipc: Left network mode [ 220.937107][ T9321] team0: Port device team_slave_0 added [ 220.996221][ T9321] team0: Port device team_slave_1 added [ 221.102583][ T5829] Bluetooth: hci2: command tx timeout [ 221.149892][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.182182][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.227594][ T9321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.319744][ T9168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.361827][ T9475] x_tables: duplicate underflow at hook 1 [ 221.370067][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.387939][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.428555][ T9321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.622369][ T9168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.636645][ T9476] netlink: 10 bytes leftover after parsing attributes in process `syz.5.837'. [ 221.838625][ T9168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.042554][ T9495] netlink: 56 bytes leftover after parsing attributes in process `syz.5.840'. [ 222.218813][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'. [ 222.227945][ T9168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.559944][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 222.570050][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.845'. [ 222.744173][ T9321] hsr_slave_0: entered promiscuous mode [ 222.773643][ T9321] hsr_slave_1: entered promiscuous mode [ 222.780122][ T9321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.795155][ T9321] Cannot create hsr debugfs directory [ 223.104782][ T53] hsr_slave_0: left promiscuous mode [ 223.140357][ T53] hsr_slave_1: left promiscuous mode [ 223.147078][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.155679][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.164813][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.172456][ T5829] Bluetooth: hci2: command tx timeout [ 223.178049][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.191024][ T53] hsr_slave_0: left promiscuous mode [ 223.196360][ T9527] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 223.211168][ T53] hsr_slave_1: left promiscuous mode [ 223.217967][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.225519][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.234577][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.242607][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.278278][ T53] veth1_vlan: left promiscuous mode [ 223.283655][ T53] veth0_vlan: left promiscuous mode [ 223.290071][ T53] veth1_macvtap: left promiscuous mode [ 223.295823][ T53] veth0_macvtap: left promiscuous mode [ 223.301510][ T53] veth1_vlan: left promiscuous mode [ 223.307261][ T53] veth0_vlan: left promiscuous mode [ 224.422811][ T53] team0 (unregistering): Port device team_slave_1 removed [ 224.468031][ T53] team0 (unregistering): Port device team_slave_0 removed [ 224.850794][ T9525] netlink: 'syz.3.850': attribute type 2 has an invalid length. [ 224.881034][ T9527] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.914358][ T9527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.973563][ T9527] bond0: (slave lo): Enslaving as an active interface with an up link [ 225.005549][ T9527] syz.3.850 (9527) used greatest stack depth: 20168 bytes left [ 225.393555][ T9146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.438379][ T9146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.606513][ T9146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.678382][ T9146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.747652][ T9553] netlink: 72 bytes leftover after parsing attributes in process `syz.5.855'. [ 225.808990][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.939303][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.029763][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.037001][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.176247][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.183465][ T8813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.206741][ T9562] syzkaller0: entered promiscuous mode [ 226.216044][ T9562] syzkaller0: entered allmulticast mode [ 226.598415][ T9146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.627838][ T9321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.653733][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 226.661279][ T9321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.674256][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 226.687554][ T9321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.695920][ T9571] netlink: 'syz.3.858': attribute type 14 has an invalid length. [ 226.730820][ T9321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.757290][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 226.835538][ T9146] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.954291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.961499][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.995349][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.002598][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.349184][ T9321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.508636][ T9321] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.577590][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.584811][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.645585][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.677950][ T9602] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.864'. [ 227.811138][ T9598] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.864'. [ 227.860845][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.868076][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.068086][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.110362][ T9168] veth0_vlan: entered promiscuous mode [ 228.159246][ T9168] veth1_vlan: entered promiscuous mode [ 228.462865][ T9168] veth0_macvtap: entered promiscuous mode [ 228.546593][ T9146] veth0_vlan: entered promiscuous mode [ 228.720073][ T9146] veth1_vlan: entered promiscuous mode [ 228.736263][ T9168] veth1_macvtap: entered promiscuous mode [ 228.856657][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.876554][ T9146] veth0_macvtap: entered promiscuous mode [ 228.899680][ T9146] veth1_macvtap: entered promiscuous mode [ 228.942448][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.994484][ T9168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.042483][ T9168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.064882][ T9168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.078343][ T9168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.107838][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.154766][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.224237][ T9321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.234770][ T9146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.251068][ T9146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.262216][ T9146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.270980][ T9146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.557397][ T9655] macvlan3: entered promiscuous mode [ 229.570046][ T9655] macvlan3: entered allmulticast mode [ 229.601425][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.620836][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.643632][ T9321] veth0_vlan: entered promiscuous mode [ 229.717321][ T9321] veth1_vlan: entered promiscuous mode [ 229.769535][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.805674][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.826888][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.845976][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.918927][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.946244][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.008828][ T9321] veth0_macvtap: entered promiscuous mode [ 230.035148][ T9321] veth1_macvtap: entered promiscuous mode [ 230.175283][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.286441][ T1105] bridge_slave_1: left allmulticast mode [ 230.295871][ T1105] bridge_slave_1: left promiscuous mode [ 230.302749][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.329127][ T1105] bridge_slave_0: left allmulticast mode [ 230.338965][ T1105] bridge_slave_0: left promiscuous mode [ 230.350550][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.230401][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.258259][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.270391][ T1105] bond0 (unregistering): Released all slaves [ 231.405550][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.437469][ T9321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.447657][ T9321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.462988][ T9321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.495682][ T9321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.544542][ T1105] tipc: Left network mode [ 231.622208][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.878'. [ 231.708632][ T1105] IPVS: stopping master sync thread 6625 ... [ 232.246671][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.289003][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.424332][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.443304][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.466081][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.493575][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.501854][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.510242][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.519219][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.789339][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 232.892868][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 232.892907][ T9716] SET target dimension over the limit! [ 232.979278][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 233.082688][ T1105] team0: left promiscuous mode [ 233.087732][ T1105] team_slave_0: left promiscuous mode [ 233.122378][ T1105] team_slave_1: left promiscuous mode [ 233.181492][ T1105] batadv_slave_1: left promiscuous mode [ 233.323322][ T1105] hsr_slave_0: left promiscuous mode [ 233.362390][ T1105] hsr_slave_1: left promiscuous mode [ 233.368531][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.410438][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.441248][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.458766][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.522100][ T1105] veth1_macvtap: left promiscuous mode [ 233.527710][ T1105] veth0_macvtap: left promiscuous mode [ 233.562630][ T1105] veth1_vlan: left promiscuous mode [ 233.568046][ T1105] veth0_vlan: left promiscuous mode [ 233.649286][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.660988][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.678018][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.686825][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.703428][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.871334][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 233.899626][ T9740] xt_TCPMSS: Only works on TCP SYN packets [ 234.348982][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.369377][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.382902][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.391839][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.405310][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.623023][ T55] Bluetooth: hci1: command tx timeout [ 234.686732][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 234.749552][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 235.813197][ T55] Bluetooth: hci2: command tx timeout [ 236.020007][ T9709] chnl_net:caif_netlink_parms(): no params data found [ 236.119227][ T9784] netlink: 96 bytes leftover after parsing attributes in process `syz.3.887'. [ 236.187944][ T9784] 8021q: VLANs not supported on ip6_vti0 [ 236.303949][ T9784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.887'. [ 236.453539][ T55] Bluetooth: hci4: command tx timeout [ 236.499499][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.694721][ T55] Bluetooth: hci1: command tx timeout [ 236.750714][ T9709] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.771163][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.799097][ T9709] bridge_slave_0: entered allmulticast mode [ 236.815770][ T9709] bridge_slave_0: entered promiscuous mode [ 236.904549][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.022736][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.035412][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.052849][ T9709] bridge_slave_1: entered allmulticast mode [ 237.061367][ T9709] bridge_slave_1: entered promiscuous mode [ 237.152964][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.359285][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.384021][ T9709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.477884][ T9709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.629964][ T9709] team0: Port device team_slave_0 added [ 237.667393][ T9709] team0: Port device team_slave_1 added [ 237.774971][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.784224][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.812775][ T9709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.892441][ T55] Bluetooth: hci2: command tx timeout [ 237.920820][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.922532][ T9830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 237.928187][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.965066][ T9709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.186768][ T9709] hsr_slave_0: entered promiscuous mode [ 238.224284][ T9709] hsr_slave_1: entered promiscuous mode [ 238.238157][ T9731] chnl_net:caif_netlink_parms(): no params data found [ 238.364330][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 238.450461][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.532214][ T55] Bluetooth: hci4: command tx timeout [ 238.725707][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.773047][ T55] Bluetooth: hci1: command tx timeout [ 238.939848][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.070534][ T9868] netlink: 48 bytes leftover after parsing attributes in process `syz.3.896'. [ 239.119066][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.152130][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.159460][ T9747] bridge_slave_0: entered allmulticast mode [ 239.192353][ T9747] bridge_slave_0: entered promiscuous mode [ 239.220679][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.250242][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.261368][ T9747] bridge_slave_1: entered allmulticast mode [ 239.284019][ T9747] bridge_slave_1: entered promiscuous mode [ 239.293920][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.301096][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.327124][ T9731] bridge_slave_0: entered allmulticast mode [ 239.337896][ T9875] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 239.344250][ T9731] bridge_slave_0: entered promiscuous mode [ 239.409909][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.671773][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.687073][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 239.702621][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.709953][ T9731] bridge_slave_1: entered allmulticast mode [ 239.718587][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 239.730363][ T9731] bridge_slave_1: entered promiscuous mode [ 239.811406][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.909449][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.934866][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.973015][ T55] Bluetooth: hci2: command tx timeout [ 240.000865][ T9747] team0: Port device team_slave_0 added [ 240.059202][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.104625][ T9747] team0: Port device team_slave_1 added [ 240.178947][ T9709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.338831][ T9709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.366674][ T9731] team0: Port device team_slave_0 added [ 240.374872][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.381846][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.409602][ T9898] xt_CONNSECMARK: invalid mode: 0 [ 240.423752][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.441142][ T9731] team0: Port device team_slave_1 added [ 240.484368][ T9709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.505771][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.513661][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.545024][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.613634][ T55] Bluetooth: hci4: command tx timeout [ 240.652238][ T9886] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 240.746535][ T9709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.822137][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.832338][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.858900][ T5829] Bluetooth: hci1: command tx timeout [ 240.867606][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.880711][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.888445][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.915225][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.043049][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 241.073302][ T9747] hsr_slave_0: entered promiscuous mode [ 241.080228][ T9747] hsr_slave_1: entered promiscuous mode [ 241.087103][ T9747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.097897][ T9747] Cannot create hsr debugfs directory [ 241.110561][ T9913] pimreg: entered allmulticast mode [ 241.171551][ T1105] bridge_slave_1: left allmulticast mode [ 241.192008][ T1105] bridge_slave_1: left promiscuous mode [ 241.199010][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.252712][ T1105] bridge_slave_0: left allmulticast mode [ 241.258417][ T1105] bridge_slave_0: left promiscuous mode [ 241.265265][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.276338][ T1105] bridge_slave_1: left allmulticast mode [ 241.282516][ T1105] bridge_slave_1: left promiscuous mode [ 241.288296][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.297793][ T1105] bridge_slave_0: left allmulticast mode [ 241.305715][ T1105] bridge_slave_0: left promiscuous mode [ 241.311451][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.328100][ T1105] bridge_slave_1: left allmulticast mode [ 241.335758][ T1105] bridge_slave_1: left promiscuous mode [ 241.341533][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.358329][ T1105] bridge_slave_0: left allmulticast mode [ 241.364901][ T1105] bridge_slave_0: left promiscuous mode [ 241.370632][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.052983][ T5829] Bluetooth: hci2: command tx timeout [ 242.206960][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.222587][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.234216][ T1105] bond0 (unregistering): Released all slaves [ 242.329385][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.341060][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.351850][ T1105] bond0 (unregistering): Released all slaves [ 242.450281][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.463451][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.474750][ T1105] bond0 (unregistering): Released all slaves [ 242.506846][ T9918] tipc: New replicast peer: 255.255.255.255 [ 242.518078][ T9918] tipc: Enabled bearer , priority 10 [ 242.648263][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 242.693427][ T5829] Bluetooth: hci4: command tx timeout [ 242.723346][ T9731] hsr_slave_0: entered promiscuous mode [ 242.747370][ T9731] hsr_slave_1: entered promiscuous mode [ 242.754270][ T9731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.762051][ T9731] Cannot create hsr debugfs directory [ 242.887360][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.915'. [ 242.942343][ T5829] Bluetooth: hci1: command 0x0401 tx timeout [ 243.040398][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.915'. [ 243.319640][ T9709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.358988][ T9709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.403517][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 243.450088][ T9709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.478110][ T9709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.636615][ T5915] tipc: Node number set to 11821 [ 244.595770][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.647880][ T9709] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.740267][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.747514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.783838][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 245.001958][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.009203][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.229238][ T9993] delete_channel: no stack [ 245.245415][ T9993] delete_channel: no stack [ 245.280632][ T9731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.433581][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 245.451809][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.931'. [ 245.477530][ T9731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.586882][T10001] netlink: 80 bytes leftover after parsing attributes in process `syz.5.931'. [ 245.679836][ T9731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.743009][ T9731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.120877][ T1105] hsr_slave_0: left promiscuous mode [ 246.148689][ T1105] hsr_slave_1: left promiscuous mode [ 246.155662][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.182385][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.200498][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.218421][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.249336][ T1105] hsr_slave_0: left promiscuous mode [ 246.271805][ T1105] hsr_slave_1: left promiscuous mode [ 246.296704][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.313287][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.324435][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.342247][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.366643][ T1105] hsr_slave_0: left promiscuous mode [ 246.380140][ T1105] hsr_slave_1: left promiscuous mode [ 246.386358][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.395407][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.405506][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.413125][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.468065][ T1105] veth1_macvtap: left promiscuous mode [ 246.473697][ T1105] veth0_macvtap: left promiscuous mode [ 246.479330][ T1105] veth1_vlan: left promiscuous mode [ 246.485196][ T1105] veth0_vlan: left promiscuous mode [ 246.491662][ T1105] veth1_macvtap: left promiscuous mode [ 246.497334][ T1105] veth0_macvtap: left promiscuous mode [ 246.503129][ T1105] veth1_vlan: left promiscuous mode [ 246.508462][ T1105] veth0_vlan: left promiscuous mode [ 246.515852][ T1105] veth1_macvtap: left promiscuous mode [ 246.521509][ T1105] veth0_macvtap: left promiscuous mode [ 246.527316][ T1105] veth1_vlan: left promiscuous mode [ 246.532942][ T1105] veth0_vlan: left promiscuous mode [ 247.198905][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 247.243195][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 247.990984][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 248.031769][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 248.770559][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 248.821233][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 249.581860][ T9709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.613685][T10034] gtp1: entered promiscuous mode [ 249.769803][ T9747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.856981][ T9731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.882125][ T9747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.916974][ T9747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.011327][ T9747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.100926][ T9709] veth0_vlan: entered promiscuous mode [ 250.170620][T10053] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 250.178655][ T9731] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.217592][ T9709] veth1_vlan: entered promiscuous mode [ 250.300465][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.307726][ T8813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.433363][T10058] macvlan2: entered promiscuous mode [ 250.446296][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.453518][ T8813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.688186][ T9709] veth0_macvtap: entered promiscuous mode [ 250.741803][ T9709] veth1_macvtap: entered promiscuous mode [ 250.956614][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.007485][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.028735][T10076] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 251.050447][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.050712][T10076] netlink: 'syz.3.946': attribute type 4 has an invalid length. [ 251.068224][T10078] netlink: 'syz.3.946': attribute type 4 has an invalid length. [ 251.083247][T10078] netlink: 152 bytes leftover after parsing attributes in process `syz.3.946'. [ 251.115540][ T9709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.129183][T10076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.946'. [ 251.152142][ T9709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.181630][ T9709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.209367][ T9709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.259466][T10078] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 251.288902][T10076] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 251.491544][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.520603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.527815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.679065][ T9731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.696910][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.704185][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.774587][T10103] netlink: 144 bytes leftover after parsing attributes in process `syz.3.949'. [ 251.816857][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.845052][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.014196][ T8813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.065178][ T9731] veth0_vlan: entered promiscuous mode [ 252.079036][ T8813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.089472][ T9747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.156212][T10105] netlink: 'syz.5.950': attribute type 1 has an invalid length. [ 252.185819][ T9731] veth1_vlan: entered promiscuous mode [ 252.417166][T10113] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.951'. [ 252.489286][ T9731] veth0_macvtap: entered promiscuous mode [ 252.520860][ T9731] veth1_macvtap: entered promiscuous mode [ 252.740616][ T8811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.056341][ T8811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.140692][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.169348][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.209848][ T8811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.251248][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.300521][ T8811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.328103][ T9731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.340032][ T9731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.349633][ T9731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.358769][ T9731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.450555][ T9747] veth0_vlan: entered promiscuous mode [ 253.477679][ T9747] veth1_vlan: entered promiscuous mode [ 253.665707][ T8811] bridge_slave_1: left allmulticast mode [ 253.671392][ T8811] bridge_slave_1: left promiscuous mode [ 253.679779][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.696156][ T8811] bridge_slave_0: left allmulticast mode [ 253.701847][ T8811] bridge_slave_0: left promiscuous mode [ 253.707916][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.220415][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.236379][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.248333][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.272860][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.282048][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.367135][ T8811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.378876][ T8811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.389729][ T8811] bond0 (unregistering): Released all slaves [ 254.416567][T10143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.954'. [ 254.432231][T10143] netlink: 21 bytes leftover after parsing attributes in process `syz.3.954'. [ 254.441151][T10143] netlink: 21 bytes leftover after parsing attributes in process `syz.3.954'. [ 254.483513][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.498333][ T9747] veth0_macvtap: entered promiscuous mode [ 254.512827][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.688189][ T9747] veth1_macvtap: entered promiscuous mode [ 254.739950][ T8813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.766952][ T8813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.930720][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 255.021623][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.130920][T10167] netlink: 48 bytes leftover after parsing attributes in process `syz.5.959'. [ 255.147393][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.195905][ T9747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.229434][ T9747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.242158][ T9747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.251060][ T9747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.286545][T10174] netlink: 'syz.3.960': attribute type 10 has an invalid length. [ 255.560354][T10180] Unsupported ieee802154 address type: 0 [ 255.641166][ T9731] syz-executor (9731) used greatest stack depth: 19968 bytes left [ 