last executing test programs: 2m1.676507448s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x21, 0x2, 0xfffffffb) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, 0x0, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004080), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb", 0xa}], 0x1}}], 0x1, 0xc0) (fail_nth: 1) 1m56.886715762s ago: executing program 0 (id=465): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x2b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x80000000}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 1m56.140205399s ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m42.959533378s ago: executing program 4 (id=807): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x3, 0x4) bind$unix(r1, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000000b01010000000000000000020032050a000100292e23782e00000008000340000000000c0002"], 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25021850ff", @ANYRES32=r6, @ANYBLOB="080002007f0000011401030064ff6d7270310000000050c2268e0000e0a7ea6bd6b00d1cf965"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x1}, 0x74000002, 0x90, 0xd8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@socket0={{0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ip={@empty, @loopback, 0xff000000, 0xffffffff, 'veth1\x00', 'wlan1\x00', {}, {0xff}, 0x4, 0x3, 0x8}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x8, 0x296e3, 0x1, 0x1}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 0x9, 0x0, {0x10000}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xb, [0x32, 0x20, 0x36, 0x16, 0x19, 0x14, 0x26, 0x26, 0xc, 0x30, 0xd, 0x5, 0x13, 0x91, 0x30, 0x31], 0x2, 0xfffffffe, 0x5c4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 1m42.416506783s ago: executing program 4 (id=810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000e40)=""/138}, {&(0x7f0000000700)=""/125}, {&(0x7f0000000f00)=""/168}], 0x0, &(0x7f00000004c0)=""/198, 0xc6}, 0x6}, {{&(0x7f0000000dc0)=@nfc_llcp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000008c0)=""/193, 0xc1}], 0xffffffffffffffe0, &(0x7f0000000a40)=""/24, 0x24}, 0x9}, {{&(0x7f0000000a80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/123, 0x82}, {&(0x7f0000000bc0)=""/56, 0x38}], 0x45, &(0x7f0000000c40)=""/79, 0x4f}, 0x14}], 0x4, 0x0, 0x0) 1m42.221018813s ago: executing program 4 (id=811): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x7d, 0x1, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xace1125131e9a917, 0x7, 0x5, 0xffffffd5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x4c, 0x15, 0x8, 0x70bd28, 0x25dfdbfe, {0xa, 0x1, 0x60, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x5, 0x0, 0xe9a6}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20020040}, 0x4) 1m41.262370844s ago: executing program 4 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f00000008c0), 0x0, 0x4, &(0x7f0000000900)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) recvmmsg$unix(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/218, 0xda}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000000c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/97, 0x61}, {&(0x7f00000006c0)=""/35, 0x23}, {&(0x7f0000000700)=""/14, 0xe}], 0x8, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x2, 0x2042, &(0x7f0000000880)) 1m40.867898774s ago: executing program 4 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x6, 0x1, 'geneve0\x00'}]}]}]}], {0xffffffffffffff8e, 0x10}}, 0xe8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="622409f2ffffff0024000e000d0000000000000001000100000000000700000000000000a7a60b0600000000daebeb3f0d2c7f7762c662b3fba072fe32520bcd558f4322640bd3903b198ba904191d92ef79d0f726e06153c0af627ecc41bb8b9ed8c73b0a741d177aef5f47123d72df017bb8f45fdab91541118e3be0f9"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m40.575423151s ago: executing program 4 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) (async) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m40.391823173s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x21, 0x2, 0xfffffffb) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, 0x0, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004080), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb", 0xa}], 0x1}}], 0x1, 0xc0) (fail_nth: 1) 1m35.901371533s ago: executing program 0 (id=465): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x2b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x80000000}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 1m34.813496401s ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m25.405146824s ago: executing program 32 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) (async) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m20.176255401s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x21, 0x2, 0xfffffffb) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, 0x0, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004080), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb", 0xa}], 0x1}}], 0x1, 0xc0) (fail_nth: 1) 1m17.413636804s ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m14.512319739s ago: executing program 0 (id=465): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x2b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x80000000}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 56.329058763s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x21, 0x2, 0xfffffffb) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, 0x0, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004080), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb", 0xa}], 0x1}}], 0x1, 0xc0) (fail_nth: 1) 55.037934723s ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 53.753377611s ago: executing program 0 (id=465): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x2b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x80000000}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 32.821692155s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x21, 0x2, 0xfffffffb) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, 0x0, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004080), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb", 0xa}], 0x1}}], 0x1, 0xc0) (fail_nth: 1) 31.486847169s ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 29.092427165s ago: executing program 0 (id=465): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x2b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x80000000}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 14.64153668s ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14.065374621s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x21, 0x2, 0xfffffffb) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x0, @fixed}, 0x0, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004080), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb", 0xa}], 0x1}}], 0x1, 0xc0) (fail_nth: 1) 13.316676065s ago: executing program 0 (id=465): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'net'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x2b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x80000000}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 1.405853978s ago: executing program 3 (id=1211): r0 = socket(0x40000000015, 0x5, 0x0) bind$qrtr(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3343], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000005700)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000001180)=""/199, 0xc7}, {&(0x7f0000001280)=""/159, 0x9f}], 0x3, &(0x7f0000001340)=""/31, 0x1f}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001380)=""/213, 0xd5}], 0x1, &(0x7f00000014c0)=""/66, 0x42}, 0xe25}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001540)=""/176, 0xb0}, {&(0x7f0000001600)=""/220, 0xdc}, {&(0x7f0000001700)=""/24, 0x18}, {&(0x7f0000001740)=""/172, 0xac}, {&(0x7f0000001800)=""/168, 0xa8}, {&(0x7f00000018c0)=""/195, 0xc3}, {&(0x7f00000019c0)=""/192, 0xc0}, {&(0x7f0000001a80)=""/145, 0x91}], 0x8, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002c40)=""/30, 0x1e}], 0x1, &(0x7f0000002cc0)=""/106, 0x6a}, 0xf}, {{&(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/122, 0x7a}], 0x2, &(0x7f0000002ec0)=""/88, 0x58}, 0x401}, {{&(0x7f0000002f40), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/145, 0x91}], 0x2}, 0x6}, {{&(0x7f0000003100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003180)=""/235, 0xeb}, {&(0x7f0000003280)=""/58, 0x3a}, {&(0x7f00000032c0)=""/102, 0x66}, {&(0x7f0000003340)=""/211, 0xd3}], 0x4, &(0x7f0000003480)=""/75, 0x4b}, 0x4}, {{&(0x7f0000003500)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/4, 0x4}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x3, &(0x7f0000005600)=""/206, 0xce}, 0x8f}], 0x8, 0x12001, &(0x7f0000005900)={0x0, 0x989680}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket(0x40000000015, 0x5, 0x0) (async) bind$qrtr(r0, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3343], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) recvmmsg(r0, &(0x7f0000005700)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000001180)=""/199, 0xc7}, {&(0x7f0000001280)=""/159, 0x9f}], 0x3, &(0x7f0000001340)=""/31, 0x1f}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001380)=""/213, 0xd5}], 0x1, &(0x7f00000014c0)=""/66, 0x42}, 0xe25}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001540)=""/176, 0xb0}, {&(0x7f0000001600)=""/220, 0xdc}, {&(0x7f0000001700)=""/24, 0x18}, {&(0x7f0000001740)=""/172, 0xac}, {&(0x7f0000001800)=""/168, 0xa8}, {&(0x7f00000018c0)=""/195, 0xc3}, {&(0x7f00000019c0)=""/192, 0xc0}, {&(0x7f0000001a80)=""/145, 0x91}], 0x8, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002c40)=""/30, 0x1e}], 0x1, &(0x7f0000002cc0)=""/106, 0x6a}, 0xf}, {{&(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/122, 0x7a}], 0x2, &(0x7f0000002ec0)=""/88, 0x58}, 0x401}, {{&(0x7f0000002f40), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/145, 0x91}], 0x2}, 0x6}, {{&(0x7f0000003100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003180)=""/235, 0xeb}, {&(0x7f0000003280)=""/58, 0x3a}, {&(0x7f00000032c0)=""/102, 0x66}, {&(0x7f0000003340)=""/211, 0xd3}], 0x4, &(0x7f0000003480)=""/75, 0x4b}, 0x4}, {{&(0x7f0000003500)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/4, 0x4}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x3, &(0x7f0000005600)=""/206, 0xce}, 0x8f}], 0x8, 0x12001, &(0x7f0000005900)={0x0, 0x989680}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) 1.38165247s ago: executing program 5 (id=1212): socket$nl_route(0x10, 0x3, 0x0) 1.338081101s ago: executing program 5 (id=1213): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000fc0), 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c851) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 1.131592272s ago: executing program 5 (id=1214): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000009fc59c00"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1b8, 0x20a, 0x278, 0x1b8, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [0xff000000, 0x0, 0xff000000], 'pim6reg\x00', 'tunl0\x00', {0xff}, {0xff}, 0x3b, 0x8, 0x4, 0x4d}, 0x0, 0x218, 0x170}, @unspec}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{}, {0x6}}]}, @unspec=@NOTRACK}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x98) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd5ceded1304226685c3af"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x4, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$inet_sctp(0x2, 0x5, 0x84) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1, @exit_sniff_mode={{0x804, 0x2}, {0xc8}}}, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, &(0x7f0000000300)) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x9]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0xc7}]}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}]}]}, 0xaa}, 0x1, 0x0, 0x0, 0x40408c7}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a800000000010104000000000000000000000000380001802c0001801400030000000000000000000000ffffac1e010114000400ff01000000000000000300000000000000000340000100003c0002802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffffffffffff0c0002800500010000084000000006180006801400040020010000000000000000000000000001"], 0xa8}}, 0x0) 1.131105248s ago: executing program 3 (id=1215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="a2bb15543576b49a94d29e096ec608497401b55ad90a3ca6c41466ea7669f1f53e7ff973c88ad34f922d19a1e99db347c20d75b4ada328eef0d49277e485c2f1d9d5f67987c4ae70b909443d801e6c3979a7c8c8a0c5", 0x56}, {&(0x7f0000000500)="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", 0xfb}, {&(0x7f0000000180)="ea13a72761152f", 0x7}, {&(0x7f0000000600)="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", 0xe28}], 0x4}, 0x8000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4040) (async) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="a2bb15543576b49a94d29e096ec608497401b55ad90a3ca6c41466ea7669f1f53e7ff973c88ad34f922d19a1e99db347c20d75b4ada328eef0d49277e485c2f1d9d5f67987c4ae70b909443d801e6c3979a7c8c8a0c5", 0x56}, {&(0x7f0000000500)="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", 0xfb}, {&(0x7f0000000180)="ea13a72761152f", 0x7}, {&(0x7f0000000600)="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", 0xe28}], 0x4}, 0x8000) (async) 935.452565ms ago: executing program 3 (id=1216): r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4481}, {r0, 0x100}, {r0, 0x2}, {r0, 0x4000}], 0x4, 0x9) 729.003056ms ago: executing program 5 (id=1217): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe00000000010000000000000000000", 0x28}], 0x1}, 0x20040000) 595.737764ms ago: executing program 3 (id=1218): r0 = socket$isdn(0x22, 0x2, 0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@const={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x5f, 0x0, 0x0, 0x0, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000040)=""/120, 0x2e, 0x78, 0x0, 0x400, 0x10000, @value}, 0x28) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) 592.579058ms ago: executing program 5 (id=1219): r0 = socket(0x1d, 0x800, 0xffff) getsockopt$nfc_llcp(r0, 0x6a, 0x4, 0x0, 0x200000af) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000000)=0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000070a010100000000000000000104000008000b400000000800000000000000030800094000"], 0x2c}, 0x1, 0x0, 0x0, 0x80001}, 0x4004000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) 439.46204ms ago: executing program 3 (id=1220): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)) 383.200802ms ago: executing program 5 (id=1221): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005c40)=""/4091, 0xffb}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000480)=""/175, 0xaf}], 0x100000000000017d}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003a80)=""/4110, 0x100e}, {&(0x7f0000001940)=""/168, 0x98}, {&(0x7f0000000540)=""/201, 0xc9}, {&(0x7f0000000900)=""/4104, 0x1008}, {&(0x7f0000000700)=""/209, 0xd1}], 0x5}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0xbc54}], 0x5, 0x2140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01022bbd37fb7e5cfb700059f0a3925f3bab6bffdbdf25", @ANYRES32=r4, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xdc8928e7691b3e09, 0x3032, 0xffffffffffffffff, 0x54099000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000008c0)={r6, 0x1c, "79d595fa773e78e7f646cc3a957d04227fa96a0080b2a20000000000"}, &(0x7f00000004c0)=0x24) connect$inet6(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) sendto(r0, &(0x7f0000000380)="b104a1442db3d3df284f37a332954be82e01fea3962ffec9af5448f381f910dd88c5c6532d86c7ea4127434dda172d4510c584993320602ad8b305cd71b43dd814909baa6f03992eef3d027951afef2c66219b67332bd62c571e31deb0c38cbfaaed3ccae5fa13e503870022fdfd37d22b9f84e4356799af6b5c7777c786e4faa20f653ef893d488d704074233afcd4a535de4f2c241d9a85f17cb24311f34b50d2965cf51d88ff2d0a6a827b7", 0xfffffffffffffe7f, 0x40088d0, &(0x7f0000000180)=@isdn={0x22, 0x4, 0x9, 0x7, 0x5}, 0x80) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000300)=0x2) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b40500000000000071108a00000000000600000000276998471501eba4942b95000000000000001b28e283a4fd3b21c8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) getsockopt$inet_tcp_buf(r8, 0x6, 0xb, 0x0, &(0x7f0000000340)) syz_80211_join_ibss(&(0x7f0000000440)='wlan1\x00', &(0x7f0000000480)=@default_ap_ssid, 0x6, 