255.657425][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.665016][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.718238][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'. [ 256.030779][ T8811] hsr_slave_0: left promiscuous mode [ 256.043844][ T8811] hsr_slave_1: left promiscuous mode [ 256.049963][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.078217][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.087233][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.095019][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.116136][ T8811] veth1_macvtap: left promiscuous mode [ 256.121704][ T8811] veth0_macvtap: left promiscuous mode [ 256.128240][ T8811] veth1_vlan: left promiscuous mode [ 256.134793][ T8811] veth0_vlan: left promiscuous mode [ 256.376162][ T55] Bluetooth: hci1: command tx timeout [ 256.589387][ T8811] team0 (unregistering): Port device team_slave_1 removed [ 256.637738][ T8811] team0 (unregistering): Port device team_slave_0 removed [ 256.861486][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.5.964'. [ 257.239670][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.964'. [ 257.313441][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.315759][T10201] netlink: 'syz.3.966': attribute type 21 has an invalid length. [ 257.328952][T10201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.966'. [ 257.343965][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.356935][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.368649][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.378516][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.425952][T10193] netlink: 128 bytes leftover after parsing attributes in process `syz.5.964'. [ 257.436707][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.445055][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.551092][ T7646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.572655][ T7646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.199549][T10150] chnl_net:caif_netlink_parms(): no params data found [ 258.453225][ T5829] Bluetooth: hci1: command tx timeout [ 258.628592][ T8811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.839075][ T8811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.087888][T10240] netlink: 'syz.5.972': attribute type 1 has an invalid length. [ 259.124576][ T8811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.209127][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.235223][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.244321][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.256970][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.265761][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.274140][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.280011][T10150] bridge_slave_0: entered allmulticast mode [ 259.287827][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.289853][T10150] bridge_slave_0: entered promiscuous mode [ 259.381641][T10242] bond1: (slave gretap1): making interface the new active one [ 259.392282][T10254] netlink: 80 bytes leftover after parsing attributes in process `syz.3.974'. [ 259.411480][T10242] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 259.420943][ T55] Bluetooth: hci2: command tx timeout [ 259.452437][ T8811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.479127][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.527794][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.551760][T10150] bridge_slave_1: entered allmulticast mode [ 259.560614][T10150] bridge_slave_1: entered promiscuous mode [ 259.666691][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 259.670517][T10150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.679268][T10260] netlink: 'syz.3.976': attribute type 11 has an invalid length. [ 259.689717][T10150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.712763][T10260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.976'. [ 259.988799][T10265] xt_ecn: cannot match TCP bits for non-tcp packets [ 260.025539][T10150] team0: Port device team_slave_0 added [ 260.101773][T10150] team0: Port device team_slave_1 added [ 260.164742][ T8811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.360514][ T8811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.450114][T10150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.468680][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.530608][T10150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.546076][ T55] Bluetooth: hci1: command tx timeout [ 260.578246][T10200] chnl_net:caif_netlink_parms(): no params data found [ 260.849289][ T8811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.903614][T10150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.943799][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.022974][T10150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.132348][T10298] syz.5.982: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.151814][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.5.982 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 261.151851][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.151878][T10298] Call Trace: [ 261.151890][T10298] [ 261.151899][T10298] dump_stack_lvl+0x189/0x250 [ 261.151940][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.151971][T10298] ? __pfx__printk+0x10/0x10 [ 261.151993][T10298] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.152017][T10298] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.152042][T10298] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 261.152068][T10298] warn_alloc+0x214/0x310 [ 261.152108][T10298] ? __pfx_warn_alloc+0x10/0x10 [ 261.152151][T10298] ? __get_vm_area_node+0x28f/0x300 [ 261.152189][T10298] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 261.152220][T10298] ? do_syscall_64+0xf6/0x210 [ 261.152281][T10298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.152312][T10298] ? __kasan_kmalloc_large+0x1a/0xa0 [ 261.152344][T10298] ? rcu_is_watching+0x15/0xb0 [ 261.152376][T10298] ? hash_ipmac_create+0x358/0xfe0 [ 261.152403][T10298] ? hash_ipmac_create+0x358/0xfe0 [ 261.152428][T10298] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 261.152457][T10298] ? hash_ipmac_create+0x358/0xfe0 [ 261.152484][T10298] ? hash_ipmac_create+0x2fe/0xfe0 [ 261.152516][T10298] hash_ipmac_create+0x358/0xfe0 [ 261.152553][T10298] ? __nla_parse+0x40/0x60 [ 261.152579][T10298] ? __pfx_hash_ipmac_create+0x10/0x10 [ 261.152609][T10298] ip_set_create+0xa97/0x1940 [ 261.152647][T10298] ? ip_set_create+0x4a2/0x1940 [ 261.152690][T10298] ? __pfx_ip_set_create+0x10/0x10 [ 261.152760][T10298] nfnetlink_rcv_msg+0xb4a/0x1130 [ 261.152792][T10298] ? __kernel_text_address+0xd/0x40 [ 261.152820][T10298] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 261.152872][T10298] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 261.152955][T10298] netlink_rcv_skb+0x219/0x490 [ 261.152979][T10298] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 261.153012][T10298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.153051][T10298] ? apparmor_capable+0x137/0x1b0 [ 261.153084][T10298] ? bpf_lsm_capable+0x9/0x20 [ 261.153113][T10298] ? security_capable+0x7e/0x2e0 [ 261.153146][T10298] nfnetlink_rcv+0x273/0x2530 [ 261.153179][T10298] ? __dev_queue_xmit+0x27e/0x3a70 [ 261.153210][T10298] ? __dev_queue_xmit+0x27e/0x3a70 [ 261.153240][T10298] ? __dev_queue_xmit+0x27e/0x3a70 [ 261.153273][T10298] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 261.153316][T10298] ? __dev_queue_xmit+0x27e/0x3a70 [ 261.153349][T10298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.153373][T10298] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 261.153410][T10298] ? __pfx___dev_queue_xmit+0x10/0x10 [ 261.153458][T10298] ? ref_tracker_free+0x63a/0x7d0 [ 261.153480][T10298] ? __copy_skb_header+0xa7/0x550 [ 261.153513][T10298] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.153536][T10298] ? __skb_clone+0x63/0x7a0 [ 261.153571][T10298] ? __skb_clone+0x483/0x7a0 [ 261.153610][T10298] ? skb_clone+0x246/0x3a0 [ 261.153656][T10298] ? __netlink_deliver_tap+0x807/0x850 [ 261.153681][T10298] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.153713][T10298] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.153737][T10298] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.153768][T10298] netlink_unicast+0x75b/0x8d0 [ 261.153803][T10298] netlink_sendmsg+0x805/0xb30 [ 261.153840][T10298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.153870][T10298] ? aa_sock_msg_perm+0x94/0x160 [ 261.153896][T10298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.153921][T10298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.153948][T10298] __sock_sendmsg+0x219/0x270 [ 261.153973][T10298] ____sys_sendmsg+0x505/0x830 [ 261.154009][T10298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.154050][T10298] ? import_iovec+0x74/0xa0 [ 261.154084][T10298] ___sys_sendmsg+0x21f/0x2a0 [ 261.154116][T10298] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.154187][T10298] ? __fget_files+0x2a/0x420 [ 261.154214][T10298] ? __fget_files+0x3a0/0x420 [ 261.154255][T10298] __x64_sys_sendmsg+0x19b/0x260 [ 261.154288][T10298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.154336][T10298] ? do_syscall_64+0xba/0x210 [ 261.154369][T10298] do_syscall_64+0xf6/0x210 [ 261.154398][T10298] ? clear_bhb_loop+0x60/0xb0 [ 261.154424][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.154445][T10298] RIP: 0033:0x7f6e1db8e969 [ 261.154464][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.154483][T10298] RSP: 002b:00007f6e1b9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.154505][T10298] RAX: ffffffffffffffda RBX: 00007f6e1ddb5fa0 RCX: 00007f6e1db8e969 [ 261.154521][T10298] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 261.154533][T10298] RBP: 00007f6e1dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.154546][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.154559][T10298] R13: 0000000000000000 R14: 00007f6e1ddb5fa0 R15: 00007fffcae3a968 [ 261.154592][T10298] [ 261.651575][ T55] Bluetooth: hci4: command tx timeout [ 261.658534][ T55] Bluetooth: hci2: command tx timeout [ 261.672700][T10298] Mem-Info: [ 261.675867][T10298] active_anon:5770 inactive_anon:0 isolated_anon:0 [ 261.675867][T10298] active_file:1489 inactive_file:39956 isolated_file:0 [ 261.675867][T10298] unevictable:768 dirty:34 writeback:0 [ 261.675867][T10298] slab_reclaimable:10816 slab_unreclaimable:112963 [ 261.675867][T10298] mapped:36568 shmem:1480 pagetables:833 [ 261.675867][T10298] sec_pagetables:0 bounce:0 [ 261.675867][T10298] kernel_misc_reclaimable:0 [ 261.675867][T10298] free:1315706 free_pcp:701 free_cma:0 [ 261.724773][T10298] Node 0 active_anon:22780kB inactive_anon:0kB active_file:5956kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146172kB dirty:136kB writeback:0kB shmem:4384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11780kB pagetables:3332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.759096][T10298] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.790659][T10298] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.826741][T10298] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 261.828489][ T8811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.832916][T10298] Node 0 DMA32 free:1333276kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:22612kB inactive_anon:0kB active_file:5956kB inactive_file:159528kB unevictable:1536kB writepending:140kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:3248kB local_pcp:2416kB free_cma:0kB [ 261.879917][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 261.884749][T10298] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 261.911670][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 261.916530][T10298] Node 1 Normal free:3914076kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.953837][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 261.958644][T10298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.971496][T10298] Node 0 DMA32: 3*4kB (UE) 10*8kB (UME) 8*16kB (UME) 42*32kB (UME) 32*64kB (UME) 30*128kB (UME) 45*256kB (UME) 29*512kB (UME) 15*1024kB (UME) 11*2048kB (UME) 308*4096kB (UM) = 1333276kB [ 261.990798][T10298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 262.003594][T10298] Node 1 Normal: 197*4kB (UE) 65*8kB (UME) 44*16kB (UME) 184*32kB (UME) 104*64kB (UME) 33*128kB (UME) 14*256kB (UM) 9*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3914076kB [ 262.024380][T10298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.034087][T10298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.048129][T10298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.060143][T10298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.069571][T10298] 42921 total pagecache pages [ 262.074341][T10298] 0 pages in swap cache [ 262.078525][T10298] Free swap = 124996kB [ 262.082774][T10298] Total swap = 124996kB [ 262.086953][T10298] 2097051 pages RAM [ 262.090784][T10298] 0 pages HighMem/MovableOnly [ 262.095550][T10298] 424362 pages reserved [ 262.099734][T10298] 0 pages cma reserved [ 262.279303][T10150] hsr_slave_0: entered promiscuous mode [ 262.288505][ T30] audit: type=1800 audit(1747764945.871:5): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.983" name="memory.events" dev="tmpfs" ino=1773 res=0 errno=0 [ 262.318873][T10150] hsr_slave_1: entered promiscuous mode [ 262.482460][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.507029][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.517780][T10200] bridge_slave_0: entered allmulticast mode [ 262.533660][T10200] bridge_slave_0: entered promiscuous mode [ 262.547803][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.568541][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.576377][T10200] bridge_slave_1: entered allmulticast mode [ 262.587023][T10200] bridge_slave_1: entered promiscuous mode [ 262.612975][ T5829] Bluetooth: hci1: command tx timeout [ 262.964895][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.977777][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.999410][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.989'. [ 263.030397][ T8811] bridge_slave_1: left allmulticast mode [ 263.036451][ T8811] bridge_slave_1: left promiscuous mode [ 263.052337][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.066158][ T8811] bridge_slave_0: left allmulticast mode [ 263.073378][ T8811] bridge_slave_0: left promiscuous mode [ 263.079829][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.096653][ T8811] bridge_slave_1: left allmulticast mode [ 263.116726][ T8811] bridge_slave_1: left promiscuous mode [ 263.131453][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.156053][ T8811] bridge_slave_0: left allmulticast mode [ 263.161770][ T8811] bridge_slave_0: left promiscuous mode [ 263.168158][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.742145][ T5829] Bluetooth: hci2: command tx timeout [ 263.748374][ T55] Bluetooth: hci4: command tx timeout [ 264.099350][ T8811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.109326][T10348] netlink: 212404 bytes leftover after parsing attributes in process `syz.5.994'. [ 264.124962][ T8811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.140223][ T8811] bond0 (unregistering): Released all slaves [ 264.240680][ T8811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.252252][ T8811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.267010][ T8811] bond0 (unregistering): Released all slaves [ 264.346815][T10200] team0: Port device team_slave_0 added [ 264.423665][T10200] team0: Port device team_slave_1 added [ 264.490727][T10350] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 264.517582][T10350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.995'. [ 264.663752][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.671758][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.735005][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.771478][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.796583][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.831200][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.844857][T10363] netlink: 'syz.3.998': attribute type 21 has an invalid length. [ 264.917021][T10363] netlink: 'syz.3.998': attribute type 6 has an invalid length. [ 264.928704][T10363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.998'. [ 265.159354][T10200] hsr_slave_0: entered promiscuous mode [ 265.193362][T10200] hsr_slave_1: entered promiscuous mode [ 265.201140][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.219992][T10200] Cannot create hsr debugfs directory [ 265.311664][T10246] chnl_net:caif_netlink_parms(): no params data found [ 265.815003][T10382] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 265.815359][ T5829] Bluetooth: hci2: command tx timeout [ 265.831367][ T5829] Bluetooth: hci4: command tx timeout [ 266.462750][T10405] IPv4: Oversized IP packet from 172.20.20.24 [ 266.471582][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 266.478289][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 266.562759][T10395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.588862][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.613306][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.630304][T10246] bridge_slave_0: entered allmulticast mode [ 266.652255][T10246] bridge_slave_0: entered promiscuous mode [ 266.672608][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.679870][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.690101][T10246] bridge_slave_1: entered allmulticast mode [ 266.700017][T10246] bridge_slave_1: entered promiscuous mode [ 266.748835][ T8811] hsr_slave_0: left promiscuous mode [ 266.757892][ T8811] hsr_slave_1: left promiscuous mode [ 266.765150][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.773700][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.781774][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.789586][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.802736][ T8811] hsr_slave_0: left promiscuous mode [ 266.808924][ T8811] hsr_slave_1: left promiscuous mode [ 266.816509][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.824581][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.833349][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.840914][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.886360][ T8811] veth1_macvtap: left promiscuous mode [ 266.892596][ T8811] veth0_macvtap: left promiscuous mode [ 266.898267][ T8811] veth1_vlan: left promiscuous mode [ 266.903881][ T8811] veth0_vlan: left promiscuous mode [ 266.910952][ T8811] veth1_macvtap: left promiscuous mode [ 266.916958][ T8811] veth0_macvtap: left promiscuous mode [ 266.922786][ T8811] veth1_vlan: left promiscuous mode [ 266.928129][ T8811] veth0_vlan: left promiscuous mode [ 267.486371][ T8811] team0 (unregistering): Port device team_slave_1 removed [ 267.535166][ T8811] team0 (unregistering): Port device team_slave_0 removed [ 267.897087][ T5829] Bluetooth: hci4: command tx timeout [ 268.291168][ T8811] team0 (unregistering): Port device team_slave_1 removed [ 268.338891][ T8811] team0 (unregistering): Port device team_slave_0 removed [ 268.810800][T10246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.925537][T10246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.077797][T10246] team0: Port device team_slave_0 added [ 269.107943][T10150] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.141379][T10246] team0: Port device team_slave_1 added [ 269.337133][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1015'. [ 269.413239][T10150] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.436012][T10246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.444378][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.470992][T10246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.496191][T10246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.507970][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.535040][T10246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.547342][T10150] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.566406][T10150] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.764302][T10448] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 269.790646][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 