0x1) openat$cgroup_int(r7, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=1222): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xac, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x9a, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856"]}]}, 0xac}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x54, r0, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d45db24352fd6875313d9a7de85759f58b6d3335d4ff7169"}]]}, 0x54}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) kernel console output (not intermixed with test programs): 23.110446][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.117725][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.478104][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.522262][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.565523][ T9441] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 223.681456][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.701803][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.894108][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 224.143703][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 224.385831][ T1164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.462862][ T9092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.573785][ T1164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.654577][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.714453][ T1164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.803279][ T1164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.912930][ T9092] veth0_vlan: entered promiscuous mode [ 224.944108][ T9092] veth1_vlan: entered promiscuous mode [ 224.957514][ T9118] veth0_vlan: entered promiscuous mode [ 225.003070][ T9118] veth1_vlan: entered promiscuous mode [ 225.042500][ T9092] veth0_macvtap: entered promiscuous mode [ 225.090626][ T9092] veth1_macvtap: entered promiscuous mode [ 225.180534][ T9092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.195022][ T9118] veth0_macvtap: entered promiscuous mode [ 225.230735][ T9092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.253226][ T1164] bridge_slave_1: left allmulticast mode [ 225.261027][ T1164] bridge_slave_1: left promiscuous mode [ 225.266885][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.278192][ T1164] bridge_slave_0: left allmulticast mode [ 225.284975][ T1164] bridge_slave_0: left promiscuous mode [ 225.290989][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.008762][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.017268][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.027341][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.035699][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.043638][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.045987][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.061230][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.071159][ T1164] bond0 (unregistering): Released all slaves [ 226.106256][ T9092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.119042][ T9092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.127960][ T9092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.138023][ T9092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.175372][ T9118] veth1_macvtap: entered promiscuous mode [ 226.463942][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.483539][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.649956][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.732579][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.755368][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.788273][ T1164] hsr_slave_0: left promiscuous mode [ 226.803733][ T1164] hsr_slave_1: left promiscuous mode [ 226.812010][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'. [ 226.821152][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'. [ 226.836885][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.853557][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.863707][ T9520] xt_hashlimit: size too large, truncated to 1048576 [ 226.875784][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.886838][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.953045][ T1164] veth1_macvtap: left promiscuous mode [ 226.959581][ T1164] veth0_macvtap: left promiscuous mode [ 226.965400][ T1164] veth1_vlan: left promiscuous mode [ 226.983606][ T1164] veth0_vlan: left promiscuous mode [ 227.633686][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 227.673327][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 228.066427][ T9514] erspan0: entered promiscuous mode [ 228.073953][ T9514] erspan0: left promiscuous mode [ 228.117962][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.126137][ T51] Bluetooth: hci2: command tx timeout [ 228.171543][ T9118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.185569][ T9118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.194846][ T9118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.205369][ T9118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.642824][ T9499] chnl_net:caif_netlink_parms(): no params data found [ 228.677468][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.708600][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.873078][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.055118][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.127366][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.142289][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.172671][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.341562][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.439068][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.446403][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.457836][ T9499] bridge_slave_0: entered allmulticast mode [ 229.469704][ T9499] bridge_slave_0: entered promiscuous mode [ 229.509321][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.516546][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.543974][ T9499] bridge_slave_1: entered allmulticast mode [ 229.558759][ T9499] bridge_slave_1: entered promiscuous mode [ 229.684490][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.772766][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.014145][ T9499] team0: Port device team_slave_0 added [ 230.082509][ T9499] team0: Port device team_slave_1 added [ 230.198814][ T51] Bluetooth: hci2: command tx timeout [ 230.205450][ T1164] bridge_slave_1: left allmulticast mode [ 230.228546][ T1164] bridge_slave_1: left promiscuous mode [ 230.234411][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.260871][ T1164] bridge_slave_0: left allmulticast mode [ 230.266661][ T1164] bridge_slave_0: left promiscuous mode [ 230.283507][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.593927][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.608592][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.617389][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.627514][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.635387][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.022223][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.055677][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.093117][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 231.104602][ T1164] bond0 (unregistering): Released all slaves [ 231.233485][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.267599][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.317775][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.358082][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.377911][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.413940][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.532799][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.546561][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.557650][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.576215][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.585239][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.635005][ T9603] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 231.743322][ T9603] bond3: entered promiscuous mode [ 231.750246][ T9603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.779727][ T9499] hsr_slave_0: entered promiscuous mode [ 231.786826][ T9499] hsr_slave_1: entered promiscuous mode [ 231.800232][ T9499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.818534][ T9499] Cannot create hsr debugfs directory [ 231.903710][ T9606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.923946][ T9606] bond3: (slave bond4): making interface the new active one [ 231.933659][ T9606] bond4: entered promiscuous mode [ 231.944889][ T9606] bond3: (slave bond4): Enslaving as an active interface with an up link [ 232.035815][ T1164] hsr_slave_0: left promiscuous mode [ 232.058024][ T1164] hsr_slave_1: left promiscuous mode [ 232.077724][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.086941][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.121507][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.145218][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.194855][ T1164] veth1_macvtap: left promiscuous mode [ 232.211996][ T1164] veth0_macvtap: left promiscuous mode [ 232.227623][ T1164] veth1_vlan: left promiscuous mode [ 232.238428][ T1164] veth0_vlan: left promiscuous mode [ 232.270658][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 232.292516][ T51] Bluetooth: hci2: command tx timeout [ 232.398024][ T9626] netlink: 212112 bytes leftover after parsing attributes in process `syz.3.835'. [ 232.414588][ T9626] openvswitch: netlink: Key 9 has unexpected len 8 expected 4 [ 232.768830][ T51] Bluetooth: hci3: command tx timeout [ 233.011842][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 233.082298][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 233.639377][ T51] Bluetooth: hci4: command tx timeout [ 233.791652][ T9625] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) ! [ 234.358886][ T51] Bluetooth: hci2: command tx timeout [ 234.834331][ T9685] dvmrp0: entered allmulticast mode [ 234.849757][ T51] Bluetooth: hci3: command tx timeout [ 234.854022][ T9577] chnl_net:caif_netlink_parms(): no params data found [ 235.085967][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.197583][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.217416][ T9600] chnl_net:caif_netlink_parms(): no params data found [ 235.334571][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.536720][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.733795][ T51] Bluetooth: hci4: command tx timeout [ 235.802645][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.815725][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.825430][ T9577] bridge_slave_0: entered allmulticast mode [ 235.837829][ T9577] bridge_slave_0: entered promiscuous mode [ 235.849623][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.857040][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.871319][ T9577] bridge_slave_1: entered allmulticast mode [ 235.882347][ T9577] bridge_slave_1: entered promiscuous mode [ 235.921437][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.934043][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.941919][ T9600] bridge_slave_0: entered allmulticast mode [ 235.951367][ T9600] bridge_slave_0: entered promiscuous mode [ 236.092689][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.106549][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.114728][ T9600] bridge_slave_1: entered allmulticast mode [ 236.125896][ T9600] bridge_slave_1: entered promiscuous mode [ 236.220099][ T9577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.294740][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.311518][ T9577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.355338][ T9499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.416223][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.537992][ T9499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.575021][ T9600] team0: Port device team_slave_0 added [ 236.592001][ T9577] team0: Port device team_slave_0 added [ 236.608744][ T1164] bridge_slave_1: left allmulticast mode [ 236.614463][ T1164] bridge_slave_1: left promiscuous mode [ 236.627566][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.641062][ T1164] bridge_slave_0: left allmulticast mode [ 236.646773][ T1164] bridge_slave_0: left promiscuous mode [ 236.652927][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.918408][ T51] Bluetooth: hci3: command tx timeout [ 237.144311][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.163163][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.175504][ T1164] bond0 (unregistering): Released all slaves [ 237.192063][ T9499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.205219][ T9600] team0: Port device team_slave_1 added [ 237.214912][ T9577] team0: Port device team_slave_1 added [ 237.243794][ T9499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.440715][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.447842][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.487296][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.503736][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.511771][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.542713][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.564370][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.571707][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.603186][ T9577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.651613][ T9577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.662324][ T9577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.692382][ T9577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.811634][ T51] Bluetooth: hci4: command tx timeout [ 237.862766][ T9600] hsr_slave_0: entered promiscuous mode [ 237.870672][ T9600] hsr_slave_1: entered promiscuous mode [ 237.877165][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.885492][ T9600] Cannot create hsr debugfs directory [ 237.914721][ T1164] hsr_slave_0: left promiscuous mode [ 237.932422][ T1164] hsr_slave_1: left promiscuous mode [ 237.939881][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.947321][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.968015][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.985428][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.030790][ T1164] veth1_macvtap: left promiscuous mode [ 238.037649][ T1164] veth0_macvtap: left promiscuous mode [ 238.044717][ T1164] veth1_vlan: left promiscuous mode [ 238.050321][ T1164] veth0_vlan: left promiscuous mode [ 238.760977][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 238.844237][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 239.010497][ T51] Bluetooth: hci3: command tx timeout [ 239.371091][ T9768] veth0: entered promiscuous mode [ 239.390120][ T9768] veth0: left promiscuous mode [ 239.590814][ T9577] hsr_slave_0: entered promiscuous mode [ 239.597814][ T9577] hsr_slave_1: entered promiscuous mode [ 239.629363][ T9577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.636990][ T9577] Cannot create hsr debugfs directory [ 239.767476][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.779663][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.789024][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.798644][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.813706][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.879036][ T51] Bluetooth: hci4: command tx timeout [ 240.264874][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.303631][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 240.588116][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.693808][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.701066][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.718102][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.725286][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.794612][ T9787] chnl_net:caif_netlink_parms(): no params data found [ 241.020470][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.030482][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.037691][ T9787] bridge_slave_0: entered allmulticast mode [ 241.045252][ T9787] bridge_slave_0: entered promiscuous mode [ 241.076741][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.099811][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.107141][ T9787] bridge_slave_1: entered allmulticast mode [ 241.116187][ T9787] bridge_slave_1: entered promiscuous mode [ 241.160791][ T9600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.168934][ T9822] delete_channel: no stack [ 241.177744][ T9600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.276878][ T9600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.309850][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.331577][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.357704][ T9600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.526806][ T9787] team0: Port device team_slave_0 added [ 241.557871][ T9787] team0: Port device team_slave_1 added [ 241.635341][ T9832] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 241.662990][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.679447][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.713264][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.740028][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.747158][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.773959][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.878722][ T51] Bluetooth: hci5: command tx timeout [ 241.913235][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.970880][ T9787] hsr_slave_0: entered promiscuous mode [ 241.980067][ T9787] hsr_slave_1: entered promiscuous mode [ 241.983432][ T9837] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 241.986500][ T9787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.001695][ T9787] Cannot create hsr debugfs directory [ 242.048515][ T9837] bond5: entered promiscuous mode [ 242.054409][ T9837] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.132183][ T9839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.140989][ T9839] bond5: (slave bond6): making interface the new active one [ 242.151370][ T9839] bond6: entered promiscuous mode [ 242.157141][ T9839] bond5: (slave bond6): Enslaving as an active interface with an up link [ 242.196071][ T9577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.265130][ T9577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.307609][ T9577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.323535][ T9577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.456513][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.556388][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.573695][ T9499] veth0_vlan: entered promiscuous mode [ 242.677437][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.684719][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.699014][ T9499] veth1_vlan: entered promiscuous mode [ 242.749960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.757219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.841928][ T9787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.879575][ T9787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.915302][ T9787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.972120][ T9787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.995725][ T9600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.025291][ T9499] veth0_macvtap: entered promiscuous mode [ 243.067821][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 243.074963][ T9499] veth1_macvtap: entered promiscuous mode [ 243.119545][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 243.159829][ T9577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.277678][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.296153][ T9577] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.330371][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.343695][ T9499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.361095][ T9499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.374007][ T9499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.383846][ T9499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.417937][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.425226][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.458139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.465365][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.655315][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.794599][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.815894][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.831067][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.945114][ T9787] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.959367][ T51] Bluetooth: hci5: command tx timeout [ 243.965565][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.978628][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.000476][ T9600] veth0_vlan: entered promiscuous mode [ 244.066632][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.073894][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.091563][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.098812][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.164701][ T9600] veth1_vlan: entered promiscuous mode [ 244.325870][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.511997][ T9881] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 244.531356][ T9600] veth0_macvtap: entered promiscuous mode [ 244.590301][ T7431] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.642453][ T9600] veth1_macvtap: entered promiscuous mode [ 244.697416][ T9881] bond7: entered promiscuous mode [ 244.708948][ T9881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.767902][ T9883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.784193][ T9883] bond7: (slave bond8): making interface the new active one [ 244.796990][ T9883] bond8: entered promiscuous mode [ 244.806521][ T9883] bond7: (slave bond8): Enslaving as an active interface with an up link [ 244.925864][ T7431] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.993826][ T9577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.023956][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.051252][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.072465][ T7431] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.110145][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.120613][ T9600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.132002][ T9600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.145955][ T9600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.155249][ T9600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.207155][ T7431] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.356215][ T9577] veth0_vlan: entered promiscuous mode [ 245.413841][ T9577] veth1_vlan: entered promiscuous mode [ 245.525678][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.566594][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.631295][ T9577] veth0_macvtap: entered promiscuous mode [ 245.675192][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.696227][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.707340][ T9577] veth1_macvtap: entered promiscuous mode [ 245.732121][ T7431] bridge_slave_1: left allmulticast mode [ 245.737825][ T7431] bridge_slave_1: left promiscuous mode [ 245.759497][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.773766][ T7431] bridge_slave_0: left allmulticast mode [ 245.788366][ T7431] bridge_slave_0: left promiscuous mode [ 245.794274][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.827454][ T9898] xt_l2tp: unknown flags: 18 [ 246.042716][ T51] Bluetooth: hci5: command tx timeout [ 246.271618][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.281556][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.291682][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.302039][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.312189][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.576006][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.587741][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.603195][ T7431] bond0 (unregistering): Released all slaves [ 246.802603][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.896928][ T9787] veth0_vlan: entered promiscuous mode [ 246.916055][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.971807][ T9787] veth1_vlan: entered promiscuous mode [ 247.084053][ T9577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.094892][ T9577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.107245][ T9577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.117889][ T9577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.195724][ T7431] hsr_slave_0: left promiscuous mode [ 247.220271][ T7431] hsr_slave_1: left promiscuous mode [ 247.243094][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.272718][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.294181][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.338407][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.386725][ T7431] veth1_macvtap: left promiscuous mode [ 247.416276][ T7431] veth0_macvtap: left promiscuous mode [ 247.422122][ T7431] veth1_vlan: left promiscuous mode [ 247.427594][ T7431] veth0_vlan: left promiscuous mode [ 247.942935][ T7431] team0 (unregistering): Port device team_slave_1 removed [ 247.985326][ T7431] team0 (unregistering): Port device team_slave_0 removed [ 248.119460][ T5845] Bluetooth: hci5: command tx timeout [ 248.363970][ T5845] Bluetooth: hci2: command tx timeout [ 248.367302][ T9934] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001 [ 248.705973][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.716735][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.725489][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.747224][ T9787] veth0_macvtap: entered promiscuous mode [ 248.751441][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.770454][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.835422][ T9787] veth1_macvtap: entered promiscuous mode [ 248.940260][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.000732][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.022570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.041959][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.060395][ T9787] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.069945][ T9787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.080262][ T9787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.089442][ T9787] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.163982][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 249.229362][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.246124][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.312914][ T7431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.373491][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 249.461537][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 249.471174][ T9948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.557580][ T7431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.768154][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.791863][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.860184][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.873750][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.008121][ T7431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.227523][ T7431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.384815][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.397778][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.405528][ T9908] bridge_slave_0: entered allmulticast mode [ 250.419409][ T9908] bridge_slave_0: entered promiscuous mode [ 250.439187][ T51] Bluetooth: hci2: command tx timeout [ 250.512480][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.521949][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.533854][ T9908] bridge_slave_1: entered allmulticast mode [ 250.543282][ T9908] bridge_slave_1: entered promiscuous mode [ 250.563023][ T9939] chnl_net:caif_netlink_parms(): no params data found [ 250.705066][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.807105][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.838820][ T51] Bluetooth: hci4: command tx timeout [ 250.961854][ T9908] team0: Port device team_slave_0 added [ 250.973168][ T9908] team0: Port device team_slave_1 added [ 250.982466][ T7431] bridge_slave_1: left allmulticast mode [ 250.990810][ T7431] bridge_slave_1: left promiscuous mode [ 250.998515][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.011072][ T7431] bridge_slave_0: left allmulticast mode [ 251.016855][ T7431] bridge_slave_0: left promiscuous mode [ 251.023151][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.604210][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.622134][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.630158][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.657290][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.659042][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.676584][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.685004][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.712086][ T7431] bond0 (unregistering): Released all slaves [ 251.727521][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.734977][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.742768][ T9939] bridge_slave_0: entered allmulticast mode [ 251.751269][ T9939] bridge_slave_0: entered promiscuous mode [ 251.838788][ T9986] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.868411][ T9986] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.888367][ T9986] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.899339][ T9986] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.909956][ T9986] geneve2: entered promiscuous mode [ 251.910452][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 251.915308][ T9986] geneve2: entered allmulticast mode [ 251.930748][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.908'. [ 251.954322][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.971645][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.981808][ T9939] bridge_slave_1: entered allmulticast mode [ 251.994573][ T9939] bridge_slave_1: entered promiscuous mode [ 252.063847][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.079277][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.134386][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.217575][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.234967][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.261393][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.343537][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.367790][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.456419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.464768][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.529422][ T51] Bluetooth: hci2: command tx timeout [ 252.579908][ T9939] team0: Port device team_slave_0 added [ 252.623496][ T9908] hsr_slave_0: entered promiscuous mode [ 252.630743][ T9908] hsr_slave_1: entered promiscuous mode [ 252.637220][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.645135][ T9908] Cannot create hsr debugfs directory [ 252.673078][ T7431] hsr_slave_0: left promiscuous mode [ 252.680423][ T7431] hsr_slave_1: left promiscuous mode [ 252.686350][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.694455][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.706075][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.714340][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.736397][ T7431] veth1_macvtap: left promiscuous mode [ 252.742080][ T7431] veth0_macvtap: left promiscuous mode [ 252.747740][ T7431] veth1_vlan: left promiscuous mode [ 252.753342][ T7431] veth0_vlan: left promiscuous mode [ 252.918386][ T51] Bluetooth: hci4: command tx timeout [ 253.282074][ T7431] team0 (unregistering): Port device team_slave_1 removed [ 253.327617][ T7431] team0 (unregistering): Port device team_slave_0 removed [ 253.723308][ T51] Bluetooth: hci3: command tx timeout [ 253.801453][ T9939] team0: Port device team_slave_1 added [ 253.921542][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.928717][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.955829][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.049106][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.056476][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.138162][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.169264][T10023] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 