269.799504][T10246] hsr_slave_0: entered promiscuous mode [ 269.807786][T10246] hsr_slave_1: entered promiscuous mode [ 269.825811][T10246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.866036][T10246] Cannot create hsr debugfs directory [ 270.141486][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1023'. [ 270.575836][T10200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.657935][T10200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.676591][T10477] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 270.688542][T10200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.695433][T10477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1027'. [ 270.704578][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1028'. [ 271.113411][T10200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.220597][T10482] veth3: entered allmulticast mode [ 271.257556][T10150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.485281][T10150] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.560093][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.567364][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.633674][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.640909][ T8811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.807882][T10246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.828501][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.846105][T10246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.858778][T10246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.881823][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.915523][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.922748][ T7646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.938966][T10246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.964212][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.971410][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.016497][T10150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.391638][T10518] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 272.400002][T10246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.492199][T10246] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.541635][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.548917][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.605076][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.612330][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.753168][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.843522][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.050643][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 273.070268][T10538] x_tables: unsorted underflow at hook 3 [ 273.073879][T10150] veth0_vlan: entered promiscuous mode [ 273.103508][T10200] veth0_vlan: entered promiscuous mode [ 273.136536][T10150] veth1_vlan: entered promiscuous mode [ 273.158911][T10200] veth1_vlan: entered promiscuous mode [ 273.289913][T10200] veth0_macvtap: entered promiscuous mode [ 273.357032][T10200] veth1_macvtap: entered promiscuous mode [ 273.433386][T10150] veth0_macvtap: entered promiscuous mode [ 273.492700][T10150] veth1_macvtap: entered promiscuous mode [ 273.520787][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.596758][T10150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.633121][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.640865][T10555] tipc: Enabled bearer , priority 10 [ 273.660237][T10246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.688244][T10150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.751808][T10200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.773331][T10200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.782822][T10200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.791778][T10200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.813324][T10565] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1047'. [ 273.844227][T10150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.862029][T10150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.870790][T10150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.896594][T10150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.328789][T10246] veth0_vlan: entered promiscuous mode [ 274.430699][T10246] veth1_vlan: entered promiscuous mode [ 274.538965][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.592138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.675895][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.697437][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.765242][T10246] veth0_macvtap: entered promiscuous mode [ 274.944547][T10246] veth1_macvtap: entered promiscuous mode [ 274.990893][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.032973][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.111540][T10246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.155900][T10246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.173211][ T8808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.181084][ T8808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.184952][T10246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.197259][T10246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.206386][T10246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.215372][T10246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.496957][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.513418][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.794057][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.809248][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.991661][ T8802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.085984][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 276.211035][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 276.251708][ T8802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.516203][ T8802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.693490][ T8802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.013314][ T8802] bridge_slave_1: left allmulticast mode [ 277.019090][ T8802] bridge_slave_1: left promiscuous mode [ 277.049697][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.095000][ T8802] bridge_slave_0: left allmulticast mode [ 277.100711][ T8802] bridge_slave_0: left promiscuous mode [ 277.122608][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.171404][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.182988][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.194610][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.204353][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.215346][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.512455][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'. [ 278.187847][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.200706][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.211554][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.234909][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.250463][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.311439][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.324095][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.336943][ T8802] bond0 (unregistering): Released all slaves [ 278.607507][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.626791][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.635253][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.643615][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.654560][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.669673][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 279.260104][ T5829] Bluetooth: hci1: command tx timeout [ 279.799289][T10636] chnl_net:caif_netlink_parms(): no params data found [ 279.878898][T10704] team0: Device vti1 is of different type [ 280.091588][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1068'. [ 280.294753][ T5829] Bluetooth: hci2: command tx timeout [ 280.545507][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.570835][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.589422][T10636] bridge_slave_0: entered allmulticast mode [ 280.601803][T10636] bridge_slave_0: entered promiscuous mode [ 280.661336][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.668978][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.680724][T10636] bridge_slave_1: entered allmulticast mode [ 280.716690][T10636] bridge_slave_1: entered promiscuous mode [ 280.785249][ T5829] Bluetooth: hci4: command tx timeout [ 280.885534][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 281.019980][ T8802] hsr_slave_0: left promiscuous mode [ 281.033244][ T8802] hsr_slave_1: left promiscuous mode [ 281.039241][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.047839][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.057707][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.066275][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.096524][ T8802] veth1_macvtap: left promiscuous mode [ 281.102343][ T8802] veth0_macvtap: left promiscuous mode [ 281.108142][ T8802] veth1_vlan: left promiscuous mode [ 281.113986][ T8802] veth0_vlan: left promiscuous mode [ 281.347777][ T5829] Bluetooth: hci1: command tx timeout [ 281.604210][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 281.650445][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 282.284603][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.292361][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1074'. [ 282.309109][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.372694][ T5829] Bluetooth: hci2: command tx timeout [ 282.496361][T10746] netlink: 'syz.5.1075': attribute type 11 has an invalid length. [ 282.577517][T10636] team0: Port device team_slave_0 added [ 282.643706][T10636] team0: Port device team_slave_1 added [ 282.852489][ T5829] Bluetooth: hci4: command tx timeout [ 282.975640][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.993094][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.021616][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.166008][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.181943][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.238679][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.312249][T10663] chnl_net:caif_netlink_parms(): no