254.410858][ T9939] hsr_slave_0: entered promiscuous mode [ 254.417808][ T9939] hsr_slave_1: entered promiscuous mode [ 254.424524][ T9939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.432631][ T9939] Cannot create hsr debugfs directory [ 254.457032][T10032] tipc: Started in network mode [ 254.465141][T10032] tipc: Node identity 920b5dfbadf8, cluster identity 4711 [ 254.488755][T10032] tipc: Enabled bearer , priority 0 [ 254.599640][ T51] Bluetooth: hci2: command tx timeout [ 254.627522][T10032] syzkaller0: entered promiscuous mode [ 254.633492][T10032] syzkaller0: entered allmulticast mode [ 254.640410][T10032] tipc: Resetting bearer [ 254.737255][T10032] tipc: Resetting bearer [ 255.009054][ T51] Bluetooth: hci4: command tx timeout [ 255.360645][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 255.382854][T10047] netlink: 'syz.5.920': attribute type 2 has an invalid length. [ 255.392123][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.920'. [ 255.579263][ T9] tipc: Node number set to 1072913915 [ 255.810364][ T51] Bluetooth: hci3: command tx timeout [ 255.893351][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.507121][T10032] tipc: Disabling bearer [ 256.644788][T10051] netlink: 'syz.3.921': attribute type 3 has an invalid length. [ 257.079602][ T51] Bluetooth: hci4: command tx timeout [ 257.123221][ T7431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.321973][ T5892] IPVS: starting estimator thread 0... [ 257.327735][T10072] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.407731][ T9987] chnl_net:caif_netlink_parms(): no params data found [ 257.448330][T10083] IPVS: using max 23 ests per chain, 55200 per kthread [ 257.505396][ T7431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.722023][ T7431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.725696][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 257.748547][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 257.757474][T10092] netlink: 'syz.3.926': attribute type 20 has an invalid length. [ 257.763212][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 257.864583][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 257.878352][ T51] Bluetooth: hci3: command tx timeout [ 257.919630][T10093] netlink: 'syz.3.926': attribute type 20 has an invalid length. [ 258.056459][ T7431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.076000][T10107] openvswitch: netlink: Flow actions attr not present in new flow. [ 258.086581][T10107] netlink: 'syz.5.928': attribute type 3 has an invalid length. [ 258.355700][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.929'. [ 258.399718][T10120] netlink: 'syz.5.930': attribute type 1 has an invalid length. [ 258.435404][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.477855][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.497641][ T9987] bridge_slave_0: entered allmulticast mode [ 258.526927][ T9987] bridge_slave_0: entered promiscuous mode [ 258.558337][ T9908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.671103][T10123] bond1 (unregistering): Released all slaves [ 258.736619][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.754791][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.764775][ T9987] bridge_slave_1: entered allmulticast mode [ 258.780984][ T9987] bridge_slave_1: entered promiscuous mode [ 258.875228][ T9908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.976423][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.932'. [ 259.024979][T10132] bond0: option mode: unable to set because the bond device is up [ 259.137671][ T9908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.284102][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.354900][ T9908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.413145][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.697873][ T9987] team0: Port device team_slave_0 added [ 259.729264][ T9987] team0: Port device team_slave_1 added [ 259.944346][ T7431] bridge_slave_1: left allmulticast mode [ 259.958393][ T5845] Bluetooth: hci3: command tx timeout [ 259.964144][ T7431] bridge_slave_1: left promiscuous mode [ 259.971968][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.050405][ T7431] bridge_slave_0: left allmulticast mode [ 260.073856][ T7431] bridge_slave_0: left promiscuous mode [ 260.083241][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.738866][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.753154][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.767077][ T7431] bond0 (unregistering): Released all slaves [ 260.852563][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.860539][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.900724][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.160221][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.167424][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.195306][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.263011][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.940'. [ 261.352384][T10199] sctp: [Deprecated]: syz.3.940 (pid 10199) Use of int in max_burst socket option deprecated. [ 261.352384][T10199] Use struct sctp_assoc_value instead [ 261.590182][T10212] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.717817][ T7431] hsr_slave_0: left promiscuous mode [ 261.737625][ T7431] hsr_slave_1: left promiscuous mode [ 261.750012][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.770720][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.788750][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.810712][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.891098][ T7431] veth1_macvtap: left promiscuous mode [ 261.903481][ T7431] veth0_macvtap: left promiscuous mode [ 261.917254][ T7431] veth1_vlan: left promiscuous mode [ 261.938579][ T7431] veth0_vlan: left promiscuous mode [ 262.039384][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 262.649844][ T7431] team0 (unregistering): Port device team_slave_1 removed [ 262.694812][ T7431] team0 (unregistering): Port device team_slave_0 removed [ 263.116205][ T9987] hsr_slave_0: entered promiscuous mode [ 263.125464][T10221] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 263.129572][ T9987] hsr_slave_1: entered promiscuous mode [ 263.145990][ T9987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.155720][ T9987] Cannot create hsr debugfs directory [ 263.191112][ T9939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.236027][ T9939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.321635][ T9939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.476146][ T9939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.593500][T10250] netlink: 3 bytes leftover after parsing attributes in process `syz.3.949'. [ 263.608935][T10250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.645595][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.816575][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.900585][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.907883][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.948026][T10254] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 264.004098][T10254] bond9: entered promiscuous mode [ 264.028316][T10254] bond9: entered allmulticast mode [ 264.034169][T10254] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.135292][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.142662][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.354118][ T9908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.523687][T10271] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.525514][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.643576][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.650514][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 264.688367][ T9987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.941713][T10275] vlan0 (unregistering): left allmulticast mode [ 264.955672][T10275] vlan0 (unregistering): left promiscuous mode [ 265.112477][T10275] vlan1 (unregistering): left allmulticast mode [ 265.119083][T10275] veth0_vlan (unregistering): left allmulticast mode [ 265.214728][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 265.225364][ T9987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.242275][T10287] tipc: Started in network mode [ 265.259394][T10287] tipc: Node identity 7, cluster identity 4711 [ 265.265610][T10287] tipc: Node number set to 7 [ 265.295952][ T9987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.332080][ T9987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.374353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.381625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.427883][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.435215][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.460214][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.957'. [ 265.558631][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 265.711594][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.982119][ T9987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.024430][T10306] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 266.025414][ T9908] veth0_vlan: entered promiscuous mode [ 266.112643][T10306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.162803][ T9908] veth1_vlan: entered promiscuous mode [ 266.222103][ T9987] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.295498][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.302802][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.375432][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.382695][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.390365][T10315] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.454654][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.483868][ T9908] veth0_macvtap: entered promiscuous mode [ 266.524508][T10318] netlink: 284 bytes leftover after parsing attributes in process `syz.3.966'. [ 266.590975][ T9908] veth1_macvtap: entered promiscuous mode [ 266.741950][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.821601][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.862147][ T9908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.892294][ T9908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.908436][ T9908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.917214][ T9908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.044114][ T9939] veth0_vlan: entered promiscuous mode [ 267.174288][ T9939] veth1_vlan: entered promiscuous mode [ 267.379790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.387678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.575408][ T9939] veth0_macvtap: entered promiscuous mode [ 267.637638][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.639648][ T9939] veth1_macvtap: entered promiscuous mode [ 267.674159][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.847427][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.874494][ T9987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.912285][T10361] geneve2: entered promiscuous mode [ 267.924104][T10361] geneve2: entered allmulticast mode [ 268.025308][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.157742][ T9939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.184641][ T9939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.199920][ T9939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.209449][ T9939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.455320][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.636667][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.713121][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.737515][ T9987] veth0_vlan: entered promiscuous mode [ 268.758882][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.766769][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.806645][ T9987] veth1_vlan: entered promiscuous mode [ 268.839623][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.872656][ T9987] veth0_macvtap: entered promiscuous mode [ 268.886404][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.900025][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.910989][ T9987] veth1_macvtap: entered promiscuous mode [ 268.943136][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.973651][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.011869][ T9987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.022290][ T9987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.031796][ T9987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.041084][ T9987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.306281][ T1145] bridge_slave_1: left allmulticast mode [ 269.316902][ T1145] bridge_slave_1: left promiscuous mode [ 269.327514][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.349622][ T1145] bridge_slave_0: left allmulticast mode [ 269.355413][ T1145] bridge_slave_0: left promiscuous mode [ 269.379288][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.913308][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.930900][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.953073][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.954270][ T1145] bond0 (unregistering): Released all slaves [ 269.975485][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.985109][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.000749][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.003368][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.034380][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.082018][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.210803][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.251075][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.791030][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 270.875788][ T1145] hsr_slave_0: left promiscuous mode [ 270.911580][ T1145] hsr_slave_1: left promiscuous mode [ 270.929322][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.938002][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.963748][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.987110][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.054729][ T1145] veth1_macvtap: left promiscuous mode [ 271.073750][ T1145] veth0_macvtap: left promiscuous mode [ 271.100931][ T1145] veth1_vlan: left promiscuous mode [ 271.111797][ T1145] veth0_vlan: left promiscuous mode [ 271.184718][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.204025][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.214115][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.222655][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.248707][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.073757][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 272.119017][ T51] Bluetooth: hci2: command tx timeout [ 272.126835][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 272.636967][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.646056][T10388] bridge0: port 1() entered disabled state [ 272.654962][T10388] bridge0: left allmulticast mode [ 272.731716][T10395] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 272.775963][T10395] macsec1: entered allmulticast mode [ 272.788538][T10395] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 272.824626][T10395] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 272.840006][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.849490][T10395] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 272.850203][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.865253][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.873850][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.889920][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.972214][T10409] netlink: 240 bytes leftover after parsing attributes in process `syz.3.985'. [ 273.040497][T10411] netlink: 'syz.3.985': attribute type 2 has an invalid length. [ 273.318572][ T51] Bluetooth: hci3: command tx timeout [ 274.085974][T10371] chnl_net:caif_netlink_parms(): no params data found [ 274.198571][ T51] Bluetooth: hci2: command tx timeout [ 274.241835][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.289059][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.994'. [ 274.713057][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.887124][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 