params data found [ 283.412064][ T5829] Bluetooth: hci1: command tx timeout [ 283.597922][T10636] hsr_slave_0: entered promiscuous mode [ 283.605711][T10636] hsr_slave_1: entered promiscuous mode [ 283.613424][T10636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.621618][T10636] Cannot create hsr debugfs directory [ 284.085798][ T8802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.089046][T10814] netlink: 'syz.5.1088': attribute type 10 has an invalid length. [ 284.210498][T10814] bridge0: port 3(team0) entered blocking state [ 284.229345][T10814] bridge0: port 3(team0) entered disabled state [ 284.236469][T10814] team0: entered allmulticast mode [ 284.244375][T10814] team_slave_0: entered allmulticast mode [ 284.250245][T10814] team_slave_1: entered allmulticast mode [ 284.259404][T10814] team0: entered promiscuous mode [ 284.267784][T10814] team_slave_0: entered promiscuous mode [ 284.274029][T10814] team_slave_1: entered promiscuous mode [ 284.280844][T10814] bridge0: port 3(team0) entered blocking state [ 284.287360][T10814] bridge0: port 3(team0) entered forwarding state [ 284.370858][ T8802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.406509][T10668] chnl_net:caif_netlink_parms(): no params data found [ 284.420087][T10821] C: renamed from team_slave_0 [ 284.434121][T10821] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 284.442663][T10821] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 284.463474][ T5829] Bluetooth: hci2: command tx timeout [ 284.704828][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.718833][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.729829][T10663] bridge_slave_0: entered allmulticast mode [ 284.743899][T10663] bridge_slave_0: entered promiscuous mode [ 284.794069][ T8802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.895871][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.920517][T10663] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.932968][ T5829] Bluetooth: hci4: command tx timeout [ 284.943436][T10663] bridge_slave_1: entered allmulticast mode [ 284.972102][T10663] bridge_slave_1: entered promiscuous mode [ 284.992551][T10844] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.1094'. [ 285.084099][ T8802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.153260][T10852] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 285.280522][T10663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.352274][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1100'. [ 285.369012][T10858] Unsupported ieee802154 address type: 0 [ 285.386492][ T5957] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1 [ 285.411667][ T5957] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 285.464938][T10663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.480033][T10668] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.487916][T10668] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.496063][T10668] bridge_slave_0: entered allmulticast mode [ 285.504366][T10668] bridge_slave_0: entered promiscuous mode [ 285.504887][ T5829] Bluetooth: hci1: command tx timeout [ 285.527416][T10865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1101'. [ 285.610046][T10668] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.651054][T10668] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.681753][T10668] bridge_slave_1: entered allmulticast mode [ 285.707096][T10668] bridge_slave_1: entered promiscuous mode [ 285.786530][T10874] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1102'. [ 285.848339][T10872] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1102'. [ 285.903744][T10663] team0: Port device team_slave_0 added [ 285.916775][T10663] team0: Port device team_slave_1 added [ 285.925774][T10874] gretap0: entered promiscuous mode [ 285.962258][T10872] 0ªî{X¹¦: renamed from gretap0 [ 285.978914][T10872] 0ªî{X¹¦: left promiscuous mode [ 285.986534][T10872] 0ªî{X¹¦: entered allmulticast mode [ 285.995933][T10872] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 286.194582][T10663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.201571][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.245362][T10663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.278217][T10668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.359000][T10663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.375671][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.431301][T10663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.488054][T10668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.535839][ T5829] Bluetooth: hci2: command tx timeout [ 286.589982][ T8802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.875495][ T8802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.909315][T10668] team0: Port device team_slave_0 added [ 286.946568][T10668] team0: Port device team_slave_1 added [ 286.976595][T10663] hsr_slave_0: entered promiscuous mode [ 286.993542][T10663] hsr_slave_1: entered promiscuous mode [ 287.008841][T10663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.025403][ T5829] Bluetooth: hci4: command tx timeout [ 287.032105][T10663] Cannot create hsr debugfs directory [ 287.274172][ T8802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.430590][T10668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.443078][T10668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.502448][T10668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.525503][T10668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.551608][T10668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.581157][T10668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.676094][ T8802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.817540][T10919] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1112'. [ 287.906990][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 287.958730][T10921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.994293][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.003687][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.012053][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.021101][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.036451][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.180264][T10668] hsr_slave_0: entered promiscuous mode [ 288.187996][T10668] hsr_slave_1: entered promiscuous mode [ 288.194581][T10668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.203200][T10668] Cannot create hsr debugfs directory [ 288.260322][T10636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.307655][T10636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.370778][T10636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.380847][T10636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.421058][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 288.430606][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 288.934629][ T8802] bridge_slave_1: left allmulticast mode [ 288.940356][ T8802] bridge_slave_1: left promiscuous mode [ 288.966773][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.050453][ T8802] bridge_slave_0: left allmulticast mode [ 289.084776][ T8802] bridge_slave_0: left promiscuous mode [ 289.090628][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.128073][ T8802] bridge_slave_1: left allmulticast mode [ 289.147064][ T8802] bridge_slave_1: left promiscuous mode [ 289.158043][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.187735][ T8802] bridge_slave_0: left allmulticast mode [ 289.194437][ T8802] bridge_slave_0: left promiscuous mode [ 289.194565][T10949] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1117'. [ 289.200224][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.996425][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.032062][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.054076][ T8802] bond0 (unregistering): Released all slaves [ 290.135583][ T5829] Bluetooth: hci5: command tx timeout [ 290.154504][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 290.196417][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.208213][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.227039][ T8802] bond0 (unregistering): Released all slaves [ 291.039064][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 291.158105][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.933452][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.214396][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.221652][ T8813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.240057][ T5829] Bluetooth: hci5: command tx timeout [ 292.290188][T10925] chnl_net:caif_netlink_parms(): no params data found [ 292.376021][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.383262][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.534075][ T8802] hsr_slave_0: left promiscuous mode [ 292.541368][ T8802] hsr_slave_1: left promiscuous mode [ 292.573131][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.580849][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.593163][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.600631][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.636157][ T8802] hsr_slave_0: left promiscuous mode [ 292.654994][ T8802] hsr_slave_1: left promiscuous mode [ 292.660933][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.670732][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.690303][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.700935][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.754391][ T8802] veth1_macvtap: left promiscuous mode [ 292.760029][ T8802] veth0_macvtap: left promiscuous mode [ 292.766906][ T8802] veth1_vlan: left promiscuous mode [ 292.774044][ T8802] veth0_vlan: left promiscuous mode [ 292.780929][ T8802] veth1_macvtap: left promiscuous mode [ 292.787125][ T8802] veth0_macvtap: left promiscuous mode [ 292.794809][ T8802] veth1_vlan: left promiscuous mode [ 292.801198][ T8802] veth0_vlan: left promiscuous mode [ 293.540387][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 