274.900324][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.918697][ T51] Bluetooth: hci4: command tx timeout [ 274.947492][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.997'. [ 274.994803][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.002584][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.010378][T10371] bridge_slave_0: entered allmulticast mode [ 275.021013][T10371] bridge_slave_0: entered promiscuous mode [ 275.033907][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.041467][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.050519][T10371] bridge_slave_1: entered allmulticast mode [ 275.057804][T10371] bridge_slave_1: entered promiscuous mode [ 275.083315][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.106665][T10399] chnl_net:caif_netlink_parms(): no params data found [ 275.165359][T10404] chnl_net:caif_netlink_parms(): no params data found [ 275.209490][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 275.229663][T10485] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 275.390737][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.400215][ T51] Bluetooth: hci3: command tx timeout [ 275.438402][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.681211][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1004'. [ 275.691025][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1004'. [ 275.702739][T10501] netlink: 'syz.5.1004': attribute type 20 has an invalid length. [ 275.752584][T10371] team0: Port device team_slave_0 added [ 275.829469][T10512] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 275.921288][T10371] team0: Port device team_slave_1 added [ 275.988513][T10512] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 276.022948][T10518] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 276.151907][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.161530][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.169022][T10399] bridge_slave_0: entered allmulticast mode [ 276.177401][T10399] bridge_slave_0: entered promiscuous mode [ 276.214904][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.228710][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.270268][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.280922][ T51] Bluetooth: hci2: command tx timeout [ 276.369905][T10512] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 276.383871][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.391914][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.409450][T10523] xt_l2tp: v2 sid > 0xffff: 262144 [ 276.417984][T10399] bridge_slave_1: entered allmulticast mode [ 276.426576][T10399] bridge_slave_1: entered promiscuous mode [ 276.464805][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.473864][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.504509][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.554771][T10404] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.555885][T10512] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 276.563546][T10404] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.578833][T10404] bridge_slave_0: entered allmulticast mode [ 276.586088][T10404] bridge_slave_0: entered promiscuous mode [ 276.645997][T10404] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.653757][T10404] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.668561][T10404] bridge_slave_1: entered allmulticast mode [ 276.675792][T10404] bridge_slave_1: entered promiscuous mode [ 276.688461][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.703458][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.797667][ T1145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.856838][T10371] hsr_slave_0: entered promiscuous mode [ 276.886765][T10371] hsr_slave_1: entered promiscuous mode [ 276.893641][T10371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.905290][T10371] Cannot create hsr debugfs directory [ 276.926066][T10529] openvswitch: netlink: Message has -1 unknown bytes. [ 276.936262][T10530] openvswitch: netlink: Message has -1 unknown bytes. [ 277.000639][ T51] Bluetooth: hci4: command tx timeout [ 277.016119][ T1145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.050982][T10404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.065596][T10404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.106669][T10399] team0: Port device team_slave_0 added [ 277.354514][T10544] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 277.480037][ T51] Bluetooth: hci3: command tx timeout [ 277.515340][ T1145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.557568][T10399] team0: Port device team_slave_1 added [ 277.783073][T10404] team0: Port device team_slave_0 added [ 277.836180][T10404] team0: Port device team_slave_1 added [ 277.955829][T10554] Cannot find set identified by id 0 to match [ 278.335522][ T1145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.358829][ T51] Bluetooth: hci2: command tx timeout [ 278.365087][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.372339][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.399016][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.492281][T10404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.536289][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.619881][T10404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.675691][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.706635][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.811776][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.877464][T10404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.892978][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.932205][T10404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.040721][T10568] syzkaller0: entered promiscuous mode [ 279.046609][T10568] syzkaller0: entered allmulticast mode [ 279.078636][ T51] Bluetooth: hci4: command tx timeout [ 279.088179][T10587] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1020'. [ 279.562099][ T51] Bluetooth: hci3: command tx timeout [ 281.161298][ T51] Bluetooth: hci4: command tx timeout [ 281.531960][T10404] hsr_slave_0: entered promiscuous mode [ 281.551157][T10404] hsr_slave_1: entered promiscuous mode [ 281.557593][T10404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.579762][T10404] Cannot create hsr debugfs directory [ 281.624664][T10399] hsr_slave_0: entered promiscuous mode [ 281.632275][T10399] hsr_slave_1: entered promiscuous mode [ 281.639385][T10399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.647081][T10399] Cannot create hsr debugfs directory [ 281.663059][T10622] tun0: tun_chr_ioctl cmd 1074025675 [ 281.670376][T10622] tun0: persist disabled [ 281.984232][ T1145] bridge_slave_1: left allmulticast mode [ 281.996220][ T1145] bridge_slave_1: left promiscuous mode [ 282.002542][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.013833][ T1145] bridge_slave_0: left allmulticast mode [ 282.020101][ T1145] bridge_slave_0: left promiscuous mode [ 282.025879][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.037857][ T1145] bridge_slave_1: left allmulticast mode [ 282.044543][ T1145] bridge_slave_1: left promiscuous mode [ 282.050763][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.061322][ T1145] bridge_slave_0: left allmulticast mode [ 282.067004][ T1145] bridge_slave_0: left promiscuous mode [ 282.073735][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.475723][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.486962][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.497196][ T1145] bond0 (unregistering): Released all slaves [ 282.791392][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.805557][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.816664][ T1145] bond0 (unregistering): Released all slaves [ 283.783642][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 283.849097][T10371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.081322][T10371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.141865][T10371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.176356][T10371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.245925][ T1145] hsr_slave_0: left promiscuous mode [ 284.252806][ T1145] hsr_slave_1: left promiscuous mode [ 284.269267][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.288502][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.309438][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.322222][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.376230][ T1145] hsr_slave_0: left promiscuous mode [ 284.397602][ T1145] hsr_slave_1: left promiscuous mode [ 284.430548][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.438040][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.475295][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.489965][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.552475][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 284.563802][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 284.580950][T10680] netlink: 'syz.3.1040': attribute type 15 has an invalid length. [ 284.593371][ T1145] veth1_macvtap: left promiscuous mode [ 284.605346][ T1145] veth0_macvtap: left promiscuous mode [ 284.618913][ T1145] veth1_vlan: left promiscuous mode [ 284.624412][ T1145] veth0_vlan: left promiscuous mode [ 284.653281][ T1145] veth1_macvtap: left promiscuous mode [ 284.662057][ T1145] veth0_macvtap: left promiscuous mode [ 284.667672][ T1145] veth1_vlan: left promiscuous mode [ 284.676770][ T1145] veth0_vlan: left promiscuous mode [ 285.351055][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 285.394891][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 286.168173][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 286.212448][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 287.172853][T10371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.294229][T10399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.323004][T10371] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.332088][T10399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.417802][T10399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.440509][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 287.450510][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1047'. [ 287.637992][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.645233][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.663415][T10399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.734668][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.741942][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.087779][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1053'. [ 288.334143][T10740] netlink: 'syz.5.1054': attribute type 83 has an invalid length. [ 288.360705][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1054'. [ 288.503197][T10371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.700664][T10748] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1056'. [ 288.899564][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 288.918793][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 289.076222][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1059'. [ 289.123994][T10404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.214471][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.275581][T10404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.335471][T10404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.386286][T10404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.503441][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.570959][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.578129][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.643893][T10371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.682740][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.689994][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.690163][T10781] delete_channel: no stack [ 289.797067][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1063'. [ 289.841665][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1063'. [ 290.076967][T10371] veth0_vlan: entered promiscuous mode [ 290.142960][T10404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.208671][T10371] veth1_vlan: entered promiscuous mode [ 290.256216][T10404] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.300766][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.308101][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.355874][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.363401][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.479611][T10371] veth0_macvtap: entered promiscuous mode [ 290.591969][T10371] veth1_macvtap: entered promiscuous mode [ 290.672137][T10404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.741096][T10371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.774925][T10371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.867917][T10371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.889713][T10371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.914713][T10371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.928054][T10371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.956946][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.966370][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1068'. [ 290.977515][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 290.987431][T10807] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1068'. [ 290.997187][T10807] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1068'. [ 291.241651][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.266796][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.322067][T10399] veth0_vlan: entered promiscuous mode [ 291.347566][ T7430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.358535][ T7430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.377408][T10399] veth1_vlan: entered promiscuous mode [ 291.406283][T10404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.503476][T10399] veth0_macvtap: entered promiscuous mode [ 291.550821][T10399] veth1_macvtap: entered promiscuous mode [ 291.683025][T10404] veth0_vlan: entered promiscuous mode [ 291.707315][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.780857][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.810648][T10404] veth1_vlan: entered promiscuous mode [ 291.954174][ T7431] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.997608][T10399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.007638][T10399] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.017752][T10399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.017834][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1071'. [ 292.027510][T10399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.105224][ T7431] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.243141][ T7431] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.306422][ T7431] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.344023][T10404] veth0_macvtap: entered promiscuous mode [ 292.374790][T10404] veth1_macvtap: entered promiscuous mode [ 292.390755][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.403144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.477385][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.489087][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.503065][T10404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.547915][T10404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.593596][T10404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.604653][T10404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.614221][T10404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.624990][T10404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.716224][ T7431] bridge_slave_1: left allmulticast mode [ 292.722481][ T7431] bridge_slave_1: left promiscuous mode [ 292.729649][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.739710][ T7431] bridge_slave_0: left allmulticast mode [ 292.746707][ T7431] bridge_slave_0: left promiscuous mode [ 292.754107][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.264939][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.284335][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.297627][ T7431] bond0 (unregistering): Released all slaves [ 293.531311][ T7430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.559425][ T7430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.568473][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.588946][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.597582][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.607072][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.615161][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.694907][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.739280][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.782459][ T7431] hsr_slave_0: left promiscuous mode [ 293.793513][ T7431] hsr_slave_1: left promiscuous mode [ 293.800859][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.808967][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.819586][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.827003][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.866637][ T7431] veth1_macvtap: left promiscuous mode [ 293.872864][ T7431] veth0_macvtap: left promiscuous mode [ 293.880701][ T7431] veth1_vlan: left promiscuous mode [ 293.886059][ T7431] veth0_vlan: left promiscuous mode [ 294.199857][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1074'. [ 294.219558][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 294.231089][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1074'. [ 294.561023][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.576115][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.589185][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.599251][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.621199][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.817695][ T7431] team0 (unregistering): Port device team_slave_1 removed [ 294.864078][ T7431] team0 (unregistering): Port device team_slave_0 removed [ 295.347464][T10833] erspan0: entered promiscuous mode [ 295.353719][T10833] gretap0: entered promiscuous mode [ 295.638432][ T51] Bluetooth: hci2: command tx timeout [ 295.665993][T10850] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 295.716605][T10850] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 295.780270][T10853] netlink: 'syz.5.1079': attribute type 1 has an invalid length. [ 295.844072][T10853] __nla_validate_parse: 6 callbacks suppressed [ 295.844094][T10853] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1079'. [ 296.137937][T10825] chnl_net:caif_netlink_parms(): no params data found [ 296.194188][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.252348][T10838] chnl_net:caif_netlink_parms(): no params data found [ 296.296059][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.358537][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.445421][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.503740][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.514905][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.523072][T10838] bridge_slave_0: entered allmulticast mode [ 296.535524][T10838] bridge_slave_0: entered promiscuous mode [ 296.546227][T10838] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.557863][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.565180][T10838] bridge_slave_1: entered allmulticast mode [ 296.575778][T10838] bridge_slave_1: entered promiscuous mode [ 296.582659][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.590730][T10825] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.597908][T10825] bridge_slave_0: entered allmulticast mode [ 296.606324][T10825] bridge_slave_0: entered promiscuous mode [ 296.641327][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.649240][T10825] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.656422][T10825] bridge_slave_1: entered allmulticast mode [ 296.664896][T10825] bridge_slave_1: entered promiscuous mode [ 296.679044][ T51] Bluetooth: hci3: command tx timeout [ 296.747363][T10825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.762196][T10838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.786372][T10825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.799762][T10838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.917021][T10838] team0: Port device team_slave_0 added [ 296.927514][T10825] team0: Port device team_slave_0 added [ 296.936816][T10825] team0: Port device team_slave_1 added [ 296.965981][T10838] team0: Port device team_slave_1 added [ 297.059368][T10869] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.131152][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.163222][T10873] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1081'. [ 297.328515][T10838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.335577][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.398280][T10838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.459813][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.496565][T10825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.505042][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.542937][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1083'. [ 297.544546][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.564071][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.566098][T10825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.578403][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.591109][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.599453][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.636020][T10838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.644677][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.672573][T10838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.719931][ T5845] Bluetooth: hci2: command tx timeout [ 297.741219][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.756103][T10825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.788344][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.818009][T10825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.906529][T10885] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1085'. [ 297.935359][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.132733][T10825] hsr_slave_0: entered promiscuous mode [ 298.149593][T10825] hsr_slave_1: entered promiscuous mode [ 298.156431][T10825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.188519][T10825] Cannot create hsr debugfs directory [ 298.216332][T10838] hsr_slave_0: entered promiscuous mode [ 298.231774][T10838] hsr_slave_1: entered promiscuous mode [ 298.241176][T10838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.249812][T10838] Cannot create hsr debugfs directory [ 298.576353][T10905] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 298.593984][T10905] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1091'. [ 298.753871][T10911] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1092'. [ 298.764053][ T5845] Bluetooth: hci3: command tx timeout [ 298.774959][T10911] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1092'. [ 298.812548][ T13] bridge_slave_1: left allmulticast mode [ 298.827601][ T13] bridge_slave_1: left promiscuous mode [ 298.833951][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.884733][T10914] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.885066][ T13] bridge_slave_0: left allmulticast mode [ 298.908025][ T13] bridge_slave_0: left promiscuous mode [ 298.914264][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.963504][ T13] bridge_slave_1: left allmulticast mode [ 298.980485][T10917] netlink: 'syz.5.1094': attribute type 1 has an invalid length. [ 298.984982][ T13] bridge_slave_1: left promiscuous mode [ 298.996051][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.008045][ T13] bridge_slave_0: left allmulticast mode [ 299.014397][ T13] bridge_slave_0: left promiscuous mode [ 299.020238][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.423485][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.434776][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.447516][ T13] bond0 (unregistering): Released all slaves [ 299.649476][ T5845] Bluetooth: hci4: command tx timeout [ 299.757621][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.769254][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.779499][ T13] bond0 (unregistering): Released all slaves [ 299.798788][ T5845] Bluetooth: hci2: command tx timeout [ 299.831163][T10912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.849471][T10917] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 299.859333][T10918] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 300.212560][T10931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.257893][T10929] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1099'. [ 300.705005][T10879] chnl_net:caif_netlink_parms(): no params data found [ 300.838695][ T5845] Bluetooth: hci3: command tx timeout [ 301.034504][T10956] netlink: 'syz.5.1106': attribute type 1 has an invalid length. [ 301.043940][ T13] hsr_slave_0: left promiscuous mode [ 301.065439][ T13] hsr_slave_1: left promiscuous mode [ 301.071922][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.080204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.090795][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.098679][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.113052][ T13] hsr_slave_0: left promiscuous mode [ 301.119702][ T13] hsr_slave_1: left promiscuous mode [ 301.125923][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.134374][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.149565][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.157158][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.223498][ T13] veth1_macvtap: left promiscuous mode [ 301.229397][ T13] veth0_macvtap: left promiscuous mode [ 301.235130][ T13] veth1_vlan: left promiscuous mode [ 301.241172][ T13] veth0_vlan: left promiscuous mode [ 301.249557][ T13] veth1_macvtap: left promiscuous mode [ 301.255135][ T13] veth0_macvtap: left promiscuous mode [ 301.268573][ T13] veth1_vlan: left promiscuous mode [ 301.274002][ T13] veth0_vlan: left promiscuous mode [ 301.724499][ T5845] Bluetooth: hci4: command tx timeout [ 301.875487][ T13] team0 (unregistering): Port device team_slave_1 removed [ 301.883790][ T5845] Bluetooth: hci2: command tx timeout [ 301.932379][ T13] team0 (unregistering): Port device team_slave_0 removed [ 302.795153][ T13] team0 (unregistering): Port device team_slave_1 removed [ 302.841017][ T13] team0 (unregistering): Port device team_slave_0 removed [ 302.933860][ T5845] Bluetooth: hci3: command tx timeout [ 303.285509][T10879] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.293413][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.303748][T10879] bridge_slave_0: entered allmulticast mode [ 303.311975][T10879] bridge_slave_0: entered promiscuous mode [ 303.332270][T10879] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.349134][T10879] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.356444][T10879] bridge_slave_1: entered allmulticast mode [ 303.364894][T10879] bridge_slave_1: entered promiscuous mode [ 303.392390][T10956] bond1: entered promiscuous mode [ 303.398903][T10956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.406722][T10957] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 303.541385][T10879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.563981][T10879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.692954][T10879] team0: Port device team_slave_0 added [ 303.712765][T10879] team0: Port device team_slave_1 added [ 303.807896][ T5845] Bluetooth: hci4: command tx timeout [ 303.933805][T10879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.940545][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 303.948559][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.957327][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 303.980705][T10879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.002228][T10978] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 304.008002][T10879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.017297][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.046379][T10879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.052696][T10978] nbd: error processing sock list [ 304.175636][T10838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.223237][T10978] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 304.297513][T10838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.348528][T10838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.409240][T10838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.557111][T10879] hsr_slave_0: entered promiscuous mode [ 304.574358][T10879] hsr_slave_1: entered promiscuous mode [ 304.592198][T10879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.611867][T10879] Cannot create hsr debugfs directory [ 305.127838][T10825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.149487][T10825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.208050][T10825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.246091][T10825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.281468][T10993] netlink: 'syz.5.1118': attribute type 1 has an invalid length. [ 305.332297][T10993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.367831][T10997] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 305.399455][T10997] bond10: entered promiscuous mode [ 305.405038][T10997] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.427362][T10993] vlan2: entered promiscuous mode [ 305.432628][T10993] bond2: entered promiscuous mode [ 305.437869][T10993] vlan2: entered allmulticast mode [ 305.444310][T10993] bond2: entered allmulticast mode [ 305.465588][T10996] bond2: (slave gretap1): making interface the new active one [ 305.473535][T10996] gretap1: entered promiscuous mode [ 305.479738][T10996] gretap1: entered allmulticast mode [ 305.486661][T10996] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 305.528529][T10996] syz.5.1118 (10996) used greatest stack depth: 19624 bytes left [ 305.587542][T10997] 8021q: adding VLAN 0 to HW filter on device bond11 [ 305.602658][T10997] bond10: (slave bond11): making interface the new active one [ 305.612552][T10997] bond11: entered promiscuous mode [ 305.621283][T11001] netlink: 'syz.5.1120': attribute type 32 has an invalid length. [ 305.621912][T10997] bond10: (slave bond11): Enslaving as an active interface with an up link [ 305.830246][T10838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.879690][ T5845] Bluetooth: hci4: command tx timeout [ 305.920956][T10838] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.962421][T11010] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1123'. [ 306.013860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.021154][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.073139][T10825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.157328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.164633][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.324512][T10879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.341994][T10825] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.357194][T10879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.371437][T10879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.387061][T10879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.421571][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.428835][ T7430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.498033][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.505308][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.849588][T10879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.909406][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.935448][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.942914][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.989101][T11036] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 307.012284][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.019507][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.140321][T11036] bond12: entered promiscuous mode [ 307.146483][T11036] 8021q: adding VLAN 0 to HW filter on device bond12 [ 307.218595][T11040] 8021q: adding VLAN 0 to HW filter on device bond13 [ 307.247769][T11040] bond12: (slave bond13): making interface the new active one [ 307.261346][T11040] bond13: entered promiscuous mode [ 307.267620][T11040] bond12: (slave bond13): Enslaving as an active interface with an up link [ 