293.625210][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 293.690688][T11039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.292627][ T5829] Bluetooth: hci5: command tx timeout [ 294.459377][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 294.499215][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 295.115274][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.124065][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 295.143566][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.150878][T10925] bridge_slave_0: entered allmulticast mode [ 295.178380][T10925] bridge_slave_0: entered promiscuous mode [ 295.245873][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.275807][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.285966][T10925] bridge_slave_1: entered allmulticast mode [ 295.293844][T10925] bridge_slave_1: entered promiscuous mode [ 295.431347][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.473251][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.680996][T10925] team0: Port device team_slave_0 added [ 295.723044][T10925] team0: Port device team_slave_1 added [ 295.860573][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 295.903998][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.927770][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.954626][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.970092][T10663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.020079][T11071] geneve2: entered promiscuous mode [ 296.082751][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.102435][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.140544][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.190513][T10663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.227895][T10663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.270117][T10663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.336040][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.372534][ T5829] Bluetooth: hci5: command tx timeout [ 296.563222][T11084] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 296.577751][T10925] hsr_slave_0: entered promiscuous mode [ 296.594126][T10925] hsr_slave_1: entered promiscuous mode [ 296.634225][T10668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.703110][T10668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.727170][T10668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.788026][T10668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.899637][ T8802] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.036322][ T8802] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.050642][T10636] veth0_vlan: entered promiscuous mode [ 297.106525][ T8802] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.161600][ T8802] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.174763][T11098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1134'. [ 297.195228][T11098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1134'. [ 297.225532][T10636] veth1_vlan: entered promiscuous mode [ 297.417317][T10663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.521308][T10636] veth0_macvtap: entered promiscuous mode [ 297.549147][T10663] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.573029][ T8802] team0: left allmulticast mode [ 297.580028][ T8802] team_slave_0: left allmulticast mode [ 297.586811][ T8802] team_slave_1: left allmulticast mode [ 297.598228][ T8802] team0: left promiscuous mode [ 297.606073][ T8802] team_slave_0: left promiscuous mode [ 297.618913][ T8802] team_slave_1: left promiscuous mode [ 297.627904][ T8802] bridge0: port 3(team0) entered disabled state [ 297.648096][ T8802] bridge_slave_1: left allmulticast mode [ 297.654240][ T8802] bridge_slave_1: left promiscuous mode [ 297.661092][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.676317][ T8802] bridge_slave_0: left allmulticast mode [ 297.686362][ T8802] bridge_slave_0: left promiscuous mode [ 297.695974][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.087148][ T8802] bond1 (unregistering): (slave gretap1): Releasing active interface [ 298.402644][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.420847][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.436339][ T8802] bond0 (unregistering): Released all slaves [ 298.469024][ T8802] bond1 (unregistering): Released all slaves [ 298.511077][T10636] veth1_macvtap: entered promiscuous mode [ 298.568337][T10668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.705321][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.712544][ T8808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.744507][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.751731][ T8808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.786916][T10668] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.117604][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.151077][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.158318][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.171327][ T8030] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.227457][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.346147][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.353415][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.496180][T10636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.541549][T10636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.581549][T10636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.591388][T10636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.840379][ T8802] hsr_slave_0: left promiscuous mode [ 299.862668][ T8802] hsr_slave_1: left promiscuous mode [ 299.868813][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.944298][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.982957][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.990429][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.132922][ T8802] veth1_macvtap: left promiscuous mode [ 300.138522][ T8802] veth0_macvtap: left promiscuous mode [ 300.650675][ T8802] pimreg (unregistering): left allmulticast mode [ 301.118508][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 301.160528][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 302.580832][ T8802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.729428][ T8802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.846947][ T8802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.036086][ T8802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.623905][ T8802] bridge_slave_1: left allmulticast mode [ 303.630580][ T8802] bridge_slave_1: left promiscuous mode [ 303.639324][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.666668][ T8802] bridge_slave_0: left allmulticast mode [ 303.676390][ T8802] bridge_slave_0: left promiscuous mode [ 303.685895][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.701555][ T8802] bridge_slave_1: left allmulticast mode [ 303.711785][ T8802] bridge_slave_1: left promiscuous mode [ 303.726388][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.748003][ T8802] bridge_slave_0: left allmulticast mode [ 303.755569][ T8802] bridge_slave_0: left promiscuous mode [ 303.761380][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.780165][ T8802] bridge_slave_1: left allmulticast mode [ 303.788342][ T8802] bridge_slave_1: left promiscuous mode [ 303.799910][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.815748][ T8802] bridge_slave_0: left allmulticast mode [ 303.821437][ T8802] bridge_slave_0: left promiscuous mode [ 303.836061][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.550025][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.562806][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.574498][ T8802] bond0 (unregistering): Released all slaves [ 304.661497][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.673122][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.683796][ T8802] bond0 (unregistering): Released all slaves [ 304.777394][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.788343][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.799127][ T8802] bond0 (unregistering): Released all slaves [ 305.774645][ T8802] hsr_slave_0: left promiscuous mode [ 305.780765][ T8802] hsr_slave_1: left promiscuous mode [ 305.787415][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.795796][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.810983][ T8802] hsr_slave_0: left promiscuous mode [ 305.819768][ T8802] hsr_slave_1: left promiscuous mode [ 305.826260][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.833754][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.841700][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.850809][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.863625][ T8802] hsr_slave_0: left promiscuous mode [ 305.869561][ T8802] hsr_slave_1: left promiscuous mode [ 305.875644][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.883811][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.919093][ T8802] veth1_macvtap: left promiscuous mode [ 305.924758][ T8802] veth0_macvtap: left promiscuous mode [ 305.930337][ T8802] veth1_vlan: left promiscuous mode [ 305.935750][ T8802] veth0_vlan: left promiscuous mode [ 306.229788][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 306.265883][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 306.820240][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 306.858947][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 307.343736][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 307.385358][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 308.762579][ T8802] bridge_slave_1: left allmulticast mode [ 308.768343][ T8802] bridge_slave_1: left promiscuous mode [ 308.787443][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.806477][ T8802] bridge_slave_0: left allmulticast mode [ 308.813148][ T8802] bridge_slave_0: left promiscuous mode [ 308.821222][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.991364][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.003896][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.015599][ T8802] bond0 (unregistering): Released all slaves