307.416606][T10838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.483676][T10825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.716380][T10838] veth0_vlan: entered promiscuous mode [ 307.745101][T10825] veth0_vlan: entered promiscuous mode [ 307.811057][T10838] veth1_vlan: entered promiscuous mode [ 307.823472][T10825] veth1_vlan: entered promiscuous mode [ 308.025950][T10838] veth0_macvtap: entered promiscuous mode [ 308.061071][T10825] veth0_macvtap: entered promiscuous mode [ 308.091739][T10825] veth1_macvtap: entered promiscuous mode [ 308.116381][T10838] veth1_macvtap: entered promiscuous mode [ 308.161427][T10879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.197788][T10838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.251897][T10825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.300341][T10838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.325554][T10838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.346169][T10838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.368928][T10838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.377784][T10838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.406324][T10825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.440445][T11082] veth0: entered promiscuous mode [ 308.453913][T10825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.464503][T10825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.473735][T10825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.483919][T10825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.507486][T11082] veth0: left promiscuous mode [ 308.634889][T10879] veth0_vlan: entered promiscuous mode [ 308.736015][T10879] veth1_vlan: entered promiscuous mode [ 308.754054][T11087] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 308.843624][T11087] bond14: entered promiscuous mode [ 308.849746][T11087] 8021q: adding VLAN 0 to HW filter on device bond14 [ 308.898153][T11092] 8021q: adding VLAN 0 to HW filter on device bond15 [ 308.908891][T11092] bond14: (slave bond15): making interface the new active one [ 308.916605][T11092] bond15: entered promiscuous mode [ 308.923825][T11092] bond14: (slave bond15): Enslaving as an active interface with an up link [ 308.949599][T11093] bridge0: entered promiscuous mode [ 308.959933][T11093] bond0: entered promiscuous mode [ 308.965512][T11093] bond_slave_0: entered promiscuous mode [ 308.972117][T11093] bond_slave_1: entered promiscuous mode [ 308.980669][T11093] hsr2: entered allmulticast mode [ 308.985838][T11093] bridge0: entered allmulticast mode [ 308.994760][T11093] bond0: entered allmulticast mode [ 309.002106][T11093] bond_slave_0: entered allmulticast mode [ 309.007907][T11093] bond_slave_1: entered allmulticast mode [ 309.071177][ T7430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.108772][ T7430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.110259][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.125089][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.236246][T10879] veth0_macvtap: entered promiscuous mode [ 309.259183][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.267107][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.283351][T10879] veth1_macvtap: entered promiscuous mode [ 309.373193][T10879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.391575][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1151'. [ 309.401219][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.419171][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.436799][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.466355][T10879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.492032][T10879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.513754][T10879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.539934][T10879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.846885][T11114] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1153'. [ 309.862550][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 310.013625][T11117] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1155'. [ 310.352577][ T1145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.416906][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.441695][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.521320][ T1145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.585533][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.595782][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.645067][ T1145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.907358][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.916304][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.926557][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.936718][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.946184][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.994741][ T1145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.414343][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 311.431263][ T1145] bridge_slave_1: left allmulticast mode [ 311.436977][ T1145] bridge_slave_1: left promiscuous mode [ 311.459713][T11128] netlink: 'syz.5.1158': attribute type 8 has an invalid length. [ 311.485781][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.515688][ T1145] bridge_slave_0: left allmulticast mode [ 311.526674][ T1145] bridge_slave_0: left promiscuous mode [ 311.534968][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.679479][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.690540][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.704847][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.713221][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.724599][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.013757][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.024720][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.036376][ T1145] bond0 (unregistering): Released all slaves [ 312.322575][T11139] netlink: 'syz.3.1159': attribute type 13 has an invalid length. [ 312.451327][T11143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 312.730570][T11123] chnl_net:caif_netlink_parms(): no params data found [ 312.827250][ T1145] hsr_slave_0: left promiscuous mode [ 312.848434][ T1145] hsr_slave_1: left promiscuous mode [ 312.854679][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.876110][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.909387][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.925662][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.956659][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.967058][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.980753][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.996838][ T1145] veth1_macvtap: left promiscuous mode [ 313.003755][ T1145] veth0_macvtap: left promiscuous mode [ 313.011205][ T5845] Bluetooth: hci2: command tx timeout [ 313.018893][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.019631][ T1145] veth1_vlan: left promiscuous mode [ 313.026805][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.031412][ T1145] veth0_vlan: left promiscuous mode [ 313.614130][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 313.661722][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 313.800756][ T5843] Bluetooth: hci3: command tx timeout [ 314.385089][T11123] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.405458][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.423415][T11123] bridge_slave_0: entered allmulticast mode [ 314.431642][T11123] bridge_slave_0: entered promiscuous mode [ 314.445931][T11123] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.455283][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.464886][T11123] bridge_slave_1: entered allmulticast mode [ 314.475748][T11123] bridge_slave_1: entered promiscuous mode [ 314.832628][T11123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.910783][T11123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.017826][T11123] team0: Port device team_slave_0 added [ 315.028785][T11132] chnl_net:caif_netlink_parms(): no params data found [ 315.079019][ T51] Bluetooth: hci2: command tx timeout [ 315.084673][ T5843] Bluetooth: hci4: command tx timeout [ 315.093698][T11123] team0: Port device team_slave_1 added [ 315.221124][T11123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.230968][T11123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.258533][T11123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.346596][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.383022][T11123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.391768][T11123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.420033][T11123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.479691][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.585955][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.594039][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.601541][T11132] bridge_slave_0: entered allmulticast mode [ 315.611864][T11132] bridge_slave_0: entered promiscuous mode [ 315.637708][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.652320][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.659766][T11132] bridge_slave_1: entered allmulticast mode [ 315.667949][T11132] bridge_slave_1: entered promiscuous mode [ 315.738018][T11213] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 315.747839][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.816982][T11161] chnl_net:caif_netlink_parms(): no params data found [ 315.843828][T11123] hsr_slave_0: entered promiscuous mode [ 315.855547][T11123] hsr_slave_1: entered promiscuous mode [ 315.862380][T11123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.872204][T11123] Cannot create hsr debugfs directory [ 315.879036][ T5843] Bluetooth: hci3: command tx timeout [ 315.902823][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.953931][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.977670][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.112852][T11132] team0: Port device team_slave_0 added [ 316.211848][T11132] team0: Port device team_slave_1 added [ 316.478108][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.502591][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.538686][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.582573][T11236] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 316.629113][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.636544][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.663811][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.702299][T11236] bond16: entered promiscuous mode [ 316.711824][T11236] 8021q: adding VLAN 0 to HW filter on device bond16 [ 316.719834][T11161] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.730000][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.737303][T11161] bridge_slave_0: entered allmulticast mode [ 316.744842][T11161] bridge_slave_0: entered promiscuous mode [ 316.782864][T11237] 8021q: adding VLAN 0 to HW filter on device bond17 [ 316.791995][T11237] bond16: (slave bond17): making interface the new active one [ 316.800039][T11237] bond17: entered promiscuous mode [ 316.807915][T11237] bond16: (slave bond17): Enslaving as an active interface with an up link [ 316.845668][T11161] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.853161][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.860947][T11161] bridge_slave_1: entered allmulticast mode [ 316.870217][T11161] bridge_slave_1: entered promiscuous mode [ 317.066167][T11132] hsr_slave_0: entered promiscuous mode [ 317.073213][T11132] hsr_slave_1: entered promiscuous mode [ 317.080424][T11132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.088116][T11132] Cannot create hsr debugfs directory [ 317.097949][T11161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.159219][ T5843] Bluetooth: hci4: command tx timeout [ 317.160421][ T51] Bluetooth: hci2: command tx timeout [ 317.183114][T11161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.321893][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.343184][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.372245][T11161] team0: Port device team_slave_0 added [ 317.457143][T11161] team0: Port device team_slave_1 added [ 317.583264][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.646155][T11161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.657509][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.685642][T11161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.700839][T11161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.707813][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.743787][T11161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.772137][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.896296][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.959120][ T51] Bluetooth: hci3: command tx timeout [ 318.069409][T11161] hsr_slave_0: entered promiscuous mode [ 318.077067][T11161] hsr_slave_1: entered promiscuous mode [ 318.086416][T11161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.094535][T11161] Cannot create hsr debugfs directory [ 318.177411][T11123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.189726][T11123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.233400][T11123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.263402][T11123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.308020][ T1145] bridge_slave_1: left allmulticast mode [ 318.326124][ T1145] bridge_slave_1: left promiscuous mode [ 318.333235][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.351608][ T1145] bridge_slave_0: left allmulticast mode [ 318.357302][ T1145] bridge_slave_0: left promiscuous mode [ 318.375379][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.394519][T11261] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 318.402666][T11261] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 318.414878][ T1145] bridge_slave_1: left allmulticast mode [ 318.426642][ T1145] bridge_slave_1: left promiscuous mode [ 318.433868][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.450304][ T1145] bridge_slave_0: left allmulticast mode [ 318.456161][ T1145] bridge_slave_0: left promiscuous mode [ 318.462446][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.477994][T11262] netlink: 'syz.3.1190': attribute type 23 has an invalid length. [ 319.016507][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.028081][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.038614][ T1145] bond0 (unregistering): Released all slaves [ 319.240235][ T51] Bluetooth: hci4: command tx timeout [ 319.251149][ T51] Bluetooth: hci2: command tx timeout [ 319.384701][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.396093][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.406470][ T1145] bond0 (unregistering): Released all slaves [ 319.649689][T11275] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 319.749655][T11275] bond3: entered promiscuous mode [ 319.755234][T11275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.831609][T11277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.840789][T11277] bond3: (slave bond4): making interface the new active one [ 319.848514][T11277] bond4: entered promiscuous mode [ 319.854638][T11277] bond3: (slave bond4): Enslaving as an active interface with an up link [ 320.046941][ T51] Bluetooth: hci3: command tx timeout [ 320.371146][ T1145] hsr_slave_0: left promiscuous mode [ 320.377478][ T1145] hsr_slave_1: left promiscuous mode [ 320.390843][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.398875][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.413184][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.424394][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.442543][ T1145] hsr_slave_0: left promiscuous mode [ 320.454252][ T1145] hsr_slave_1: left promiscuous mode [ 320.460611][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.468146][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.476309][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.484578][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.521665][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1201'. [ 320.536730][ T1145] veth1_macvtap: left promiscuous mode [ 320.555782][ T1145] veth0_macvtap: left promiscuous mode [ 320.565148][ T1145] veth1_vlan: left promiscuous mode [ 320.578401][ T1145] veth0_vlan: left promiscuous mode [ 320.586716][ T1145] veth1_macvtap: left promiscuous mode [ 320.604846][ T1145] veth0_macvtap: left promiscuous mode [ 320.621109][ T1145] veth1_vlan: left promiscuous mode [ 320.626542][ T1145] veth0_vlan: left promiscuous mode [ 320.979990][T11307] openvswitch: netlink: Actions may not be safe on all matching packets [ 321.319926][ T51] Bluetooth: hci4: command tx timeout [ 321.322778][T11316] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 321.603156][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 321.650088][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 322.483790][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 322.527611][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 323.015677][T11316] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 323.019366][T11317] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 323.109263][T11132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.146577][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 323.156531][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 323.165483][T11132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.191292][T11132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.230976][T11132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.384757][T11123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.556729][T11123] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.582574][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.589839][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.626474][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.633802][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.705493][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1214'. [ 323.740873][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1214'. [ 323.759588][T11346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1214'. [ 323.778092][T11350] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1216'. [ 323.789804][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1214'. [ 323.818641][T11351] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1216'. [ 324.055492][T11132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.080829][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1218'. [ 324.094616][T11356] delete_channel: no stack [ 324.163290][T11132] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.228495][T11161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.267634][T11363] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 324.281290][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.288901][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.327050][T11161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.373139][T11363] bond18: entered promiscuous mode [ 324.382239][T11363] 8021q: adding VLAN 0 to HW filter on device bond18 [ 324.407632][T11362] 8021q: adding VLAN 0 to HW filter on device bond18 [ 324.421075][T11362] bond18: (slave wireguard0): The slave device specified does not support setting the MAC address [ 324.433016][T11362] bond18: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 324.449938][T11362] bond18: (slave wireguard0): making interface the new active one [ 324.457778][T11362] wireguard0: entered promiscuous mode [ 324.464815][T11362] bond18: (slave wireguard0): Enslaving as an active interface with an up link [ 324.474960][T11161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.541642][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.549081][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.590377][T11161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.731889][T11373] batman_adv: batadv0: Removing interface: team0 [ 324.745754][T11373] : left allmulticast mode [ 324.750581][T11373] : left promiscuous mode [ 324.755353][T11373] bridge0: port 1() entered disabled state [ 324.779724][T11373] bridge_slave_1: left allmulticast mode [ 324.785493][T11373] bridge_slave_1: left promiscuous mode [ 324.798731][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.846289][T11373] team0: Port device team_slave_0 removed [ 324.868517][ T2152] ================================================================== [ 324.876749][ T2152] BUG: KASAN: slab-use-after-free in br_switchdev_fdb_notify+0x30b/0x3e0 [ 324.876874][T11373] team0: Port device team_slave_1 removed [ 324.885727][ T2152] Read of size 8 at addr ffff88807d221008 by task kworker/1:2/2152 [ 324.885755][ T2152] [ 324.885767][ T2152] CPU: 1 UID: 0 PID: 2152 Comm: kworker/1:2 Not tainted 6.15.0-syzkaller-07818-g12c331b29c73 #0 PREEMPT(full) [ 324.885792][ T2152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.885805][ T2152] Workqueue: events_long br_fdb_cleanup [ 324.885833][ T2152] Call Trace: [ 324.885840][ T2152] [ 324.885849][ T2152] dump_stack_lvl+0x189/0x250 [ 324.885880][ T2152] ? __virt_addr_valid+0x1c8/0x5c0 [ 324.885899][ T2152] ? rcu_is_watching+0x15/0xb0 [ 324.885925][ T2152] ? __kasan_check_byte+0x12/0x40 [ 324.885952][ T2152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.885978][ T2152] ? rcu_is_watching+0x15/0xb0 [ 324.886002][ T2152] ? lock_release+0x4b/0x3e0 [ 324.886028][ T2152] ? __virt_addr_valid+0x1c8/0x5c0 [ 324.886046][ T2152] ? __virt_addr_valid+0x4a5/0x5c0 [ 324.886066][ T2152] print_report+0xd2/0x2b0 [ 324.886091][ T2152] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 324.886110][ T2152] kasan_report+0x118/0x150 [ 324.886137][ T2152] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 324.886161][ T2152] br_switchdev_fdb_notify+0x30b/0x3e0 [ 324.886183][ T2152] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 324.886204][ T2152] ? rht_lock+0x114/0x220 [ 324.886226][ T2152] ? rht_lock+0xff/0x220 [ 324.886253][ T2152] fdb_notify+0x89/0x160 [ 324.886275][ T2152] fdb_delete+0xec4/0x1160 [ 324.886307][ T2152] ? fdb_delete+0x39a/0x1160 [ 324.886330][ T2152] ? __pfx_fdb_delete+0x10/0x10 [ 324.886354][ T2152] ? br_fdb_cleanup+0x270/0x4d0 [ 324.886377][ T2152] br_fdb_cleanup+0x2aa/0x4d0 [ 324.886401][ T2152] ? br_fdb_cleanup+0xb1/0x4d0 [ 324.886421][ T2152] ? process_scheduled_works+0x9ef/0x17b0 [ 324.886450][ T2152] process_scheduled_works+0xae1/0x17b0 [ 324.886491][ T2152] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.886522][ T2152] worker_thread+0x8a0/0xda0 [ 324.886547][ T2152] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 324.886571][ T2152] ? __kthread_parkme+0x7b/0x200 [ 324.886599][ T2152] kthread+0x70e/0x8a0 [ 324.886619][ T2152] ? __pfx_worker_thread+0x10/0x10 [ 324.886643][ T2152] ? __pfx_kthread+0x10/0x10 [ 324.886660][ T2152] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.886678][ T2152] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.886698][ T2152] ? __pfx_kthread+0x10/0x10 [ 324.886716][ T2152] ret_from_fork+0x3fc/0x770 [ 324.886740][ T2152] ? __pfx_ret_from_fork+0x10/0x10 [ 324.886765][ T2152] ? __switch_to_asm+0x39/0x70 [ 324.886781][ T2152] ? __switch_to_asm+0x33/0x70 [ 324.886797][ T2152] ? __pfx_kthread+0x10/0x10 [ 324.886815][ T2152] ret_from_fork_asm+0x1a/0x30 [ 324.886839][ T2152] [ 324.886845][ T2152] [ 325.151807][ T2152] Allocated by task 5831: [ 325.156161][ T2152] kasan_save_track+0x3e/0x80 [ 325.160969][ T2152] __kasan_kmalloc+0x93/0xb0 [ 325.165591][ T2152] __kmalloc_cache_noprof+0x230/0x3d0 [ 325.171029][ T2152] new_nbp+0x188/0x440 [ 325.175111][ T2152] br_add_if+0x28e/0xec0 [ 325.179378][ T2152] do_set_master+0x533/0x6d0 [ 325.183989][ T2152] do_setlink+0xcf0/0x41c0 [ 325.188525][ T2152] rtnl_newlink+0x160b/0x1c70 [ 325.193336][ T2152] rtnetlink_rcv_msg+0x7cf/0xb70 [ 325.198577][ T2152] netlink_rcv_skb+0x205/0x470 [ 325.203466][ T2152] netlink_unicast+0x758/0x8d0 [ 325.208272][ T2152] netlink_sendmsg+0x805/0xb30 [ 325.213162][ T2152] __sock_sendmsg+0x21c/0x270 [ 325.218032][ T2152] __sys_sendto+0x3bd/0x520 [ 325.222740][ T2152] __x64_sys_sendto+0xde/0x100 [ 325.227528][ T2152] do_syscall_64+0xfa/0x3b0 [ 325.232073][ T2152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.238106][ T2152] [ 325.240444][ T2152] Freed by task 23: [ 325.244366][ T2152] kasan_save_track+0x3e/0x80 [ 325.249067][ T2152] kasan_save_free_info+0x46/0x50 [ 325.254101][ T2152] __kasan_slab_free+0x62/0x70 [ 325.258874][ T2152] kfree+0x18e/0x440 [ 325.262776][ T2152] kobject_put+0x22b/0x480 [ 325.267206][ T2152] rcu_core+0xca8/0x1710 [ 325.271464][ T2152] handle_softirqs+0x286/0x870 [ 325.276249][ T2152] run_ksoftirqd+0x9b/0x100 [ 325.280765][ T2152] smpboot_thread_fn+0x53f/0xa60 [ 325.285715][ T2152] kthread+0x70e/0x8a0 [ 325.289881][ T2152] ret_from_fork+0x3fc/0x770 [ 325.294488][ T2152] ret_from_fork_asm+0x1a/0x30 [ 325.299347][ T2152] [ 325.301856][ T2152] Last potentially related work creation: [ 325.307575][ T2152] kasan_save_stack+0x3e/0x60 [ 325.312366][ T2152] kasan_record_aux_stack+0xbd/0xd0 [ 325.317574][ T2152] call_rcu+0x142/0x990 [ 325.321762][ T2152] br_del_if+0x146/0x320 [ 325.326024][ T2152] do_set_master+0x30f/0x6d0 [ 325.330729][ T2152] do_setlink+0xcf0/0x41c0 [ 325.335250][ T2152] rtnl_newlink+0x149f/0x1c70 [ 325.340041][ T2152] rtnetlink_rcv_msg+0x7cf/0xb70 [ 325.345162][ T2152] netlink_rcv_skb+0x205/0x470 [ 325.350202][ T2152] netlink_unicast+0x758/0x8d0 [ 325.354979][ T2152] netlink_sendmsg+0x805/0xb30 [ 325.359750][ T2152] __sock_sendmsg+0x21c/0x270 [ 325.364437][ T2152] ____sys_sendmsg+0x505/0x830 [ 325.369208][ T2152] ___sys_sendmsg+0x21f/0x2a0 [ 325.373983][ T2152] __x64_sys_sendmsg+0x19b/0x260 [ 325.378943][ T2152] do_syscall_64+0xfa/0x3b0 [ 325.383548][ T2152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.389559][ T2152] [ 325.391887][ T2152] The buggy address belongs to the object at ffff88807d221000 [ 325.391887][ T2152] which belongs to the cache kmalloc-1k of size 1024 [ 325.406472][ T2152] The buggy address is located 8 bytes inside of [ 325.406472][ T2152] freed 1024-byte region [ffff88807d221000, ffff88807d221400) [ 325.420388][ T2152] [ 325.422719][ T2152] The buggy address belongs to the physical page: [ 325.429226][ T2152] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d220 [ 325.438086][ T2152] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 325.446692][ T2152] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 325.454849][ T2152] page_type: f5(slab) [ 325.458840][ T2152] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 325.467427][ T2152] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 325.476039][ T2152] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 325.484806][ T2152] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 325.493501][ T2152] head: 00fff00000000003 ffffea0001f48801 00000000ffffffff 00000000ffffffff [ 325.502268][ T2152] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 325.510953][ T2152] page dumped because: kasan: bad access detected [ 325.517372][ T2152] page_owner tracks the page as allocated [ 325.523093][ T2152] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5842, tgid 5842 (syz-executor), ts 89483912605, free_ts 89461631062 [ 325.542638][ T2152] post_alloc_hook+0x240/0x2a0 [ 325.547451][ T2152] get_page_from_freelist+0x21e0/0x22c0 [ 325.553207][ T2152] __alloc_frozen_pages_noprof+0x181/0x370 [ 325.559044][ T2152] alloc_pages_mpol+0x232/0x4a0 [ 325.563950][ T2152] allocate_slab+0x8a/0x3b0 [ 325.568469][ T2152] ___slab_alloc+0xbfc/0x1480 [ 325.573159][ T2152] __kmalloc_cache_noprof+0x296/0x3d0 [ 325.578639][ T2152] batadv_hard_if_event+0x11b7/0x1a50 [ 325.584052][ T2152] notifier_call_chain+0x1b3/0x3e0 [ 325.589267][ T2152] register_netdevice+0x1608/0x1ae0 [ 325.594474][ T2152] veth_newlink+0x5cc/0xa50 [ 325.598990][ T2152] rtnl_newlink_create+0x310/0xb00 [ 325.604125][ T2152] rtnl_newlink+0x16d6/0x1c70 [ 325.608814][ T2152] rtnetlink_rcv_msg+0x7cf/0xb70 [ 325.613956][ T2152] netlink_rcv_skb+0x205/0x470 [ 325.618760][ T2152] netlink_unicast+0x758/0x8d0 [ 325.623623][ T2152] page last free pid 5829 tgid 5829 stack trace: [ 325.630046][ T2152] __free_frozen_pages+0xc6e/0xe50 [ 325.635170][ T2152] __put_partials+0x161/0x1c0 [ 325.639873][ T2152] put_cpu_partial+0x17c/0x250 [ 325.644656][ T2152] __slab_free+0x2f7/0x400 [ 325.649083][ T2152] qlist_free_all+0x97/0x140 [ 325.653771][ T2152] kasan_quarantine_reduce+0x148/0x160 [ 325.659242][ T2152] __kasan_slab_alloc+0x22/0x80 [ 325.664108][ T2152] __kmalloc_cache_noprof+0x1be/0x3d0 [ 325.669669][ T2152] kset_create_and_add+0x5a/0x170 [ 325.674706][ T2152] netdev_register_kobject+0x180/0x2f0 [ 325.680177][ T2152] register_netdevice+0x126c/0x1ae0 [ 325.685384][ T2152] veth_newlink+0x5cc/0xa50 [ 325.689900][ T2152] rtnl_newlink_create+0x310/0xb00 [ 325.695038][ T2152] rtnl_newlink+0x16d6/0x1c70 [ 325.699725][ T2152] rtnetlink_rcv_msg+0x7cf/0xb70 [ 325.704678][ T2152] netlink_rcv_skb+0x205/0x470 [ 325.709544][ T2152] [ 325.712027][ T2152] Memory state around the buggy address: [ 325.717857][ T2152] ffff88807d220f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.726118][ T2152] ffff88807d220f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.734653][ T2152] >ffff88807d221000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.743433][ T2152] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.747860][ T2152] ffff88807d221080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.755949][ T2152] ffff88807d221100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.764110][ T2152] ================================================================== [ 325.772368][ T2152] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.779861][ T2152] CPU: 1 UID: 0 PID: 2152 Comm: kworker/1:2 Not tainted 6.15.0-syzkaller-07818-g12c331b29c73 #0 PREEMPT(full) [ 325.791711][ T2152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.801907][ T2152] Workqueue: events_long br_fdb_cleanup [ 325.807522][ T2152] Call Trace: [ 325.810847][ T2152] [ 325.813821][ T2152] dump_stack_lvl+0x99/0x250 [ 325.818469][ T2152] ? __asan_memcpy+0x40/0x70 [ 325.823129][ T2152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.828386][ T2152] ? __pfx__printk+0x10/0x10 [ 325.833200][ T2152] panic+0x2db/0x790 [ 325.837332][ T2152] ? __pfx_panic+0x10/0x10 [ 325.841808][ T2152] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 325.847787][ T2152] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 325.853811][ T2152] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.860358][ T2152] ? print_memory_metadata+0x314/0x400 [ 325.865952][ T2152] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 325.871615][ T2152] check_panic_on_warn+0x89/0xb0 [ 325.876574][ T2152] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 325.882291][ T2152] end_report+0x78/0x160 [ 325.886848][ T2152] kasan_report+0x129/0x150 [ 325.891628][ T2152] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 325.897452][ T2152] br_switchdev_fdb_notify+0x30b/0x3e0 [ 325.903096][ T2152] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 325.909202][ T2152] ? rht_lock+0x114/0x220 [ 325.913587][ T2152] ? rht_lock+0xff/0x220 [ 325.917857][ T2152] fdb_notify+0x89/0x160 [ 325.922141][ T2152] fdb_delete+0xec4/0x1160 [ 325.926590][ T2152] ? fdb_delete+0x39a/0x1160 [ 325.931386][ T2152] ? __pfx_fdb_delete+0x10/0x10 [ 325.936540][ T2152] ? br_fdb_cleanup+0x270/0x4d0 [ 325.941407][ T2152] br_fdb_cleanup+0x2aa/0x4d0 [ 325.946098][ T2152] ? br_fdb_cleanup+0xb1/0x4d0 [ 325.950878][ T2152] ? process_scheduled_works+0x9ef/0x17b0 [ 325.956704][ T2152] process_scheduled_works+0xae1/0x17b0 [ 325.962393][ T2152] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.968985][ T2152] worker_thread+0x8a0/0xda0 [ 325.973700][ T2152] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.980134][ T2152] ? __kthread_parkme+0x7b/0x200 [ 325.985359][ T2152] kthread+0x70e/0x8a0 [ 325.989621][ T2152] ? __pfx_worker_thread+0x10/0x10 [ 325.994835][ T2152] ? __pfx_kthread+0x10/0x10 [ 325.999454][ T2152] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.004749][ T2152] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.009959][ T2152] ? __pfx_kthread+0x10/0x10 [ 326.014581][ T2152] ret_from_fork+0x3fc/0x770 [ 326.019190][ T2152] ? __pfx_ret_from_fork+0x10/0x10 [ 326.024326][ T2152] ? __switch_to_asm+0x39/0x70 [ 326.029220][ T2152] ? __switch_to_asm+0x33/0x70 [ 326.034263][ T2152] ? __pfx_kthread+0x10/0x10 [ 326.038876][ T2152] ret_from_fork_asm+0x1a/0x30 [ 326.043994][ T2152] [ 326.047322][ T2152] Kernel Offset: disabled [ 326.051740][ T2152] Rebooting in 86400 seconds..